Privacy policy

UAB “BAKSAS”

1. What is this Privacy Policy?
We appreciate your trust and work hard to properly protect your personal data. We respect your privacy and undertake to lawfully process and protect your personal data in accordance with all legal requirements, including those of the EU General Data Protection Regulation 2016/679 (“GDPR”).
In this privacy policy (“Privacy Policy”) we will provide you with information about the ways that UAB “Baksas” (“the Company”) processes your personal data obtained in the process of: selling the goods to you; direct marketing activities; implementing agreements between the Company and counter parties / legal persons; promoting the Company’s publicity; you visiting the Company’s website or social media sites; you sending inquiries. All persons mentioned hereinafter shall be referred to as data subjects.
2. About the Company
The Company is UAB “Baksas”, company reg. no. 302539889, office address: Jonažolių str. 3-113, LT- 04134 Vilnius, the Republic of Lithuania. If you have any questions related to personal data protection, contact us at info@modeliukai.lt.
3. What are personal data?
Personal data include any information about a data subject collected by the Company that can be used to identify such data subject and are protected electronically or otherwise.
Personal data includes any information such as the first name / surname and email address of a data subject collected by the Company for the purposes specified in this Privacy Policy or a separate data subject consent form or agreement concluded with the Company.
4. Personal data processed in the process of selling goods to you
We must process your personal data to sell goods to you, process your payments, etc.
We might need to process your first name, surname, email address, phone number, residential address, information about completed purchases (order ID, amount, time, etc.). Also, we might process information related to your payments (bank account number, amount, time). Finally, we might process the information left in “Note” section.
The Company does not collect your personal data related to the initiation of payments for purchased goods (bank ID, credit or debit card information, etc.). The payment initiation service for purchased goods is provided to the Company by third party to whom you directly transfer your personal data in order to initiate payment. The Company is not responsible for the processing of personal data related to the initiation of payment. The Company may transfer your personal data (Order ID, amount, etc.) to the third party who provides payment initiation service in order to properly initiate the payment and receive payment for the purchased good.
All personal data shall be processed with your consent (Art. 6(1)a (Consent) GDPR) and / or to fulfill our contractual obligations towards you (Art. 6(1)b (Contract) GDPR) and / or fulfill legal obligations (Art. 6(1)c (Legal obligations) GDPR).
All personal data shall be obtained only from you and disclosed only to service providers chosen by the Company for the purposes of selling goods to you or fulfilling legal requirements.
Your personal data shall be processed for the duration of the execution of a specific order and for another 10 years after that.
If you refuse to provide your personal data, the Company will not be able to sell good to you.
5. Direct marketing
Persons who provided their email address and expressed their willingness to receive information about its products, newsletters and other promotional material might receive the Company's emails with proposals of our products, newsletters or other promotional material.
The Company will process your email address, name and surname for the purposes of direct marketing.
If you are our customer and have not objected against receiving direct marketing information, we may continue to provide you information about our products, newsletters and other promotional material that are similar to those already sold to you. In this case, your personal data will be processed on the basis of the Company’s legitimate interest (Art. 6(1)f (Legitimate interest) GDPR).
For the purposes of direct marketing, your data will be processed for 2 years from the time of you providing consent or the sale of the goods.
You have the right to opt out of direct marketing correspondence by emailing us at the address provided herein or the canceling newsletter subscription. This shall not impose any negative consequences for you.
6. Loyalty program
After creating an account and expressing a wish to receive information about The Company’s products, newsletters and other promotional material, with separate consent You may also participate in the Company’s loyalty program. By participating in the loyalty program, we will be able to provide you with exclusive offers for your future shoppings, information about new products, etc.
We might need to process your name, surname, email address, information about your consent to receive direct marketing messages, the date of your consent.
Participation in the Company’’s loyalty program is only possible after you consented to participate in the loyalty program and to receive direct marketing messages.
For the purposes of running loyalty program, your data will be processed for 2 years from the time of you providing consent or until you have decided to opt out of direct marketing correspondence.
You have the right to opt out of participating in loyalty program by emailing us at the address provided herein or by canceling newsletter subscription. This shall not impose any negative consequences for you.
7. Increasing the Company’s publicity and marketing activities (posting information on the Company's social media pages)
To increase the Company’s visibility and carry out marketing activities, we would like to share information about you and your purchased goods, also our employees on our social media pages.
To increase the Company’s publicity and carry out marketing activities, we would share information about your name, surname, purchased product. The Company will share information with your permission only (Art. 6(1)a (Consent) GDPR). The Company might also share information about the Company’s employees name, image and voice in order to create content and increase the Company’s visibility and carry out marketing activities.
We will post the above data for 2 years from the day you provide consent. The personal data of the Company’s employees may be posted throughout the term of the employment contract with the Company. You can withdraw your consent to publish the above information by notifying us via an email sent to the address specified in the Privacy Policy. This shall not impose any negative consequences for you.
8. Video surveillance for the protection of people and Company’s property, for the resolution of disputes between the Company and the customer
The Company conducts video surveillance in its store for the protection of people and Company’s property, also for the resolution of disputes between the Company and the customer.
During video surveillance, we will process your image. Captured image in the Company’s trade hall is stored for 21 calendar days. Captured image in the Company‘s warehouse is stored for 21 calendar days. Video surveillance is conducted on the basis of a legitimate interest of the Company to ensure the protection of people and Company‘s property, resolution of disputes between The Company and the customer.
9. Implementing the Company’s agreements with counter parties / legal persons
To ensure their lawful interest to implement Company’s agreements entered into counter parties / legal persons, including customers, the Company shall process the following personal data of its employees: name, surname, email address, telephone number, content of correspondence, place of employment (position).
The above personal data shall be processed within the duration of an agreement with a legal person and 10 years after its expiration.
10. Recruiting
You can send us your data in order to join our Company. Your personal data you present for the purpose of recruiting for the vacant job position in our Company will be processed based on your consent, expressed by submitting your personal data.
We collect and process your CVs and/or motivation letters, and/or other information submitted by you at the time of participation in the selection for the purpose of recruitment and on the basis of your consent which you give to us or to the recruitment company by sending your curriculum vitae.
If you do not submit your curriculum vitae and/or motivation letter, we will not be able to assess your suitability for the offered position.
Please comply with personal information protection requirements and do not send us excessive information. Please observe at least the following minimum requirements for the protection of your personal information by sending personal data to us: do not indicate excessive or unnecessary personal data either in the subject line of the letter or query, or in the attached CV, in motivational letters, in other files: personal identification code, health or other special personal data, financial data, bank account number, family member data, car licence plate number, etc.
All personal data will be stored until ongoing recruitment process is finished. Please note that on basis of your consent we could store and use personal data you sent for the purposes of later recruitment for up to 1 year. Once you have given such a consent, you are entitled to withdraw it at any time, without prejudice to lawfulness of personal data processing based on such consent until the withdrawal of the consent. If you exercise this right, we will immediately take action to destroy your personal data.
Please note that in order to evaluate your candidacy, we may contact the former employers you have indicated for their recommendations and may ask them about your qualifications, professional skills and business qualities. We can request such information from your current employer only if we have your separate consent for this.
11. Contact us
You can contact the Company at info@modeliukai.lt. If you contact us, we may process the data provided by you such as your first name, surname, email address, contact date and content of your inquiry.
The above personal data will be processed to answer your questions and to consider your suggestions, requests or complaints. Your personal data will be processed pursuant to your consent, which is expressed by you by actively contacting us.
Correspondence will be stored for 1 year from the receipt of your email, except for information that is subject to the terms of storage provided for in the Privacy Policy or other laws and regulations.
All personal data provided by you in correspondence will only be used for the above purposes.
12. Website
In order to have better customer experience, we suggest you to create a personal account in our website. In order to manage customers accounts, the Company will need to process your account’s login name (email address), password and registration date. This personal data will be processed as long as your account is valid. An active and valid account is considered to be the account that the customer logged in or made a purchase in the last 5 years. After 5 years, your account and personal data will be deleted.
Our website www.modeliukai.lt (“Website”) also uses cookies. A cookie is a small file of letters and numbers which is stored in your Internet browser or the hard-drive of your computer with your consent. We use different cookies for different purposes. The cookies help us to distinguish you from other Website users, offer you a better Website user experience and improve the Website.
Most Internet browsers allow you to reject all cookies; some browsers offer the option to reject only third-party cookies. You can choose these options. Please note that blocking all cookies will negatively affect your use of the Website and without them you will not be able to fully enjoy all of the services provided on our Website.
More information is available at AllAboutCookies.org or www.google.com/privacy_ads.html.
We might use the following types of cookies:
Cookie name Purpose of data processing Expiration
_fbc Set by Facebook.com to deliver advertisement when they are one Facebook or a digital platform powered by Facebook advertising after visiting this website 3 months
PHPSESSID Used to store and identify a users’ unique session ID for the purpose of managing user session on the website. The cookie is a session cookies and is deleted when all browser windows are closed Session
USER_ID Used for identifying the user. It helps to keep track of the visitor profile for future sessions and for customizing their experience 3 months
_grecaptcha Set by Google and is used for risk analysis session
_gat Set by Google and is used to distinguish users 1 min
_ga Google analytics. The cookie is used to calculate visitor, session, campaign data and keep track of site usage for the site’s analytics report. 2 years
_gid Google analytics. The cookie is used to store information of how visitors use a website and helps in creating an analytics report of how the website is doing. 1 day

Necessary cookies.
These cookies are necessary to ensure the proper functionality of our Website. The grounds for data processing using such cookies are the due agreement implementation when you visit our Website and our ensuring of the quality and safety of your visit. These may be cookies that, for example, allow you to connect and navigate to restricted sections of our Website.
Analytics and/or functionality cookies.
These cookies allow us to identify and count Website visitors and track their behavior while using our Website. This helps us to improve the functionality of our Website and ensure that users will always easily find what they are looking for. Data collected by these cookies is processed pursuant to your consent.
Functionality cookies.
These cookies are used to recognize you when you return to our Website so that we are able to personalize our content based on your needs and remember information that is relevant to you. Data collected by these cookies is processed pursuant to your consent.
Commercial cookies.
We use our own and third-party cookies to show personalized ads on our and other websites. This is referred to as “repetitive marketing”, which is based on browsing behavior, e.g. goods you searched for or reviewed.
Facebook icon add-ins
This page uses a Facebook icon add-in.
13. Social media sites
Information that you provide via social media sites (including messages, “Likes” and “Follows”, and other communications) is controlled by a controller of a given social network.
Our Website has links to our social media accounts. Currently we have a Facebook account: @modeliukai.lt; Instagram account: @modeliukailt; Youtube channel: @modeliukai.lt and Twitch channel: modeliukai.lt.
Information published on our accounts will be processed for the purposes of administration of our accounts, pursuant to your consent.
We recommend reading privacy notices of third parties and contacting service providers directly if you have any questions about their use of your personal data.
14. Data collection and disclosure
We obtain your data from you, your devices and counter parties that are under contract with us.
We can disclose information about you to our employees and service providers if it's necessary for the purposes specified herein, as well as to banks and other recipients indicated in this Privacy Policy.
We might also need to disclose your information:
● if required to do so by law;
● when intending to sell the Company’s business, assets, stocks or part thereof and disclosing your personal data to potential buyers of our business or part thereof;
● after selling the Company’s business or a substantial part of its assets to third parties.
Please note that even though we are a registered company in the Republic of Lithuania, we provide our services and process the personal data of individuals from all around the world. To be able to provide our services, we may process your personal data outside of your country as well as outside the European Union. In any case, the Company will process your personal data in accordance with the laws of the country in which personal data processing and storage take place as well as other applicable laws and regulations. When we process and store your personal data outside of your country of residence, we take all reasonable measures to ensure safety of such data.
If you are a national of a Member State of the European Union, your personal data might be stored outside of the European Union. The Company will ensure in all cases that service providers storing your personal data sign standard agreements or take other measures to ensure the safety of your personal data as required by the GDPR.
The list or categories of recipients specified in the Privacy Policy may change, so it is highly recommended to regularly check for Privacy Policy updates.
15. Safety of your personal data
Your personal data will be processed in accordance with the GDPR and other laws and regulations. When processing your personal data, we implement organizational and technical measures to ensure that personal data is protected against accidental or unlawful destruction, modification, disclosure and any unlawful processing.
16. Your rights
In this section, we provide information about your rights related to our processing of your personal data and cases when you can exercise such rights. If you need more information about your rights or need to exercise such rights, contact us by emailing us at the address specified herein.
The Company shall, without unjustified delay and in any case no later than within 1 (one) month of its receipt of a request, provide you with information about the actions taken after receiving your request to exercise your rights. Depending on the number and complexity of your request(s), the above term may be extended for another 2 (two) months. In such cases, we will notify you within 1 (one) month of receiving your request about such extension of the term and the reasons for said extension. The Company will refuse to exercise your rights only in the cases provided for by law.
17. Right to access your personal data
We want you to fully understand how we use your personal data to avoid any and all inconvenience in relation to such use. You can contact us at any time and enquire whether we are processing any of your personal data. If we store or use any of your personal data, you have the right to access such data. To do so, send us a written request to the email address specified in this Privacy Policy, confirm your identity and, when submitting your request, follow the principles of fairness and common sense.
17.1. Right to withdraw consent
If you have given us explicit consent for the processing of your data, you can withdraw your consent at any time.
17.2. Additional rights
Furthermore, you may also exercise the additional rights as specified below.
(a) You have the right to ask us to correct any inaccuracies in your data. In such case, we may ask you to confirm the corrected data.
(b) You have the right to ask us to delete your personal data. This right shall be fulfilled in cases provided for in Art. 17 of the General Data Protection Regulation (EU) 2016/679.
(c) You have the right to request the restriction of or object to the processing of your data:
● for a period of time you need to ensure accuracy of your data when you make a claim due to your data being inaccurate;
● when our collection, storage or use of your personal data is unlawful but you decide not to request that your data be deleted;
● when we no longer need your personal data but you need them to establish, exercise or defend a legal requirement;
● for a period of time we need to determine whether there are significant legal grounds to continue processing your personal data if you exercised your right to object such processing.
(d) You have the right to request the transfer of data processed using automated operations and those that we obtained from you with your consent or to conclude an agreement. Once you exercise this right we will transfer a copy of the data you provided at your request.
(e) You have the right to object to our use of your personal data as provided for in Art. 21 of the GDPR. You have the right to object to the processing of your personal data on the grounds of lawful interest (the grounds for data processing are specified for each of the above purposes) or for the purposes of direct marketing.
17.3. Right to request more information
We expect you to understand that it is very difficult to discuss all possible forms of personal data collection and use. We attempt to provide as clear and complete information as possible and undertake to update this Privacy Policy in the event of changes to the way in which personal data are used.
You can read more about your rights as a data subject and exercising them under the Procedure for implementation of rights of the data subjects.
Nevertheless, if you have any further questions about the use of your personal data, we will be happy to answer them or provide you with all addition information we are able to disclose. If you have any specific questions or did not fully understand any of the provided information, contact us at info@modeliukai.lt.
18. Complaints
If you believe that your rights as a data subject were or might be violated, please contact us without delay at the email address provided in this Privacy Policy. We can assure you that after receiving your complaint, we will contact you within a reasonable time frame and notify you about the investigation into your complaint. We will subsequently also inform you of the results of such investigation.
If you are not satisfied with the investigation results, you can lodge a complaint with our supervisory authority, i.e. the State Data Protection Inspectorate of the Republic of Lithuania (www.vdai.lrv.lt).
19. Liability
You are responsible for the confidentiality of data you provide and for ensuring that the data you provide us with are accurate, correct and complete. If your data changes, you must notify us by email without delay. We will not be liable for damages incurred by you due to providing us with incorrect or incomplete personal data or due to failure to notify us of data changes.
20. Changes to the privacy policy
We may update or change this privacy policy at any time. We recommend that you regularly check our privacy policy for updates.
Privacy policy last updated on 2021-11-01.