1. What does this Privacy Policy mean?
In this privacy policy (hereinafter – Privacy Policy) we provide you with information about how UAB “Sustaiming” (hereinafter – the Company) processes your personal data received: when the Company provides services to customers and sells goods or receives services or buys goods (when another contract party is a natural person); For the company in the course of direct marketing; in the selection of candidates; in order to ensure the protection of confidential information and business continuity; in order to fulfill contracts concluded between the Company and contractors – legal entities; processing personal data of employees’ relatives in order to contact them in the event of an emergency; in order to defend legitimate interests in case of disputes or infringements; promoting the awareness of the Company (posting photos of employees and other persons on the Internet); When you visit the Company’s website. Below, all persons whose data is processed by the Company are called – Data Subjects.
2. About the Company
The company means UAB Sustaiming, legal entity code 306640017, registered office at Fabijoniškių st. 96, Vilnius, Republic of Lithuania, data about the Company are collected and stored in the Register of Legal Entities of the Republic of Lithuania. Contact e-mail e-mail regarding personal data protection – info@sustaiming.com.
3. What is personal data?
Personal data is any information collected by the Company about the Data subject, which can be used to determine the personal identity of the Data subject and is stored electronically or otherwise.
Personal data includes any information, including the name, surname, address of the Data subject, which the Company collects about the Data subjects for the purposes specified in this Privacy Policy or in a separate consent or agreement of the Data subject with the Company.
4. Personal data that is processed when the Company receives or provides services or sells or purchases goods
| Personal data is processed | Basis of data processing | Data processing term |
| Name, surname, personal identification number, address, business license/individual activity certificate number (of the service provider), bank account number, contract execution information | Article 6(1)(b) GDPR (contract) | 10 years after the contract expires |
5. Direct marketing
We will send offers for the sale of the Company’s goods or the provision of services to persons over the age of 14 who have provided their contact details and have expressed a desire to receive information about the goods and/or services offered by the Company via electronic means (e-mail, telephone, SMS messages). , newsletters and other advertising materials, we will inform you about the Company’s news.
For the purpose of direct marketing, the Company will process your personal data: telephone number, e-mail address (mandatory data, without which we will not be able to send you direct marketing messages). Your data will be processed for direct marketing purposes for 3 years from the date of consent.
If you have purchased goods or services sold by the Company and have not objected to receiving the Company’s direct marketing messages (e.g. by ticking the objection box in the direct marketing consent form or informing about your objection by e-mail specified in the Policy), we will send you e-mail or SMS messages on the basis of our legitimate interest messages about goods or services that are similar to the services provided to you or the goods sold. In this case, your data for the purpose of direct marketing will be processed for 3 years after the purchase of the last product or service.
You have the right to object or opt out of receiving direct marketing communications at any time by contacting us at the email address specified in section 2. by provided email.
6. Selection of candidates
We collect and process your personal data (name, surname, desired position, work experience (workplace, position, person who can recommend), education, other data specified in the CV, application form or motivation letter and/or other information provided by you) during participation in the selection of work for the purpose of carrying out the selection on the basis of your consent, which you express to the Company by sending your resume and/or motivation letter. If you do not submit your resume and/or motivation letter, we will not be able to assess your suitability for the position offered.
In the event that you do not express your separate consent to process your personal data, after the end of this job selection, we undertake to delete and/or destroy your personal data within 3 days after signing the contract with the selected candidate or taking the decision to end the selection, except when separate consent is given regarding the candidate’s person for the period specified in the data storage consent.
If, according to the law, we need to check your health before employing you, we will process data about your health in order to check your suitability based on the fulfillment of a legal obligation.
Based on your consent, we will store the data for the period specified in the consent.
On the basis of our legitimate interest, we will process data about the person specified by the candidate (name, surname, e-mail, telephone, information provided by the person) – former employer or person providing a recommendation – for the purpose of candidate selection. In this case, our legitimate interest is to select the right candidate for the position we are looking for. We will destroy this data at the end of the selection process.
We can receive your data directly from you, from online platforms where you apply to our advertised vacancies or from recruitment agencies.
7. Protection of company confidential information and business continuity
In order to ensure its legitimate interest in ensuring the protection of the Company’s confidential information and the continuity of the Company’s activities, the Company may review the correspondence of its employees with contractors. In order to achieve these goals, the Company processes the following personal data of its employees and persons who send or receive employee letters: e-mail address, content of information contained in electronic work tools, date. Such data is stored for 4 years.
8. Execution of company contracts with contracting legal entities
In order to ensure its legitimate interest in the execution of the Company’s contracts concluded with contracting legal entities, the Company processes the personal data of the employees of these persons, i.e. i.e. first name, last name, e-mail address e-mail address, telephone number, content of correspondence. Data related to the execution of the contract are stored for 10 years after the end of the contract.
9. Data of employees’ relatives
Contacting employees’ relatives in the event of an emergency The company processes the following personal data of employees’ relatives on the basis of its legitimate interest in ensuring that employees’ relatives are informed about the accident: name, contact with the employee, phone number. These data are processed only as long as the employee works for the company.
10. Protection of legitimate interests in case of disputes, thefts and other criminal acts or administrative violations
The company, on the basis of its legitimate interest, to defend its rights, including in the event of disputes, thefts and other criminal acts or in the event of an administrative violation, processes the names, surnames, personal codes, case circumstances, other information related to the case of the persons who committed or suspected of committing them, as well as other persons participating in the case. publicly available information. Data may be transferred to insurance companies, law enforcement agencies or bailiffs performing recovery. The data is destroyed 3 years after the final resolution of the case and full satisfaction of the Company’s claims (if the amounts are awarded).
11. Promotion of company awareness
With your consent, your position, name, image, training topic, date and program will be published on our website in order to promote the Company’s awareness and inform about events. Your data can be obtained from persons providing training services, photographers and stored for 5 years.
12. Contact us
There are several ways you can contact the Company: by phone, e-mail by mail, by filling out the online request form. We receive, review and respond to all messages ourselves. If you contact us, we can process the data you provide us, i.e. i.e. name, surname, e-mail e-mail address, phone number, date and text of correspondence.
Such data will be processed on the basis of your consent, in order to answer your questions and examine your offers. If you do not provide your contact details, it will not be possible to contact you.
Correspondence is stored for 1 year after receiving the message, with the exception of information for which other terms are set in the Privacy Policy or legal acts.
Any personal data you provide when communicating with us is used only for the above purposes and to view messages and administer and manage communication flows. We undertake not to use your personal data in any publications without your express consent in such a way that it is possible to determine your personal identity.
Please note that we may need to contact you by mail, e-mail. by mail or phone. Please notify us of any changes to your personal data.
13. Website
Our website www.sustaiming.com uses cookies.
A cookie is a small file consisting of letters and numbers that we save on your browser or on your computer’s hard drive with your consent. We use different cookies for different purposes. Cookies also help us distinguish you from other users of the website, thus ensuring a more pleasant experience when using the website and allowing us to improve the website.
Most browsers allow you to reject all cookies, and some browsers have the option to reject only third-party cookies. So you can take advantage of these opportunities. However, please note that blocking all cookies will have a negative impact on the use of the website, and without cookies you will not be able to use all the services provided on the website. More details are available at https://www.allaboutcookies.org or https://policies.google.com/technologies/ads.
When visiting the website, third-party cookies may also be recorded, the specific quantity and functions of which the Company does not control, and the Company does not have access to the information collected by them. You can find detailed information about the functions of cookies used by third parties (Google etc.) and the personal data they collect in the privacy/cookie policies of these third parties (for example, Google’s cookie policy at https://policies.google.com/technologies/cookies?hl =en-US) or by contacting the contact person of the third party sending the cookies.
14. Acquisition and Disclosure of Data
We receive your data from you, your devices, our employees, and from our contractual partners.
We may disclose information about you to our employees, intermediaries, service providers, such as debt administration or collection companies, marketing services, IT service providers or subcontractors, if reasonably necessary for the purposes described in this Privacy Policy.
In addition, we may disclose information about you:
if we are required to do so by law;
in order to defend your rights or interests (including providing your data to third parties in order to collect your debts to us);
intending to sell a part of the Company’s activity or its assets, disclosing your personal data to a potential buyer of the activity or its part (on the basis of its legitimate interest in finding an investor);
after selling the Company’s activities or a substantial part of its assets to third parties.
Except for the cases provided in this Privacy Policy, we do not provide your personal data to any third parties.
The list of recipients or categories of recipients specified in the Privacy Policy may change, so if you wish to be informed about changes in the recipients of your personal data, please notify us at the e-mail address specified in this Privacy Policy. by mail, indicating in the text of the letter “I would like to receive information about the change of recipients of my personal data, name, surname”.
15. Security of your personal data
Your personal data will be processed in accordance with the requirements of the General Data Protection Regulation, the Law on Legal Protection of Personal Data of the Republic of Lithuania and other legal acts. When processing your personal data, we implement organizational and technical measures that ensure the protection of personal data against accidental or illegal destruction, alteration, disclosure, as well as against any other illegal processing.
16. Your rights
In this section, we provide information about your rights related to our processing of your personal data and the cases when you can use these rights. If you would like more information about your rights or to exercise them, please contact us at the email address specified in this Privacy Policy. postal address.
The company will provide you with information about the actions taken upon receipt of your request regarding the exercise of your rights without undue delay, but no later than within 1 (one) month from the receipt of the request. Considering the complexity of the request and the number of requests received, the above-mentioned deadline can be extended for another 2 (two) months. In this case, we will inform you about such extension of the deadline and the reasons for it within 1 (one) month after receiving the request. The company will refuse to enforce your rights only in the cases provided for by law.
16.1. The right to access your personal data
We want you to fully understand how we use your personal data and not experience any inconvenience as a result. You can contact us at any time and ask whether we process any of your personal data. If we store or use your personal data in any way, you have the right to access them. To do so, send us a written request at the email address specified in this Privacy Policy. email address, confirm your personal identity; and observe the principles of fairness and reasonableness in making such a request.
16.2. Right to withdraw consent
If you have given us explicit consent for the processing of your data, you can withdraw it at any time.
16.3. Additional rights
Below we provide information about additional rights you have, which you can exercise by following the procedure described below.
(a) You have the right to ask us to correct any inaccuracies in the data we hold. In this case, we may ask you to confirm the corrected information.
(b) You have the right to ask us to delete your personal data. This right is exercised in the cases provided for in Article 17 of the General Data Protection Regulation (EU) 2016/679.
(c) You have the right to ask us to limit the processing of your personal data or not to process it:
during the period necessary for us to verify the accuracy of your personal data when you submit claims regarding the accuracy of the data;
when our collection, storage or use of your personal data is illegal, but you decide not to request data deletion;
when we no longer need your personal data, but you need it to establish, fulfill or defend a legal claim;
for the period required to determine whether we have an overriding legal basis to continue processing your personal data, if you have exercised your right to object to the processing of personal data.
(d) You have the right to the transfer of data that is processed by automated means and that we have received from you with your consent or for the purpose of entering into a contract. After you exercise this right, we will transfer a copy of the data you provided at your request.
(e) You have the right under Art. 21 GDPR. in accordance with the established procedure, do not agree that we use your personal data. You have the right to object when your personal data is processed on the basis of a legitimate interest (for each purpose of data processing mentioned above, the basis on which the data is processed is indicated) or for the purpose of direct marketing.
16.4. The right to request more information
We hope that you will understand that it is very difficult to discuss all possible ways of collecting and using personal data. We strive to provide as clear and detailed information as possible and undertake to update this Privacy Policy if the process of using personal data changes. However, if you have any questions about the use of your personal data, we will be happy to answer them or provide you with any additional information we can disclose. If you have any specific questions or do not understand the information provided, please contact us.
17. Complaints
If you believe that your rights as a Data Subject have been and/or may be violated, please contact us immediately at the e-mail address specified in this Privacy Policy. by post We guarantee that only after receiving your complaint, we will contact you within a reasonable period of time and inform you about the progress of the investigation of the complaint, and later about the result.
If you are not satisfied with the results of the investigation, you can file a complaint with the supervisory authority – the State Data Protection Inspectorate at https://vdai.lrv.lt/.
18. Responsibility
You are responsible for the confidentiality of the data you provide, as well as for ensuring that the data you provide to us is accurate, correct and complete. If the data provided by you changes, you must immediately inform us about it by e-mail. by post In no case will we be responsible for any damage caused to you due to the fact that you have provided incorrect or incomplete personal data or have not informed us when they have changed.
19. Changes to the Privacy Policy
We may update or change this Privacy Policy at any time. If you would like to receive an updated Privacy Policy, please notify us at the email specified in Section 2. postal address.
UAB Sustaiming’s privacy policy was last updated on September 17, 2024.