1. PURPOSE
1.2. This privacy policy (hereinafter – the Privacy Policy), prepared by Timber Cabins JSC (Company code 301694566), registered office address at Kiemeliu Str. 1C, Stasiunu village, LT-56138 Kaisiadoriu district, Lithuania, regulates the basic principles and rules of the personal data processing.
2. SCOPE
2.1. This Privacy Policy applies to data processing at www.timbercabins.lt. In this privacy notice, we, Timber cabins JSC, provide information about how we process your personal data when you visit our website and/ or use our services.
2.2. Upon your first visit to our website, we will ask you to agree to the use of cookies under the conditions set out in this notice. Our website contains privacy control settings that allow you to decide how we will process your personal data. In the privacy settings with the help of cookies, you can limit the amount of information we receive about you.
2.3. In this document you will find answers to the following questions:
(a) how we use your data;
(b) to whom and when we provide your data;
(c) how long we store your data;
(d) what our direct marketing policy is;
(e) what rights you have in relation to your data;
(f) how we use cookies;
(g) what else you should look out for.
3. HOW DO WE USE YOUR DATA?
3.1. In this section you will find the following information:
(a) the categories of data we process;
(b) information about the sources in case we receive data not from you;
(c) the purposes we process your data for; and
(d) legal basis for data processing.
3.2. We process the information about your usage of our website and the services we provide (“usage data”). The usage data may include your IP address, geographic location, browsing type and version, operating system, referral source, length of visit to the website, pages viewed, navigation paths on the website, as well as the information about the periods and frequency of using the services. We obtain this data with the help of cookies or similar technologies. We process this data to better understand your use of the website (www.timbercabins.lt) and the services provided therein. We process this data based on a legitimate interest, namely, to monitor and improve the website and the services provided on it.
3.3. We process your access data (“access data”). The access data may include your name, your e-mail address, your phone number or other data, submitted by you in the request form or during the registration. We obtain this data directly from you. We process the access data for the purposes of website administration, service provision, ensuring the security of the website and the services provided, and for communication with you. We process this data for the purpose of executing a contract between you and us (or, at your request, taking steps to conclude such a contract), as well as based on legitimate interest, namely, in order to properly administer the website and our activities related to it.
3.4. We process the information related to the services we provide (“service data”). The service provision data may include your contact details, service provision details (information about a specific order, correspondence for the purpose of service provision, etc.). We process service provision data to be able to provide you with the services and to properly perform the service provision accounting. We process this data for the purpose of executing a contract between you and us (or, at your request, taking steps to conclude such a contract), as well as based on legitimate interest, namely, to properly administer the website and our activities related to it.
3.5. We process the information you provide to us to receive our communications and newsletters by e-mail or other means of communication (“message data”). We process this data for sending relevant information messages and newsletters. We process this data with your consent. In addition, if we have already provided you with services on our website and you do not object, we will also process message data based on legitimate interest, namely, to maintain and improve relations with existing customers.
3.6. We process the information related to any communication you send to us (“communication data”). Communication data can include both the content of the correspondence and the call itself, as well as the metadata related to such communication. In the case of correspondence, the website automatically creates metadata related to your communication, submitted with the help of the forms on the website. We process the communication data for an easier contact with you, as well as for accounting purposes. We process this data based on legitimate interest, namely, to properly administer the website and our activities related to it, to ensure uniform and high-quality consulting practice, and the examination of conflict situations between you and our employees.
3.7. We may process your personal data specified in this notice when it is necessary to assert, execute or defend legal claims, regardless of whether they arise in accordance with judicial, administrative or other non-judicial proceedings. For this purpose, we process your personal data based on legitimate interest, namely, to protect and ensure our, your and other persons’ rights.
3.8. We may process your personal data specified in this notice when it is necessary to purchase or have insurance coverage, manage risks or for professional consultation purposes. For this purpose, we process your personal data based on legitimate interest, namely, to adequately protect our activities from risks.
3.9. In addition to the specific purposes specified in this part of the notice, we can also process your personal data when it is necessary to process it to fulfil our legal obligations, as well as when it is necessary to protect the vital interests of you or other natural persons.
4. WHO AND WHEN DO WE PROVIDE YOUR DATA?
4.1. We may disclose your personal data to any of our group companies (including both our subsidiaries and our controlling company and all its subsidiaries) to the extent necessary to achieve the purposes set out in this notice.
4.2. We may disclose your personal data to our insurers and professional consultants to the extent that it is necessary to acquire or have insurance coverage, manage risks, receive professional advice, or assert, execute or defend legal claims, regardless of whether arising under a judicial, administrative or other non-judicial procedure.
4.3. We may disclose your personal data to other service providers for the purposes of providing specific services to the extent necessary to provide such services (for example, website hosting service providers, courier services, persons providing and maintaining servers, e-mail service providers). With the help of subcontractors, we take all necessary measures to ensure that our data processors have implemented appropriate organizational and technical security measures and maintain the confidentiality of personal data.
4.4. In addition to the specific cases of possible disclosure of your personal data indicated in this part of the notice, we may also disclose your personal data when such disclosure is necessary to fulfil our legal obligations, as well as when it is necessary to protect the vital interests of you or other natural persons.
4.5. The persons specified in this part may be established outside the Republic of Lithuania, the European Union or the European Economic Area. If we transfer your personal data to such persons, we will take all necessary legal measures to ensure that your right to privacy continues to be adequately protected.
5. HOW LONG DO WE KEEP YOUR DATA?
5.1. We process your personal data for any purpose or purposes for no longer than it is necessary for that particular purpose or purposes. In any case:
(a) access data is stored for no longer than 3 (three) years from the last update of information in your account or 10 (ten) years from the end of the last provision of services to you (depending on which event is later);
(b) service provision data is stored for no longer than 10 (ten) years from the date of completion of service provision;
(c) message data is stored for no longer than 2 (two) years from the date of consent or, in the case that messages are sent to existing customers in order to maintain and improve relations with existing customers, 2 (two) years from the end of the provision of the relevant services;
(d) communication data is stored for no longer than 2 (two) months from the end of the communication.
5.2. Despite the terms specified above in this part of the notice, we have the right to store your personal data when such storage is necessary to fulfil our legal obligations, as well as when it is necessary to protect the vital interests of you or other natural persons.
6. DIRECT MARKETING
6.1. With your consent, we will send marketing communications by e-mail to inform you about our news.
6.2. Also, if we have already provided you with the services and you do not object to it, we will also inform you about our other products that could be relevant to you and information related to them.
6.3. You can opt out of receiving marketing communications at any time.
6.4. You can do this:
(a) by clicking on the relevant link in any marketing communication received;
(b) by contacting us through the contacts indicated on the website www.timbercabins.lt.
6.5. If you do any of the above, we will update your profile to ensure that you no longer receive marketing communications from us in the future.
6.6. Please note that our business consists of many interconnected services and it may take several days for all systems to be updated, so you may continue to receive marketing communications while your request is still being processed.
6.7. Opting out of marketing communications will not stop communications directly related to the provision of services to you.
7. YOUR RIGHTS
7.1. In this part of the notice, we provide you with the overview of the rights you have under data protection legislation. We invite you to familiarize yourself with the relevant legal acts and the guidelines of the supervisory authorities so that you have complete information about these rights.
7.2. Your main rights provided by data protection legislation are as follows:
(a) the right to access the data;
(b) the right to request data rectification (most of the actions related to this right can be carried out by logging into your account, if one has been created);
(c) the right to request deletion of data;
(d) the right to restrict data processing;
(e) the right to object to data processing;
(f) the right to data portability;
(g) the right to file a complaint with the supervisory authority;
(h) the right to withdraw the Consent.
7.3. The right of access to data. You have the right to receive confirmation from us as to whether we are processing personal data related to you, and, in the case of processing, you have the right to familiarize yourself with the processed personal data and certain additional information. This additional information includes the purposes of data processing, categories of personal data, data recipients. Except in cases where this would violate the rights and freedoms of other persons, we will provide you with a copy of your personal data upon your request. We will provide the first copy free of charge, but we may charge a reasonable fee for additional copies to cover our administrative costs.
7.4. The right to demand rectification of data. You have the right to demand that your inaccurate personal data be corrected and, considering the purposes of data processing, that incomplete data be supplemented.
7.5. In certain cases, you have the right to demand that your personal data be deleted. These situations include cases where: (i) your personal data is no longer necessary to achieve the purposes for which it was processed; (ii) you withdraw your consent and there is no other legal basis for processing the data; (iii) you do not agree to the processing of data based on the provisions of relevant legal acts; (iv) the data is processed for the purpose of direct marketing; (v) the data is processed unlawfully. Please note that in certain cases you may not be able to exercise this right due to applicable exclusions. Such exceptions include cases where the data is necessary to: (i) exercise freedom of expression and information; (ii) to comply with our legal obligations; (iii) assert, enforce or defend legal claims.
7.6. In certain cases, you have the right to restrict the data processing. These situations include when: (i) you dispute the accuracy of the data; (ii) the data is processed illegally, but you do not want it to be deleted; (iii) we no longer need the personal data, but you need such data to assert, execute or defend legal claims; (iv) you have objected to data processing, on the grounds of public interest or legitimate interest, until the validity of your objection is assessed. In the event of a restriction on the processing of your data, we will continue to store your data, but we will not process it further, except: (i) with your consent; (ii) to assert, exercise or defend legal claims; (iii) to protect the rights of others; (iv) for public interest purposes.
7.7. You have the right to object to the processing of personal data based on your specific situation in cases where we process your personal data for purposes of public interest or based on our or third parties’ legitimate interest. If you object to such processing of your personal data, we will no longer process your relevant personal data unless we can prove that such data is being processed for compelling legitimate reasons that override your interests, rights and freedoms. We may also continue to process such data to assert, exercise or defend legal claims.
7.8. You have the right to object to the processing of your personal data for direct marketing purposes (including profiling for direct marketing purposes) at any time. If you object to such processing of your personal data, we will no longer process your relevant personal data for this purpose.
7.9. You have the right to object to the processing of personal data for scientific or historical research or statistical purposes. If you object to such processing of your personal data, we will no longer process your relevant personal data for this purpose, unless we can prove that such data are necessary for a task carried out for reasons of public interest.
7.10. the right to data portability. To the extent that the legal basis for our data processing is:
(a) Consent; or
(b) performance of the contract or actions are performed at your request before the conclusion of the contract, you have the right to receive your personal data in a structured, commonly used and computer-readable format. You will not be able to use this right if it will have a negative impact on the rights and freedoms of others.
7.11. If you believe that we are violating data protection legislation while processing your personal data, you have the right to file a complaint with the State Data Protection Inspectorate, the headquarters being at L. Sapiegos Str. 17, LT- 10312 Vilnius, https://vdai.lrv.lt/lt/.
7.12. In cases where the legal basis for data processing is your consent, you have the right to withdraw your consent at any time. Withdrawal of consent will not affect the legality of the processing of your data until the withdrawal.
7.13. In addition to the specific measures specified in this part of the notice or on the website, you can also use any of the rights mentioned in this part of the notice by contacting us by e-mail at the contacts indicated on the www.timbercabins.lt website.
8. COOKIES POLICY
8.1. Cookies are small text files that act as your identifiers, which the website server sends to your browser, and which are stored in your browser. Each time the browser accesses the site’s server, such an identifier is sent back to the site’s server.
8.2. Normally, cookies do not contain any information that could identify the user, but your personal data that we process can be associated with the information obtained and stored with the help of cookies.
8.3. We use the following cookies:
| Cookie | Cookie type | Collected data and the purpose of its collection | Time of data collection | Time of data collection | Transfer of data to third parties | Data management rules |
| VISITOR_INFO1_LIVE | Functional | Provide ad delivery or retargeting, store and track visitor identity, store and track interactions. | After validating functional cookies | 8 months | Transferred to Google | https://policies.google.com/privacy?hl=en |
| _ga, _gat, _gid | Statistical | Google cookies for collecting statistical data about visitor flows, their actions on the website. | After confirming statistical cookies | _gid, _gat: 1 day_ga: 2 years | Transferred to Google | https://policies.google.com/privacy?hl=en |
| YSC | Statistical | A YouTube cookie that collects information about which YouTube videos the visitor views. | After confirming statistical cookies | Until the end of the visitor’s session | Transferred to Google | https://policies.google.com/privacy?hl=en |
| IDE, RUL | Marketing | Google DoubleClick cookies for monitoring visitor behaviour, measuring advertising indicators and selecting individual advertising parameters. Data is collected on the visitors’ behaviour on the website and advertising parameters. | After accepting marketing cookies | 1 year | Transferred to Google | https://policies.google.com/privacy?hl=en |
| datr, fr, sb, _fbp | Marketing | Facebook cookies to identify visitors, browsers and collect marketing information to form an audience for advertising. Data is collected on the visitors’ behaviour on the website and advertising parameters. | After accepting marketing cookies | fr, _fbp: 3 monthsdatr, sb: 2 years | Transferred to Facebook | https://www.facebook.com/policies/cookies |
| PHPSESSID | Necessary | A necessary cookie that ensures the operation of the website by keeping the visitor’s session active. | Until the end of the session |
9. MANAGING COOKIES?
9.1. You can delete all cookies stored on your computer, and in many browsers, you can set cookies not to be stored. Please note that if cookies are disabled, you may lose the ability to use many functions necessary for the website to function properly. For more information about cookies, visit https://www.allaboutcookies.org/ or https://www.aboutcookies.org/. On these websites, you can find detailed information about cookies and ways to disable them using your browser, as well as how to remove cookies that are already on your computer. To remove cookies from your mobile phone, you should find the relevant information in your phone’s user manual.
9.2. Most web browsers give users the right to refuse or delete cookies. The means how to do this may differ depending on the specific browser and its specific version. You can also access current information on how to block or delete cookies on the websites of the browser providers themselves, such as Chrome; Firefox; Internet Explorer; Safari.
9.3. Blocking cookies may have a negative impact on the use of the website.
9.4. If you block cookies, you will not be able to use all the functions of the website.
10. THE THIRD-PARTY WEBSITES
The website may contain links to and from the websites of partners, information sources, and related persons. Please note that the third-party websites that you access through links on this site have their own privacy policies and we are not responsible for these privacy policies. We recommend that you read the privacy policies of these other websites before submitting any of your personal data.
11. UPDATE OF DATA
Please let us know if your personal information that we process needs to be corrected or updated.
Any updates to this notice will be posted on the website www. timbercabins.lt