1. GENERAL PROVISIONS

1.1.The Privacy and Cookie Policy (hereinafter referred to as the "Policy") of UAB "Energy Green" (hereinafter referred to as the "Company"), company code 302497397, registration address Plento g. 14, Žasliai, LT-56412 Kaišiadorių r., defines how the Company collects, uses and stores the data about the buyers and the visitors of the electronic shop https://lights.lt (hereinafter referred to as the "Website") (hereinafter referred to as the "Subjects")

1.2 By using the Company's Website, as well as by ordering goods and providing the Company with your personal data, you agree to the provisions of this Privacy Policy (except for data processing activities, which will require your separate consent). Subjects are deemed to have read and understood the Privacy Policy when they register or place an order on the Site and tick the "tick" box below the text of this Policy. The Privacy Policy may be re-accessed at any time under the "Privacy Policy" section of the Site.

1.3 In processing your personal data, we comply with the Privacy Policy dated 27 April 2016. The provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as the "Regulation"), the Law on Legal Protection of Personal Data of the Republic of Lithuania (hereinafter referred to as the "ADPD"), the Law on Electronic Communications of the Republic of Lithuania (hereinafter referred to as the "ETC Law"), as well as the provisions of any other directly applicable legal acts regulating the protection of personal data, and the instructions of the supervisory authorities for the protection of personal data (the "Data Protection Supervisory Authorities") (the "Data Protection Inspectorate").

2. DATA COLLECTED BY THE COMPANY

2.1 The Company may collect and process the following data of Subjects:

     2.1.1. the data that Subjects provide when filling in forms on the Website. These data include the Subject's name, surname, e-mail address, telephone number, delivery address, name of the product to be ordered, payment details of the product, and other information provided when filling in the registration form, registering in the online shop, placing an order, sending messages in the system, requesting additional services or reporting problems with the online shop. The Company may also offer to fill in certain forms in order for the Subject to participate in competitions, promotions and games organised by the Company;

     2.1.2. data on the Subject's browsing history in the online shop, the history of goods and services purchased and related data;

     2.1.3. the name, surname, e-mail address, telephone number of the Subjects, where these data are processed for the purpose of direct marketing and the Subject has given his/her consent for this purpose;

    2.1.4. the IP addresses of the Subjects.

3. COOKIES AND THE PURPOSES OF THEIR USE

3.1 Cookies are small text files that the Company sends to your computer or other device when you visit the Website. Cookies are used to:

    3.1.1. to improve your browsing experience on the Website;

    3.1.2. recognize you when you revisit the Site;

    3.1.3. collect statistical information about the use of the Site;

    3.1.4. display advertisements relevant to you.

3.2 You can disable cookies at any time in your browser settings. However, please note that disabling cookies may result in some features of the Site not working properly.

4. STORAGE OF DATA OF SUBJECTS

4.1 The Company shall keep your personal data for no longer than is necessary to achieve the purposes of the processing, unless a longer retention period is required by law.

4.2 The data that the Company collects from Subjects may be processed by the Company's personnel or the Company's suppliers. Where the Subjects' data is processed by the Company's suppliers (i.e. data processors), the Company has entered into contracts with them which adequately govern the duties of the data processors. Processors are entitled to process personal data only on the instructions of the Company and only to the extent necessary for the proper performance of their contractual obligations. The transfer of the Subjects' data to suppliers (data processors) may be related to the fulfilment of the Subjects' orders and the processing of the Subjects' payment data. By providing their personal data, the Subjects consent to this transfer and processing. The Company shall take all reasonably practicable steps to ensure that the Subjects' data is processed securely and in accordance with this Policy.

4.3 Data provided by Subjects is stored on the Company's servers or in hard copies of documents. In the event that Subjects are provided with passwords (or where the Subjects choose them themselves) which enable the Subjects to use certain functions of the Online Shop, the Subjects are solely responsible for the confidentiality of the passwords and for ensuring that they are not disclosed to any third party.

4.4 If the Company has doubts about the correctness of the data provided by the Subjects, the Company shall have the right to suspend the processing of the data of this Subjects, to verify and clarify such data.

5. SUBJECT'S CONSENT TO DATA PROCESSING FOR DIRECT MARKETING PURPOSES

5.1 The Company shall only process your personal data for direct marketing purposes after obtaining your explicit consent by ticking a box when ordering goods. You may withdraw your consent at any time by notifying the Company by email to info@lights.lt

5.2 The subject may object to the provision of data for the purpose of direct marketing or contact the Company at any time to withdraw his/her consent to the processing for the purpose of direct marketing. In order to exercise his/her right to opt-out of data processing for the purpose of direct marketing, the Subject must uncheck the relevant boxes on the registration form or select the relevant link in the direct marketing offers sent. Subjects may also contact the Company by email at info@lights.lt to notify their withdrawal of consent.

6. PURPOSES OF THE PROCESSING OF DATA SUBJECTS' DATA

6.1 The Company processes the Subjects' personal data for the following purposes:

   6.1.1. for the purpose of providing the Services to the Subjects (customers);

   6.1.2. for the purpose of concluding and executing sale and purchase agreements with Subjects (customers);

   6.1.3. for the purpose of debt collection;

   6.1.4. to ensure that the content of the Online Shop is provided in the most effective and appropriate manner for the Subjects;

   6.1.5. for the purposes of service development, statistical data analysis and target marketing guidance;

   6.1.6. to provide Subjects with information about the goods or services that Subjects request;

   6.1.7. for the purposes of responding to and administering requests for information from Subjects;

   6.1.8. for the provision of promotional information where the Subjects have consented to the processing of personal data for direct marketing purposes;

   6.1.9 For the purpose of informing Subjects about changes to the services provided by the Company;

   6.1.10 For customer service quality purposes.

7. DISCLOSURE OF DATA

7.1 Personal Data is only transferred to trusted third parties with whom we have entered into contracts and only to the extent necessary to provide the service. For the purpose of providing you with a proper service, we transfer your personal data to the following partners:

   7.1.1. courier companies that deliver goods to you at the addresses you have provided.

7.2 We may also transfer your Personal Data to:

   7.2.1. to law enforcement authorities in accordance with the procedure provided for by the legislation of the Republic of Lithuania;

   7.2.2. to public authorities and courts where such obligation is provided for by applicable law.

8. RIGHTS OF SUBJECTS

8.1:Entities have the following rights:

   8.1.1. to be informed about the processing of their data;

   8.1.2. to be informed, upon request to the Company, from which sources and what personal data have been collected, for what purpose they are processed, to which recipients they are provided and to which recipients they are provided and have been provided during the last 1 year. The information shall be provided to the Subjects at the e-mail addresses they have provided, no later than 30 days after the date of the Subjects' request to provide such data. The Company shall provide such data to the Subject on a gratuitous basis 1 time per calendar year;

   8.1.3. upon request, to request the rectification of incorrect, incomplete or inaccurate data of the Subjects and/or to suspend the processing of such personal data, with the exception of storage, if the Subject establishes that his/her personal data is incorrect, incomplete or inaccurate, or is being processed unlawfully and unfairly. The Company shall promptly notify the Subject of the rectification, destruction or suspension of the processing of the personal data, whether or not carried out at his request;

   8.1.4. upon request, the Subject shall have the right to receive the personal data relating to him/her which he/she has provided to the Company in a structured, commonly used and computer-readable format, so that such data can be transmitted to another data controller (right to data portability);

   8.1.5. to object to the provision of data for the purpose of direct marketing, as provided for in point 5.2 of the Policy;

   8.1.6. upon request, the Subject has the right to request that the Company erase the personal data relating to him/her when the person does not consent or withdraws consent to the processing (right to be forgotten), unless the Company is unable to erase the Subject's data due to its necessity for the performance of the contract or for the mandatory execution of the legislation;

   8.1.7. the Subject has the right to lodge a complaint with the State Data Protection Inspectorate if he/she disagrees with the Company's actions or inactions;

   8.1.8. All inquiries and requests relating to the Subject's data shall be sent to the Company's e-mail address info@lights.lt. The Company's representative receiving the request shall have the right to request a personal identity document or a copy thereof certified in accordance with the law;

   8.1.9. the Company shall respond to the Subject's requests and enquiries no later than within 30 days of their receipt.

9. LOGGING IN WITH EXTERNAL SERVICE PROVIDER ACCOUNTS

9.1 The Company provides the possibility for Users to access the Website using the User's existing external service provider accounts: Facebook or Google.

9.2 By accessing the Website using external service provider accounts, Users consent to the external service providers providing their email address and name to the Website. 

10. FINAL PROVISIONS

10.1 The Policy shall enter into force on 1 February 2024.

10.2 The Company may amend this Privacy Policy at any time. Amendments shall take effect from the date of their posting on the Site.

10.3 If you have any questions regarding this Privacy Policy, please contact the Company at the address below.

11. CONTACT INFORMATION

Energy Green UAB

Naujoji Riovonių g. 21 - 4, Vilnius, Lithuania, LT-03153

info@energygreen.lt