Privacy policy
We recognize the particular importance of protecting your personal data; therefore, we collect and process only the data that is necessary for carrying out our activities. We process personal data lawfully, transparently and fairly, for predetermined purposes and only to the extent necessary to achieve those purposes. When processing personal data, we aim to ensure that it is accurate, secure, confidential, properly stored and protected.
By applying organisational and technical measures, we ensure appropriate security of personal data, including protection against processing without authorisation, unlawful processing, and accidental loss, destruction or damage.
When processing your personal data, we comply with Regulation (EU) 2016/679 adopted on 27 April 2016 (the General Data Protection Regulation – GDPR), the Law on Legal Protection of Personal Data of the Republic of Lithuania, as well as other legal acts and/or requirements for personal data processing established by supervisory authorities.
1. WHAT IS THIS DOCUMENT?
1.1. By reading this Privacy Policy (hereinafter – the Privacy Policy) you will learn how and for what purposes we process your personal data, where we obtain it from, to whom we provide it and how we protect it, as well as what rights you have as a data subject.
1.2. This Privacy Policy sets out the privacy rules for the use of our website available at https://www.instona.lt/ (hereinafter – the Website) and our accounts on the social networks Facebook https://www.facebook.com/instona and Instagram https://www.instagram.com/instona_uab/ (hereinafter – social network accounts). Please read this Privacy Policy carefully, as it applies each time you visit our Website. If you do not agree with our Privacy Policy, you should not continue using our Website.
1.3. The term “personal data” used in this Privacy Policy means any information by which you can be identified – information that directly or indirectly determines your identity. Personal data includes, for example, surname, name, email address, telephone number, location data, internet identifier, characteristics specific to you and other personal data as defined by the GDPR.
2. WHO ARE WE?
2.1. We are UAB Instona, legal entity code 300948613, VAT payer code LT100003334712, registered office address – Taikos g. 64, Aukštelkų k. LT–82485, Radviliškis, engaged in wholesale and retail trade of stone products, hereinafter referred to as the Company or we; email info@instona.lt, contact phone number +370 699 12845, and the controller of your personal data submitted on the Website.
3. WHAT PRINCIPLES DO WE FOLLOW?
3.1. When processing your personal data, we will:
a) comply with the requirements of applicable legal acts, including the GDPR;
b) process your personal data lawfully, fairly and transparently;
c) collect your personal data for specified, clearly defined and legitimate purposes and not process it further in a manner incompatible with those purposes, except to the extent permitted by law;
d) take all reasonable measures to ensure that personal data which is inaccurate or incomplete, considering the purposes of processing, is rectified, supplemented, suspended from processing or destroyed without delay;
e) keep data in a form that permits identification for no longer than is necessary for the purposes for which the personal data is processed;
f) not provide personal data to third parties and not disclose it, except in the cases specified in the Privacy Policy or applicable legal acts;
g) ensure that your personal data is processed in a way that guarantees appropriate security of personal data by applying appropriate technical and organisational measures, including protection against processing without authorisation or unlawful processing and against accidental loss, destruction or damage.
4. HOW DO WE COLLECT YOUR PERSONAL DATA?
4.1. We process your personal data obtained in the following ways:
a) When you provide it to us. You provide us with your personal data and other information by using the Website or communicating with our team, submitting inquiries and/or filing complaints, contacting us by phone, in writing or by email.
b) When you use our Website. When you use our Website, certain information (e.g., internet address (IP) or similar) is collected automatically.
c) When we obtain your personal data from other persons in accordance with legal acts and/or as provided for in this Privacy Policy.
4.2. In cases where we receive data not from the data subjects themselves, we require that the data subjects be informed of the processing of the relevant personal data (the purpose and other conditions and circumstances detailed in this Privacy Policy).
4.3. We may combine the personal data received from you with data we collect ourselves from other public and/or available sources (for example, we may combine the personal data you provide with data obtained using Website cookies or with data lawfully obtained from third parties, etc.).
4.4. You may at any time request the rectification of inaccurate personal data and exercise other rights that you have as a data subject, as specified in this Privacy Policy and applicable legal acts.
5. FOR WHAT PURPOSES AND HOW DO WE PROCESS YOUR PERSONAL DATA?
5.1. We will process your personal data for the following purposes:
a) To improve the Website, to offer you better and more personalised services. We use your personal data – including personal data that we obtain when you use our Website – in order to improve and develop the Website and to offer better and more tailored services to you. For this purpose, we obtain data from you yourself (through cookies when you use the Website) and/or from third parties.
More detailed information on the categories of personal data processed for this purpose and the specifics of processing, as well as on how we use cookies and similar technologies, is provided in Section 6 of this Privacy Policy.
b) For the purpose of our activity quality control (retention of complaints and/or your inquiries and communications). When you contact us (or when we, having received your inquiry, contact you), we retain the information of our correspondence by email or in writing. We collect such information to ensure an appropriate quality of service and to control the provision of our services.
For this purpose, we process the following personal data of yours: name, surname, email address, content of the inquiry, date and time of contacting us, communication information.
For this purpose, we obtain your personal data: from you yourself; while handling an inquiry or analysing a complaint we may create personal data ourselves (e.g., after receiving a complaint, we contact Company employees regarding the factual circumstances of the complaint and record them, etc.); from third parties.
For this purpose, we provide or transfer your data to: persons providing Website administration services, IT services, compliance and legal services.
For this purpose, we retain your data for 90 calendar days from the date they are recorded, except in cases where there is reason to believe that a crime or other unlawful acts are being recorded or an internal investigation has been started – in such case until the end of the relevant investigation and/or case examination.
c) For direct marketing purposes. With your consent and in order to provide you with newsletters, including offers and information about our services, the services of persons related to us and of partners, events or other information, and to improve our services, we process your personal data.
For this purpose, we process the following personal data: name, surname, email address, phone number, social network profile nickname, photos containing your image.
For this purpose, we obtain your personal data from you yourself.
For this purpose, we provide or transfer your data to: persons providing newsletter services; companies providing Website administration services; we may also publish, with your consent, photos that you have uploaded on the Website on our social network accounts.
For this purpose, we retain your personal data for no longer than 2 years from the date you give your consent.
For more detailed information about the processing of personal data for direct marketing purposes, please read Section 7 of this Privacy Policy.
d) For the purpose of concluding and performing contracts. It is our obligation to fulfil your instructions (orders) given to us, as well as to perform other transactions. Therefore, in order for you to be able to establish and maintain legal relations with us and for us to process, administer and fulfil your instructions, issue and receive accounting documents and perform them, we must process your personal data. The data you provide is processed for the purpose of accepting and executing an order; contact details are used to contact you if any questions arise, in order to resolve issues related to the provision of our services or for other purposes related to the conclusion and performance of contracts.
For this purpose, we process the following personal data of yours: name, surname, telephone number, email address, residential address.
For this purpose, we obtain your personal data from: you; legal entities whom you represent or are a contact person for.
For this purpose, we provide or transfer your personal data to: companies providing audit, legal and/or other consulting and/or accounting services; logistics companies that help us organise delivery of goods to you.
For this purpose, we retain your personal data during the term of the contract and for 1 year after its end. This period may be extended if a (court) dispute is initiated – in such case, personal data is stored until the day the mutual agreement is reached and/or the final decision enters into force. If a contract is not concluded, we retain your personal data for no longer than 90 calendar days from the moment such a decision is made.
e) For other purposes when we are required to process your personal data by legal acts or when there is a legitimate interest.
5.2. For the personal data processing purposes detailed in this Privacy Policy, we do not in any case ask you to provide or disclose, and we do not process, your special categories of personal data revealing your racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union membership, as well as health data, genetic data, biometric data (for the purpose of uniquely identifying you) and information about your sexual life.
5.3. Please do not provide excessive personal data that is not necessary to achieve the specified purposes.
5.4. We organise our work procedures so as to ensure secure data processing.
5.5. Access to personal data of data subjects is granted only to those Company employees who need it in order to perform their work functions.
6. WHEN DO WE USE COOKIES?
6.1. We collect information about you using cookies and similar technologies. Cookies are small files that are temporarily stored on the hard drive of your device and allow you to be recognised during subsequent visits to the Website, store your browsing history and preferences, tailor content, speed up searches, create a comfortable and user‑friendly environment, and present it more efficiently and reliably. Cookies are a common practice on websites that makes the use of a website easier.
6.2. Through cookies on the Website we may collect the information specified in clause 5.1(a) of this Privacy Policy.
6.3. We use the information obtained through cookies:
a) to ensure the functionality of the Website;
b) to be able to improve and develop the Website so that it better meets your needs;
c) for service development and analysis of the use of the Website;
d) for targeted marketing solutions.
6.4. Without violating legal acts, we may combine information obtained using cookies with information obtained about a person by other means (e.g., information about the use of the Website with other personal data you provided or obtained from other sources).
6.5. Please note that the Website may use the following types of cookies, for example:
a) necessary (technical) cookies – cookies that are essential for the operation of websites. These cookies cannot be disabled;
b) functional cookies – cookies which, although not necessary for the operation of websites, significantly improve their performance, quality and visitor experience. These cookies record information about your choices and allow the use of the Website to be tailored to your needs;
c) analytical (statistical) cookies – cookies used to prepare statistical analysis of website visitors’ navigation methods; the data collected by these cookies is used anonymously;
d) targeted or advertising cookies – cookies used to display offers or other information that may be of interest to you.
6.6. Information about the cookies used on the Website, their purposes, validity and data used:
|
NAME |
PURPOSE OF USE |
Retention period |
Used? |
|
facebook.com, fr |
Facebook cookies used to identify you as a user, display advertising and personalise the Website’s interaction with the Facebook social network. |
1 year |
Yes |
|
_ga, _gat, _gid |
Cookie intended for collecting statistics about user behaviour. (www.policies.google.com/privacy) |
2 years |
Yes |
|
google.com, 1P_JAR, ANID, NID |
Cookie intended for collecting statistics about user behaviour. (www.policies.google.com/privacy) |
1 year |
Yes |
|
google.com, google.lt, CONSENT |
Cookie intended for collecting statistics about user behaviour. (www.policies.google.com/privacy) |
1 year |
Yes |
|
google.lt, NID |
Cookie intended for collecting statistics about user behaviour. (www.policies.google.com/privacy) |
1 year |
Yes |
|
PHPSESSID |
Unique session ID number. |
until end of session |
No |
|
currency |
Currency setting. |
two days from the start of the session |
No |
|
language |
Language setting. |
two days from the start of the session |
No |
|
_fbp |
Facebook cookies used to identify you as a user, display advertising and personalise the Website’s interaction with the Facebook social network. |
1 year |
Yes |
6.7. On our Website you can choose which cookies you agree to; however, please note that necessary (technical) cookies used on the Website are stored automatically and your consent is not required for them.
6.8. Third‑party cookies are used on our Website. We use the tools “Google Analytics” and “Google Search Console”, which use analytical cookies and collect information about the Website. The information collected is used to prepare reports on the pages visited by users, the time spent on them and other information related to visitor behaviour on the Website.
6.9. You can withdraw the permission you have given us to use cookies at any time. You can do this by changing your internet browser settings so that it does not accept cookies. How to do this depends on the operating system and internet browser you use. Detailed information about cookies, their use and options for refusal can be found at http://AllAboutCookies.org or http://google.com/privacy_ads.html.
6.10. In some cases, especially disabling technical or functional cookies, refusing cookies or deleting them may slow down internet browsing, limit the operation of certain functions of the Website, or block access to the Website.
7. DO WE USE YOUR PERSONAL DATA FOR DIRECT MARKETING AND WHAT ARE OUR NEWSLETTER SUBSCRIPTION RULES?
7.1. With your additional consent, we may use your personal data for direct marketing in order to provide you with offers and information about our services, as well as the services of persons related to us and partners, which in our opinion may be of interest to you.
7.2. For this purpose, we process the following personal data of yours: name, surname, email address, telephone number, social network profile nickname, your photos uploaded on the Website and/or on our social network accounts with your consent.
7.3. You can choose whether you allow us to use your personal data for direct marketing purposes. You can do this on the Website by entering your email address and clicking the subscription confirmation.
7.4. We may combine the information we hold about you with information held by third parties.
7.5. If you give consent to use your personal data for direct marketing purposes, we may use your personal data to analyse and improve the effectiveness of our websites, advertising and market research, and for other Company marketing and sales purposes. In such a case, we will use your data in anonymised form.
7.6. Even if you have given consent to process your personal data for direct marketing purposes, you can easily withdraw this consent at any time, for all or part of the personal data processing activities. To do so, you can:
a) notify us of your refusal in the manner indicated in the messages and/or offers received electronically (e.g., by clicking the link “If you no longer wish to receive news, click here”, or similar);
b) send us a request by email to info@instona.lt. Your request must clearly state your name and surname and other registration details (if any). If you express a wish to withdraw your consent in this way, we may ask you to provide identity documents.
7.7. If you withdraw your consent, we will endeavour to discontinue the processing of your personal data for direct marketing purposes as soon as possible.
7.8. Withdrawal of consent does not automatically oblige us to destroy your personal data or to provide you with information about the personal data we process; therefore, if you wish us to perform these actions as well, you must indicate such a request separately.
8. TO WHOM DO WE PROVIDE YOUR PERSONAL DATA?
8.1. We guarantee that your personal data will not be provided or otherwise transferred to third parties without a legitimate basis, nor used for purposes other than those for which the relevant personal data was collected. We will not transfer your personal data in any other way than in accordance with this Privacy Policy and the procedure established by legal acts. However, we reserve the right to provide information about you if we are obliged to do so by law or if it is requested by lawfully operating authorities or criminal prosecution authorities.
8.2. We may transfer your personal data to companies that are our partners and that help us carry out our activities. We require such entities to process your data only in accordance with our instructions and in compliance with applicable legal acts ensuring the protection of your data. We enter into contracts with these persons obliging them to strictly comply with personal data protection requirements.
8.3. The possibility of the above‑mentioned service providers to use your data is limited – they cannot use this data for purposes other than providing services to us.
8.4. A non‑exhaustive list of persons and their categories to whom we transfer your personal data is provided in clause 5.1 of this Privacy Policy for each purpose of using personal data.
9. HOW LONG DO WE STORE YOUR PERSONAL DATA?
9.1. We store your personal data no longer than required by the purposes of data processing or than prescribed by legal acts, if a longer data retention period is established therein.
9.2. We aim not to store outdated, irrelevant personal data; therefore, when it is updated (e.g., information is clarified or changed), only current information is stored. Historical information is stored if necessary in accordance with the procedure established by legal acts or to carry out our activities. When determining data retention periods, we rely on the Order of the Chief Archivist of Lithuania of 9 March 2011 “On the Approval of the General Document Retention Schedule”, No. V‑100.
9.3. The retention periods for your personal data are specified for each purpose of using personal data in clause 5.1 of the Privacy Policy.
10. EXTERNAL WEBSITES
10.1. The Website may contain links to external websites – our business partners’ websites or websites where we have accounts and where our services are advertised. When following such links to any of the websites, please note that these websites and the services accessible through them have their own separate privacy policies and we do not accept responsibility or liability for those policies or for the personal data collected on such websites or when providing services, such as contact or location data. We recommend reviewing these policies before providing personal data on these websites or using any services.
11. HOW DO WE PROTECT YOUR PERSONAL DATA?
11.1. Personal data is protected against loss, unauthorised use and alteration. The internet connection is encrypted and the website page is served over the https:// protocol.
11.2. Protection of computer equipment against malicious software is ensured (e.g., installation and updating of antivirus software).
11.3. The data we collect from you will be within the EU territory but may be transferred or stored outside the EU as well. When transferring your data outside the EU, we will take all necessary steps to ensure that your data is processed securely and in accordance with this Privacy Policy.
11.4. Unfortunately, the transmission of information over the internet is not completely secure. Although we make every effort to protect your personal data, we cannot guarantee the security of data when you transmit data to the Website – you assume the risks associated with the transfer of data to the Website. Once we receive your data, we will apply procedures and security measures that meet legal requirements to protect your data from unauthorised access, unlawful processing or disclosure, and accidental loss, deletion or destruction.
11.5. If the relevant circumstances arise and we learn of a breach of the security of your personal data that may pose a significant risk to your rights or freedoms, we will inform you without delay as soon as we become aware of it and identify what information was accessed.
11. WHAT RIGHTS DO YOU HAVE?
11.1. When processing personal data, we ensure your rights under the GDPR and the Law on Legal Protection of Personal Data of the Republic of Lithuania. As a data subject, you have the following rights:
a) to know (be informed) about the processing of your personal data;
b) to access your personal data that we process;
c) to require rectification or supplementation, to correct inaccurate or incomplete personal data about you;
d) to require the destruction of personal data when it is no longer needed for the purposes for which it was collected;
e) to require the destruction of personal data if it is processed unlawfully or when you withdraw your consent to the processing of personal data or do not give such consent and it is necessary;
f) to object to the processing of personal data or to withdraw previously given consent;
g) to require the suspension (except for storage) of personal data processing actions if disputes are ongoing or there is a need to verify the lawfulness of data processing or the accuracy of data, as well as in cases where we no longer need your personal data but you do not want us to destroy it;
h) to request that, if technically possible, the personal data collected on the basis of your consent or for the purposes of performing a contract be provided in an easily readable format or to request that it be transferred to another data controller.
11.2. We will seek to guarantee the exercise of your rights as a data subject and create all conditions for these rights to be effectively exercised; however, we reserve the right not to comply with your requests where it is necessary to ensure:
a) the performance of legal obligations imposed on us;
b) national security or defence;
c) public order, prevention, investigation, detection or prosecution of criminal offences;
d) important economic or financial interests of the state;
e) prevention, investigation and detection of breaches of official or professional ethics;
f) the protection of your or other persons’ rights and freedoms.
11.3. You may submit requests related to the exercise of your rights to us in person, by post or by electronic means of communication. Upon receiving your request, we may ask you to provide documents proving your identity, as well as other additional information related to the request that we need.
11.4. Upon receiving your request, we will respond to you no later than within 30 calendar days from the date of receipt of your request and the date on which all documents necessary to provide a response are provided.
11.5. If we deem it necessary, we will suspend the processing of your data, except for storage, until your request is resolved. If you lawfully withdraw your consent given, we will immediately, but no later than within 30 calendar days, terminate the processing of your personal data, except in the cases specified in clause 11.2 of this Privacy Policy and in legal acts – i.e., when we are obliged to continue processing your data by applicable legal acts, legal obligations imposed on us, court decisions or binding instructions given to us by authorities.
11.6. If we refuse to comply with your request, we will clearly indicate the basis for such refusal.
11.7. If you disagree with our actions or with the response to your request, you may lodge a complaint against our actions and decisions with the competent state authority.
12. WHERE CAN YOU SUBMIT A COMPLAINT?
12.1. If you wish to submit a complaint regarding the data processing carried out by us, please submit it in writing, providing as much information as possible, using the contact details provided at the end of this Policy. We will cooperate with you and seek to resolve all issues without delay.
12.2. If you believe that, under the GDPR/other applicable legal acts regulating personal data protection, your rights have been violated, you may submit a complaint to our supervisory authority – the State Data Protection Inspectorate of the Republic of Lithuania. More information and contact details can be found on the Inspectorate’s website (https://vdai.lrv.lt/). However, we primarily aim to resolve all disputes promptly and amicably together with you.
13. HOW WILL THIS PRIVACY POLICY BE AMENDED?
13.1. All changes to our Privacy Policy will be published on the Website. In the case of material changes and/or need, we will notify you about them. The terms of the new Privacy Policy may also be presented on the Website and you may be required to read and agree to them in order to continue using the Website and/or our services.
14. HOW TO CONTACT US?
14.1. Please send all documents related to this Privacy Policy or contact us using the following contact details:
a) by post to Taikos g. 64, Aukštelkų k. LT–82485, Radviliškio r.;
b) by email to info@instona.lt;
c) by phone at +370 699 12845.
Date of publication of the Privacy Policy: 1 January 2025