PRIVACY POLICY

1. General Provisions

1.1. UAB "DOLI OP" (hereinafter referred to as the "Company") respects the right to privacy of all its service buyers, potential clients (those who have tested the services but have not become clients), and all visitors to the verskis.lt website (hereinafter referred to as the "Website"). The Company also ensures the protection of the rights of clients as data subjects.
1.2. This privacy policy regulates the fundamental principles and procedures for collecting, processing, and storing personal data of the Company's clients.
1.3. By using the Website, as well as ordering or using the services offered by the Company in any form and providing your personal data to the Company, you agree to these Privacy Policy terms. Clients are considered familiar with the Privacy Policy when registering on the Website by ticking the box indicating agreement with the Company's privacy policy. The privacy policy can be reviewed at any time on the Website by clicking on the relevant link.
1.4. When processing the client's personal data, we comply with all relevant laws, including those of the EU, ADTAĮ, LR, and other applicable data protection laws. The Company has been assigned the Personal Data Protection registration code 303486375, registered on December 9, 2014.

2. What terms are used?

2.1. Personal data - any information about a natural person whose identity is established or can be determined (data subject); a natural person whose identity can be directly or indirectly identified, primarily by an identifier such as name and surname, personal identification number, location data, and internet identifiers or by one or more characteristics of the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.
2.2. Data subject - a natural person, the Company's client (including Website visitors), whose personal data is collected by the Company.
2.3. Data subject's consent - any freely given, specific, and unambiguous expression of the data subject's will, made by a statement or by clear affirmative action, by which they agree to the processing of their personal data.
2.4. Data processing - any operation or sequence of operations performed with personal data or sets of personal data, whether by automated means or not, such as collection, recording, organization, structuring, storage, adaptation, alteration, retrieval, consultation, use, disclosure by transmission, dissemination, or otherwise making available, alignment or combination, restriction, erasure, or destruction.
2.5. Data processor - a natural or legal person, authority, agency, or other body that processes personal data on behalf of the data controller.
2.6. Data controller - UAB "DOLI OP," a company established and operating under the laws of the Republic of Lithuania, code 303486375, registered address B. Dvariono g. 15-20, Republic of Lithuania, the data of which are collected and stored in the Register of Legal Entities.
2.7. Direct marketing - an activity aimed at contacting the client by mail, telephone, or other direct means to offer goods or services and/or solicit their opinions on the proposed goods or services, including automated means.

3. What cookies do we use and how?

3.1. What is a cookie - small files sent to the user's browser, which are first placed on users' computers or other devices when they first visit the website. Later, cookies on the website are used to ensure the best possible use of the site for the user, identifying the user's computer and facilitating access to the site or information on it, thus making the site content as convenient as possible for the user.
3.2. These cookies are used on the Website, as well as in related Company systems, to properly and qualitatively serve the client.
3.3. To provide you with a more convenient and efficient browsing experience on the Website and offer you useful suggestions, the Website uses the following Cookies: PHPSESSID (session information), "CookieInfoScript" (consent to the use of cookies), _gat, _ga, _git, __utma, __utmb, __utmc, __utmt, __utmz (Google Analytics cookies), datr, Fr, sb, locale, reg_ext_ref, reg_fb_gate, reg_fb_ref (Facebook Pixel cookies), and "GPS," "PREF," "VISITOR_INFO1_LIVE," "YSC" (YouTube video content streaming information).
3.4. The client has the right to refuse cookies - the client can delete or block some or all of the cookies stored on their computers or other devices at any time by changing their browser settings. More information about deleting or blocking cookies can be found on the website of the browser manufacturer. Please note that after taking these actions, some website features may partially or completely stop working and may be unavailable. The client understands that third-party plugins (partners, statistics collection systems, communication systems, etc.) may be used on the Website, which also use cookies for their proper functionality. We emphasize that the website administrator does not control, cannot be, and is not responsible for the cookies, content, and privacy protection of third-party websites, which we recommend reviewing individually in each case.

4. What personal data do we collect?

4.1. The Company collects and later processes the client's personal data, which you provide yourself when using and ordering services on the Website or ordering services in other ways: name, surname, personal code (not mandatory), address, email address, phone number, and other data related to the specifics of ordering services. Please note that you provide the data additionally at your initiative when registering and/or ordering, managing the services provided by the Company.
4.2. The client's specified personal data is stored during the period of cooperation between the Company and the client (during the provision of services) and for 10 (ten) years after the end of this period. Data may be stored for a shorter period if there is no legal basis for it.

5. For what purposes and how do we process personal data?

5.1. The data held by the Company about the client will be processed in a lawful, fair, and transparent manner (principle of legality, fairness, and transparency).
5.2. The Company processes the above-mentioned personal data of the client for the processing and administration of service purchase/orders, for the processing of related accounting documents, for communication with you regarding the performance of contractual obligations, and for direct marketing purposes (with the prior consent of the data subjects).
5.3. We ensure that the client's personal data is and will be processed in a lawful, fair, and transparent manner, collected for specific, clearly defined, and legitimate purposes and not further processed in a way incompatible with those purposes, adequate, relevant, and limited to what is necessary to achieve the purposes for which they are processed, accurate, and, if necessary, up-to-date, processed in such a way as to ensure adequate security of personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage (principle of integrity and confidentiality).

6. What data subject rights do you have? 

6.1. The customer has the right to withdraw their consent at any time. The withdrawal of consent does not affect the legality of data processing based on consent before its withdrawal. The data subject is informed about this before giving consent. Withdrawing consent is as easy as giving it.
6.2. You have data subject rights, which we will implement upon receiving a request from the customer by registered mail at doliop.informacija@gmail.com, and after the customer properly verifies their identity. The customer has the right to be informed about their personal data and how it is processed, to request the correction of inaccurate personal data related to the customer, as well as to demand the completion of incomplete customer personal data.
6.3. The customer has the right to demand that the Company delete personal data related to the customer if it is no longer needed for the purposes for which it was collected or otherwise processed; if the customer withdraws consent and there is no other legal basis for processing the customer's personal data; if personal data was processed unlawfully; for other reasons specified in the Regulation; to request that the Company restrict the processing of the customer's personal data; to receive the customer's personal data provided to the Company in a structured, commonly used, and machine-readable format; the customer also has the right to request the Company to transfer personal data to another data controller; to object to the processing of personal data related to the customer (e.g., for direct marketing or otherwise).

7. How We Process Personal Data for Direct Marketing?

7.1. The Company will contact the customer only with the customer's prior consent and in accordance with the GDPR, ADTAĮ, and the provisions of the Regulation. We will send newsletters by email or phone and/or inquire about the quality of existing services and other related matters.
7.2. We process the following customer personal data for direct marketing purposes: name, email address, phone number.
7.3. Customer personal data for direct marketing purposes is stored until the customer submits a refusal to receive direct marketing messages (such refusal link is provided in the bottom part of each sent email).

8. To Whom We Provide Personal Data?

8.1. Access to customer personal data by Company employees is granted only when necessary to perform their duties and only to employees who have committed to confidentiality.
8.2. The Company may provide customer personal data to data processors who provide services to the Company and process customer personal data on behalf of the Company and for the benefit of the Company or the customer, to law enforcement institutions when there is a legal basis, and to other third parties with the customer's consent. Such data processors have the right to process customer personal data only according to the Company's instructions.
8.3. Customer personal data may also be provided in response to official requests from state institutions and courts, but only after ensuring the legitimacy of these requests.