AKROPOLIS GROUP, UAB (company code 302533135, address Ozo g. 25) (hereinafter referred to as the Company or we) respects your privacy and intends to ensure the safety of your personal data.
1. What is the controller?
Personal data that you provide on the website www.akropolis.lt (hereinafter referred to as the Website) or the data that are automatically collected on the website, or other data that you provide by other means are controlled by the Company.
3. What personal data do we process and why?
3.1. Technical data of the website. Cookies and other.
When the Visitor visits the Website, the Company collects and processes certain technical personal data by means of cookies and without any additional actions of the Visitor.
When you visit our website, the Company may process your IP address, network and location data when they are provided by the Visitor. The data are collected by cookies and other similar technologies on the basis of the Visitor's consent.
Cookies are small textual files (occupying up to several KB) which your browser places on your computer, tablet or other smart device when you visit this website. By means of cookies, we intend to ensure effective and safe operation of the website and analyse your habits in order to ensure that the website's operation is convenient, effective and meets your needs and expectations.
Please note that the acceptance of required and analytical cookies is the condition for the use of our website. If you do not accept these cookies, we may not be sure how the website will operate and whether it will operate at all.
Certain technical data of your visit to the website (IP address, cookies, technical information of your browser, other information related to your browser and your browsing on the website) may be transferred or made available to the entities operating in the European Economic Area (hereinafter referred to as EEA) and outside it for the purposes of website browsing statistics, analysis and related purposes (e.g. when we use Google Analytics, the company operating in the United States of America is such an entity). Remember that less protection may apply to personal data in non-EEA states compared to EEA member states, but we shall carefully evaluate the terms and conditions under which such data will be further processed and stored after they are transferred to the above entities.
3.2. Direct marketing
Only with your request, i.e. if you actively give your consent, we send you newsletters and process this data:
Your e-mail address, relevant city (Vilnius, Klaipėda, Šiauliai), your interaction with newsletters (as described below).
Your personal data for the purpose of direct marketing can be processed in the following ways:
- you can receive by e-mail a newsletter with our offers, discounts and news;
- you can receive by e-mail invitations to events, offers and similar information about AKROPOLIS shopping malls, discounts and sales, new shops, current contests and games, changes to the opening hours, as well as other relevant information regarding the shopping malls;
- we can invite you to an event that you are interested in or provide other relevant information by telephone.
Also, we use this data for carrying out statistical or another analysis in order to regularly improve the content of our newsletter and the services that the Company provide.
Please note that you you can unsubscribe our newsletters and information at any time. You can do it by clicking a link at the bottom of newsletters that we send.
You can also unsubscribe information about events or any other information that we send by sending an e-mail to this address firstname.lastname@example.org
By registering to receive the direct marketing offers, you confirm that your data are accurate and correct, and you are 16 years old and over.
3.3. Your queries and complaints
We also process your data (e.g. your name, surname, e-mail address, the subject and the text of your query, other data and information that we receive) when you send your queries and questions to our business e-mail or when you provide any information on our website or social media.
We request to follow the minimum personal data protection requirements: not specify personal data (e.g. name, surname, address, phone number, e-mail, personal number, date of birth, bank account number, vehicle registration plate number, real property data, data concerning health, other special category data or sensitive personal data, etc.) in the title of an e-mail or a query or the titles of the files enclosed thereto. Do not provide your personal number, data concerning health, other special category data or sensitive personal data in the text of an e-mail, query or a request, and specify other personal data to the extent they are required for the purposes for which the message is submitted.
The Company process your personal data in order to administer queries and complaints, to ensure the quality of its services, to protect and defend its rights and legal interests. Provide your personal data on the grounds of consent expressed by your actions – i.e. by contacting us.
3.4. Contests and games organized by the Company
In our specific requirements we provide information about the data which are required for participating in a specific contest or game. You choose whether you want to participate in our contests or games, therefore, whether to provide the required data or not.
We usually collect this data:
Name, surname, e-mail address, phone number, date of birth, content created by the participant or any other personal data that you provide and which are required in order to participate in a contest or game.
If there is a money prize, we can ask you to provide your personal number and bank account number. In these cases a personal number might be required in order to pay applicable taxes, if the contest organizer is liable to pay respective taxes.
The Company remains the right to keep the content submitted for the contest if, according to the rules of a contest or game, it should have been submitted in any tangible form.
This data are necessary for executing a contest or a game.
In order to ensure transparency, the winner is usually announced publicly. On the website, on Facebook and/or Instagram account (depending on a type of a contest). You receive the agreement of the public announcement of the winner when you confirm your participation in the contest or game (this information is usually provided in the rules of the game).
3.5. PROCESSING OF PERSONAL DATA FOR STAFF SELECTION PURPOSES
You can provide your personal data on the Company’s website; if you want to join the team of the Company, contact the organizers at the e-mail address given in the invitation.
Please note that we shall process your personal data for staff selection purposes on the basis of your consent expressed by submitting this data and shall store it until the end of a specific selection.
If, after considering your candidacy, we select another candidate who better meets the requirements, the Company shall ask for your separate consent to store and use your personal data for future staff selection purposes and contact you before using your data.
If you give such consent, the personal data mentioned above shall be stored for 2 years from the date of the submission of the consent.
You have the right to withdraw the consent at any time without affecting the legality of the data processing based on consent until the withdrawal of the consent. If you exercise this right, we shall immediately destroy your personal data.
Please note that when you send your CV or other personal data to our business e-mail when the selection has not been announced, we have the right to store and use such data for the purposes of other selections for up to 1 year.
If you find a job offer which is of interest to you on the Company's or job search websites, you are welcome to apply for the position directly by the e-mail specified in the job offer.
4. HOW LONG DO WE STORE YOUR PERSONAL DATA?
When subscribing to receive direct marketing notifications (newsletters), your personal data shall be stored until the subscription to receive directs marketing notifications is valid, but no longer than for 2 years from your latest interaction with our newsletter.
Your personal data submitted by other ways shall be stored for no longer than 2 years from the last submission.
Your personal data can be stored for a longer period only when:
- there are reasonable suspicions regarding illegal activity which is the subject of an investigation.
- your data are required for the proper settlement of a dispute or complaint.
- If we received complaints regarding the Visitor or if we noticed any breaches made by the respective Visitor, or
- on other specific grounds laid down in legal acts.
5. Data transfer to third parties
The Company shall not transfer your personal data to any third parties without your prior consent, except for the following cases.
In cases prescribed by legal acts, your personal data can be transferred to competent government institutions: courts, law enforcement institutions, etc.
The Company can disclose your personal data to these third parties: the Company’s service providers in the European Union or within the member states of the European Economic Area (for example, server lessors, a newsletters company, an advertising agency, website administration and other IT maintenance companies and similar service providers). All these companies are data processors and they must comply with confidentiality, as well as to ensure the proper protection of personal data.
Certain technical data of your visit to the website listed above may be transferred or made available to the entities operating in the European Economic Area and outside it for the purposes of website browsing statistics, analysis and related purposes (e.g. when we use Google Analytics, the company operating in the United States of America is such an entity). Less protection may apply to personal data in non-EEA states compared to EEA member states, but the Company shall carefully evaluate the terms and conditions under which such data will be further processed and stored after they are transferred to the above entities.
6. YOUR RIGHTS
Your rights are as follows:
- the right of the access to your processed personal data;
- the right to request that we correct any inaccurate personal data;
- the right to request the transfer of all or part of your personal data to you or another data collector when such transfer is technically possible (the right to data portability); the right to request that we transfer your personal data to another data collector or provide directly in the form convenient to you (concerns those personal data which were provided by the subject of the data and which are processed on the grounds of agreement or consent by automated means).
- the right to request the deletion of your personal data, when there is the legal basis, for example, when the data are no longer required for the purposes they were collected or when the data are processed unlawfully;
- the right to request the restriction of processing personal data when there is the legal basis;
- the right to disagree to the processing of your personal data where they are processed on the grounds of legitimate interest and there is the legal basis;
- to withdraw your consent to the processing of your personal data at any time without affecting the legality of the data processing based on consent until withdrawal of the consent;
If you believe that your rights were violated, you have the right to submit a complaint to the State Data Protection Inspectorate, A. Juozapavičiaus g. 6, LT-09310 Vilnius, e-mail email@example.com. We believe that before submitting an official complaint, it would be appropriate to contact us by using the contact details specified below and try to find the resolution which would satisfy both Parties.
7. DATA SAFETY
The Company implements the following organizational and technical measures and protects your personal data against loss, unauthorized use, access, disclosure or modification.
The Company recommends the Visitors to follow the minimum personal data protection requirements listed below:
- not to visit suspicious websites, not to open unknown links;
- to update your software and install anti-virus software.
8. FINAL PROVISIONS
If any provision of the Policy is declared invalid or unenforceable, it shall not affect the legality and validity of the remaining provisions.