Joint-stock company “RĖKYVA”

PRIVACY POLICY

1) What does this Privacy Policy mean?

In this privacy policy (hereinafter – privacy policy) We provide you with information about how the joint-stock company “Rękyva” (hereinafter – Firm), processes your personal data received by: the Company in the course of direct marketing; in the selection of candidates; in order to ensure the protection of confidential information and business continuity; ensuring the protection of property and persons; in order to fulfill contracts concluded between the Company and contractors – legal entities; processing personal data of employees’ relatives; When you visit the Company’s website or the Company’s social media network accounts. Below, all persons whose data is processed by the Company are referred to as – Data subjects.

2) About the company

The company means the joint-stock company “RĖKYVA”, legal entity code 144929986, registered office at Lingailių st. 27A, Šiauliai, Republic of Lithuania, data about the Company are collected and stored in the register of legal entities of the Republic of Lithuania. Contact e-mail personal data protection issues info@rekyva.eu

3) What is personal data?

Personal data is any information collected by the Company about the Data subject, which can be used to determine the personal identity of the Data subject and is stored electronically or otherwise.

Personal data includes any information, including the name, surname, address of the Data subject, which the Company collects about the Data subjects for the purposes specified in this Privacy Policy or in a separate consent or agreement of the Data subject with the Company.

4) Direct marketing

We will send offers for the sale of the Company’s goods or the provision of services to persons over 14 years of age who have provided their contact details and have expressed a desire to receive information about the goods and/or services offered by the Company via electronic means (e-mail, telephone, SMS messages) , newsletters and other advertising materials, we will inform you about the Company’s news.

For the purpose of direct marketing, the Company will process your personal data: telephone number, e-mail address (mandatory data, without which we will not be able to send you direct marketing communications). Your data will be processed for direct marketing purposes for 3 years from the date of consent.

If you have purchased goods or services distributed by the Company and have not objected to receiving the Company’s direct marketing communications (e.g. by ticking the box of disagreement in the direct marketing consent form), we will send you communications by e-mail based on our legitimate interest regarding goods or services that are similar to the services provided to you. or selling goods. In this case, your data will be processed for the purpose of direct marketing for 1 year after the purchase of the last product or service or the end of the long-term contract.

You have the right to object or opt out of receiving direct marketing communications at any time by contacting us at the email address specified in section 2.

5) Selection of candidates

We collect and process your personal data (name, surname, desired position, work experience (workplace, position, person who can recommend), education, other data specified in the CV, application form or motivation letter and/or other information provided by you) during participation in the selection of work for the purpose of carrying out the selection on the basis of your consent, which you express to the Company by sending your resume and/or motivation letter. We will also process your medical certificate in order to assess your suitability for the position (GDPR Article 6 d. 1 d. b p., Article 9 d. b p. d. b) If you do not submit your resume and/or motivation letter, we will not be able to assess your suitability for the proposed position.

With your consent, we will contact your current employer, and we will contact your former employer on the basis of our legitimate interest (to select the right candidate). You can at any time withdraw your consent or, accordingly, not agree to us contacting your former employer, by notifying the e-mail specified 2.

In the event that you do not express your separate consent to process your personal data, after the end of this job selection, we undertake to delete and/or destroy your personal data within 3 days after signing the contract with the selected candidate or taking the decision to end the selection, except when separate consent is given regarding the candidate’s person for the period specified in the data storage consent.

Based on your consent, we will store the data for the period specified in the consent.

On the basis of our legitimate interest, we will process the data about the person indicated by the candidate (name, surname, e-mail, telephone, information provided by the person) – former or current employer or the person providing the recommendation, the information provided by him – for the purpose of selecting the candidate. In this case, our legitimate interest is to select the right candidate for the position we are looking for. We will destroy this data at the end of the selection process.

6) Protection of the company’s confidential information and business continuity

In order to ensure its legitimate interest in ensuring the protection of the Company’s confidential information and the continuity of the Company’s activities, the Company may review the correspondence of its employees with contractors. In order to achieve these goals, the Company processes the following personal data of its employees and persons who send or receive employee letters: e-mail address, content of information contained in electronic work tools. Such data is stored for 4 years.

7) Protection of property and persons

The Company conducts video surveillance in order to protect the safety of customers, visitors, employees and other persons who fall into the surveillance field, as well as the property of these persons and the Company, to collect evidence of violations, and to defend its rights. Video surveillance is carried out on the basis of the legitimate interest of these persons and the Company. When conducting video surveillance, the Company processes the following personal data: image, movement trajectory, personal belongings. Data is stored for 9 days.

8) Execution of company contracts with contracting legal entities

In order to ensure its legitimate interest in ensuring the execution of the Company’s contracts concluded with contracting legal entities, the Company processes the personal data of the employees of these persons, i.e. name, surname, e-mail. phone number, content of correspondence. Communication data is stored for 4 years, and information related to the performance of the contract or contained in it for 10 years after the end of the contract.

9) Data of employees’ relatives

Contacting employees’ relatives in the event of an emergency The company processes the following personal data of employees’ relatives on the basis of its legitimate interest in ensuring that employees’ relatives are informed about the accident: name, contact with the employee, phone number. These data are processed only as long as the employee works for the company.

10) Management of shareholders’ data

In order to fulfill the legal obligation, we process the names, surnames, date of birth or personal identification number, number of shares held, address, contacts, data provided by the shareholder for the purpose of the general meeting of shareholders (proposals, comments, etc.) for the purpose of implementation. We receive this data either from shareholders or from securities account managers. Data is stored for 1 year after you are no longer a shareholder of the Company.

11) contact us

There are several ways you can contact the Company: by phone, 2. We receive, review and respond to all messages ourselves. If you contact us, we can process the data you provide us, i.e. name, surname, e-mail, phone number, date and text of correspondence.

Such data will be processed in order to answer your questions and examine your offers. If you do not provide your contact details, it will not be possible to contact you.

Correspondence is stored for 1 year after receiving the message, with the exception of information for which other terms are set in the Privacy Policy or legal acts.

Any personal data you provide when communicating with us is used only for the above purposes and to view messages and administer and manage communication flows. We undertake not to use your personal data in any publications without your express consent in such a way that it is possible to determine your personal identity.

Please note that we may need to contact you by mail, e-mail or by phone. Please notify us of any changes to your personal data.

12) Website

Our website rekyva.eu uses cookies.

A cookie is a small file consisting of letters and numbers that we save on your browser or your computer’s hard drive with your consent. We use different cookies for different purposes. Cookies also help us distinguish you from other users of the website, thus ensuring a more pleasant experience of using the website and allowing us to improve the website.

Most browsers allow you to reject all cookies, and some browsers have the option to reject only third-party cookies. So you can take advantage of these opportunities. However, please note that blocking all cookies will have a negative impact on the use of the website, and without cookies you will not be able to use all the services provided on the website. More details are available at AllAboutCookies.org orwww.google.com/privacy_ads.html.

We may use the following types of cookies:

Absolutely necessary cookies.

These cookies are necessary for our website to function. The basis of the data processed by such cookies is the proper execution of the contract when you visit the website, and we ensure the quality and security of the visit. These can be cookies that, for example, allow you to log in and access protected areas of our website, use the shopping cart function or e-mail account services.

Analytical and/or performance cookies.

These cookies allow us to recognize and count website visitors and track how visitors move around our website while using it. This helps us to improve the performance of the website, for example to ensure that users can easily find what they are looking for. The basis for processing the data collected by these cookies is your consent.

Functional cookies.

These cookies are used to recognize you when you return to our website, so that we can adapt the presented content to your needs and remember relevant information for you. The basis for processing the data collected by these cookies is your consent.

Commercial cookies.

We use our own and third-party cookies to display personalized advertising on our and other websites. This is called “remarketing” which is based on your browsing actions, such as the products you search for, the products you view.

13) Social media tools

The information you provide to us through social media (including messages, use of the Like and Follow boxes, and other communications) is controlled by the social network operator.

Our website contains links to our social media accounts. We currently have the following accounts on Facebook and Instagram (the privacy notice is available at https://help.instagram.com/519522125107875).

We process the information provided in our accounts for the purpose of account administration on the basis of your consent.

We recommend that you read the privacy notices of third parties and contact the service providers directly if you have any questions about how they use your personal data.

14) Acquisition and Disclosure of Data

We receive your data from you, your devices, our employees and our contractual partners.

We may disclose information about you to our employees, intermediaries, service providers, such as debt administration or collection companies, marketing services, IT service providers or subcontractors, if reasonably necessary for the purposes described in this Privacy Policy.

In addition, we may disclose information about you:

• if we are required to do so by law;
• in order to defend your rights or interests (including providing your data to third parties in order to collect your debts to us);
• intending to sell a part of the Company’s activity or its assets, disclosing your personal data to a potential buyer of the activity or its part;
• after selling the Company’s activities or a substantial part of its assets to third parties.

Except for the cases provided in this Privacy Policy, we do not provide your personal data to any third parties.

The list of recipients or categories of recipients specified in the Privacy Policy may change, so if you wish to be informed about changes in the recipients of your personal data, please notify us of this via the e-mail specified in this Privacy Policy, indicating in the text of the letter “I would like to receive information about the change in the recipients of my personal data, name surname“.

15) Security of your personal data

Your personal data will be processed in accordance with the requirements of the General Data Protection Regulation, the Law on Legal Protection of Personal Data of the Republic of Lithuania and other legal acts. When processing your personal data, we implement organizational and technical measures that ensure the protection of personal data against accidental or illegal destruction, alteration, disclosure, as well as against any other illegal processing.

16) Your rights

In this section, we provide information about your rights related to the processing of your personal data by us, and the cases when you can use these rights. If you wish to receive more information about your rights or to exercise them, please contact us at the email specified in this Privacy Policy.

The company will provide you with information about the actions taken after receiving your request regarding the exercise of your rights without undue delay, but no later than within 1 (one) month after receiving the request. Considering the complexity of the request and the number of requests received, the above-mentioned deadline can be extended for another 2 (two) months. In this case, we will inform you about such extension of the deadline and the reasons for it within 1 (one) month after receiving the request. The company will refuse to enforce your rights only in the cases provided for by law.

16.1) The right to access your personal data

We aim for you to fully understand how we use your personal data and not experience any inconvenience as a result. You can contact us at any time and ask whether we process any of your personal data. If we store or use your personal data in any way, you have the right to access them. To do this, submit a written request to us at the email address specified in this Privacy Policy, confirm your identity; and observe the principles of fairness and reasonableness in making such a request.

16.2) Right to withdraw consent

If you have given us your explicit consent for the processing of your data, you can withdraw it at any time.

16.3) Additional rights

Below we provide information about additional rights you have, which you can exercise by following the procedure described below.

1. You have the right to ask us to correct any inaccuracies in the data we hold. In this case, we may ask you to confirm the corrected information.
2. You have the right to ask us to delete your personal data. This right is exercised in the cases provided for in Article 17 of the General Data Protection Regulation (EU) 2016/679.
3. You have the right to ask us to limit the processing of your personal data or not to process them:

• during the period necessary for us to verify the accuracy of your personal data when you submit claims regarding the accuracy of the data;
• when our collection, storage or use of your personal data is illegal, but you decide not to request data deletion;
• when we no longer need your personal data, but you need it to establish, fulfill or defend a legal claim;
• for the period required to determine whether we have an overriding legal basis to continue processing your personal data, if you have exercised your right to object to the processing of personal data.

1. You have the right to the transfer of data that is processed by automated means and that we received from you with your consent or for the purposes of concluding a contract. After you exercise this right, we will transfer a copy of the data you provided at your request.
2. You have the right under Art. 21 of the GDPR. in accordance with the established procedure, do not agree that we use your personal data. You have the right to object when your personal data is processed on the basis of legitimate interest (for each of the above-mentioned data processing purposes, the basis on which the data is processed is indicated) or for the purpose of direct marketing.

16.4) The right to request more information

We hope that you will understand that it is very difficult to discuss all possible ways of collecting and using personal data. We strive to provide as clear and detailed information as possible and undertake to update this Privacy Policy if the process of using personal data changes. However, if you have any questions about the use of your personal data, we will be happy to answer them or provide you with any additional information that we can disclose. If you have any specific questions or do not understand the information provided, please contact us.

17) Complaints

If you believe that your rights as a Data Subject have been and/or may be violated, please contact us immediately at the email specified in this Privacy Policy 2. We guarantee that only after receiving your complaint, we will contact you within a reasonable period of time and inform you about the progress of the investigation of the complaint, and later about the result.

If you are not satisfied with the results of the investigation, you can file a complaint with the supervisory authority – the State Data Protection Inspectorate (www.vdai.lrv.lt).

18) Responsibility

You are responsible for the confidentiality of the data you provide, as well as for ensuring that the data you provide to us is accurate, correct and complete. If the data provided by you changes, you must immediately inform us 2. In no case will we be liable for any damage caused to you due to the fact that you have provided incorrect or incomplete personal data or have not informed us when they have changed.

19) Changes to the Privacy Policy

We may update or change this Privacy Policy at any time. If you would like to receive an updated Privacy Policy, please notify us at the email in this Privacy Policy.

The name of the cookie	Purpose/purpose of data processing	Expiry date	Nature of the cookie (necessary, analytical, functional, commercial)	Data used
_ga	Exclude a user for analytical purposes	2 m	Analytical	User exclusion
_gat	Improve speed	1 min	Analytical	Used to improve speed, may also be used under another name – _dc_gtm_
_gid	Distinguish the user for analytical and functional purposes	24 hours	Analytical	User exclusion
_gat_gtag	For analyzing page traffic and increasing website efficiency	1 min	Analytical	These cookies allow us to count page visits and traffic sources to measure and improve the performance of our website