UAB [Du restoranai], legal entity No [305549963], domicile address [Verkių g. 29J, Vilnius] (the ‘Company’ or ‘We’) is committed to ensuring the security of your personal information and the protection of your rights as you use and browse the Company’s website [www.belgai.lt] (the ‘Website’).

This privacy policy defines the kind of information the Company collects and the method by which this information is collected and the sources the information is collected from, the actions that are performed with the information collected, and how the information is protected. By using our services and/or browsing our Website, you agree to the terms and conditions of this privacy policy.

All personal data are processed according to the requirements of General Data Protection Regulation (EU) 2016/679, the Law on the Legal Protection of Personal Data of the Republic of Lithuania, and other regulations.

Should you have any questions regarding this privacy policy or any other kind of requests relevant to the processing of your personal data, please contact us by e-mail at [info@belgai.lt].

1.COLLECTING AND USING PERSONAL DATA

1.1 Data Controller, Data Processors, and Scope of Privacy Policy

Personal data submitted on or collected by the Website, are controlled by the Company.

This privacy policy applies to any website operated and any service provided by the Company, regardless of the devices that the Website visitor (the ‘Visitor’) uses to access the Website.

This privacy policy does not apply to links to third-party websites contained on the Website; therefore, we recommend looking into the privacy policies or rules of said websites. This privacy policy applies to the Company’s clients who are private individuals as well as representatives of legal entities.

The Company may engage third persons to process Visitor personal data and for that purpose transfer personal information to other legal entities in line with the terms and conditions hereof.

1.2 Information Collected

The following Visitor data are collected and processed at the time of creating an account or connecting with a social network (Facebook, Google+) account and accepting orders:

• name and last name;
• contact details (e-mail address, phone number);
• address for home or office order deliveries;
• account login details;
• order (purchase) history;
• Visitor bank account information, when payment is made by bank transfer.

The Company collects and processes technical data of Website Visitors using cookies.

During each visit to the Website, the Company collects and processes the following technical personal data:

• IP address of the Visitor’s device;
• data and time of login to the Website;
• name and URL address of the web page used to access the Website;
• operating system data of the Visitor’s device;
• information on the Visitor’s internet service provider;
• geographical data, language settings of the Visitor;
• other relevant technical information.

These technical data are collected automatically with no additional input from the Visitor. To learn more about cookies and the processing of personal data collected on their basis, please read the Company’s [Cookies Policy].

The Company may also process other data of the Visitor that are submitted on their own initiative by e-mail or via any other information system as may be used by the Company and accessible on the Website. These may be data such as:

• Visitor name and last name;
• contact details (phone, e-mail, home address);
• other personal information that allows identifying the Visitor;
• content of query, message, complaint.

This list is not finite because, in special cases and depending on the grounds of the Visitor’s contacting the Company and the Visitor’s request, as well as for the purposes of achieving the goals discussed in this privacy policy, the Company may require additional information.

1.3 Using Personal Data

The main goal of processing personal data is to allow the Visitor to use the Website in an efficient, optimal manner and to personalise the Website to the Visitor’s needs. Personal data may be used to:

• create and administrate your account;
• ensure adequate discharge of our contractual obligations (i.e., taking and delivering orders);
• ensure the convenient, effective functioning of the Website in line with your needs;
• ensure smooth administration of the Website;
• process and reply your queries, requests appropriately and on time;
• enable us to contact you over any information provided to us by you;
• enable us to carry out statistical or any other kind of analysis for the purposes of continuously improving the Website content and the services of the Company;
• other purposes disclosed at the time of submitting personal data.

​​1.4 Storing Personal Data

We will only store your personal information for as long as it is necessary to achieve the goals set forth in this privacy policy. The following terms of storing personal data will apply:

• account information (registration data) will be stored for as long as you are using it or until you express a wish to delete it. We will delete the account in [2–3] years after the last activity on the account;
• we will store purchase (order) history for [5] years, unless your account is deleted;
• complaints and queries will be stored for [6] months after they are resolved.

Your personal information can only be stored for longer periods when:

• there are valid reasons to suspect illegal activity and the activity is being investigated;
• your data are required for an appropriate resolution of a dispute or complaint;
• we have received complaints regarding the Visitor or have observed violations done by a particular Visitor; or
• other special grounds outlined in the regulations exist.

1.5. Legal Grounds of Processing Personal Data

The Company processes Visitor personal data:

• on the basis of the contract with the Visitor, when the Visitor creates an account and/or places an order for our goods or services;
• on the basis of consent expressed with your actions such as contacting us or submitting personal data, or other actions;
• for the purposes of our legitimate interests (such as to operate and administrate the Website, and so on);
• to honour our legal obligations.

The Visitor’s consent as a legal ground is used in the cases of third-party access to information and in other cases when processing personal data may be grounded on consent. Visitors may withdraw their consent to personal data processing at any time. If the Company does not have any other legal grounds to process personal data, the Company will cease to process the personal data as soon as the Visitor withdraws their consent.

1.6 Data Transfers to Third PersonsThe Company will only transfer your personal data to any third person without your consent in the cases outlined below.

Personal data may be disclosed without your separate consent to law enforcement, judicial, or pre-trial institutions on account of their investigations, or in other cases set forth in the regulations.

Furthermore, certain technical data relevant to your visit to the Website (the IP address, cookies, technological information of your browser, other information pertaining to your behaviour on or browsing of the Website) may be, for statistical, analytical, and the related purposes, transferred or made available to entities operating both inside and outside of the EU (such as in the course of our using the Google Analytics service). Please be reminded that personal data outside of the EU may enjoy a lower level of protection compared to the EU, however we will carefully assess the conditions of the subsequent processing and storing of your personal data once they are transferred to the aforementioned entities.

The Company also uses third-party services (such as third-party servers, website design, administration services, data flow and browsing analysis and statistics), newsletter mailing services that may require access to the Visitor’s personal data to be provided appropriately. In that case, the Company makes sure that data processors honour their confidentiality and adequate personal data protection obligations.

2. RIGHTS OF WEBSITE VISITORS

Visitors have certain rights in relation to the protection of their personal data as outlined below:

• the right to access personal data under processing;
• the right to request that the Company rectifies inaccurate personal data relevant to the Visitor without undue delay;

• the right to request that the Company transfers the Visitor’s information, either in part or in full, to the Visitor or another data controller, whenever technologically possible (the right to data portability); the right to request to transfer your personal data to another data controller or directly to you in a convenient form (applicable to personal data that were submitted by the data subject directly and are subject to automated processing on consent basis);

• the right to erase personal data on legal grounds, for instance, when the data are no longer required for the purposes for which they were collected or in the event of unauthorised processing;
• the right to restrict data processing on legal grounds;
• the right to object to data processing when the data are processed on legitimate interest basis and a legal ground exists;
• the right to withdraw the consent to process personal data at any time, without affecting the legality of the processing of personal data on consent basis prior to such withdrawal;
• if you believe that your rights have been infringed, you have the right to file a complaint to the State Data Protection Inspectorate, A. Juozapavičiaus g. 6, LT-09310 Vilnius, tel.: (8 5) 271 2804, 279 1445, e-mail: ada@ada.lt, or to the supervisory authority of another EU Member State of your habitual place or residence, place of work, or place of the alleged infringement. We recommend contacting the responsible personnel of the Company at the details provided below to find an appropriate solution to the problem prior to filing an official complaint.

To exercise your rights, please contact us by e-mail at [info@belgai.lt]. Please be advised that in the event of doubt with regard to your identity, the Company may require additional information to be submitted for identification purposes.

3. DATA PROTECTION

In implementing adequate technical and organisational measures, the Company protects personal data against loss, unauthorised use, unauthorised access, disclosure, or modification.

The Company recommends that Visitors should use at least the following personal data protection measures:

• refrain from visiting suspicious websites, clicking on links of an unknown origin;
• choose a hard-to-guess password for their accounts and not use it with other websites;
• update their software and obtain antivirus protection.

4. FINAL PROVISIONS

This privacy policy may be updated by the Company. The Company will notify Visitors of any updates by publishing a new version of the privacy policy with the dates of the revisions on the Website. Visitors understand that by continuing to use the Website after any updates to the privacy policy they accept the changes made.

If any of the provisions of this privacy policy that may be found invalid or inapplicable, that provision will not affect the validity and effect of the rest of the provisions of the policy.

This privacy policy applies as of the date of its publication on the Website.