Privacy policy
Privacy policy
We, UAB Reblank, company code 306372665, address Perkūnkiemio g. 19, Vilnius, take care of the security and privacy of your data when you use our website https://kurspausdinti.lt. This privacy policy explains how we collect, process and store your personal data when you use our services.
1. Definitions
1.1. Personal data – any information that can be used to identify you directly or indirectly. The following personal data is processed:
- Contact data – email address, phone number;
- Order history;
- IP address;
- Network and location data;
- History of requests and complaints;
- Other publicly available data.
1.2. Processing of personal data – any operation on personal data (collection, editing, storage, granting access, archiving, etc.).
1.3. Data controller – UAB Reblank, company code 306372665, address Perkūnkiemio g. 19, Vilnius.
1.4. Data subject – any natural person whose data is processed by the Company.
1.5. Website – www.kurspausdinti.lt.
2. Processing of your personal data while visiting the Website
2.1. By providing data, the Data subject consents to the use of Personal data by the Company to ensure the operation of the website and the provision of services.
2.2. The Company processes your personal data on the following grounds:
- Your explicit consent;
- Order on the website, concluding a contract with the service provider;
- Legal obligation or legitimate interest.
2.3. The Company processes your data for the following purposes:
- Ensuring the operation of the Website;
- Registering and maintaining your account;
- Service provision;
- Responding to inquiries;
- Analysis and improvement of the website;
- Collecting IP addresses, network and location data using cookies.
3. Disclosure of personal data to third parties
3.1. Your data may be disclosed to third parties only when necessary (contract, legal obligations, legitimate interests).
3.2. The Company may transfer data to its service providers that process them on the Company's instructions.
3.3. Data may be transferred to state authorities if required by law.
3.4. For the purposes of website infrastructure and protection against cyber attacks, we use Cloudflare, Inc. (USA) services as a content delivery network (CDN). Cloudflare processes technical connection data (including IP address) on the instructions of the Company as data controller. Standard contractual clauses (SCC) approved by the European Commission apply to data transfers outside the EEA.
4. Personal data retention period
4.1. Your data is stored only for as long as necessary to achieve the stated purposes.
4.2. If you have been inactive for 10 years, your data will be deleted.
4.3. You may request that your account be deleted.
5. Personal data of minors
5.1. Our website is not intended for minors under the age of 16.
5.2. Minors may submit data only with the consent of their parents or guardians.
6. Rights of data subjects
6.1. You have the following rights:
- The right to information about data processing;
- The right of access to your data;
- The right to correct data;
- The right to be forgotten;
- The right to restrict data processing;
- The right to object to processing;
- The right to data portability;
- The right to lodge a complaint with the State Data Protection Inspectorate.
6.2. To exercise your rights, you may contact us by email at [email protected].
6.3. We will respond to your requests within 1 month of receiving the request.
7. Cookie policy
7.1. The Website uses only essential cookies required for the operation of the Website, maintaining your login session and protection against cyber attacks (CSRF). Your consent is not required for such cookies under Article 73(3) of the Law on Electronic Communications.
7.2. The Website uses the following cookies:
- Session cookie (kurspausdinti_session) – necessary to identify a logged-in user. Validity: until session end or until logout.
- XSRF-TOKEN – necessary for protection against cross-site request forgery (CSRF). Validity: until session end.
- Cloudflare technical cookies (e.g. __cf_bm, cf_clearance) – used for protection against bots and cyber attacks. Set by our CDN provider Cloudflare, Inc. Validity: up to 30 minutes or up to 30 days.
7.3. The Website does not use marketing, advertising, profiling or analytical cookies that would require your consent. If such cookies are introduced in the future, you will be presented with a clear consent banner with the option to accept or reject them.
7.4. We use "Cloudflare Web Analytics" for website traffic statistics. This service does not write cookies to your device, does not use personal identifiers and does not perform profiling. Therefore your consent is not required for it.
7.5. You may opt out of essential cookies by changing your browser settings, but please note that disabling these cookies will prevent some Website features (e.g. login, order submission) from working.
8. Final provisions
8.1. Our website may contain links to other websites that are not subject to this policy.
8.2. We may update this policy and will inform you about it.
9. Marketing communications
9.1. If you consent, we will contact you for marketing purposes by email or phone.
9.2. You can opt out of marketing messages at any time.
