PRIVACY POLICY
The Privacy Policy (hereinafter – Privacy Policy) of the website https://www.cloudauto.eu (hereinafter – the Website) of MB ,,JPVIN”, legal entity code 306325530 , registration address Teatro g. 7 -14, Klaipėda 91247 (hereinafter – the Company), explains how the Company, as the controller of your personal data, handles your personal data when you are visiting and using the Website, when you are registering, shopping, subscribing to newsletters or receiving direct marketing communications.
In processing personal data, the Company is guided by and complies with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (“GDPR”), the Law of the Republic of Lithuania on the Legal Protection of Personal Data, as well as any other applicable legal acts regulating the protection of personal data.
If you are using the Website, it means that you have read and understood this Privacy Policy and the purposes, methods and procedures for processing your personal data specified in it.
Please note that we process certain of your personal data on the basis of your consent to the processing of your personal data or (and) on the basis of the Company’s legitimate interests, as will be set out in this Privacy Policy, and you have the right to withdraw such consent at any time, without affecting the lawfulness of the processing of the data based on the consent prior to the withdrawal of the consent or (and) to object to the use of your personal data in this way.
- WHAT PRINCIPLES WE FOLLOW
When we process your personal data, we:
a) We will comply with the requirements of current and applicable legislation, including the GDPR;
b) We will process your personal data in a lawful, fair and transparent manner;
c) We will collect your personal data for specified, clearly defined and legitimate purposes and will not further process it in a way that is incompatible with those purposes, except to the extent permitted by law;
d) We will take all reasonable steps to ensure that personal data which are not accurate or complete in relation to the purposes for which they are processed are rectified, supplemented, suspended or erased without delay;
(e) We will keep them in a form which permits your identification for no longer than is necessary for the purposes for which the personal data are processed;
f) We will not disclose personal data to third parties or make it publicly available, except as provided in the Privacy Policy or applicable law;
(g) We will ensure that your personal data is processed in such a way that appropriate technical or organisational measures are in place to ensure adequate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage. - HOW DO WE PROCESS YOUR PERSONAL DATA?
We process your personal data obtained in the following ways:
a) when you provide personal data to us. You provide us with your personal data and other information by using the Website, by writing to us or communicating with our customer service team by phone, email or otherwise, by submitting your complaints and/or queries, by subscribing to our newsletter, etc.;
(b) when you use the Website. When you use the Website, certain information (e.g. the type of web browser you use, the number of visits to the Website, the pages viewed on the Website, etc.) is collected automatically;
c) when we receive your personal data from other persons in accordance with the procedure established by law and/or this Privacy Policy.
We may combine the data we receive in the ways described above (e.g., we may combine the data you provide with the data we receive from the use of cookies on the Website, or with data we receive from third parties in accordance with law). - PROCESSING YOUR PERSONAL DATA
Please be informed that the Company processes your personal data for the following purposes:- For the purpose of concluding and executing a distance sales contract (acceptance and execution of orders):
Data categories: name, surname, date of birth, email address, telephone number, delivery method chosen, delivery address (city, street, postcode), payment method chosen, order details, information contained in the order invoices (fact of payment, amount, etc.), loyalty points earned, your remarks on the execution of your order.
Legal basis for processing: conclusion and performance of a contract (Article 6(1)(b) GDPR).
Data processing period: 5 (five) years from the date of execution of the contract, unless the Company is obliged by law to keep personal data for a longer period.
We receive data from: yourself; third parties.
We provide or transfer data: from you; from third parties.
We provide or transfer data to: data processors (IT, service stations, virtual cloud storage, direct marketing service providers, etc.). Data recipients (financial and payment institutions, delivery or courier services, etc.). Public authorities and bodies (if required by law or necessary to protect the Company’s rights, the Company must transfer your data to public authorities). - For the purpose of registration (creation of a buyer profile) on the Website:
Data categories: email address, data of your social network www.facebook.com and/or Google+ accounts (name, surname, image), if you register to the Website via the aforementioned social networks.
Legal basis for processing: contract (Company’s Terms of Use).
Processing period: up to 5 years from the date of your last login to your personal account.
We receive data from: yourself; third parties (Facebook Inc., Google Inc.).
We provide or transfer data to: data processors (IT, service stations, virtual cloud storage, direct marketing service providers, etc.).Public authorities and bodies (if required by law or necessary to protect the Company’s rights, the Company is obliged to transfer your data to public authorities).
If you access the Website using third party authentication tools or subsequently link your account on the Website to third party accounts (e.g. Facebook, Google), these third parties will (i) transmit to us or (ii) receive from us certain of your personal data as specified below:
– If you connect to the Website using Google+, authentication services are provided by Google Ireland Limited, from which we receive your name, profile picture, email address, Google Account ID, in which case you are additionally subject to the privacy policy of Google Ireland Limited, which describes in detail how this company processes your data;
– If you access the Website using Facebook, authentication services are provided by Facebook Ireland Ltd., from which we receive your name, surname, profile picture, email address, Facebook account identification number, in which case you are additionally subject to the privacy policy of Facebook Ireland Ltd., which describes in detail the way in which this company handles your data. - For the purpose of sending direct marketing messages, survey forms, reminders about the products you have selected in your shopping cart:
Data categories: email address, telephone number, shopping data (products you have purchased, prices of products).
Legal basis for processing: your consent (Article 6(1)(a) GDPR) or the legitimate interests of the Company (Article 6(1)(f) GDPR).
Duration of processing: personal data is stored for as long as your free consent is valid, but not longer than 2 (two) years.
We receive data from: yourself; third parties.
We provide or transfer data to: data processors (IT, service stations, virtual cloud storage, direct marketing service providers, etc.). - For the purpose of sending newsletters:
Data categories: email address .
Legal basis for processing: your consent (Article 6(1)(a) GDPR) .
Duration of processing: personal data is stored for as long as your free consent is valid, but for no longer than 2 (two) years.
We obtain data from: yourself; third parties.
We provide or transfer data to: data processors (IT, service desks, virtual cloud storage, direct marketing service providers, etc.) To public authorities and bodies (if required by law or necessary to protect the Company’s rights, the Company is obliged to transfer your data to public authorities). - For the purpose of the loyalty programme:
Data categories: name, surname, email address, telephone number, goods purchased, price of goods.
Legal basis for processing: your consent (Article 6(1)(a) GDPR).
Duration of data processing:personal data are stored for as long as your free consent is valid, but not longer than 2 (two) years.
We receive data from: yourself; third parties.
We provide or transfer data to: data processors (IT, service stations, virtual cloud storage, direct marketing service providers, etc.)
Data recipients (financial and payment institutions, delivery or courier services, etc.)
Public authorities and bodies (if required by law or necessary to protect the Company’s rights, the Company must transfer your data to public authorities). - For the purpose of administering the Company’s social network accounts:
Data categories: your social network account name, your photo, your reactions to the content generated by the Company (likes, comments, shares), your address and telephone number in case you win contests organised by the Company and published in social networks.
Legal basis for processing: your consent (Article 6(1)(a) GDPR).
Duration of data processing: personal data is stored for as long as the Company’s or your social network account is valid, unless you express your wish to delete your data contained in the Company’s social network accounts earlier.
We receive data from: yourself; third parties.
We provide or transfer data to: data processors (IT, service stations, virtual cloud storage, direct marketing service providers, etc.). Data recipients (financial and payment institutions, delivery or courier services, etc.). To public authorities and bodies (if required by law or necessary to protect the Company’s rights, the Company is obliged to transfer your data to public authorities). - For customer service purposes (requests, enquiries, complaints, other messages sent to the Company):
Data categories: name, email address, content of the request, enquiry, complaint or other message.
Legal basis for processing: your consent (Article 6(1)(a) GDPR).
Duration of processing: personal data is stored until you withdraw your free consent, but for no longer than 2 (two) years.
We obtain data from: yourself; third parties.
We provide or transfer data to: data processors (IT, service stations, virtual cloud storage, direct marketing service providers, etc.). Data recipients (financial and payment institutions, delivery or courier services, etc.). To public authorities and bodies (if required by law or necessary to protect the Company’s rights, the Company is obliged to transfer your data to public authorities). - For the purpose of enforcing legal obligations imposed on the company. The Company informs that in certain cases it may also process your personal data for the purposes of fulfilling legal obligations imposed on the Company (e.g. to comply with regulatory requirements, to respond to lawful and reasonable requests from state and municipal authorities, courts or other entities, etc.)
Categories of data: minimum necessary data in a specific case.
Legal basis for processing: performance of legal obligations (Article 6(1)(c) GDPR).
Duration of processing: personal data are kept for the minimum time necessary to achieve the purpose.
We receive data from: yourself; third parties.
We provide or transfer data to: public authorities and bodies (if required by law or necessary to protect the Company’s rights, the Company must transfer your data to public authorities). - For the purpose of ensuring the functionality of the Website, collecting statistical information, analysing information flows, improving the Website and the browsing experience, and personalising the Website’s users:
Data categories: IP address, your actions on the Website […].
Legal basis for processing: your consent (Article 6(1)(a) of the GDPR).
Duration of processing: personal data are stored for as long as a specific cookie is valid, unless you sooner withdraw your free consent to the recording of cookies. For more information on this, please see Section IX of this Privacy Policy.
We receive data from: yourself; third parties.
We provide or transfer data to: data processors (IT, service stations, virtual cloud storage, direct marketing service providers, etc.).
- For the purpose of concluding and executing a distance sales contract (acceptance and execution of orders):
- SELLING DATA OUTSIDE THE EU?
Based on a lawful basis and purpose, the Company may transfer your personal data to entities outside the European Economic Area (EEA) (e.g. if the Company’s processors or recipients of personal data are established outside the EEA). In the event that personal data is transferred from the EEA to countries which are not recognised by the European Commission as providing an adequate level of protection for personal data, the Company will take all reasonable steps to protect your personal data (e.g., by basing the transfer of your personal data on the standard terms and conditions of data transfer agreements approved by the European Commission). - WHAT RIGHTS DO YOU HAVE AS A DATA SUBJECT?
As a data subject, you have the following rights:- The right to be informed about the Company’s processing of personal data. You have the right to receive information about the processing of your personal data, the sources of your personal data, the purposes of the processing, the legal grounds, the storage period and the persons, data recipients or data processors, the rights of the data subject, etc.
- The right of access to your personal data processed by the Company. You have the right to have access to and receive a copy of your personal data processed.
- The right to request rectification of your personal data processed by the Company. You have the right to request the rectification of inaccurate personal data processed by the Company.
- The right to request erasure. You have the right to request the erasure of your personal data if it is no longer necessary for the purpose for which it was collected, you have withdrawn your consent to the processing of your personal data, the processing was based on your consent, we are processing your personal data on the basis of a legitimate interest, and you object to such processing, and there are no overriding legitimate reasons for processing the data, we are required to erase your personal data to comply with a legal obligation imposed on us, or we have unlawfully processed your personal data.
- The right to restrict processing. You have the right to restrict the processing of your personal data by the Company if you contest the accuracy of the data and the Company carries out a check in this respect, your personal data has been processed unlawfully but you do not consent to the erasure of the data, your personal data is no longer necessary for the purpose for which it was collected but is needed for the establishment, exercise or defence of legal claims, you have objected to the processing as described below, pending verification that the Company’s legitimate reasons override your reasons.
- The right to object to processing. You have the right to object to the processing of your data by the Company for direct marketing purposes, the right to object to the processing of your personal data in the public interest or in the legitimate interests of the Company, unless these interests are overridden by your own reasons.
- The right to portability of your personal data. You have the right to receive the personal data you have provided to us or the right to request the transfer of such data to another controller in a structured, commonly used and computer-readable format, provided that the processing of your personal data is based on your consent or on an agreement between us and that your personal data is processed by automated means.
- The right to lodge a complaint with the State Data Protection Inspectorate. If you believe that your rights have been violated, you have the right to contact the State Data Protection Inspectorate.
To exercise your rights, you may contact the Company at the following contact email address: [email protected].
The Company hereby informs you that the exercise of the above rights may depend on the conditions for the exercise of the specific right set out in the legislation, and therefore, in the event of specific grounds set out in the legislation, the Company shall have the right to refuse to grant your request for the exercise of the specific right in a reasoned written statement.
The Company undertakes, upon receipt of your request, to implement your right as soon as possible, but in any event not later than one month from the date of receipt of your request, or to refuse to implement it in writing and stating the reasons for such refusal. The Company has the right to request a reasonable fee if your requests are manifestly unfounded, repetitive or excessive.
- DIRECT MARKETING MAILINGS
The Company has the right to process your personal data for the purpose of direct marketing, newsletters, reminders about the goods you have selected in your shopping cart, questionnaires and surveys, on the basis of your freely given consent to such personal data processing or on the basis of the legitimate interests of the Company. You can always withdraw your consent by contacting the Company at [email protected] and/or by using the instructions provided in each message.
In addition, the Company may use your personal data for its own marketing of similar goods or services. You may object to this in advance by contacting the Company at [email protected]. You may subsequently object to or opt out of such use of your personal data by contacting the Company at [email protected] and/or by using the instructions provided in each message.
Withdrawal of consent does not affect the lawfulness of consent-based processing carried out prior to the withdrawal of consent. - PROFILING
The Company may use your personal data for profiling purposes only with your prior written consent.
Please be informed that the Company, when processing your personal data for the purposes set out in this Privacy Policy, does not use any automated decision-making processes, including profiling, which may result in legal consequences for you or may have a similarly significant effect.
However, the Company may, with your consent, process your personal data by automated means in order to classify you as a relevant customer category and to provide you with tailored commercial offers that are relevant to your needs, and you have the right to request human intervention in order to express your opinion or object to such classification. - ENSURING THE SECURITY OF YOUR PERSONAL DATA
You undertake to provide the Company with only the correct data and to protect and not to disclose to anyone your login data to the Website.
The Company processes your personal data responsibly and securely, taking into account the requirements for the security of your personal data set out in legislation. When establishing measures for the processing of personal data, as well as during the processing of data, the Company implements appropriate technical and organisational data protection measures as provided for by the legislation, in order to protect the personal data processed by us against accidental or unlawful destruction, damage, alteration, loss, disclosure, as well as against any other unauthorised processing. The level of personal data security measures shall be determined taking into account the risks involved in the processing of personal data.
Among other things, the Company’s employees who have access to personal data shall be made aware of the requirements for the protection of personal data and shall ensure the full confidentiality of the personal data processed. - COOKIES
The Company hereby informs you that cookies are used on the Website as an integral part of the Privacy Policy. - YOUR RIGHT TO COMPLAINT
If you believe that your rights have been violated, you can always contact the Company by email at [email protected] and/or file a complaint with the State Data Protection Inspectorate (L. Sapiegos g. 17, LT-10312 Vilnius, by email at [email protected]). - CHANGES TO THE PRIVACY POLICY
The Company has the right to change the terms and conditions set out in this Privacy Policy. If we change the terms of this Privacy Policy, we will post an updated version of this Privacy Policy on our Website. - CONTACT DATA
Contact details of the company, which as a data controller processes your personal data specified in this Privacy Policy:
MB “JPVIN”
Legal entity code: 306325530
Address of registration: Teatro g. 7 – 14, Klaipėda 91247, Lithuania
If you have any questions regarding the information provided in this Privacy Policy, please contact the Company in any way that is convenient for you: in writing – by e-mail [email protected]
Changes to the Privacy Policy have been made and are effective as of 1 January 2025.