1. Common provisions

• VšĮ „Alfa centras“ (hereinafter referred to as the “Company”) respects the right to privacy of all its customers (buyers), including visitors to the Company’s website https://www.alfarun.lt/ (hereinafter referred to as the “Website”) (hereinafter referred to as the “Customers”), and undertakes to ensure the protection of personal data and the safeguarding of the Customer’s rights as a Data Subject.
• This Privacy Policy governs the basic principles and procedures for collecting, processing and storing the personal data of all customers of the Company (including customers of the Website).
• By using the Company’s Website, as well as by ordering goods and providing the Company with your personal data, you agree to the provisions of this Privacy Policy (except for data processing activities, which will require your separate consent). Customers are deemed to have read and understood the Privacy Policy when they register on the Website/Customer System and tick the “tick” box below the text of this Policy. The Privacy Policy may be re-accessed at any time on the Website.
• In processing your personal data, we comply with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (the “Regulation”), the Law of the Republic of Lithuania on the Legal Protection of Personal Data (the “DPA Law”), the Law of the Republic of Lithuania on Electronic Communications (the “Law of the Republic of Lithuania”), the Law of the Republic of Lithuania on Electronic Communications (the “Law of the Republic of Lithuania”), and any other directly applicable legal acts regulating the protection of personal data as well as with instructions of the supervisory authorities of the data protection sector (in Lithuania, the State Inspectorate of Data Protection).

2. Terms and definitions used

• Personal data – any information relating to an identified or identifiable natural person (data subject); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, a personal identification number, location data and an online identifier, or to one or more factors specific to the natural person’s physical, physiological, genetic, mental, economic, cultural or social identity.
• Data Subject – a natural person – a customer of the Company (including visitors to the Website) whose personal data is collected by the Company.
• Consent of the data subject means any freely given, specific and unambiguous indication of the data subject’s wishes, by means of a statement or unambiguous action, by which he or she freely consents to the processing of personal data concerning him or her.
• Data processing – means any operation or sequence of operations which is performed upon personal data or sets of personal data, whether or not by automated means, such as collection, recording, sorting, organisation, storage, adaptation or alteration, retrieval, access, use, disclosure by transmission, dissemination or otherwise making available, alignment with other data, alignment or combination with other data, restriction, erasure or destruction.
• Data Processor – means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the Data Controller.
• Data Controller – Public Institution “Alfa centras”, a company established under the laws of the Republic of Lithuania, company code 303108589, registered office address Sodžiaus g. 22, Geležiniai, LT-69152 Marijampolė
• HTTP cookies – are small blocks of data created by a web server while a user is browsing a website and placed on the user’s computer or other device.
• Direct marketing – means the activity of offering goods or services to persons by post, telephone or other direct means and/or seeking their opinion on the goods or services offered.

3. Data collection

• The Company collects and further processes the following personal data provided by you when registering, ordering services and/or purchasing goods on the Website or ordering services in any other way: name, surname, address, e-mail address, telephone number, data relating to the provision of services, order details, payment details, information on consent and non-consent to the processing of personal data for direct marketing purposes, passwords, any other data that you provide additionally on your own initiative when registering, ordering services and/or purchasing goods. Your personal data will be stored by the Company for the duration of our cooperation and for 10 (ten) years after the end of our cooperation.
• The collected personal data that you indirectly provide when registering, ordering services and/or purchasing goods on the Website is further processed by the Company, i.e. this data is automatically collected from the computers and/or mobile devices you use when you log in to the Website: the IP addresses and the times of logins, the browser and its version that you are using, the websites that you have visited before you accessed our Website, data on the use of the services, etc. These data are stored by the Company for the duration of our cooperation and, depending on the data, for up to one year from the end of this period. This data may be stored for a longer period if there are other legal grounds for such storage period.

4. For what purposes is your personal data processed?

• The Company processes your personal data for the following data processing purposes: identification of the Company’s customers in its information systems, registering on the Website and logging in to your account, processing and administration of the purchase of services and/or goods, administration of accounting documents related to the ordering of services, contacting you, fulfilment of contractual obligations, and for the purpose of direct marketing (subject to prior consent of the data subject only).

5. How your personal data is being processed? 

• The Company ensures that your personal data will: processed in a lawful, fair and transparent manner, collected for specified, explicit and legitimate purposes and not further processed in a manner incompatible with those purposes, adequate, relevant and only as necessary to achieve the purposes for which they are processed, accurate and, where necessary, kept up to date, processed in such a way as to ensure, by appropriate technical and organisational measures, adequate security of the personal data, including against unauthorised or unlawful processing of the Personal Data, and against accidental loss, destruction or damage.

6. Data subject rights

• You have the following data subject rights set out below, which we will exercise upon receipt of a request from you (by email to info@alfarun.lt; by post to Sodžiaus g. 22, Geležiniai, LT-69152 Marijampolė), after duly confirming your identity:
  • have access to your personal data and how they are processed,
  • request the rectification of inaccurate personal data relating to you,
  • request that incomplete personal data be completed,
  • request the Company to erase personal data relating to you if:
    • personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
    • You withdraw your consent and there is no other legal basis for processing your personal data;
    • personal data have been processed unlawfully;
    • And on the other grounds set out in the Regulation;
  • require the Company to restrict the processing of your personal data;
  • receive the personal data relating to you that you have provided to the Company in a structured, commonly used and computer-readable format (you also have the right to ask the Company to transfer your personal data to another data controller);
  • object to the processing of personal data relating to you (e.g. for direct marketing or other purposes).
• Please be informed that if you believe that your rights as a data subject have been violated, you may lodge a complaint with the State Data Protection Inspectorate. More information about the State Data Protection Inspectorate and the complaints procedure can be found here: https://www.ada.lt/: https://www.ada.lt/

7. How do we process personal data for direct marketing purposes?

• Only with your prior consent and in accordance with the provisions of the ERĮ, the ADTAĮ and the Regulation will we send you Company newsletters by email and/or enquire about the quality of existing services.
• We process the following personal data for the purpose of direct marketing: name, surname, telephone number, email address.
• Your personal data for the purpose of direct marketing is retained until you have opted out of receiving direct marketing communications.

8. Who has access to your personal data and to whom is it disclosed?

• Access to your personal data by employees of the company is only granted on a need-to-know basis for the performance of their duties and only after the employee has committed to respect the confidentiality requirements.
• The Company may provide your personal data to: data processors who provide services to the Company and process your personal data on behalf of the Company and for the benefit of the Company or you, law enforcement authorities where there is a legal basis for doing so, other third parties with your consent.
• We only use processors who ensure that appropriate technical and organisational measures are put in place in such a way that the processing complies with the requirements of the Regulation and that your rights as data subjects are protected.
• Please note that the data processors listed above have the right to process your personal data only by our instructions.
• The data processor may not engage another processor without the prior specific or general written consent of the Company (controller).
• Your personal data may also be provided in response to official requests from public authorities and the courts, but only after we have ascertained the lawfulness of these requests.

9. Which cookies do we use and how?

• In order to provide you with a more convenient and efficient browsing experience and to provide you with useful offers, we use the following cookies on the Website: ‘FB_PIXEL_ID’ (Facebook statistics information), ‘_gid’, ‘_ga’ (Google Analytics statistics information).

10. Links on the website.

• The Website may contain links to third-party websites, legislation, as well as links to social networks (the ability to share the Website content on Facebook and Instagram). It should be noted that the third-party websites linked to the Website are subject to the privacy policies of these websites and the Company does not accept any responsibility for the content of the information provided by these websites, their activities and the provisions of their privacy policies.

11. Terms and conditions for marketing competitions and data protection criteria.

• All FACEBOOK/INSTAGRAM users or participants of the events organised by Alfa Centre, who have fulfilled all the conditions of the announced competition in their FACEBOOK/INSTAGRAM accounts, are eligible to participate in marketing competitions.
• The winners are selected by the staff of the Alfa Centre or a representative hired by the Alfa Centre, if the participants knowledge, ingenuity or creativity is assessed. If The number of “like” clicks or other reactions determines the winner, the winner is determined by their number of “like” clicks or other reactions. In exceptional cases, participants may be excluded from competitions for fraudulent participation, bought votes/likes/comments.
• The Contestants agree and, in the event of winning, authorise Alfa Run and its account management company to publish the names of the winners publicly.
• The winners of the competition will be announced on FACEBOOK/INSTAGRAM in the comments section of the same competition post five days (5 days) after the announcement of the competition, unless otherwise stated in the competition conditions.
• The names and, where applicable, residential addresses and telephone numbers of the prize winners shall be used for the announcement of the winners and for the dispatch of the prize by post, unless other arrangements have been made for collection of the prize.
• If the prize is set up by Alfa Run partners, the winner’s details may be passed on to the partner for the prize to be sent to the winner. The winner’s details are only used by the Alfa Run partner to send the prize.
• Once the winners of the Alfa Run FACEBOOK/INSTAGRAM competition have been announced, the winners must contact Alfa Run representatives by private message via the FACEBOOK/INSTAGRAM platform.
• JIf the winner has not contacted organiser by private message on FACEBOOK/INSTAGRAM after 30 calendar days from the date of the announcement of the winner, the prize will be forfeited, unless otherwise specified in the specific competition.
• It is the entrant’s responsibility to ensure the accuracy of his/her data on FACEBOOK/INSTAGRAM accounts. Any incorrect information and failure to claim the prize will result in the prize not being resent.
• By registering, participants confirm that they agree to be bound by these rules and the decisions of the organisers.
• The organisers reserve the right to change the rules of the competition.