"A Loftai" JSC (hereinafter referred to as the Company) is the controller of personal data processed by it, which ensures that personal data is processed in the Company in accordance with the personal data protection requirements applicable to data controllers. These Privacy Policy apply in cases where you provide us with your personal data via the website https://topfloor.lt/ (hereinafter referred to as the Website).
In this Privacy Policy, we describe how we collect, use and process your information when you use our Website. By using the Website, you consent to the collection and use of information in accordance with this Privacy Policy.
Please note that this Privacy Policy applies only to this Website. This Website may contain links to other sites that are not operated or controlled by us. Links on this Website do not imply that we endorse or have reviewed such third-party websites.
The data protection provisions have been prepared in accordance with the following legal acts:
• Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as the GDPR);
• The Law of the Republic of Lithuania on the Legal Protection of Persons (hereinafter referred to as the Law on the Legal Protection of Persons);
• The Law on Electronic Communications of the Republic of Lithuania (hereinafter referred to as the Law on Electronic Communications).
When processing personal data, the Company follows the requirements established in the GDPR, the ADTAĮ, the ERĮ, as well as other legal acts regulating the processing and protection of personal data.
Information about the Company:
“A Loftai” JSC
Company code: 305617453
Address: V. Grybo Str. 41B-17, Vilnius 10320, Lithuania
Email: hello@topfloor.lt
Phone +370 661 29363
Information about the Company's Data Protection Officer:
The Company has not appointed a Data Protection Officer.
What information do we collect about you?
We collect and use the following information:
Personal data
When you use our Website, we may collect certain personal information about you (hereinafter referred to as Personal Data), i.e. when you voluntarily provide such information, e.g. when you use certain of our services, contact us, etc. When we collect Personal Data, we provide a link to this Privacy Policy.
Usage data
We may also collect information that your browser provides when you visit the Website or when you access the Website via a mobile device (hereinafter referred to as “Usage Data”).
This may include information related to your IP address, browser and device type, information about which websites you have visited previously, and other identifiers related to your device.
When you use the Website on a mobile device, Usage Data may include information such as the type of mobile device used, the unique ID of the mobile device, the IP address of the mobile device, the operating system, the type of web browser used, a unique device identifier, and other diagnostic data.
Please note that such information, which is collected passively using various technologies, cannot be used to specifically identify you. This Website may use such information and associate it with other information to track, for example, the total number of visitors to the Website, the number of visitors to each page of the Website, etc.
Cookie data
The Website uses cookies to track activity on the Website and store certain information. For more information, please see our Cookie Policy.
For what purposes is your personal data collected?
The Company processes your Personal Data, as a data subject, for the following purposes:
• For the purposes of shopping on the Website, including for the purposes of processing billing and other payments and complying with accounting rules.
• For communication purposes via the Website.
We use Personal Data for the purposes set out in this Privacy Policy. If you provide Personal Data for a specific purpose, we may use that data in accordance with the purpose for which such data was provided. For example, if you contact us by email, we use the Personal Data you provide to answer your question or resolve your issue. If you provide Personal Data to enable you to use certain services on the Website, we will use your Personal Data to provide you with access to such services and to monitor your use of such services. We and our group companies (hereinafter referred to as “Affiliated Companies”) may also use your Personal Data and other non-identifying information collected through the Website to help us improve the content and functionality of the Website, better understand our users, and improve our services. We and our Affiliates may use this information to communicate with you about the provision of services.
What are the grounds for lawful processing of the Personal Data you provide?
The Personal Data you provide will be processed only in accordance with the criteria (grounds) for the lawful processing of personal data set out in legal acts and only for the purposes for which the data was obtained. Your Personal Data may be processed only on a lawful basis, i.e.:
• In order to perform a contract to which the data subject is a party or in order to take steps at the request of the data subject prior to entering into a contract (Article 6(1)(b) of the GDPR), i.e. when Personal Data is processed for the purposes of shopping on the Website, including for the purposes of processing payments and other payments and for compliance with accounting rules.
• In order to fulfill a legal obligation applicable to the Company (Article 6(1)(c) of the GDPR), e.g. when issuing or storing invoices and other accounting documents, etc., i.e. when Personal Data is processed for the purposes of shopping on the Website, including for the purposes of processing payments and other payments and compliance with accounting rules.
• On the basis of the legitimate interest of the Company (Article 6(1)(f) of the GDPR), i.e. when Personal Data is processed for the purposes of communication via the Website, i.e. in order to answer questions submitted by individuals, etc.
What personal data do we process about you?
For the purposes of shopping on the Website, including for the purposes of processing payments and other payments and compliance with accounting rules, the following Personal Data is collected and processed:
• Name;
• Last name;
• Email address;
• Telephone number.
The following Personal Data is collected and processed for the purposes of communication via the Website:
• Name;
• Email address;
Are you required to provide us with Personal Data?
Please note that in order to purchase goods on the Website or for us to contact you after submitting an inquiry, you must provide us with the Personal Data specified above.
Where do we get your data from (what is the origin of the data)?
Where can we get your data from?
• From you directly (when you provide data through the Website, submit inquiry forms, etc.);
• From your representative.
How long do we store the Personal Data you provide?
The Company stores your data as long as required by the legal acts regulating the Company's activities (e.g., Personal data related to the execution of a concluded contract for the purpose of selling services through the Website is stored for 10 (ten) years from the date of execution of the contract; Personal data for the purpose of submitting inquiries through the Website is processed for 1 (one) year after the date of the last correspondence with you).
In cases where legal acts do not set deadlines, the Personal Data provided by you through the Website is stored for 3 (three) years from the date of the last correspondence with you (in order to ensure the appropriate quality of service provision through the Website).
Who do we provide your personal data to?
The information you provide to us, including Personal Data, may be transferred to computers located outside your jurisdiction where the data protection laws may differ from those in your jurisdiction. If you are located outside the Republic of Lithuania, please note that we transfer such data to Lithuania and process it there. By voluntarily providing us with Personal Data, you consent to its use in accordance with this Privacy Policy.
Please note that we will not share your Personal Data with others without your permission, except in the following cases:
• Service providers
For the processing of personal data, the Company has the right to use data processors who process data on behalf of the Company, such as companies providing cloud, server rental and related services that would store your personal data, as well as companies providing IT maintenance, which may have access to your personal data. Such data processors operate only in accordance with the Company's instructions and the requirements of legal acts.
• Related companies
We may also share Personal Data with Affiliates for purposes consistent with this Privacy Policy.
• Business transfer
As we develop our business, we may sell or acquire businesses or assets. In the event of a company sale, merger, reorganization, liquidation or similar event, Personal Data may be part of the assets sold.
• Legal requirements
We may disclose your information to third parties if we determine that such disclosure is reasonably necessary to (a) comply with the law; (b) prevent fraud or abuse; or (c) protect our property rights.
The Company does not transfer your personal data to third countries or international organizations, i.e. outside the European Union, except when it is obliged to do so by legal acts or courts, or it is necessary for the implementation of one of the purposes specified in these Privacy Policy.
Data subjects' rights
When you provide your Personal Data through our Website and in accordance with the GDPR, you have the following rights:
• the right to receive information about data processing;
• the right to access your personal data, including the right to a copy of your personal data;
• the right to request correction of your personal data if it is inaccurate;
• the right to request the erasure of your personal data (“right to be forgotten”);
• the right to request restriction of the processing of your personal data;
• the right to data portability;
• the right to object to data processing.
We inform you that if you disagree with the Company's decision regarding your request related to the implementation of your rights as a data subject, you have the right to file a complaint with the State Data Protection Inspectorate (more information https://vdai.lrv.lt/).
You also have the right to withdraw your consent (if you have given it) to the processing of your personal data at any time. You can withdraw your consent at any time by requesting to be removed from our mailing list by sending an e-mail to hello@topfloor.lt. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
In order to exercise the above-mentioned rights, you must submit a request to us in writing and in a manner that allows us to identify you, i.e. by confirming your identity. Requests for the exercise of GDPR rights without the possibility of establishing the identity of the person making the request are not processed by the Company.
All notifications related to the processing of personal data are submitted to:
• by email: hello@topfloor.lt;
• directly by coming to the office at the address: Kauno g. 32A, 6th floor, 03202 Vilnius, Lithuania.
• postal address: Kauno st. 32A-98, 03202 Vilnius, Lithuania.
Your requests for the exercise of your rights under the GDPR will be processed within a maximum of 1 month. Depending on the complexity of the request and the number of requests received, this period may be extended by 2 months.
Requirements for a request when submitted in writing:
• the application must be easy to read;
• the application must be signed;
• the request must include your name, surname, place of residence, and contact information for communication;
• the request must indicate which right you wish to exercise and, where applicable, the arguments or documents supporting such request;
• if a representative is submitting the application on your behalf, the application must include not only the data specified above, but also your representative's name, surname, place of residence, and contact information for communication.
Ways to verify your identity:
• When submitting an application directly to the Company's office: by presenting an identification document to the Company's employee;
• When submitting an application by mail: a copy of the person's identity document, certified by a notary, or a copy of this document, certified in another manner prescribed by law, must be submitted with the application;
• When submitting a request by email. Requests submitted in this way must be signed with a qualified electronic signature or formed by electronic means that ensure the integrity and immutability of the text (except in cases where you revoke your consent to process personal data in accordance with the procedure established in these Privacy Regulations).
Signing the request with a qualified electronic signature allows the Company to properly identify you and ensure that the information you request or information about the execution (refusal to execute) of the actions you request is disclosed only to the person to whom it is intended, i.e. you.
Scanned copies of signed applications or complaints submitted by e-mail without a qualified electronic signature do not meet the requirements set out in the legislation. Such submission of an application may be an obstacle to accepting your application for consideration, therefore, if you do not have a qualified electronic signature, you should submit the application by mail or come directly to the Company's office.
When submitting an application through a representative, the application must be accompanied by a document confirming the representation or a copy thereof, approved in accordance with the procedure established by legal acts.
Changes
We may change or supplement the terms of this Privacy Policy from time to time. The Company will notify you of any changes on the Website.
We advise you to periodically review this Privacy Policy for any changes that may have occurred. This Privacy Policy was last updated on the date indicated above. If you continue to use the Website after any changes or revisions to this Privacy Policy, you will be deemed to have accepted the terms of such revised Privacy Policy.