General provisions:
1. The controller of your personal data is Lorita, UAB, (hereinafter referred to as Lorita), the contact details are available here: https://lorita.lt2. Personal data collected by Lorita shall be processed in accordance with the Law on Legal Protection of Personal Data of the Republic of Lithuania, the General Data Protection Regulation and other legislations. All employees and representatives of Lorita as well as employees of the representatives, who learn the secret of personal data, are bound to keep it confidential even upon expiry of their labour or contractual relations.
3. Lorita may hire data processors for processing of personal data and (or), at their own discretion, hire other entities who would carry out certain functions on behalf of Lorita. In such cases Lorita shall take required measures in order to make sure that such data processors would process personal data by adhering to the instructions given by Lorita and the effective legislations and shall require implementation of appropriate personal data security measures. Lorita shall also ensure that the aforementioned entities would be bound by confidentiality obligations and would not be able to use such information for any other purposes except to a scope needed for implementation of the functions assigned to them.
4. This Privacy Policy establishes the main rules applicable to collection, accumulation, processing, and storage of your personal data, other information related to you, the scopes, purposes, sources, and recipients of personal data being processed as well as other important aspects associated with your purchases of the products sold by Lorita and using the services of Lorita. Therefore it is hereby recommended analysing the provisions of this Privacy Policy thoroughly before ordering the products or starting using the services provided by Lorita.
5. Lorita respects a person’s right to inviolability of a private life and shall make every reasonably possible effort in order to ensure security and confidentiality of personal data as well as other information being processed.
6. You are welcome to visit this website without giving any information about you, however, if you would like to submit an inquiry, buy products, and (or) use the services offered by Lorita, you must be a registered user of the website. Lorita would ask you to provide personal data indicated in the system.
7. You acknowledge and confirm that you have become familiar with this Privacy Policy, understood and agreed to it by visiting the website at https://lorita.lt (hereinafter referred to as this website) and (or) by using the information available on it, the products and (or) services provided by Lorita. Lorita shall reserve the right to amend these provisions of the Privacy Policy, therefore, whenever visiting this website, you are obliged to make sure that you are familiar with the latest version of the Privacy Policy applicable at the moment of your visit on this website each time.

Purposes of the data processing
8. Lorita collects and processes your personal data for the following purposes:
8.1. sale of the goods, provision of services, drawing up and implementation of contracts, accounting of Customers and settlements;
8.2. debt management, debt recovery;
8.3. maintenance and administration of Customer relations, dispute prevention, and collection of proofs (recording of telephone conversations), correspondence with the Customer on business relations;
8.4. protection and defence of the interests and property of Lorita and Customers (video surveillance on the premises of Lorita). Before entering the premises of Lorita, which are under video surveillance, you are informed about this with special signs indicating video surveillance;
8.5. giving information on the goods and services to Customers. For this purpose personal data is processed in order to inform Customers about the goods sold by Lorita, services provided by them, their prices, specifics, amendments of contracts concluded with the Customers, etc., for sending systematic and other messages in relation to the services provided by Lorita. The personal data subject confirms understanding that such informational messages are essential for provision of the services and they shall not be regarded as direct marketing messages;
8.6. direct marketing in order to give offers to Customers on the goods sold and the services provided by Lorita;
8.7. other purposes for which Lorita has a right to process your personal data when you express your consent, when the data must be processed for lawful interests of Lorita or when Lorita is obliged to process data by respective legislations.
9. All your personal data collected for the aforementioned purposes, except for name, surname, personal number, date of birth and the exact residence place address, may be processed for the purposes of statistical analysis. Personal data processed for this purpose must be handled in such a manner that the identity of specific data subjects could not be determined upon inclusion thereof in the scope of statistical analysis. Collection of your personal data for the purposes of statistical analysis is based on lawful interests for analysis, improvement, and development of the activities being carried out. I have been informed that I have a right to disallow and refuse processing of my personal data for such a purpose at any time and in any form by informing Lorita about my disagreement or waiver via e-mail at info@lorita.lt. However, Lorita may continue processing of data for the purposes of statistics, assuming their able to prove that the data is processed for valid lawful reasons, which supersede the interests, rights, and liberties of the data subject or in order to raise, implement, or defend lawful claims.
10. In all aforementioned cases Lorita shall process personal data only to a scope needed for achieving respective clearly defined and lawful objectives, taking into consideration protection of the privacy of the data subject. Lorita shall make sure that personal data is processed accurately, in good faith and lawfully by strictly adhering to clear and transparent personal data processing requirements established by legislations.

Scopes of data processing
11. The following personal data may be processed for all aforementioned purposes:
11.1 name, surname, personal number, date of birth, address, e-mail address, telephone number, fax number, payment account number, position held;
11.2. data related to provision of equipment and (or) services, for instance, the service and details of the order placed for it, information on equipment purchased and (or) used, issuing of invoices, payment details, information on consent or refusal of personal data processing for direct marketing purposes and provision thereof to the third parties, contact details and related records;
11.4. data collected by using cookies and similar technologies related to browsing on this website, etc.;
11.5. records of telephone conversations when you call Lorita or answer calls made by employees of Lorita;

Data providers
10. Data providers:
10.1. data subject himself/ herself directly;
10.2. data generated when you use the services provided by Lorita, contact Lorita in writing, via telephone, e-mail, visit this website, when this is established by the effective legislations.

Data recipients
11. Data recipients:
11.1. Lorita’s service brokers (if provision of the services includes using their services), only to a scope needed for provision of the service;
11.2. debt management and collection companies, attorneys at law, companies processing joint debtor data files. Data on data subjects (debtors) having failed to implement their obligations in due time and properly shall be provided only upon giving a prior written reminder to the data subject on failure to implement the obligations and upon proper implementation of data protection requirements established by legislations;
11.3. courts of law or state authorities based on their request, only to a scope required for proper implementation of the effective legislations or a court decision;
11.4. other subjects under contracts with Lorita, only in case when you gave a separate consent for this yourself.
12. Data may be provided to the third countries only in case when provision of your electronic communication service is associated with the services provided in the third countries or a partner from the third country (correspondent) is hired for provision of the service.
13. With this document you confirm that you have been informed that your data: e-mail address and (or) telephone, could be processed for the purpose of direct marketing and that you have a right to disallow and to refuse of using your personal data for such a purpose at any time by informing Lorita about your disagreement or refusal in writing via e-mail at info@lorita.lt14. The data may be transferred to search engines or social network systems (a possibility to refuse data processing is ensured on the websites of these systems) for the purpose of direct marketing. The data shall not be provided to other entities.

Profiling
16. Profiling may be carried out by using the tools available on Google, Facebook or other analysis tools for the purpose of direct marketing and statistical analysis.

Terms of data processing
17. We store your personal data for no longer than needed for data processing purposes or as established by legislations, if they determine a longer data storage period. We seek to avoid storage of obsolete or unnecessary information and to make sure that personal data and other information on Customers would be kept up-to-date and correct.

Processing of minor’s personal data
18. A minor person under 14 (fourteen) years of age seeking to use the services of Lorita must provide a written consent of his/ her representative (father, mother, guardian) regarding processing of his/ her personal data.

Cookie policy
19. Lorita may use cookies on this website. Cookies are small files sent to the internet browser used by the person and stored on the Customer’s device. Cookies are transferred to a person’s computer during the first visit to this website. Later on cookies are used on the person’s device for identification, if they are designed for improvement of functionality and use of the website, also for purposes of analysis, they facilitate a person’s access to this website or information available on it.
20. Lorita monitors traffic on the website and collects information on how many visitors visited it, domain name of the visitors’ internet service provider’s server, etc. Such information is collected automatically during the visit to the website. It helps the website manager to understand how the visitors use the website and provides an opportunity for Lorita to improve the services being provided.
21. A message on use of cookies is displayed to a visitor of this website. You confirm your consent and allow the website manager to record cookies on your end device (computer, tablet, smart phone, etc.) by clicking on “SUTINKU” [AGREE] button on the information line. Furthermore, you also agree to use of cookies by continuing browsing on this website and without changing the existing settings.
22. Most web browsers accept cookies, however, if you do not agree to save cookies on your computer or other end device, you may change the settings of your internet browser and turn off all cookies or turn them on / off one by one. However, please note that in some cases this could slow down the speed of browsing on the internet, limit operability of certain functions on websites or block access to a website.
23. This website may contain links to third-party websites, products, and services as well as social network extensions. Privacy policy of a respective third party shall apply to the services or applications of the third parties. We urge you to get acquainted with the privacy protection policies applied by such third parties.

List of cookies:

Customization	Cookie name	Description
Google Analytics	__utma	Used to distinguish users and sessions. The cookie is created when the javascript library executes and no existing __utma cookies exists. The cookie is updated every time data is sent to Google Analytics.
	__utmb	Used to determine new sessions/visits. The cookie is created when the javascript library executes and no existing __utmb cookies exists. The cookie is updated every time data is sent to Google Analytics.
	__utmc	Not used in ga.js. Set for interoperability with urchin.js. Historically, this cookie operated in conjunction with the __utmb cookie to determine whether the user was in a new session/visit.
	__utmz	Stores the traffic source or campaign that explains how the user reached your site. The cookie is created when the javascript library executes and is updated every time data is sent to Google Analytics.
	__utmv	Used to store visitor-level custom variable data.

Your rights
24. You have the following rights:
24.1. A right to know (be informed) about processing of your personal data.
24.2. A right to get acquainted with the data: to get information on whether Lorita processes your personal data and, if yes, to get acquainted with your personal data processed by Lorita as well as to get information on the sources which your personal data has been obtained from, including specific data obtained from these sources, the purpose of processing thereof and who it is provided to or could be potentially provided to; to get a copy of your personal data from Lorita under the procedure established by the effective legislations. Upon receipt of your written application, Lorita would provide the requested data or would specify the reasons of refusal to comply with such a request in writing within a time period established by the legislations. The data may be provided free of charge once a calendar year, however, in other cases, a charge may be set for provision of data, which shall not exceed the expenses incurred in relation provision of the data.
24.3. A right to require correction of the data: to contact Lorita in writing and to require correction of incorrect, inaccurate personal data or to supplement your incomplete personal data by submitting an application, if your personal data processed by Lorita is incorrect, incomplete, or in inaccurate.
24.4. A right to request destruction of illegally, fraudulently accumulated personal data or to stop the operations of processing such personal data, except for storage. Lorita shall check lawfulness of processing of personal data free of charge immediately and, if necessary, destroy the data. The personal data shall be stored until correction or destruction thereof upon suspension of the operations of processing personal data upon request of the data subject.
24.5. A right to be forgotten: to request termination of the processing (to delete data), in case when personal data is processed with the person’s consent upon the person’s withdrawal of this consent or when the personal data is no longer needed for the purpose it has been obtained for or when the personal data was being processed illegally or the personal data must be deleted in order to adhere to a legal obligation. You must file a written statement of your disagreement to processing of personal data to Lorita in person, by mail or by using electronic communication tools. If your disagreement is legally justified, upon consideration of your request, Lorita would terminate the operations of processing personal data, except for cases established by the law.
24.6. A right to restrict data processing: to require restriction of data processing when the personal data subject challenges accuracy of the data for such a period of time during which the data controller could verify accuracy of the personal data; processing of the personal data is illegal and the data subject does not agree to deletion of the data and requests restriction of the use thereof instead; the data controller no longer needs the personal data for the purposes of processing thereof, however, it is needed for the data subject in order to raise, implement, or defend legal claims. The data controller shall inform the data subject processing of whose personal data has been restricted before lifting the restriction on processing of the data.
24.7. A right to data portability.
24.8. A right to disallow processing of your personal data for the purposes of direct marketing, also to withdraw the given consent at any time without specifying the reasons of the withdrawal.
25. It should be noted that the aforementioned rights may be restricted or not implemented:
25.1. When security or defence of the state must be ensured;
25.2. When public order, prevention, investigation, or detection of criminal acts or prosecution must be ensured;
25.3. When important economic or financial interests of the state must be ensured;
25.4. When prevention, investigation, or detection of breaches official or professional ethics must be ensured;
25.5. When protection of rights and liberties of the data subject or other persons must be ensured.
26. You may apply to Lorita for implementation of your rights by filing an application by mail, via fax (by referring to the contact details given on this website), via e-mail at info@lorita.lt The person must clearly indicate his/ her name and surname in one’s application and produce an identification document or sign the application by affixing an electronic signature.

Use of logos
27. A Customer purchasing the goods sold by Lorita or using the services provided by Lorita agrees that the name and (or) logo thereof may be used by Lorita for the purposes of direct marketing (for instance, Lorita could indicate that the Customer was using the services provided by Lorita) for the purposes of meeting business and professional interests.

Ensuring information security
28. The objective of Lorita is to ensure security of all information received from the Customer and public data files of a level as high as possible. Lorita uses proper legal, administrative, technical and physical security measures in order to secure this information from unauthorized access, use, copying, accidental or unlawful destruction, alteration, or disclosure as well as any other unlawful processing.

Final provisions
29. The provisions of this Privacy Policy shall be governed by the law of the Republic of Lithuania. All disputes arising out of the provisions of this Privacy Policy shall be resolved by way of negotiations and in the event of failure thereof, they shall be resolved by courts of law of the Republic of Lithuania.