PRIVACY POLICY

JSC BioKos (hereinafter referred to as “we” or “Data Controller”) respects your privacy and undertakes to protect it in accordance with this Privacy Policy (hereinafter referred to as the “Policy”). With this Policy, we aim to keep you fully informed about the processing of your personal data, whether you communicate with us in person, by electronic means (such as through our website or email) or in any other way of your choice.

We undertake to be transparent by providing clear information about what your personal data is being processed, the purposes of the processing, the period of retention of the personal data, as well as the legal basis for the processing and other information we are required to provide under applicable law.

Please take the time to review this Policy and if you have any questions, please do not hesitate to contact us in one of the ways listed at the end of this Policy.

General information 

JSC BioKos is the manager of the website www.biocos.lt.

Data controller details:

JSC BioKos

Legal entity code: 302440535

Address: Vytauto st. 6, Vilnius, LT 08118

El. E- mail: info@biocos.lt

We confirm that your data will be collected in accordance with the applicable legal requirements of the European Union and the Republic of Lithuania and the instructions of the controlling authorities, all reasonable technical and administrative measures will be taken to protect our collected data about site visitors from loss, unauthorized use and / or alteration. Employees of the data controller have a written commitment not to disclose or disseminate information obtained in the workplace to third parties, including information about visitors to the website / social network accounts.

Individuals under the age of 14 may not provide any personal information through our website. If you are a person under the age of 14, you must obtain the consent of your parents or other legal guardians before providing personal information.

Terms used in the Rules shall be understood as defined in the General Data Protection Regulation no. 2016/679 (ES).

It is very important that you read this Policy carefully because each time you visit this website, you agree to the terms described here. If you do not agree to these terms, please do not visit our website, use its content and / or our services.

How do we collect information about you?

Your personal data, i.e., any information about you that allows us to identify you, is obtained in a number of ways:

• you may provide information (personal data) yourself (for example, by completing a registration form, registering for our events, calling us, subscribing to a newsletter, or otherwise contacting us yourself);

• information about you may be collected automatically (by visiting our website (with the help of cookies and similar technologies), by visiting our social accounts on Facebook, Google+, YouTube), by visiting our salon or service centre;

• in some cases, we may obtain information about you from third parties and may collect information about you from publicly available sources (such as your loved ones who have purchased from us; our partners who provide services to you or us.

You can provide us with your personal data directly. This usually happens when:

• you provide your details when making a purchase on our website in order to obtain information about our services / products;

• you make your requests or claims;

• you subscribe to our newsletter or other communication;

• you participate in surveys.

Information about you may be collected automatically. This usually happens when:

• make inquiries through our social networking accounts;

• you use the website (data is collected using cookies and similar technologies. You can find more information about the cookies we use below);

• you make public posts on the social networking platforms we follow;

• you call us (if a call is recorded and call logs).

We may link information we receive about you from your own public and commercial sources to other information we receive from you or about you.

We may collect information about you and other cases not covered in this Policy. If this happens, we will inform you further.

What information (personal data) do we process about you?

While we strive to collect as little information about you as possible, we collect the following information for our activities:

• information necessary to provide you with our services / products, to send you the ordered goods;

• the information you provide in the surveys;

• the information you provide when calling us;

• information necessary to identify you and make sure that the order has been placed on your behalf or that estate is authorized to collect it;

• information about your behaviour on our website;

• systematized information on the usage habits of all page visitors;

• information about the device you are using and other metadata.

Detailed information on how and what data we process is provided in the next section.

You may choose not to provide us with certain information (such as the information requested in the registration form), but in that case we will not be able or able to provide you with the services we offer.

Purposes and legal basis of data processing

The above information is processed for the following purposes:

• Provision of services;

• Execution of placed orders;

• Ensuring the security of property and individuals (video surveillance);

• Customer service quality assurance (call recording);

• For marketing purposes, such as providing customized advertisements and sponsored content and sending promotional notices, evaluating and analysing your market, customers, products and services (including collecting your opinion about products and services, conducting customer / partner surveys, contests or shares to the extent permitted by law);

• Learn how people use our products and services to improve them and create new content, products and services;

• Defend your interests in court or another institution.

⃰Please be informed that we have the right to send advertising information about other similar products or services to our customers or persons registered on our website www.biocos.lt, and you have the right now or at any time later to refuse to receive direct marketing content sent by us. informing us of your decision by e-mail. by e-mail info@biocos.lt or by using the opt-out link in the newsletter itself.

Your personal data is processed on the basis of one or more grounds for lawful processing:

• Compliance with legal requirements;

• Execution of the contract with you;

• Our legitimate interests, unless your private interests prevail;

• In certain cases, your consent.

The purposes for which we process your personal data with the appropriate legal basis and the personal data we process are set out in the following table:

Purpose         Legal basis (s)                     Personal data

Provision of services                                   Registration for trainings, entertainment

Compliance with legal requirements           Name, surname, telephone, e-mail

Execution of electronic orders                     Execution of orders

Compliance with legal requirements           Name, surname, telephone, address, e-mail address

Ensuring the security of property and individuals (video surveillance)     Ensuring the security of property and persons is a legitimate interest     Video data.

Customer service quality assurance (call recording)                  

Legitimate interest - quality assurance of customer service; the ability to demonstrate compliance with the standards specified by the manufacturer                  Telephone call record and transcript

Email address and correspondence content

For marketing purposes, such as providing customized advertisements and sponsored content and sending promotional messages, evaluating and analysing your market, customers, products and services (including collecting your opinion about services and conducting customer surveys) It is in the legitimate interest to inform about the observed deficiencies and other services, events, news and other relevant information.

Your consent. Name, surname, telephone, e-mail, other information that may be required during the provision of services

Learn how people use our services to improve them and create new content, products and services. For this purpose, we process your personal data with a legal interest in monitoring the quality of our services, creating and improving the content of our website, ensuring the security of the website. The IP address, version of the operating system and settings of the device you use to access the content, the time and duration of your session, and any information stored in cookies.

Evaluation and recruitment of job vacancies Your consent. General information about the candidate: name, surname, date of birth, place of residence or residential address, e-mail address and / or telephone number, information about the candidate's work experience (place of work, period of work, position, responsibilities and / or achievements) , information on the candidate's education (educational institution, period of study, education and / or qualification), information on in-service training (training, certificates obtained), information on language skills, information technology, driving skills, other competencies, other information, which you provide on your CV, cover letter or other application documents.

Recommendations, employers' feedback: the person recommending or giving feedback to the candidate, his / her contact, the content of the recommendation or feedback.

Candidate evaluation information: summary of the interview with the candidate, insights and opinions of the selection person (s), test results of the candidate.

Defend your interests in court or another institution. Compliance with legal requirements.

Legal interest - to defend against filed claims and claims. Depending on the claim or claim, all of your personal data we hold about you listed in this Policy may be processed for this purpose.

In cases where we cannot rely on one of the legal bases in this table, we will ask for your consent before processing your personal data (such cases will be clear from the circumstances and context).

In cases where we process your personal data for purposes other than those specified in these rules, we will inform you by means of a separate notice.

If you provide us with the details of other persons related to you, you should inform them and, if necessary, obtain the consent of those persons and acquaint them with this Policy. We may also collect your personal data if you are a representative of our client - a legal entity.

To whom do we transfer your personal data?

We may transfer your personal data:

• for companies that provide services at our request, such as couriers;

• to other responsibly selected business partners;

• to other parties when required to do so by law or when necessary to protect our legitimate interests.

In order to receive direct marketing offers from our business partners, you will be asked for separate consent.

Other parties to whom we may have access to information about you where it is necessary to protect our legitimate interests are public authorities, pre-trial investigation officers, courts and so on.

What do we do to protect your information?

We have put in place smart and appropriate physical and technical measures to protect the information we collect for the purpose of providing content / services. Keep in mind, however, that while we take reasonable steps to protect your information, no website, online transaction, computer system, or wireless connection is completely secure.

How long will we protect your personal data?

We will protect your personal data to the extent necessary to achieve the stated purpose. Once your intended purpose has been achieved, your personal data will be deleted, unless the law requires us to retain the information for tax purposes or the data may be necessary for a pre-trial investigation, but in any case, the retention period will not exceed 10 years. At the end of this period, the data will be deleted in such a way that they cannot be reproduced.

Generally, personal data are stored in the following terms:

Personal data. Storage period.

Data in the payment and purchase order      10 years after the payment transaction

Data provided by candidates for vacancies   6 months after the end of the selection

Personal data is used for marketing             As long as you are our active customer and for another 2 years after your last visit to us or active action on our website

IT system records (windows)                       At least one year

Analytical data                                           This data is usually collected automatically by you using the website and anonymized / aggregated shortly after receipt.

Your rights

The data subject whose data are processed in the activities of the Data Controller has the following rights, depending on the situation:

• know (be informed) about the processing of your data (right to know).

• access to your data and how it is processed (right of access).

• require the rectification or, depending on the purposes of the processing of personal data, the addition of incomplete personal data (right of rectification).

• destroy your data or suspend your data processing (excluding storage) (right to destroy and right to be "forgotten").

• the right to require the controller of personal data to restrict the processing of personal data for one of the legitimate reasons (right to restrict).

• the right to transfer data (right to transfer).

• the right to object at any time to the processing of your personal data where such processing is carried out in the public interest or is necessary for the legitimate interests of the controller or of a third party. In order to process personal data, the data controller has the burden of proving that the data are processed for compelling legitimate reasons which outweigh the interests of the data subject (right to object).

• submit a complaint to the State Data Protection Inspectorate.

We may not enable you to exercise the above rights when, in cases provided for by law, it is necessary to ensure the prevention, investigation and detection of criminal offenses, breaches of official or professional ethics, and the protection of the rights and freedoms of the data subject or others.

Your rights will be exercised upon confirmation of your identity live or electronically.

Your right. Certain restrictions.

Know (be informed) about the processing of your data (right to know). You have the right to receive information about the processing of your personal data in concise, simple and comprehensible language before it starts.

Access to your data and how it is processed (right of access). This right means:

• Confirmation that we process your personal data;

• Submission of a list of personal data processed by you;

• Providing an accurate and legal basis for the processing of your data;

• Providing the source of your personal information;

• Information or applied profiling;

• Submission of data retention time.

Once we have identified you, we will provide you with the information listed above, provided that this does not infringe on the rights and freedoms of others.

Require the rectification or, depending on the purposes of the processing of personal data, the addition of incomplete personal data (right of rectification). Applicable if the information we have is incomplete or inaccurate.

Destroy your data (right to be "forgotten"). Applicable if:

• the information we have is no longer needed to achieve the stated objectives

• we process the data with your consent and you withdraw your consent

• we process your data on the basis of a legitimate interest and, upon your request, it is established that your private interests prevail

• information obtained illegally

Suspend your data processing (except storage). This right can be exercised for the period until we analyse the situation, i.e.,:

• if you dispute the accuracy of the information

• if you object to the processing of personal data when it is done on the basis of a legitimate interest

• we use the information illegally, but you object to its deletion

• we no longer need the information, but you demand that it be kept for legal litigation

Require the personal Data Controller to restrict the processing of personal data for one of the legitimate reasons (right to restrict). You may not allow us to use your personal data for direct marketing purposes.

Right to data transfer. This right can be exercised if you have provided your data and we process it automatically based on your consent or an agreement with you.

Right to object. This right may be exercised where such processing is carried out in the public interest or is necessary for the legitimate interests of the controller or of a third party. In order to process personal data, the controller has the burden of proving that the data are processed for compelling legitimate reasons which outweigh the interests of the data subject. (right to object)

Submit a complaint to the State Data Protection Inspectorate at www.ada.lt

How will you exercise your rights?

You can submit a request for the implementation of the above rights, as well as complaints, notifications or requests (hereinafter - the Request) to us by e-mail: info@biocos.lt, by mail to: Vytauto str. 6, Vilnius, LT 08118, or upon arrival to us. 

We will provide a response to your Request no later than within 30 (thirty) calendar days from the date of receipt of the Request. In exceptional cases, requiring additional time, we will, after notifying you, have the right to extend the deadline for submission of the requested data or other requirements specified in your application to 60 (sixty) calendar days from the date of your request.

Cookies, signals and similar technologies.

In this Policy, we use the term "cookies" to describe cookies and other similar technologies, such as pixel tags, web beacons, and clear data gateways (clear GIFs).

When you visit our website, we want to provide content and features that are tailored to your needs. This requires cookies. These are small pieces of information stored in your web browser. They help the Data Controller to identify you as a previous visitor to a particular website, save the history of your visit to the website and adapt the content accordingly. Cookies also help to ensure the smooth operation of websites, allow you to monitor the duration and frequency of visits to websites and collect statistical information about the number of website visitors. By analysing this data, we can improve our websites and make them more convenient for you to use.

Cookies used on our website:

Name             Period            Purpose

XSRF-TOKEN                     Until the site closes               A cookie is used to store session information

_ga                2 years           A cookie is used to identify a visitor and track website traffic through Google Analytics

_gat               10 min           A cookie is used to track website traffic through Google Analytics, as well as to determine the loading speed of the website.

_gid               24 hours         A cookie is used to track website traffic through Google Analytics and to identify a website visitor

_hjIncludedInSample           Until the site closes               A cookie is used to track website traffic through Hotjar and to identify the website visitor

fr                   3 months       A cookie provides an encrypted Facebook ID and a browser ID used for advertising purposes

laravel_session                     Until the site closes               A cookie is used on a visitor's session website to store information

When you use a browser to access content we provide, you can configure your browser to accept all cookies, reject all cookies, or be notified when a cookie is sent. Every browser is different, so if you don’t know how to change your cookie settings, check out its help menu. Your device's operating system may contain additional cookie controls. If you do not want information to be collected through cookies, use the simple procedure available in most browsers to allow you to opt out of the use of cookies. To learn more about how to manage cookies, visit: http://www.allaboutcookies.org/manage-cookies/. 

Keep in mind, however, that some services may be designed to work only with cookies, and disabling them will prevent you from using them or parts of them.

In addition to the cookies used by the Data Controller, our websites allow certain third parties to set and access cookies on your computer. In this case, the use of cookies is subject to the privacy rules of third parties.

Please note that our social network accounts are subject to the appropriate social network cookie policy.

What are the personal data protection principles we follow?

We follow the following principles when collecting and using the personal data you entrust to us, as well as from other sources:

• Your personal data is processed in a lawful, fair and transparent manner (principle of legality, fairness and transparency).

• Your personal data is collected for specified, explicit and legitimate purposes and not further processed in a way incompatible with those purposes (purpose limitation principle).

• Your personal data are adequate, relevant and only necessary for the purposes for which they are processed (data minimization principle).

• The personal data processed are accurate and, where necessary, kept up to date (principle of accuracy).

• Your personal data is kept in a form that allows for the identification of the person for no longer than is necessary for the purposes for which your personal data are processed (principle of limitation of retention period).

• Your personal data are processed in such a way as to ensure adequate security of personal data through appropriate technical or organizational measures, including protection against unauthorized or unlawful processing and against accidental loss, destruction or damage (principle of integrity and confidentiality).

Contact us

If you notice a non-compliance with this Policy, a security vulnerability on our website or have other questions regarding the processing of your personal data, please contact us in one of the following ways:

By mail: UAB BioKos

Address: Vytauto st. 6, Vilnius

El. E- mail: info@biocos.lt

Final Provisions

This Policy shall be reviewed at least every two years. Following the update of the Policy, we will notify you of any material changes that we believe will be posted on our website. If you log in or use our content and / or services after such posting, we will assume that you agree to the new requirements set forth in the update.

The document was approved by the director's order no. To-024