Privacy policy

1. What does this Privacy Policy mean?

In this privacy policy (hereinafter – Privacy Policy), we provide you with information about how UAB GBY (hereinafter – Gby) processes your personal data obtained when:

  • You visit the website www.gby.lt (hereinafter – the Website)
  • Gby provides you with services;
  • You perform active actions on Gby’s social media accounts;
  • You register on our website and log in to your account;
  • Gby conducts direct marketing;
  • You participate in Gby selections for vacant positions;
  • You submit requests to us.

Hereinafter all persons specified below, whose data is processed by Gby, are referred to as the Customers. The Privacy Policy also provides for certain obligations of the Customers, which must be followed when visiting the Website.

2. About UAB GBY

UAB GBY, legal entity code 179435940, registered office at Pramonės str. 30-4, LT-72320 Tauragė, data about the company is collected and stored in the Register of Legal Entities of the Republic of Lithuania. Regarding data protection issues, you can contact us by e-mail info@gby.lt.

3. What is personal data?

Personal data is any information collected by Gby about the Customer that can be used to identify the Customer and is stored electronically or otherwise.

Personal data includes any information, including the Customer’s name, address, IP address, that Gby collects about the Customer for the purposes specified in this Privacy Policy or in a separate Customer’s consent or agreement with Gby.

This data also includes the Customers’ personal information in the public space, which Gby gets to know when the Customer contacts Gby’s using social media tools or performs active actions on Gby’s social media tools’ accounts.

4. How do we collect your data?

How we collect your data depends on the services we provide to you or the nature of our collaboration.

Gby processes data:

  • received directly from the data subject (You), e.g. when you send us inquiries or messages through the specified contacts, sign cooperation agreements with us, or send us your resume when applying for job vacancies, fill out questionnaires, register in our information systems, provide your e-mail address in order to receive newsletters, etc.;
  • which is generated when you use our services, e.g. when you use our network and services, i.e. you make a phone call, send a text message, browse the Internet, visit our websites, etc.;
  • which we receive from other sources, e.g. if there is a basis, from other institutions or companies, i.e. publicly available registers, insurance companies, etc.

5. Personal data processed in the course of providing services

Purpose of data processing

Personal data processed

Data processing term

Basis of data processing

Conclusion of purchase and sale agreement with customers

Name, surname, personal document number, address of the place of residence, other data required for issuing an invoice (for example, a copy of the personal document, if paid in cash)

 

10 years after the end of the agreement

Agreement

 

Clause b of Part 1 of Article 6 of the GDPR

 

Conclusion of a lease agreement with customers

Name, surname, address, date of birth, phone number, driver’s license number, driving experience

When entering into an agreement with a legal entity – details of the responsible person – name, surname, phone number, position held in the company and a copy of the driver’s license.

 

10 years after the end of the agreement

Agreement

 

Clause b of Part 1 of Article 6 of the GDPR

 

Provision of services using a company account (used only after concluding a lease agreement)

 

Name, surname, data, agreement data

Data is stored for 10 years from the date of the customer’s last login to the customer account or the customer’s last purchase.

 

Agreement

 

Clause b of Part 1 of Article 6 of the GDPR

 

Consent

 

Clause a of Part 1 of Article 6 of the GDPR

 

Debt administration

/recovery

Name, surname, phone number, e-mail address, address, amount of debt incurred, circumstances of indebtedness, circumstances of debt settlement

 

Until the full repayment of the debt and 10 years after the end of this period.

Legitimate interest

 

Clause f of Part 1 of Article 6 of the GDPR

6. Direct marketing

Purpose of data processing

Personal data processed

Data processing term

Basis of data processing

Sending offers, newsletters and advertisements to customers

 

Name, surname, phone number, e-mail address.

2 years after the end of the agreement

Consent

 

Clause a of Part 1 of Article 6 of the GDPR

 

Part 1 of Article 81 of the Law on Electronic Communications

You have the right to refuse to receive direct marketing messages at any time by contacting us by e-mail at  info@gby.lt.

If you are our active Customer and you have not objected to receiving Gby’s direct marketing communications, we will send you communications by e-mail based on our legitimate interest regarding goods or services that are similar to the services provided to you.

7. Personal offers

Purpose of data processing

Personal data processed

Data processing term

Basis of data processing

Providing personalized offers based on the data provided by the customer

Name, surname, phone number, e-mail address, address, frequency of use of services, duration of the concluded agreement, etc.

1 year after consent is obtained

Consent

 

Clause a of Part 1 of Article 6 of the GDPR

You have the right to refuse to receive personal offers at any time by contacting us by e-mail at info@gby.lt.

 

8. Participation in selections for vacancies

Purpose of data processing

Personal data processed

Data processing term

Basis of data processing

Selection for vacancies

Your resume and/or cover letter and other information provided by you.

Until the end of the selection process, motivational letters are deleted after an interview with a potential candidate

Consent

 

Clause a of Part 1 of Article 6 of the GDPR

 

9. Examination of inquiries, reports and complaints

Purpose of data processing

Personal data processed

Data processing term

Basis of data processing

Processing inquiries by

e-mail

Your name, surname, e-mail address and the text of the correspondence.

1 year from the time the request was processed

Consent and agreement

 

Clauses a and b of Part 1 of Article 6 of the GDPR

 

Accepting inquiries by phone

The phone number from which you are calling, the recording of the phone conversation, the metadata of the call – duration, time.

30 days

Consent and agreement

 

Clauses a and b of Part 1 of Article 6 of the GDPR

 

All personal data that you provide when communicating with us is used only for the above purposes and to view messages, as well as to administer and manage communication flows.

We undertake not to use your personal data in any publications without your express consent in such a way that it is possible to determine your personal identity.

10. Cookies

A cookie is a small file consisting of letters and numbers that we save on your browser or your computer’s hard drive with your consent. We use different cookies for different purposes. Cookies also help us distinguish you from other users of the website, thus ensuring a more pleasant experience when using the website and allowing us to improve the website.

Most browsers allow you to reject all cookies, and some browsers have the option to reject only third-party cookies. Thus you can use these opportunities. However, please note that blocking all cookies will have a negative impact on the use of the website, and without cookies you will not be able to use all the services provided on the website.

We use the following cookies:

  • Absolutely necessary cookies. These cookies are necessary for the website to function. The basis of the data processed by such cookies is the proper execution of the agreement when the Customer visits the website, and Gby ensures the quality and security of the visit. These can be cookies that, for example, allow the Customer to log in and access protected areas of the website, use the shopping cart function or other services.
  • Analytical and/or performance cookies. These cookies enable Gby to recognize and count visitors to the website and to track how visitors move around the website while using it. This helps Gby improve the website’s performance, such as ensuring that users can easily find what they are looking for. The basis for processing the data collected by these cookies is the consent of the Customers.
  • Functional cookies. These cookies are used to recognize the Customers when they return to the website, so that Gby can adapt the presented content to the Customers’ needs, remember the relevant information for the Customers. The basis for processing the data collected by these cookies is the consent of the Customers.

Detailed description of cookies:

Cookie name

Goal/purpose of data processing

Creation moment

Validity period

Nature of the cookie (necessary, analytical, functional)

cclist

Records the customer's choice regarding cookies

After confirming the Cookies selection in the table

1 year

Necessary

_ga [2x]

Registers a unique ID that is used to generate statistical data about how the visitor uses the website.

 

2 years

Analytical

_gat

It is used by Google Analytics to regulate the frequency of requests.

 

1 day

Analytical

_gid

Registers a unique ID that is used to generate statistical data about how the visitor uses the website.

 

1 day

Analytical

_gcl_au

It is used by Google AdSense to experiment with the effectiveness of advertisements among websites using their services.

 

3 months

Analytical

_fbp

It is used for Facebook advertising.

 

3 months

Analytical

11. Social media tools

The website contains links to our social media accounts. We currently have the following accounts:

We recommend reading the privacy notices of third parties and contacting the service providers directly if you have any questions about how they use your personal data.

12. Data disclosure

We may disclose information about you to:

  • Our professional advisors, auditors;
  • Notaries, if the agreement concluded with you requires a notarized form;
  • Bailiffs, entities providing legal and/or debt recovery services,
  • Entities taking over the right of claim to the debt;
  • Joint debtor data file managers;
  • Companies providing data centers, hosting, cloud, website administration and related services, creating, providing, supporting and developing software, companies providing information technology infrastructure services, companies providing communication services;
  • Companies providing advertising and marketing services;
  • Companies providing archiving, physical and/or electronic security, asset management and/or other business services;
  • In accordance with the procedure provided by law to state institutions: the State Tax Inspectorate, the Centre of Registers, the State Social Insurance Fund Board, the Labor Exchange, etc.;
  • Law enforcement authorities at their request or at our initiative if there are suspicions that a criminal offense has been committed, as well as to courts and other dispute resolution authorities;
  • Tax administrators.

Your personal data will not be transferred to a third country and/or international organization. Except for the cases provided in this Privacy Policy, we do not provide your personal data to any third parties.

The list of recipients or the categories of recipients specified in the privacy policy may change, so if you wish to be informed about changes in the recipients of your personal data, please notify us by e-mail to info@gby.lt , stating “I would like to receive information about the change of the recipients of my personal data, name, surname”.

13. Security of your personal data

Your personal data will be processed in accordance with the requirements of the General Data Protection Regulation, the Law on Legal Protection of Personal Data of the Republic of Lithuania and other legal acts. When processing your personal data, we implement organizational and technical measures that ensure the protection of personal data against accidental or illegal destruction, alteration, disclosure, as well as against any other illegal processing.

14. Your rights

In this section, we provide information about your rights related to our processing of your personal data and the cases when you can use these rights. If you want to receive more information about your rights or exercise them, contact us at the following email address: info@gby.lt .

Gby will provide you with information about the actions taken after receiving your request regarding the implementation of your rights without undue delay, but no later than within 1 (one) month after receiving the request. Considering the complexity of the request and the number of requests received, the above-mentioned deadline can be extended for another 2 (two) months. In this case, we will inform you about such extension of the deadline and the reasons for it within 1 (one) month after receiving the request.
Gby will refuse to exercise your rights only in the cases provided for by law.

  • Right to withdraw consent. If you have given us your explicit consent for the processing of your data, you can withdraw it at any time by sending an email to info@gby.lt .
  • Right to access your data. We aim for you to fully understand how we use your personal data and not experience any inconvenience. You can contact us at any time and ask whether we process any of your personal data. If we store or use your personal data in any way, you have the right to access them. To do this, submit a written request to us at the following e-mail address info@gby.lt , confirm your personal identity and observe the principles of fairness and reasonableness when submitting such a request.
  • Right to request more information. If you have any questions about the use of your personal data, we will be happy to answer them or provide you with any additional information that we can disclose. If you have any specific questions or did not understand the information provided, please contact us by e-mail at info@gby.lt.

15. Additional rights

Below we provide information about additional rights you have, which you can exercise by following the procedure described below.

  • You have the right to ask us to correct any inaccuracies in the data we possess. In this case, we may ask you to confirm the corrected information.
  • You have the right to ask us to delete your personal data. This right is exercised in the cases provided for in Article 17 of the General Data Protection Regulation (EU) 2016/679.
  • You have the right to ask us to limit the processing of your personal data or not to process them:
    i. During the period necessary for us to verify the accuracy of your personal data, when you submit claims regarding the accuracy of the data;
    ii. When our collection, storage or use of your personal data is illegal, but you decide not to request the deletion of the data;
    iii. When we no longer need your personal data, but you need it to establish, fulfill or defend a legal claim;
    iv. For the period necessary to determine whether we have a more important legal basis for further processing of your personal data, if you have exercised your right to object to the processing of personal data.
  • You have the right to the transfer of data that we received from you with your consent or for the purposes of concluding an agreement. After you exercise this right, we will transfer a copy of the data you provided at your request.
  • You have the right to object to us using your personal data:
    i. When we use such data to secure our legitimate interests, but we do not have a more important legal basis to continue using your personal data, or
  • ii. Any time we use your personal data to send newsletters or for direct marketing purposes. In this case, the data will no longer be used for these purposes, but may be used for other legitimate purposes.

16. Complaints

If you believe that your rights as a subject of personal data are and/or may be violated, please contact us immediately with a complaint to the e-mail address info@gby.lt. We assure you that only after receiving your complaint, we will contact you within a reasonable period of time and inform you about the progress of the investigation of the complaint, and later about the result.

If you are not satisfied with the results of the investigation, we inform you that you can file a complaint with the supervisory authority – the State Data Protection Inspectorate (contacts at www.ada.lt).

17. Liability

You are responsible for the accuracy, correctness and completeness of the data you provide to us. If the data provided by you changes, you must immediately inform us about it by changing the relevant data in the registration form or, if the data is not specified in the registration form, by informing us about it by e-mail. In no case will we be responsible for any damage caused to you due to the fact that you have provided incorrect or incomplete personal data or have not informed us when they have changed.

18. Changes to the Privacy Policy

We may update or change this Privacy Policy at any time. Such updated or amended Privacy Policy will be effective upon its posting on our Website. You should check it from time to time and make sure that you are satisfied with the current version of the Privacy Policy.

After updating the Privacy Policy, we will inform you about what we consider to be material changes by posting them on the Website. If you continue to access the Website after such notice is posted, you agree to the new requirements specified in the update. You can refer to the date “Update Date” which is given below, to find out when the Privacy Notice was last updated.

The Privacy Policy was last updated on 31-10-2023.