Privacy Policy

1. What does this Privacy Policy mean?

This privacy policy (hereinafter referred to as the "Privacy Policy") defines the basic rules and conditions for the processing of personal data, which apply to visitors of the website www.ekstramylia.eu (hereinafter referred to as the "Website"); to customers (natural persons) or representatives of customers (legal entities) of Ekstra mylia, UAB (hereinafter referred to as the "Ekstra mylia store"); to candidates participating in the selection process of vacancies at Ekstra mylia; to persons who apply/inquire at Ekstra mylia; to the representatives of Ekstra mylia's partners and service providers; and other.

2. About Ekstra mylia

Ekstra mylia, UAB, legal entity code 305572862, registered office at Birutės g. 22, Trakiškiai, LT-69315 Kalvarija, Republic of Lithuania, the data about the company are collected and stored in the Register of Legal Entities of the Republic of Lithuania. Contacts for personal data issues: e-mail: auguste@ekstramylia.eu; tel. +370 687 93313.

3. What is personal data?

Personal data is any information that Ekstra mylia collects/stores about you that can be used, for example, to identify you, to provide you with services or sell you goods, etc., and is stored electronically or on paper.

Personal data includes any information, including but not limited to your name, address, email address, telephone number, which Ekstra mylia collects/stores about you for the purposes set out in the Privacy Policy or in your separate consent or agreement with Ekstra mylia.

4. Whose personal data does Ekstra mylia process?

We need your personal data, which may be collected in the ways described below. In this Privacy Policy we set out what you can expect when Ekstra mylia collects personal data about:

- Our customers (natural persons) and representatives of our customers (legal persons);
- Persons who cooperate with us (partners/external service providers);
- Visitors to our website;
- People who have made enquiries/questions to us;
- Applicants for a vacancy;

5. How does Ekstra mylia receive your personal data?

We collect your personal data that you provide to us about yourself when you provide us with your personal data via the Ekstra mylia website www.ekstramylia.eu or to contact us via the contact details provided by Ekstra mylia, when you provide us with your data in order for us to provide you with our services as a customer, when you apply for a job with us, etc.

- When entering into service/cooperation/other contracts;
- When you provide us with your data (enquiries) via our website or on the spot;
- When you send an email to the email address provided by Ekstra mylia;
- When you accept the installation of cookies on your device;
- When you apply for our vacancies.
- Or when you otherwise provide or receive information from third parties with your consent.

6. What personal data do we process and for what purpose?

For the purpose of providing services and/or selling goods to natural persons, the following personal data of customers (natural persons) are processed:

- Name, surname, email address, telephone number, bank account number, details of suppliers and buyers, other personal data related to the provision of services or sale of goods.

For the purpose of providing services or selling goods to legal persons, the following personal data of representatives of customers (legal persons) are processed:

- Contact details (name, surname, address, e-mail address, telephone number).

For the purpose of cooperation/partnership with Ekstra mylia, the following personal data of partners/external service providers (their representatives) are processed:

- Name, surname, telephone number, address, e-mail address, bank account number.

For the purpose of administering and responding to an enquiry received via the Ekstra mylia website, the following personal data of website visitors are processed:

- Name, e-mail address.
It should be noted that Ekstra mylia deletes the superfluous personal data provided by the data subjects which are not necessary for the purpose of submitting the request and receiving the reply.

For the purpose of recruiting new employees, the following personal data of candidates are processed:

- Name, surname, CV, telephone number, e-mail address, certificates held, diploma, image, qualifications, work experience (previous jobs).

For the purpose of direct marketing, the following personal data of customers (natural persons) or representatives of customers (legal persons) are processed:

- Name, e-mail address.

When a visitor logs in or visits the Ekstra mylia website, the following technical personal data are automatically collected and processed:

• IP address;
• date and time of connection;
• the name and universal address (URL) of the web page that connects to our Website;
• the operating system data of the visitor's device;
• Information from the visitor's internet service provider;
• Visitor's geographical location data;
• Other relevant technical information.

In the course of its activities, Ekstra mylia also acts as Data Processor for some of its customers and processes their personal data as Data Controllers in their interests and on their behalf, in accordance with the Data Processing Agreements concluded with them and the written instructions given to it regarding the processing of personal data.

7. What are the grounds for lawful processing and how much is retained?

Contract (for the provision of services/cooperation/other);

Legitimate interest - to respond to your queries, to provide you with the information you ask us for, etc.

Performance of statutory obligations (compliance with the legal requirements of the activities carried out, accounting, archiving, etc.);

Consent (e.g. for recruitment, direct marketing, etc.).

We will retain your personal data for as long as necessary to achieve and implement the purposes set out in this Privacy Policy, taking into account the nature of the services provided to you or the nature of the cooperation, except where longer retention of the personal data and related documents is required by applicable regulatory legislation and is necessary (e.g. mandatory retention periods for bookkeeping and other documents, etc.), or is necessary for the defence of the controller's legitimate interests before the courts or other public authorities.

8. Participation in selections

Ekstra mylia collects and processes your curriculum vitae and/or cover letter and/or other information provided by you for the purpose of participating in the selection process for the purpose of conducting the job selection on the basis of your consent, which you express to Ekstra mylia by sending/submitting your curriculum vitae and other information via the website.

After the end of the recruitment process, we are obliged to delete and/or destroy your personal data within 5 working days after signing the employment/internship contract with the selected candidate, unless you agree by separate consent that your data will continue to be used for the purposes specified in your consent.

9. Direct marketing

If you become our customer and give your separate consent at the time of collection of personal data, your personal data may be processed for direct marketing purposes.

You have the right to object at any time to the processing of personal data concerning you for marketing purposes.

Ekstra mylia will no longer process (use) your personal data for direct marketing purposes as soon as you object to processing for this purpose or withdraw your consent.

Your refusal to receive promotional offers and newsletters will not prevent you from using our services, but it will mean that we will not be able to provide you with useful offers. You can inform us of your disagreement or withdrawal of your consent by emailing auguste@ekstramylia.eu.

For direct marketing purposes, Ekstra mylia uses your personal data for as long as you are a customer of Ekstra mylia, unless you withdraw your consent.

10. Disclosure of data

We may disclose information about you to our employees, service providers or other recipients as reasonably necessary for those purposes as set out in this Privacy Policy.

We may be obliged to transfer your personal data in certain circumstances where:

• We are required to disclose information by law, including where we are required to disclose personal data to tax authorities and law enforcement authorities for the purposes of crime prevention and detection;
• we are required to disclose personal data in connection with legal proceedings or in order to obtain legal advice, or disclosure is necessary to establish, exercise or defend our rights;
• disclosure is necessary to protect our interests or the interests of others (for example, to prevent fraud);
• the information must be disclosed to a third party who provides administration or data processing services on our behalf (our Data Processors). In such circumstances, we undertake to take steps to ensure that third parties protect personal data in the same way as we do and to notify you of changes to this Privacy Policy; and
• it is necessary to disclose the information to a potential buyer of our business assets or organisation.

If your personal data will be transferred to a third country and/or international organisation, we will inform you in advance and ensure that the transfer is carried out in accordance with the requirements of the applicable legislation.

11. Security of your personal data

Your personal data will be processed in accordance with the General Data Protection Regulation, the Law on Legal Protection of Personal Data of the Republic of Lithuania and other legal requirements. When processing your personal data, we implement organisational and technical measures to ensure the protection of your personal data against accidental or unlawful destruction, alteration, disclosure, as well as against any other unlawful processing.

12. Your rights

This section provides information about the rights you have in relation to our processing of your personal data and when you can exercise these rights. If you would like more information about your rights or to exercise them, please contact us at auguste@ekstramylia.eu.

We will provide you with information on the action taken following your request to exercise your rights without undue delay, but at the latest within 1 month of receiving your request. Depending on the complexity of the request and the number of requests received, this deadline may be extended by a further 2 months.

Right to withdraw consent
If you have given us your explicit consent to the processing of your data, you may withdraw it at any time by notifying us at auguste@ekstramylia.eu.

Right of access to your personal data
We want you to fully understand how we use your personal data so that you do not experience any inconvenience. You can contact us at any time to enquire whether we are processing any of your personal data. If we store or use your personal data in any way, you have the right to access it. To do so, please submit a written request to us at the following email address: auguste@ekstramylia.eu.

Additional rights
Please see below for information about additional rights that you may have and that you can exercise by following the procedure described below.

• You have the right to ask us to correct any inaccuracies in the data we hold. In this case, we may ask you to confirm the corrected information.
• You have the right to ask us to delete your personal data. Please note that we will only be able to comply with such a request if:
• Your personal data is no longer necessary for the purposes for which it was collected (for example, we need your personal data in order to reply to your emails);
• we are prohibited by law from collecting, storing or using personal data;
• Your personal data is not necessary for the establishment, exercise or defence of a legal claim, for example in legal proceedings.
• You have the right to ask us to restrict or not process your personal data:
• for the period necessary to satisfy ourselves as to the accuracy of your personal data when you make a claim about the accuracy of the data;
• where our collection, storage or use of your personal data is unlawful but you choose not to request erasure;
• where we no longer need your personal data but you need it to establish, exercise or defend a legal claim;
• for the period necessary to determine whether we have an overriding legal basis to continue processing your personal data if you have exercised your right to object to the processing of personal data.
• You have the right to a transfer of the data that we have received from you with your consent or for the purposes of concluding a contract. If you exercise this right, we will transfer a copy of the data you have provided to us upon your request.
• You have the right to object to our use of your personal data:
• where we are using such data to further our legitimate interests, but we do not have an overriding legal basis for continuing to use your personal data; or
• at any time when we use your personal data to send newsletters or for direct marketing purposes. In this case, the data will no longer be used for these purposes but may be used for other legitimate purposes.

13. Complaints

If you believe that your rights as a data subject have been and/or may be violated, please contact us immediately with a complaint at auguste@ekstramylia.eu. Once we have received your complaint, we undertake to contact you within 14 days at the latest to inform you of the progress of the investigation of the complaint and, subsequently, of the outcome.

When you contact us to make a complaint, we will only use your personal data to investigate and respond to your complaint and to assess the quality of our services. If we receive a complaint about a member of our team, we may need to disclose your personal identity to that person. At the time of making a complaint, you may indicate that you do not want your personal identity to be disclosed and we will endeavour to comply with your request. However, it may not always be possible to handle a complaint anonymously.

If you are dissatisfied with our response, you may lodge a complaint directly with the State Data Protection Inspectorate (telephone +370 5271 2804, email: ada@ada.lt). You also have the right to lodge a complaint with the supervisory authority in the Member State where you are domiciled, where you work, or where the potential personal data breach occurred.

14. Liability

You are responsible for any actions (transmission of data, orders placed, etc.) performed on our Website. You are responsible for ensuring that the data you provide to us is accurate, correct and complete. If there are any changes to the data you have provided, you must inform us immediately by email to auguste@ekstramylia.eu.  In no event shall we be liable for any damage caused to you as a result of you providing incorrect or incomplete personal data or failing to inform us of any changes to such data.

15. Changes to the Privacy Policy

We may update or change this Privacy Policy at any time. Such updated or amended Privacy Policy will be effective upon posting on our Website.

The "Date Updated" at the bottom of the Privacy Policy indicates when the Privacy Policy was last updated.

The Privacy Policy was last updated on 2022-10-20.