Privacy Policy

1. General Provisions
1.1. UAB "Imsema" (hereinafter – the Company) respects the right to privacy of all its buyers, potential clients (who have tried the services but did not become clients), and all visitors to the e-imsema.lt website (hereinafter – the Website) (hereinafter – the Clients) and undertakes to ensure the protection of provided and received personal data. The Company also takes care to ensure the rights of clients as data subjects.
1.2. This Privacy Policy governs the main principles and procedures for the collection, processing, and storage of personal data of the Company's clients.
1.3. By using the Website, as well as by ordering or using the services offered by the Company in any form and by providing your personal data to the Company, you agree to the provisions of this Privacy Policy. Clients are deemed to be familiar with the Privacy Policy when they check the "box" during registration on the Website, indicating agreement with the Company's privacy policy. The Privacy Policy can be re-accessed on the Website at any time.
1.4. In processing the Client's personal data, we comply with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR), the Law on Legal Protection of Personal Data of the Republic of Lithuania (ADTAĮ), and other applicable legal acts.
2. Definitions
2.1. Personal data – any information relating to an identified or identifiable natural person (data subject); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.
2.2. Data subject – a natural person – a client of the Company (including Website visitors) whose personal data is collected by the Company.
2.3. Data subject's consent – any freely given, specific, informed, and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.
2.4. Data processing – any operation or set of operations performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
2.5. Data processor – a natural or legal person, public authority, agency, or other body which processes personal data on behalf of the Data Controller.
2.6. Data controller – UAB "Imsema", company code 122507861, registered address at Šeskinės g. 6-37, Vilnius, LT-07152, Republic of Lithuania, the data of which is collected and stored in the Register of Legal Entities.
2.7. Direct marketing – activity intended to contact the Client by mail, telephone, or other direct means to offer goods or services and/or to inquire about their opinion regarding offered goods or services.
3. What Cookies do we use and how?
3.1. What is a cookie – small files that are sent to the user's web browser and, upon the first visit to the website, are placed on the users' computers or other devices. Subsequently, cookies are used on the website to ensure the best possible use of the website for the user by identifying the user's computer and facilitating access to the website or the information contained therein, thus adapting the website content as conveniently as possible for the user.
3.2. These cookies are used on the Website, as well as in related systems of the Company, designed to serve the Client properly and qualitatively.
3.3. To ensure the possibility for you to browse the Website more conveniently and efficiently and to provide you with useful offers, we use the following Cookies on the Website: PHPSESSID (session information), "CookieInfoScript" (consent for cookies used), _gat, _ga, _git, __utma, __utmb, __utmc, __utmt, __utmz (cookies used by Google Analytics), datr, fr, sb, locale, reg_ext_ref, reg_fb_gate, reg_fb_ref (cookies used by Facebook Pixel), and "GPS", "PREF", "VISITOR_INFO1_LIVE", "YSC" (YouTube video content streaming information).
3.4. Client's right to refuse cookies – the Client may at any time delete or block some or all recorded cookies on their computers or other devices by changing the settings of the browser they use. More information about deleting or blocking cookies can be found on the website of the browser manufacturer. Please note that after performing these actions, some functions of the website may partially or completely stop working and become unavailable. The Client understands that the Website may use third-party plugins (partners, statistics collection systems, communication systems, etc.) that also use cookies to ensure their proper functionality. We emphasize that the website controller does not control, cannot be, and is not responsible for the cookies used by third parties, their content, or the privacy protection applied by these websites, with which we recommend familiarizing yourself individually in each case.

4. What personal data do we collect?
4.1. The Company collects and subsequently processes the Client's personal data that you provide yourself when using and ordering services on the Website or ordering services in any other way: name, surname, address, email address, telephone number, and other data related to the specifics of the service order. We note that you provide additional data on your own initiative when registering and/or ordering or managing the services provided by the Company.registering and/or ordering or managing the services provided by the Company.
4.2. Personal data specified by the Client is stored for the period of cooperation between the Company and the Client (during the provision of services) and for 10 (ten) years after the end of this period. Data may be stored for a shorter period if there is no legal basis for it.
5. For what purposes and how do we process personal data?
5.1. The data about the Client held by the Company will be processed in a lawful, fair, and transparent manner (principle of lawfulness, fairness, and transparency).
5.2. The Company processes the above-mentioned personal data of the Client for the purposes of processing and administering the purchase/order of services, processing accounting documents related to the service order, contacting you regarding the fulfillment of contractual obligations, and for direct marketing purposes (having the prior consent of the data subjects).
5.3. We ensure that the Client's personal data is and will be processed in a lawful, fair, and transparent manner, collected for specified, clearly defined, and legitimate purposes and not further processed in a manner incompatible with those purposes; adequate, relevant, and limited to what is necessary in relation to the purposes for which they are processed; accurate and, where necessary, kept up to date; processed in a manner that ensures appropriate security of the personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage, using appropriate technical and organizational measures (principle of integrity and confidentiality).
6. What data subject rights do you have?
6.1. The Client has the right to withdraw their consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. The data subject is informed of this before giving consent. Withdrawing consent is as easy as giving it.

6.2. You have data subject rights, which we will implement upon receiving a request from the Client by registered mail to the address Savanorių pr. 187, 31 korpusas, Vilnius, LT-02300, Republic of Lithuania, and upon proper verification of your identity. The Client has the right to:
• access their personal data and how it is processed;
• demand the rectification of inaccurate data or that incomplete personal data be supplemented.
6.3. The Client also has the right to:
• demand that the Company erase personal data concerning the Client ("right to be forgotten") if it is no longer necessary for the specified purposes or was processed unlawfully;
• demand that the Company restrict the processing of data;
• receive the personal data concerning the Client, which was provided to the Company, in a structured, commonly used, and machine-readable format (data portability) or request that it be transmitted to another data controller;
• object to the processing of personal data (e.g., for direct marketing purposes).
• of personal data (e.g., for direct marketing or other purposes).
7. How we process personal data for direct marketing purposes
7.1. The Company will contact the Client only with the Client's prior consent and in accordance with the provisions of legal acts and the Regulation. We will send the Company's newsletters by email or telephone and/or inquire about the quality of existing services and other related matters.
7.2. We process the following personal data of the Client for direct marketing purposes: name, email address, telephone number.
7.3. Client's personal data for direct marketing purposes is stored until the Client submits a refusal to receive direct marketing communications (an unsubscribe link is provided at the bottom of every sent email).
8. To whom do we provide personal data?
8.1. Access to the Client's personal data is granted to the Company's employees only when necessary to perform their duties and only after the employee has committed to the confidentiality requirement.
8.2. The Company may provide the Client's personal data to data processors who provide services to the Company and process the Client's personal data on behalf of the Company and for the benefit of the Company or the Client (e.g., IT, accounting, or courier services). Such data processors have the right to process the Client's personal data only in accordance with the Company's instructions.
8.3. The Client's personal data may also be provided in response to official requests from state institutions and the court, but only after ensuring the lawfulness of these requests.