Privacy Policy Updated: Aug 10, 2024

UAB Aeterna Cibus, legal entity code 306362169,  (hereinafter referred to as the “Company”) is the controller of personal data processed within it, ensuring that personal data are processed in compliance with the data protection requirements applicable to controllers. This Privacy Policy applies in cases where you provide us with your personal data through the website https://wearenutrivore.com (hereinafter “the Website”).

In this Privacy Policy, we describe how we collect, use, and handle your data when you use our Website. By using the Website, you agree to the collection and use of information in accordance with this Privacy Policy.

Please note that this Privacy Policy applies only to this Website. This Website may contain links to other websites that we do not operate or control. Links on this Website do not imply that we endorse or have reviewed such third-party websites.

Data Protection Policy

The data protection policy is prepared in accordance with the following legal acts:

• Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (General Data Protection Regulation or GDPR);

• Personal Legal Protection Act of the Republic of Lithuania;

• Electronic Communications Act of the Republic of Lithuania.

In processing personal data, the Company adheres to the GDPR, Personal Legal Protection Act, the Electronic Communications Act, and other legal acts that regulate the processing and protection of personal data.

What Information Do We Collect About You?

We collect and use the following information:

Personal Data

When you use our Website, we may collect certain personal information about you (hereinafter – Personal Data), i.e., when you voluntarily provide such information, for example, when you use certain services of ours, contact us, etc. When we collect Personal Data, we provide a reference to this Privacy Policy.

Usage Data

We may also collect information that your browser sends when you visit, or when you access the Website via a mobile device (hereinafter – Usage Data). This may include information related to your IP (Internet Protocol) address, browser and device type, information about which websites you visited prior to this one, and other identifiers related to your device. When using the Website via a mobile device, Usage Data may include information such as the type of mobile device used, the unique ID of the mobile device, the IP address of the mobile device, operating system, the type of internet browser used, unique device identifiers, and other diagnostic data. Note that such information, which is collected passively using various technologies, cannot be used to specifically identify you. This Website may use such information and link it with other information to monitor, for example, the total number of visitors to the Website, the number of visitors on each page of the Website, etc.

Cookie Data

Cookies are used on the Website to monitor activity on the Website and retain certain information. More information can be found in the Cookie Policy.

For What Purposes Are Your Personal Data Collected?

The Company processes your Personal Data, as a data subject, for the following purposes:

• Registration (account creation) on the Website;

• Shopping on the Website, including compliance with payment and other financial regulations;

• Communication through the Website;

• Subscription to newsletters (sending).

We use your Personal Data only for the purposes stated in this Privacy Policy. If you provide Personal Data for a specific purpose, we may use this data based on the purpose for which it was provided. For example, if you contact us by email, we use your Personal Data to respond to your query or resolve an issue.

If you provide Personal Data in order to use certain services on the Website, we will use your Personal Data to provide you access to such services and monitor your use of such services. We may also use your Personal Data and other non-identifiable information collected through the Website to help us improve the Website’s content and functionality, better understand our users, and improve our services.

What Are the Legal Bases for Processing Your Personal Data?

Your Personal Data is processed only based on the legal criteria (bases) for legitimate processing of personal data established in the laws, and only for the purposes for which the data was obtained.

Your Personal Data may be processed only with a legitimate basis, i.e., to fulfill a contract to which the data subject is a party, or to take steps at the request of the data subject prior to entering into a contract (GDPR Article 6(1)(b)), i.e., when Personal Data is processed: i) for registration (account creation) on the Website; ii) for shopping on the Website, including compliance with payment and other financial regulations. To fulfill a legal obligation applicable to the Company (GDPR Article 6(1)(c)), for example, issuing or storing invoices and other financial documents, i.e., when Personal Data is processed for shopping on the Website, including compliance with payment and other financial regulations. Based on the Company’s legitimate interest (GDPR Article 6(1)(f)), i.e., when Personal Data is processed for communication through the Website, i.e., to respond to queries from individuals, etc. Based on your consent (GDPR Article 6(1)(a)), i.e., when Personal Data is processed for sending newsletters.

What Personal Data Do We Process?

For registration (account creation) on the Website, the following Personal Data is collected and processed:

• First name; Last name; email address; Telephone number;
For shopping on the Website, including compliance with payment and other financial regulations, the following Personal Data is collected and processed:

• First name; Last name; email address; Telephone number; Delivery address (when goods are delivered to your specified address).

For communication through the Website, the following Personal Data is collected and processed:
• First name; email address.

For newsletter subscriptions (sending), your email address is collected and processed.

Must You Provide Us with Personal Data?

We inform you that in order to purchase goods on the Website or for us to contact you after a query submission, you must provide us with the above-mentioned Personal Data. You may choose whether to subscribe to our newsletter, but if you wish to receive newsletter notifications, you must provide an email address, as without it the Company cannot send you newsletter notifications.

Where Do We Get Your Data (What Is the Source of the Data)?

Where might we get your data? Directly from you (you providing data through the Website, submitting query forms, etc.); from your representative.

How Long Do We Store Your Personal Data?

The Company stores your data as long as required by the laws regulating the Company’s activities (e.g., Personal Data for registration on the Website are usually stored until you delete your account; Personal Data related to the execution of a sales contract through the Website are stored for 10 (ten) years from the date of contract execution; Personal Data for query submissions through the Website are processed for 1 (one) year after the last correspondence with you; newsletter subscription (sending) purposes – 2 (two) years from the subscription date or until subscription cancellation.

In cases where the laws do not set terms, Personal Data provided through the Website is stored for 3 (three) years from the last correspondence with you (to ensure the quality of service provided through the Website).

Who Do We Provide Your Personal Data To?

Information you provide to us, including Personal Data, may be transferred to computers located outside of your state’s jurisdiction, where data protection laws may differ from those of your jurisdiction. If you are outside the Republic of Lithuania, please note that we transfer such data to Lithuania and process it here. By voluntarily providing us with Personal Data, you agree to their use in accordance with this Privacy Policy. We inform you that we will not share your Personal Data with others without your permission, except in the following cases:

Service Providers

The Company has the right to engage data processors who process data on behalf of the Company, such as cloud, server rental, and related services providers, who would store your personal data, as well as IT maintenance companies, which may have access to your personal data. Such data processors operate only according to the Company’s instructions and legal requirements.

Related Companies

We may also share Personal Data with Related Companies for purposes consistent with this Privacy Policy.

Business Transfers

As we develop our business, we may sell or buy businesses or assets. In the event of a sale, merger, reorganization, dissolution, or similar event, Personal Data may be part of the sold assets.

Legal Requirements

We may disclose your information to third parties if we determine that such disclosure is reasonably necessary to (a) comply with the laws; (b) prevent fraud or abuse; or (c) protect our property rights.

The Company does not transfer your personal data to third countries or international organizations, i.e., outside the European Union, except in cases where it is obligated to do so by law, courts, or where it is necessary for the implementation of one of the purposes specified in this Policy.

Data Subject Rights

By providing your Personal Data through our Website and according to the GDPR, you have the following rights:

• the right to obtain information about data processing;
• the right to access your personal data, including the right to a copy of your personal data;
• the right to request the correction of your personal data if they are inaccurate;
• the right to request the deletion of your personal data (“the right to be forgotten”);
• the right to request the restriction of your personal data processing;
• the right to data portability;
• the right to object to data processing.

We inform you that if you disagree with the Company’s decision made regarding your request related to the implementation of your rights as a data subject, you have the right to file a complaint with the State Data Protection Inspectorate (more information at https://vdai.lrv.lt/).

You also have the right to withdraw your consent (if given) to process your personal data at any time. You can withdraw your consent at any time by submitting a request to remove from our address list by filling out an online form and indicating that you wish to withdraw. The withdrawal of consent does not affect the legality of the processing based on consent before its withdrawal.

To implement the above-mentioned rights, you must submit a request to us in writing and in such a manner that we can identify you, i.e., by confirming your identity. Requests for GDPR rights implementation, if there is no possibility to determine the identity of the person submitting the request, are not considered in the Company.

All communications related to personal data processing are provided: By filling out an online form.

Your requests regarding your rights set forth in the GDPR are considered no longer than 1 month. Depending on the complexity of the request and the number of requests received, this period may be extended by 2 months.

Requirements for the request when submitted in writing: the request must be legible; the request must be signed; the request must specify your first name, last name, place of residence, contact information for communication; the request must specify which right you wish to exercise and, when applicable, arguments or documents substantiating such a request; if the request is submitted on your behalf by a representative, the request must also specify the above data as well as your representative’s first name, last name, place of residence, contact information for communication.

When submitting a request by email, submitted requests must be signed with a qualified electronic signature or formed using electronic means that ensure text integrity and immutability (except when withdrawing given consent to process personal data in the manner specified in this Policy).
Signing the request with a qualified electronic signature allows the Company to properly identify you and ensure that the requested information or information about the actions you requested (refusal to perform) is disclosed only to the person for whom it is intended, i.e., you.

Scanned copies of signed requests or complaints submitted via email, not signed with a qualified electronic signature, do not meet the requirements set by law. Such submission of a request may be an obstacle to considering your request, so if you do not have a qualified electronic signature, you should submit the request by registered mail.

When submitting a request through a representative, the request must also include a document confirming representation or a copy of it, certified in the manner prescribed by law.

Changes

From time to time, we may change or supplement the terms of this Privacy Policy.

The Company will announce changes on the Website. We advise you to periodically review this Privacy Policy for any changes.

This Privacy Policy was last updated on the date indicated above. If you continue to use the Website after any changes or amendments to this Privacy Policy, it is considered that you agree to the terms of such updated Privacy Policy.