01.11.2023

This privacy policy related to the processing and protection of personal data (hereinafter – «Privacy Policy») applies to the limited liability company MB Alvaline LT (hereinafter – «Company» or «we»).

Personal data processing is carried out by MB Alvaline LT, registration no. 306110517, address: Giruliu str. 10-201, LT-12112, Vilnius, Lithuania; Tel. No. +37064575736, e-mail: info@alvaline.lt.

We collect, use, and store the personal data that you provide to us when you use our website and mobile applications (the «Site») using any device, communicating with us in any form, in accordance with this Privacy Policy.

By using our website and providing us with your personal data, you consent to the processing of your personal data in accordance with this privacy policy.

1. Basic concepts

«Personal data» – any information related to a specific person (subject of personal data).

«Processing of personal data» – any action (operation) or set of actions (operations) performed using automation tools or without using such tools related to personal data, including data collection, storage, systematization, accumulation, recording, clarification (updating, changing) , receipt, transmission (distribution, provision, access of personal data), depersonalization, blocking, destruction.

2. Data We Collect

We process:

• personal data that you provide to us when filling out information fields, including filling out a contact form, agreeing to receive a newsletter, registering for conferences or other events;
• personal data that you provide when filling in to purchase the Company’s services or to enter into a contract;
• personal data that is necessary to provide safe and high-quality cosmetology services, i.e. information about your state of health, diseases, pregnancy, allergies, and other information that the specialist will ask for the possibility of performing the procedure or refusing.
• technical data automatically transmitted by the device you use when visiting our website, including the technical characteristics of the device, IP address;
• information stored in cookies. Depending on the browser used and the device used, different sets of cookies are used, including strictly necessary, performance, functional, and analytical cookies;
• personal data we receive during video surveillance when you visit our cosmetology service center.

3. Purposes of processing personal data

We process your personal data only for the purposes for which it was provided, including:

• provide you with information about the company, services, and offers, and send you informational messages. Emails are sent only after receiving your voluntary consent. When you receive our e-mail, you will always find a link in it, which you can use to unsubscribe from the newsletter. If you choose this purpose, your e-mail address will be deleted from the newsletter-sending database and you will no longer receive information;
• communication will only take place when you contact us yourself;
• we will provide services to you in accordance with the service provision agreement.

We conduct video surveillance for your personal safety, as well as for the safety of our employees, customers, and property. Video surveillance is carried out in public places under strict security and privacy rules, using modern technology and equipment. There are informational signs in places where video surveillance is carried out.

If we process personal data about which you have not been informed in this Policy, we will inform you separately about the individual conditions for processing this data.

We do not make decisions that cause you legal consequences or otherwise affect your legitimate interests, we rely only on automated processing of personal data.

4. Legal basis of personal data

We process your personal data if one of the following conditions is met:

• You have agreed to the processing of your personal data;
• the processing of personal data is necessary for the execution or conclusion of a contract;
• the processing of personal data is necessary in order to fulfill the legal obligation imposed on us by normative acts (eg: transfer information to the State Tax Inspectorate);
• the processing of personal data is necessary to ensure our legal interests (eg: we make videos to ensure the security of assets, we can also go to court for debt collection, etc.);
• it is necessary to process personal data in order to protect your interests or those of another natural person.

5. General principles of personal data processing

The company ensures the processing of personal data in accordance with the following principles:

• limitation of the purpose of data processing – personal data is processed only for the purpose of data processing and use set out here or for those actions to which the data subject has given consent;
• data quality and proportionality – personal data is processed as fairly as possible and updated when necessary. Personal data are relevant, relative and do not exceed the necessary scope, taking into account the purpose of the processing;
• transparency – the data subject understands the purposes for which the data is processed;
• security – when processing data, we apply technical and organizational security measures that correspond to possible risk factors, for example, measures against accidental or illegal data destruction, changes, unauthorized disclosure or access;
• reduction – personal data is regularly reviewed to remove data that is no longer necessary to achieve the purpose of processing.

6. Security of personal data

In order to ensure the security of your personal data when processing them, we take necessary and sufficient legal, organizational, and technical measures to protect personal data from illegal or accidental access to them, their destruction, change, blocking, copying, provision, distribution, as well as other illegal actions related to with personal data.

7. Confidentiality/Transfer of Personal Data

Information about your personal data will not be published in publicly available sources and will not be disclosed to third parties, unless the Company receives your express consent or the information is required according to the requirements of legal acts. If necessary, we may disclose your personal data to government and law enforcement authorities to protect our legitimate interests.

Also, in order to fulfill our obligations to you, we may transfer your personal data to cooperation partners: data processors who perform the necessary data processing on our behalf, for example, IT infrastructure service specialists, marketing agencies, leasing companies, courier services, etc. Following the currently valid regulations of the Republic of Latvia and our cooperation agreement, these companies are obliged to store your personal data and process them only for the purposes specified by us.

We do not transfer your data to third parties and international organizations.

8. Rights of the subject of personal data

The Company respects your right to review, correct, update, object to, or otherwise change or delete information you provide to the Company. For this purpose, you can contact us by sending a request with the subject line “Request for personal data” or “Revocation of consent to process personal data” (if consent to process personal data is revoked) by e-mail. to the email address info@alvaline.lt.

Upon your request to delete information related to you, we will immediately delete your personal data, as respecting your rights is our priority. Unfortunately, we will not be able to delete your personal data if we are required to do so by law.

9. Data storage period

All personal data received from you are stored as long as you use our services, or, if your personal data is processed on the basis of your consent until you withdraw your consent. A longer retention period for personal data is permitted to comply with legal requirements regarding the minimum retention period for documents or information or to protect our legitimate interests. (for example, but not limited to accounting or legal proceedings).

CCTV recordings are kept for a maximum of one month.

At the end of the personal data retention period, we will securely delete your personal data or make it inaccessible (archived) or de-identified so that it can no longer be associated with you.

10. Cookie files

We use cookies. You can learn more about the policy and technical nuances related to cookies in the corresponding section.

11. Changes to the Privacy Policy

The policy is subject to change without prior notice. The amended version of the Policy, which is published on the Website, replaces all previous versions of the Policy. Any changes do not affect the Company’s general policy regarding respect for the rights of the subject of personal data.