Privacy policy
Who is this privacy policy for?
This privacy policy is intended for all visitors to the website www.efutura.lt ("Website"), as well as those who submit inquiries or subscribe to newsletters on the Website. The Company considers that you have duly familiarized yourself with the Website's privacy policy ("Privacy Policy") and agree that UAB "Energia futura", legal entity code 304433393, registered office address Biruliškių g. 8, LT-52168 Kaunas ("Company"), may process the information you provide, including personal data, to the extent necessary to manage the Website, ensure its functioning, and provide Website services. Respecting your privacy and the protection of your personal data, the Company makes all reasonable efforts to ensure the security and confidentiality of your personal data and other information processed on the www.efutura.lt website. The Company reserves the right to amend the provisions of the Privacy Policy at its sole discretion. Amendments to the Privacy Policy take effect from the date of their publication on the Website. Accordingly, when visiting the Website, you have a duty to ensure that you are familiar with the latest version of the Privacy Policy available on the Website, and by continuing to use the services provided by the Website, you agree to these amendments.
Personal data and principles of its processing
Personal data means any information relating to an identified or identifiable natural person (data subject); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person. The Company processes the personal data provided by you in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation) and other legal acts regulating the protection of personal data. When processing your personal data, the Company adheres to the following processing principles:
- Your personal data is processed lawfully, fairly, and in a transparent manner in relation to you (principle of lawfulness, fairness, and transparency);
- Your personal data is collected for specified, explicit, and legitimate purposes and not further processed in a manner that is incompatible with those purposes (principle of purpose limitation); Your personal data is adequate, relevant, and limited to what is necessary in relation to the purposes for which it is processed (principle of data minimization);
- Your personal data is accurate and, where necessary, kept up to date; the Company takes every reasonable step to ensure that personal data that is inaccurate, having regard to the purposes for which it is processed, is erased or rectified without delay (principle of accuracy);
- Your personal data is kept in a form which permits your identification for no longer than is necessary for the purposes for which the personal data is processed (principle of storage limitation);
- Your personal data is processed in a manner that ensures appropriate security of the personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage, using appropriate technical or organizational measures (principle of integrity and confidentiality).
How Do We Use Your Data?
In this section, you will find the following information:
- The purposes for which we process your data;
- How we use your personal data;
- The categories of data we process;
- The legal bases for data processing; and
- Data retention periods.
Detailed information is provided below:
|
Purpose |
How We Use Personal Data |
Personal Data |
Legal Basis |
Data Retention Period |
|---|---|---|---|---|
|
Provision of services to clients (installation, maintenance, and monitoring of solar power plants) |
We process personal data when providing installation, maintenance, and monitoring services for solar power plants, including site inspections, capturing power plant components and surroundings via photos, drone imagery, and thermal images. |
Name, surname, phone number, email address of the responsible person, object (power plant) address, client account number (if linked to a natural person), photos and thermal images of power plant components (if a natural person is captured – image), drone photos and thermal images (if a natural person is captured – image). |
Performance of a contract (GDPR Art. 6(1)(b)) and legitimate interest (GDPR Art. 6(1)(f)) to provide quality services and protect against disputes. |
10 years from the end of the business relationship. |
|
Conclusion and execution of goods sales contracts |
We process personal data when concluding and executing contracts for the sale of goods, including delivery of goods and administration of payments. |
Name, surname, phone number, email address, delivery address (city, street, house number, apartment number, postal code), notes. |
Performance of a contract (GDPR Art. 6(1)(b)). |
Contracts and accounting documents (in physical and electronic form) are stored for 10 years from the date of full execution of the contract. |
|
Registration of potential clients for free consultation and preparation of an offer |
We process personal data when registering potential clients for a free consultation and preparing individual offers for solar power plant installation. |
Name, email address, phone number, address, annual electricity consumption (kWh), power plant type, roofing type, comment. |
Consent (GDPR Art. 6(1)(a)) and/or steps taken at the request of the data subject prior to entering into a contract (GDPR Art. 6(1)(b)). |
1 year after the inquiry has been examined. |
|
Administration of technical inquiries from existing clients |
We process personal data when administering technical inquiries from existing clients related to the operation, faults, and maintenance of solar power plants. |
Name and surname, phone number, email address, object address, fault description / comment. |
Performance of a contract (GDPR Art. 6(1)(b)). |
For the duration of the contract. |
|
Administration of inquiries |
If you decide to contact us by email or phone, we will process your personal data in order to answer your inquiry. |
Email address or phone number, information provided in the inquiry. |
Consent (GDPR Art. 6(1)(a)) and legitimate interest (GDPR Art. 6(1)(f)). |
1 year after the inquiry has been examined. |
|
Direct marketing |
We process personal data by sending newsletters and other marketing communications regarding the Company's services and products. |
Email address. |
Consent (GDPR Art. 6(1)(a)). |
5 years (or until withdrawal of consent). |
|
Video surveillance to ensure the protection of persons and property |
We carry out video surveillance on the premises and/or territory of the Company to ensure the safety of persons and property. |
Video data, which includes image and movement trajectory. |
Legitimate interest (GDPR Art. 6(1)(f)). |
14 calendar days (3rd floor office and warehouse premises); 21 calendar days (outdoor area); up to 90 days in case of incident investigation. |
|
Recruitment of candidates for vacant positions |
If you decide to apply for a job position at the Company, we will process your data to evaluate your suitability for the offered position. |
Curriculum Vitae (CV) and/or motivation letter and/or other information provided by the data subject during recruitment. |
Consent (GDPR Art. 6(1)(a)) and legitimate interest (GDPR Art. 6(1)(f)). |
If the candidacy is rejected, personal data is deleted immediately after selection. When the candidacy is approved, personal data is stored until the end of the concluded employment contract. |
|
Conclusion and execution of contracts with partners and service providers |
We process personal data when concluding and executing contracts with the Company's partners, suppliers, and service providers. |
Data of the Company's partners, suppliers, and/or their representatives (including name, surname, position, contact details (phone number, email address)). |
Performance of a contract (GDPR Art. 6(1)(b)). |
10 years from the end of the business relationship. |
|
Defense of legal claims |
The Company, on the basis of its legitimate interest to defend its rights, including in civil disputes, processes the data of persons participating in the case or their employees. |
Depending on the claim or grievance raised, all data processed for the purposes specified above. |
Legitimate interest (GDPR Art. 6(1)(f)). |
1 year after the final settlement of the case and full satisfaction of the Company's claims (if claims are satisfied). |
|
Audit |
We process personal data when conducting internal and/or external audits to ensure the compliance of the Company's activities with legal requirements. |
All data processed for the purposes specified above. |
Legitimate interest (GDPR Art. 6(1)(f)). |
1 year after the audit is conducted. |
|
Document archiving |
We are obliged to archive and store documents for a specified period. |
Personnel file documents (documents or copies thereof related to the start, progress, and termination of service/employment), employment contracts and amendments thereto, goods/works/service contracts, acceptance acts for goods, works, and services. |
Legal obligation (GDPR Art. 6(1)(c)) (Order No. V-100 of the Chief Archivist of Lithuania of 9 March 2011 "On the Approval of the Index of General Document Retention Periods"). |
Within the time limits set by Order No. V-100 of the Chief Archivist of Lithuania of 9 March 2011 "On the Approval of the Index of General Document Retention Periods". |
To whom do we provide your personal data?
Generally, we do not disclose data to third parties; however, in order to ensure the proper provision of services and uninterrupted operation of the Company, we may transfer your data to third parties providing services to the Company, including marketing companies, IT service providers, audit, accounting, legal services, debt collection companies, subcontractors, and other service providers – only to the extent necessary for the execution of contracts concluded to ensure high-quality customer service and the Company's legitimate interests, as well as to banks / payment service providers (for payment redirection), courier / delivery service companies (for delivery of goods), UAB "EF Grid", UAB "Grid Projects", UAB "TSPI" when common areas are monitored (entrances, corridors, stairwells), law enforcement agencies, insurers, authorities, and officials, e.g., regulatory, supervisory, law enforcement agencies, bailiffs, notaries, courts, out-of-court dispute resolution bodies when required by law, as well as audit firms. We may also be obliged under certain circumstances to transfer personal data when:
- We must disclose personal data due to legal procedures or to obtain legal advice, or disclosure is necessary to establish, exercise, or defend our rights;
- Disclosure of information is necessary to protect our or third-party interests;
- Disclosure of information is necessary to protect your vital interests;
- Information must be disclosed to another third party providing data processing services on our behalf, i.e., data processors. Under such circumstances, we undertake to take measures to ensure that data processors protect personal data in the same manner as we do and to inform you of changes to this privacy notice;
- Information must be disclosed to a potential buyer of our company's assets or organization.
Except as provided in this Privacy Policy, the Company does not provide your personal data to any third parties. In cases where your personal data is transferred to data processors, the Company undertakes to take measures to ensure that data processors safeguard personal data using appropriate technical and organizational measures.
Data transfer to third countries
We do not transfer your personal data outside the European Economic Area. If we decide to transfer personal data, we undertake to inform you prior to the transfer and to ensure the security of the personal data being transferred. If we send your personal data to countries outside the European Economic Area, we will inform you and ensure that one of the following security measures applies:
- The contract signed with the data recipient is based on Standard Contractual Clauses approved by the European Commission;
- The data recipient is located in a country covered by an adequacy decision of the European Commission;
- Permission has been obtained from the State Data Protection Inspectorate to transfer personal data in accordance with the contract terms between the controller or processor and the controller, processor, or recipient of personal data in the third country or international organization.
Your rights
In this section of the notice, we provide you with an overview of the rights you have under data protection legislation. Since the exercise of some rights is complex, we present only their main aspects here. We invite you to read the relevant legal acts and guidance from supervisory authorities for full information regarding these rights. Your main rights granted by data protection legal acts are: (i) the right of access; (ii) the right to rectification; (iii) the right to erasure; (iv) the right to restriction of processing; (v) the right to object to processing; (vi) the right to data portability; (vii) the right to lodge a complaint with a supervisory authority; (viii) the right to withdraw consent.
- Right of access: You have the right to obtain confirmation from us as to whether or not personal data concerning you is being processed, and where that is the case, access to the personal data and certain additional information. This additional information includes the purposes of processing, categories of personal data, and recipients of the data. Unless it would adversely affect the rights and freedoms of others, we will provide you with a copy of your personal data upon request. The first copy will be provided free of charge, but a reasonable fee based on administrative costs may be requested for additional copies. Right to rectification: You have the right to request the rectification of inaccurate personal data concerning you and, taking into account the purposes of the processing, the completion of incomplete data.
- Right to erasure: In certain cases, you have the right to request the erasure of your personal data. These situations include cases where: (i) personal data is no longer necessary for the purposes for which it was processed; (ii) you withdraw your consent and there is no other legal ground for processing; (iii) you object to processing under applicable legal provisions; (iv) data is processed for direct marketing purposes; (v) data is processed unlawfully. Please note, however, that in certain cases you will not be able to exercise this right due to applicable exceptions. Such exceptions include cases where data is necessary to: (i) exercise the right of freedom of expression and information; (ii) comply with a legal obligation binding upon us; (iii) establish, exercise, or defend legal claims.
- Right to restriction of processing: In certain cases, you have the right to restrict the processing of your data. These situations include cases where: (i) you contest the accuracy of the data; (ii) processing is unlawful, but you oppose erasure; (iii) we no longer need the personal data, but you require it to establish, exercise, or defend legal claims; (iv) you have objected to processing based on public interest or legitimate interest, pending verification of the validity of your objection. Where processing has been restricted, we will continue to store your data but will not further process it except: (i) with your consent; (ii) to establish, exercise, or defend legal claims; (iii) to protect the rights of others; (iv) for reasons of important public interest.
- Right to object: You have the right to object to the processing of your personal data based on your specific situation in cases where we process your data for public interest purposes or on the basis of our or a third party's legitimate interest. Upon your objection, we will no longer process your relevant personal data unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights, and freedoms, or to establish, exercise, or defend legal claims. You have the right to object at any time to the processing of your personal data for direct marketing purposes. If you object, we will no longer process your personal data for this purpose.
- Right to data portability: To the extent that the legal basis for processing is: (i) consent or (ii) performance of a contract or steps taken at your request prior to entering into a contract, you have the right to receive your personal data in a structured, commonly used, and machine-readable format. However, you cannot exercise this right if it would adversely affect the rights and freedoms of others.
- Right to lodge a complaint: If you believe that our processing of your personal data infringes data protection legislation, you have the right to lodge a complaint with the State Data Protection Inspectorate, located at L. Sapiegos g. 17, 10312 Vilnius, tel. (8 5) 271 28 04, 279 1445, email ada@ada.lt, website https://vdai.lrv.lt/.
- Right to withdraw consent: In cases where the legal basis for processing is your consent, you have the right to withdraw consent at any time. Withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.
What are your duties and responsibilities?
When using the services provided on the Website, you assume full responsibility for the correctness and accuracy of the personal data you provide. By submitting personal data (e.g., filling out an inquiry form), you assume full responsibility for the legality of submitting your personal data and are liable for any damages that may arise to the Company and/or third parties as a result of unlawful processing of such personal data. If your personal data or other related information changes, you must immediately update and/or supplement the personal data or other information you submitted.
What rights does the Company have?
When the Company doubts the correctness of the personal data or other related information provided, it has the right to request clarification and/or supplementation of this data or information. The Company has the right to send informational notices regarding changes to the services provided on the Website and/or their conditions, as well as other information related to the Company's activities that is necessary for you to know. These notices are exclusively informational in nature and are not considered direct marketing messages. The Company makes all reasonable efforts to ensure the smooth operation and continued functioning of the Website, but does not undertake to guarantee uninterrupted operation when affected by factors beyond the Company's control.
Changes to the Privacy Policy
Any changes to this privacy policy will be published on the website. In the event that material changes are made, we will inform you by email.
Contacts
We will make every effort to answer any questions or quickly resolve any matters related to your privacy. We welcome all comments, inquiries, and requests regarding the use of your personal information. You can contact us by email at info@efutura.lt.