2. About the Company

Company means joint-stock company “Vilniaus metrologijos centras”, legal entity code 120229395, registered office at Dariaus ir Girėno str. 23, Vilnius. Contact email on personal data protection questions info@nordicmetrology.com .

3. What is ‘personal data’?

Personal data is any information collected by the Company about the Data Subject that can be used to identify the Data Subject and is stored electronically or otherwise.

Personal Data includes any information, including the name, address, collected by the Company about the Data Subject for the purposes specified in this Privacy Policy or in the separate consent of the Data Subject or agreement with the Company.

4. Personal data that is processed when the Company receives and sells services, purchases goods

The above data is necessary, if they are not provided, the Company will not be able to properly perform the contract concluded with you.

5. Direct marketing

We will send offers on the sale of the Company’s goods or services, newsletters and other means to persons who have provided their contact details and have expressed a wish to receive information about the goods and (or) services offered by the Company by electronic means (email, telephone, SMS messages), as well as other promotional material and news about the Company.

For the purpose of direct marketing, the Company will process the following personal data of you: telephone number, email address (mandatory data, without which we will not be able to send you direct marketing communication), name, surname. Your data will be processed for direct marketing purposes for 3 years from the date of consent.

If you have purchased the Company’s services and have not objected to receiving the Company’s direct marketing communications (for example, by checking the opt-out box on the direct marketing consent form), we will email you notifications about services similar to those provided to you. In this case, your data will be processed for direct marketing purposes for 1 year after the last service purchase.

You have the right to object or refuse at any time to receive direct marketing communications by contacting us at the email address provided in Section 2.

6. Recording of conversations

In order to ensure the quality of service and resolve disputes, the Company records telephone conversations. Phone conversations are recorded with your consent when you resume a call after the alert text sounds. For this purpose, we will manage your name, surname, voice, conversation content, date, time. You have the right to object to the recording of your conversation, expressing your disagreement by terminating the conversation. In this case, you can contact us live or by email. You can withdraw your consent at any time by sending a notice to the contact listed in Section 2 of the Policy. We will keep the data for 3 months from the date of the recording.

7. Publication of customer employee reviews and photos

In order to promote the Company’s awareness, based on your consent we will publish photos of customers’ employees and their feedback on our services in the sources specified in the consent. For this purpose, we will process your name, surname, company, feedback/recommendation, image. You can withdraw your consent at any time by sending a notice to the contact listed in Section 2 of the Policy. We will publish the data for 5 years from the date of consent.

8. Publication of customers’ employees reviews and photos

We collect and process your personal data (name, surname, desired position, work experience (place of employment, position, person who can recommend), education, other data specified in the CV, questionnaire or cover letter and/or other information provided by you) during the participation in the employee selection for the purpose of selection on the basis of your consent, which you express to the Company by sending your CV and/or cover letter. We will also process your medical certificate to assess the suitability of the position for you (Art. 6 GDPR 1 d. b p., Art. 9 2 d. b. p.) If you do not provide your CV and/or cover letter, we will not be able to assess your suitability for the position offered.

With your consent, we will contact your current employer. We will contact your former employer on the basis of your legitimate interest (selecting the right candidate). You may withdraw your consent at any time or refuse to allow us to contact your former employer at the email address specified in point 2 of the Policy.

In the event that you do not express your individual consent to the processing of your personal data at the end of this selection, we undertake to delete and/or destroy your personal data within 3 days of signing the contract with the selected candidate or deciding to terminate the selection, unless consent for the candidate’s personal data storage is given within the period specified in the personal data storage consent.

Based on your consent, we will store the data for the period specified in the consent.

Based on our legitimate interest, we will process the data about the person indicated by the candidate (name, surname, email, telephone, information provided by the person) – former or current employer or person providing the recommendation, the information provided by him/her – will be processed for the purpose of selection. In this case, it is in our legitimate interest to select the right candidate for the position sought. We will destroy this data at the end of the selection.

9. Protection of company confidential information and business continuity

In order to ensure the protection of the Company’s confidential information and the continuity of the Company’s activities, the Company may review the correspondence of its employees with contractors. To achieve these goals, the Company processes the following personal data of its employees and persons who send or receive employee letters: email address, name, surname, date of the sender or recipient, the content of information contained in electronic equipment. Such data is stored for 4 years.

10. Protection of property and persons

In order to protect the safety of customers, visitors, employees and other persons entering the field of observation, the Company conducts video surveillance of the property of these persons and the Company, to collect evidence of violations, to defend their rights.  Video surveillance is performed on the basis of the legitimate interest of these persons and the Company. During video surveillance, the Company processes the following personal data: image, movement trajectory, objects held by individuals. Data is stored for 1 month after recording.

11. Execution of the company’s contracts with contractors (as legal entities)

In order to ensure its legitimate interest in ensuring the implementation of the Company’s agreements concluded with contractors legal entities, the Company processes the personal data of the employees of these persons, i.e. name, surname, email address, telephone number, content of correspondence, progress of the order, date. Communication data is stored for 4 years, and for 10 years after the end of the contract, information related to or contained in the performance of the contract.

12. Online self-service

When you connect to the self-service database on the Internet and use electronic services on the Internet, we will process the following personal data of you on the basis of a contract (if you are a customer) and a legitimate interest (if you are a customer employee or a customer of the customer): name, surname, telephone, email, password, company details, payment details, other data related to the provision of e-services (certificates of inspection, certificates of non-conformity, calibration certificates, certificates of conformity, protocols, etc.), personal data of the owner of the measuring instrument: name, surname, telephone, email, company details. This data is necessary for the performance of the contract. Login data is stored for 5 years from the last login, information related to the performance of the contract – for 10 years after the end of the contract.

13. Contact us

You can contact the Company by phone, email. We receive, review and respond to all reports ourselves. If you contact us, we may process the data you have provided to us, i.e. name, surname, email address, telephone number, date and text of correspondence.

Such data will be processed in order to answer your questions and examine your suggestions. If you do not provide your contact information, it will not be possible to contact you.

Correspondence is stored for 1 year from the receipt of the message, except for information for the storage of which other terms are set in the Privacy Policy or legal acts.

All personal data you provide when communicating with us is used only for the above purposes and to view messages and to administer and manage communication flows. We undertake not to use your personal data in any publications in such a way that it is possible to identify you without your express consent.

Please note that we may need to contact you by mail, email or telephone. Please notify us of any changes to your personal data.

14. Website

Our website www.vmc.lt uses cookies.  The website has the option to upload your data in electronic form. Please note that the uploaded data must not infringe any rights or interests of third parties. Such violations are the responsibility of the person who posted them.

A cookie is a small file containing letters and numbers that we store on your browser or the hard drive of your computer with your consent.  We use different cookies for different purposes. Cookies also help us to differentiate you from other users of the Website, thus providing a more pleasant experience of using the Website and allowing us to improve the Website.

Most browsers allow you to reject all cookies, and some browsers allow you to reject only third-party cookies. So you can take advantage of these opportunities. However, please note that blocking all cookies will have a negative effect on the use of the Website, and without cookies you will not be able to use all the services provided on the Website. For more information, visit  AllAboutCookies.org or www.google.com/privacy_ads.html.

We may use the following types of cookies, but you will find a detailed and current list of cookies used HERE:

Strictly necessary cookies.

These are cookies that are required for the operation of our website. The basis of the data processed by such cookies is the proper execution of the contract when you visit the Website, and we ensure the quality and security of the visit. These can be cookies, which, for example, allow you to log in and access secure areas of our website, use the shopping cart feature or e-invoice services.

Analytical and/or performance cookies.

They allow us to recognize and count the number of visitors and to see how visitors move around our website when they are using it. This helps us to improve the way our website works, for example, by ensuring that users are finding what they are looking for easily. The basis for the processing of the data collected by these cookies is your consent.

Functionality cookies.

These cookies are used to identify you when you return to our website so that we can tailor the content provided to your needs, remember the information relevant to you. The basis for the processing of the data collected by these cookies is your consent.

Commercial cookies.

We use our own and third-party cookies to display personalized advertising on our own and other websites. This is called “remarketing,” which is based on browsing activity, such as the products you search for and view.

Facebook and LinkedIn icon plugins

We use both Facebook and LinkedIn icon plugins, so by browsing our site, you agree that we may use your data in your Facebook and LinkedIn accounts.

15. Social media

The information you provide to us on social media (including messages, the use of the Like and Follow fields, and other communications) is controlled by the social network manager.

Our Website provides links to our accounts on social media.  We currently have the following accounts: on Facebook – https://www.facebook.com/nordicmetrologyscience/, on LinkedIn – https://www.linkedin.com/company/19021627/.

We process the information provided in our accounts for the purpose of administering the accounts with your consent.

We encourage you to read third-party privacy notices and contact service providers directly if you have any questions about how they use your personal information.

16. Receipt and disclosure of data

We receive your data from you, your facilities, our employees and our contractors.

We may disclose information about you to our employees, intermediaries, service providers, such as debt administration or collection companies, marketing services, IT service providers or subcontractors, if reasonably necessary for the purposes set out in this Privacy Policy.

In addition, we may disclose information about you:

• if we have to do so as required by law;
• to protect your rights or interests (including providing your data to third parties to recover your debts to us);
• intending to sell the Company’s shares or its assets, disclosing your personal data to a potential buyer;
• after selling the Company’s shares or its assets (part of assets) to third parties.

Except as provided in this Privacy Policy, we do not share your personal information with any third parties.

The list of recipients or categories of recipients specified in the Privacy Policy is subject to change, so if you wish to be notified of changes in the recipients of your personal data, please notify us at the email address provided in this Privacy Policy, stating in the text of the letter “I would like to receive information about the change of recipients of my personal data, name, surname“.

17. Security of your personal data

Your personal data will be processed in accordance with the requirements established by the General Data Protection Regulation, the Law on Legal Protection of Personal Data of the Republic of Lithuania and other legal acts. When processing your personal data, we implement organizational and technical measures that ensure the protection of personal data from accidental or unlawful destruction, alteration, disclosure, as well as from any other unlawful processing.

18. Your rights

In this section, we provide information about your rights in relation to our processing of your personal data and the cases in which you may exercise these rights. For more information about your rights or to exercise them, please contact us at the email address provided in this Privacy Policy.

The Company will without unreasonable hesitation, but not later than within 1 (one) month from the receipt of the request, provide you with information on the actions taken upon receipt of your request for the exercise of your rights. Depending on the complexity of the application and the number of applications received, the said term may be extended for another 2 (two) months. In this case, we will inform you within 1 (one) month from the receipt of the request about such extension and the reasons for it. The company will refuse to exercise your rights only in cases provided by law.

18.1. Right of data access

You can contact us at any time and ask if we process any of your personal data. If we store or use your personal data in any way, you have the right to access it. To do so, submit a written request to us at the email address provided in this Privacy Policy, verify your identity; and in making such a request, adhere to the principles of fairness and reasonableness.

18.2. Right to withdraw consent

If you have given us explicit consent to the processing of your data, you can revoke it at any time.

18.3. Additional rights

Below is information about additional rights you have that you can exercise by following the procedure below.

• You have the right to ask us to correct any inaccuracies in the data available. In this case, we may ask you to confirm the corrected information.
• You have the right to ask us to delete your personal data. This right shall be exercised in the cases provided for in Article 17 of General Data Protection Regulation (EU) 2016/679.
• You have the right to ask us to restrict or not process the processing of your personal data:
  • during the period of time necessary to ensure the accuracy of your personal data when you make claims about the accuracy of the data;
  • when our collection, storage or use of your personal data is illegal, but you decide not to request the deletion of the data;
  • when we no longer need your personal data, but you need it in order to establish, fulfill or defend a legal claim;
  • during the period necessary to determine whether we have a more substantial legal basis to continue to process your personal data if you have exercised your right to object to the processing of your personal data.
• You have the right to transfer data that is processed by automated means and that we have received from you with your consent or for contractual purposes. If you exercise this right, we will transfer a copy of the data you provide at your request.
• You have the right to not consent to our use of your personal data in accordance with the established procedure under  GDPR Art. 21. You have the right to object when your personal data is processed on the basis of a legitimate interest (for each of the above purposes of processing, the basis on which the data is processed is indicated) or for the purpose of direct marketing.

18.4. Right to request more information

We strive to provide the clearest and most complete information possible and are committed to updating this Privacy Policy as the process of using personal data changes. However, if you have any questions about the use of your personal data or do not understand the information provided, please contact us.

19. Complaints

If you believe that your rights as a Data Subject are and/or may be violated, please contact us immediately at the email address provided in this Privacy Policy. We ensure that only after receiving your complaint will we contact you within a reasonable period of time and inform you about the progress of the complaint investigation and later about the outcome.

20. Liability

You are responsible for the confidentiality of the information you provide and for ensuring that the information you provide to us is accurate, correct and complete. If the data provided by you changes, you must immediately inform us by email. In no event will we be liable for any damages incurred by you as a result of you providing incorrect or incomplete personal information or not informing us of any changes thereto.

21. Changes to the Privacy Policy

We may update or change this Privacy Policy at any time. If you wish to receive an updated Privacy Policy, please notify us at the email address provided in Section 2.