Privacy Policy
BURGA PRIVACY POLICY
We understand the importance of protection of your personal data, therefore we process your personal data lawfully, transparently, and fairly, for the pre-determined purposes and only to the extent necessary to achieve those purposes. When we process your personal data, we make every effort to ensure that they are accurate, secure, confidential, properly stored and protected.
When processing your personal data, we comply with legal requirements, including the requirements of the Regulation (EU) 2016/679 (General Data Protection Regulation) (“GDPR”).
1. WHAT IS THIS DOCUMENT?
1.1. This Privacy Policy (the “Privacy Policy”) informs you of our policies regarding the collection, use and disclosure of data when you visit our website www.burga.com (“Website”), order goods or enter into contract with us. The Privacy Policy applies to every person who visits the Website, as well as to any actions you may take on the Websites.
1.2. Please read this Privacy Policy carefully to find out how we process your personal data, where we get them from and what your rights as a data subject are.
1.3. The term "personal data" as used in this Privacy Policy means any information which could be used to identify you directly or indirectly.
2. WHO IS THE DATA CONTROLLER?
2.1. The Website is managed and administered by UAB “Hautica”, company code 304140967, address Gaiziunu g. 5-311, Kaunas, LT-50129, Lithuania.
2.2. In accordance with the relevant legal provisions, we are a controller of your personal data, i.e. the legal person responsible for the collection, processing and / or use of personal information (“BURGA”).
2.3. If you have any questions about our Privacy Policy and practice, processing of your personal data, please contact us at hello@burga.com.
3. HOW DO WE COLLECT YOUR PERSONAL DATA?
3.1. We process your personal data obtained in the following ways:
3.1.1. Directly, when you set up an account on our Website or contact us via email or social media, for example Facebook Messenger;
3.1.2. Indirectly, when you browse our Websites or engage in online shopping activity. We may also collect personal data from third parties who have your consent to pass your details to us, or from publicly available sources.
4. WHAT PERSONAL DATA WE PROCESS AND FOR WHAT PURPOSES?
4.1. We process your personal data for the following purposes:
4.1.1. to enter into and perform contract with you. When you make a purchase on our Website, we enter into a contract with you, the performance of which requires the processing of the following personal data:
|
Personal data categories |
First name, last name, address including billing and delivery addresses, telephone numbers and email address. |
|
Legal basis for processing the personal data |
Processing is necessary for the performance of a contract (Article 6 (1) (b) of GDPR). |
|
Time limit for processing of the personal data |
Your personal data is processed for 10 (ten) years after the agreement expires. |
|
We receive the personal data from |
You |
|
We provide or transfer the personal data to |
Third party service providers whose services we normally use for data storage, website hosting purposes and other technical services. |
4.1.2. to create and manage user accounts on the Website. If you create an account on our Website, we will use the following personal information for its successful operation:
|
Personal data categories |
First name, last name, password, phone number, email address, address including billing and delivery addresses, purchase history. |
|
Legal basis for processing the personal data |
Processing is necessary for the performance of a contract (Article 6 (1) (b) of GDPR). |
|
Time limit for processing of the personal data |
Your personal data is processed for 2 (two) years after the last sign-in to the account |
|
We receive the personal data from |
You. |
|
We provide or transfer the personal data to |
Third party service providers whose services we normally use for data storage, website hosting purposes and other technical services. |
4.1.3. to deliver orders. We process the following personal data in order to deliver your orders:
|
Personal data categories |
First name, last name, phone number, email address, delivery addresses |
|
Legal basis for processing the personal data |
Processing is necessary for the performance of a contract (Article 6 (1) (b) of GDPR). |
|
Time limit for processing of the personal data |
Your personal data is processed for 10 (ten) years after the agreement expires. |
|
We receive the personal data from |
You. |
|
We provide or transfer the personal data to |
Courier, delivery, postal service providers. |
4.1.4. to make refunds. If you decide to return your order, we will process the following personal data:
|
Personal data categories |
First name, last name, delivery addresses. |
|
Legal basis for processing the personal data |
Processing is necessary for the performance of a contract (Article 6 (1) (b) of GDPR) and for the performance of legal obligation (Article 6 (1) (c) of GDPR). |
|
Time limit for processing of the personal data |
Your personal data is processed for 10 (ten) years after the refund. |
|
We receive the personal data from |
You. |
|
We provide or transfer the personal data to |
Payment service providers |
4.1.5. to send You direct marketing messages. To ensure you are kept up to date with the BURGA experience, we use personal data for marketing purposes and we may send you texts and/or emails to update you on the latest offers and events. We may also show you online media communications through external social media platforms such as Facebook and Instagram and external digital advertisers such as Google:
|
Personal data categories |
Name; e-mail address; telephone number, birth date, your interests, preferences, feedback, competition, survey responses, and date and time when users open our emails. |
|
Legal basis for processing the personal data |
Your consent to the processing of personal data (Article 6(1)(a) of GDPR). BURGA legitimate interest to communicate with clients and offer them similar goods (Article 6(1)(f) of the GDPR). |
|
Time limit for processing of the personal data |
Your personal data will be processed until you withdraw your consent or express objection to the processing of your personal data based in legitimate interest. |
|
We receive the personal data from |
You. |
|
We provide or transfer the personal data to |
Third party service providers whose services we normally use for data storage, website hosting purposes and other technical services, marketing and communications services providers. |
|
How to opt out? |
You have the right to opt out of receiving promotional communications at any time, by:
|
4.1.6. to ensure the functionality of the Website, administer the Website, diagnose possible malfunctions of the Website, and perform statistical analyses in order to determine your needs in relation to certain functions and to analyse how and where to make the most efficient use of the available resources:
|
Personal data categories |
Type of web browser used; number of visits; view pages of the website; time spent on the Website; online source from which the person came; information about the device you are using; language; country; internet provider, shopping cart details, etc. |
|
Legal basis for processing the personal data |
Your consent to the processing of personal data (Article 6(1)(a) of GDPR), legitimate interest in ensuring the proper functioning of the Website (Article 6(1)(f) of the GDPR). |
|
Time limit for processing of the personal data |
Personal data is processed for as long as your consent is valid, but no longer than 2 (two) years |
|
We receive the personal data from |
You. |
|
We provide or transfer the personal data to |
Third party service providers whose services we normally use for data storage, website hosting purposes and other technical services. |
4.1.7. To organize contests and contact winners:
|
Personal data categories |
Name; e-mail address, other data relevant to a particular lottery/ competition |
|
Legal basis for processing the personal data |
Your consent to the processing of personal data (Article 6(1)(a) of GDPR) |
|
Time limit for processing of the personal data |
Personal data is processed for as long as your consent is valid, but no longer than 2 (two) years |
|
We receive the personal data from |
You. |
|
We provide or transfer the personal data to |
Third party service providers whose services we normally use for data storage, website hosting purposes and other technical services. |
4.1.8. to manage and administer our social media accounts (LinkedIn, Facebook, Instagram, YouTube, TikTok, Pinterest):
|
Personal data categories |
Name of the social network account; personal photo; personal reactions to the content we generate (likes, comments, shares) |
|
Legal basis for processing the personal data |
Your consent to the processing of personal data (Article 6(1)(a) of GDPR) |
|
Time limit for processing of the personal data |
Personal data is processed for as long as our or your social media account is valid, unless you express your wish to delete the data contained in our social networking accounts before |
|
We receive the personal data from |
You. |
|
We provide or transfer the personal data to |
We are joint controllers of your personal data together with social network operators |
4.1.9. to assure communication and quality of our products and services. You provide us your personal data by writing to us or by contacting us by phone, submitting your feedback, complaints and inquiries about our products and services. Personal data that are processed for this purpose:
|
Personal data categories |
E-mail, telephone number, date and content of the complaint and / or inquiry. |
|
Legal basis for processing the personal data |
Your consent (Article 6 1(a) of GDPR); Our legitimate interest in evaluating our customers feedback with a view to improving the quality of our products and services, administrating complains (Article 6 1(f) of GDPR). |
|
Time limit for processing of the personal data |
1 year from the day you submit your inquiry to us. |
|
We receive the personal data from |
You. |
|
We provide or transfer the personal data to |
Third party service providers whose services we normally use for data storage, website hosting purposes and other technical services. |
4.2. We may also use the information we collect in aggregate or otherwise anonymized form, i.e. the information that does not identify you or any specific person. We may use this general data for research, development, marketing, analytics.
4.3. We do not collect or process your specific categories of personal data revealing your racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union membership, as well as health data or data about your sexual life and sexual orientation. Therefore, please do not provide this personal data to us by e-mail, telephone or in any other way.
5. COOKIES
5.1. We use a tool called “Google Analytics” provided by Google Inc. Google Analytics collects information like page views, visitors, session duration, operating system and etc. We use this information that we get from Google Analytics to improve our operations, to show you promotional communications through online media as you browse the web, to tailor our Website for user’s needs.
5.2. In order to collect the above-mentioned information, Google Analytics may set cookies on your browser or mobile device, or read cookies that are already there. Google Analytics may also receive information about you from apps you have downloaded that partner with Google Inc. You can find more information about Google Analytics’ use of Personal Data here: https://policies.google.com/privacy?hl=en
6. USE OF OTHER TECHNOLOGIES
6.1. We use pixels and tags that are tiny snippets of code that allow us to gather information about visitors on the Website, i.e. how they browse, what type of ads they click on and etc. Thus, pixels and tags collect data that helps us track conversions from ads, optimize ads, build targeted audiences for future ads and remarket to visitor of the Website.
6.2. We use tools such as "Meta Ads Manager", "HotJar", "Microsoft Clarity", "Northbeam" and "Google Tag Manager" to better understand our visitors' needs and to optimize the service and experience. These technology services help us to better understand our visitors' experience (e.g. how much time they spend on which pages, which links they choose to click, what users like and don't like, etc.) and this enables us to build and maintain our service and website with user feedback and to display advertising that is of interest to visitors.
7. PERSONALISATION
7.1. If you visit our Website, you may receive our advertisements whilst browsing websites of other companies. Any advertisements you see will relate to your browsing activity on our website from your computer or other devices.
7.2. These advertisements are provided by us via external market leading specialist providers using techniques such as pixels, web beacons, ad tags, mobile identifiers and ‘cookies’ placed on your computer or other devices. We may collect data directly from you, as well as analyze your browsing and purchasing behavior online and your responses to marketing communications. The results of this analysis, allow us to ensure that we contact you with information on products, services, events and offers that are tailored and relevant to you. To do so, we use software and other technology for automated decision making. We may do this to decide what marketing communications are suitable for you and this activity is based on our legitimate interests to develop and improve our products and services.
7.3. We would like to point out that we do not process any personal data for this purpose that would allow us to specifically and directly identify you. We distinguish users by the specific identifier assigned to them.
7.4. If you don’t want to receive these advertisements you should not agree with cookies or delete them from your device.
7.5. We aim to update you about products and services which are of interest and relevance to you as an individual. To help us do this, we process data by segmenting our customers and identifying what they like and ensuring messages we send them are relevant based on their demographics, interests, purchase behaviour, online web browsing activity and engagement with previous communications. We may also use your data to exclude you from communications which we feel are irrelevant to you. For example, we may exclude someone from resends of marketing emails when we know that person has already opened the original email sent.
7.6. Another example of how we may tailor our communications with you is that we may group a segment of individuals with similar interests using this data so we can send them product news or promotional offers that are relevant to that shared interest. If you don’t want to receive promotional communications you can click an “unsubscribe” link in any email that you have received from us or inform us by contacting our customer support at hello@burga.com.
8. TO WHOM DO WE PROVIDE YOUR PERSONAL DATA?
8.1. We guarantee that your personal data will not be sold, provided or otherwise transferred to third parties without a legitimate basis, as well as used for purposes other than those for which they were collected. We will not transfer your personal data in any way other than in accordance with this Privacy Policy or applicable law. However, we reserve the right to provide information about you if we were required to do so by law or if required to do so by law enforcement authorities or prosecuting authorities.
8.2. We may transfer your personal data to companies that help us operate, i.e. data processors. From such data processors, we require that your data be processed only in accordance with the instructions given by us and the applicable data protection legislation. We enter into agreements with these data processors that oblige the parties to adhere strictly to the personal data protection requirements.
8.3. We may disclose the personal data we collect about you to the following third parties:
a) other companies within our group;
b) to purchasers, and advisers if we sell our business or assets or restructure whether by merger, re-organization or otherwise;
c) our legal and other professional advisers, including our auditors;
d) governmental bodies, regulators, law enforcement agencies, courts/tribunals and insurers where we are required to do so or to exercise our legal rights;
9. INTERNATIONAL TRANSFERS OF YOUR DATA
9.1. To deliver products and services to you, it is sometimes necessary to share your personal information outside of the European Economic Area (the EEA). This will typically occur when service providers are located outside the EEA or if you are based outside the EEA. These transfers are subject to special rules under data protection laws.
9.2. If we transfer your personal information outside the EEA, we will ensure that the transfer will be compliant with data protection law and all personal data will be secure. Our standard practice is to assess the laws and practices of the destination country and relevant service provider and the security measures that are to be taken as regards the data in the overseas location; alternatively, we use standard data protection clauses.
10. HOW WE PROTECT YOUR DATA
10.1. The security of your information is important to BURGA. We have a team dedicated to protecting your information and have put in place physical, electronic, and procedural safeguards. These measures include limiting access, using encryption, testing for vulnerabilities, advanced malware detection, employing pseudonymization and anonymization techniques, and more.
10.2. Unfortunately, the transmission of information over the internet is not completely secure. Although we make every effort to protect your personal data, we cannot guarantee the complete security of it. Therefore, please be informed that you provide us with information at your own risk.
10.3. Should unlikely circumstances arise, and we become aware of a personal data breach that could seriously jeopardize your rights or freedoms, we will notify you immediately as soon as we become aware of it and determine what information has been accessed.
11. HOW LONG DO WE STORE YOUR PERSONAL DATA?
11.1. We store your personal data for no longer than required for the purposes of the processing or as required by law if it provides a longer storage period. Section 4 of the Privacy Policy specifies the terms of storage of your personal data separately for each purpose of use of personal data.
12. WHAT RIGHTS DO YOU HAVE?
12.1. When processing the personal data, we ensure your rights in accordance with the GDPR. As a personal data subject, you have the following rights:
a) to know (be informed) about the processing of your personal data;
b) to access your personal data that we process;
c) to request the correction or supplementation of incorrect, inaccurate, incomplete personal data;
d) to require the destruction of your personal data when they are no longer needed for the purposes for which they were collected;
e) to demand the destruction of personal data if they are processed unlawfully or if you withdraw your consent to the processing of personal data or do not give such consent, which is necessary;
f) to object to the processing of personal data or to withdraw prior consent;
g) to demand the suspension (other than storage) of your personal data processing in the event of a dispute or verification of the lawfulness of the processing, the accuracy of the data, as well as in cases when we no longer need your personal data but you do not want us to destroy them;
h) to require the submission, if technically possible, of your personal data collected with your consent or for the purposes of the performance of the agreement in an easy-to-read format or request their transfer to another controller.
12.2. We will endeavor to guarantee the exercise of your rights as a personal data subject and to create all conditions for the effective exercise of these rights, but we reserve the right not to comply with your requirements when it is required by the relevant legal grounds. If we refuse to comply with your request, we will clearly state the grounds for such refusal.
12.3. You can submit requests related to the exercise of your rights to us in person, by post or by electronic means. Upon receipt of your request, we may ask you to provide proof of identity, as well as any additional information we require regarding your request.
12.4. Upon receipt of your request, we will respond to you no later than within 30 calendar days from the receipt of your request and the date of submission of all documents required for the response. This period may be extended by two further months where necessary, taking into account the complexity and number of the requests. We will inform you of any such extension within one month of receipt of the request, together with the reasons for the delay.
12.5. If we refuse to comply with your request, we will clearly state the grounds and reasons for such refusal.
12.6. If you do not agree with our actions or the response to your request, you may appeal against our actions and decisions to the competent public authority.
13. TO WHOM CAN YOU MAKE A COMPLAINT?
13.1. If you wish to make a complaint about our processing of your personal data, please provide it in writing, providing as much information as possible, using the contact details indicated at the end of this Privacy Policy. We will immediately try to resolve any issues.
13.2. If you consider that the collection and processing of personal information relating to you infringes yours rights, you have the right to lodge a complaint within the regulation of your region. Although, above all, we seek to resolve all disputes with you promptly and amicably.
14. HOW WILL WE CHANGE THIS PRIVACY POLICY?
14.1. We will continue to update our policies and practices as needed. We will notify you of any changes to our Privacy Policy by posting any changes here. If we do, you'll see that the date at the top of this Privacy Policy has changed.
15. HOW TO CONTACT US?
15.1. Please send all documents related to this Privacy Policy or contact us at the following contacts:
UAB "Hautica"
Company code 304140967
Registered at Gaiziunu g. 5-311, Kaunas, LT-50129, Lithuania
Email: hello@burga.com
This Privacy Policy has been published on 2024/02/22
