privacy policy
GENERAL PROVISIONS
​
We are UAB "PNK Oil" or Noras Oil (hereinafter referred to as "we" or "Noras Oil"), and we understand that the protection of personal data is important to our customers, suppliers, partners, and other individuals (hereinafter referred to as "data subjects") who cooperate with or use the services of Noras Oil. For this reason, we take all necessary measures to ensure the privacy of each data subject and the exercise of their rights to data protection.
You can contact our designated Data Protection Officer regarding all matters related to data protection at info@norasoil.com.
​
In this Privacy Notice, we provide complete information on how we, acting as Data Controllers, process personal data, including information about the purposes and legal bases of personal data processing, the types of data collected and processed, the duration of data storage, to whom data is provided, what rights you have, and where you can inquire about their exercise or any other questions related to personal data processing.
This Privacy Notice applies to natural persons who cooperate with or use the services of Noras Oil, visit our websites, social media profiles, or provide us with data for other purposes.
This Privacy Notice has been prepared in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons concerning the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as "GDPR" or "Regulation").
This Privacy Notice is an integral part of Noras Oil's approved data protection policy.
​
HOW WE COLLECT YOUR DATA
​
Depending on the nature of our collaboration, we process personal data:
- Received directly from the data subject (you), for example, when you send us inquiries, share your experiences with specified contacts, or send us your curriculum vitae to apply for job vacancies.
- Generated when you use our services or enter our premises, for example, when you visit our website or enter our surveillance areas.
- Obtained from other sources, such as insurance companies or other third parties.
PURPOSE OF DATA PROCESSING, LEGAL BASIS, DATA CATEGORIES, AND STORAGE DURATION
​
Contractual relationships with suppliers, subcontractors, and execution: Legal basis under GDPR Article 6(1)(b) – contract performance. Categories of data include the names, surnames, personal identification numbers, birthdates, contact telephone numbers, email addresses, and addresses of suppliers and subcontractor representatives. For the person signing the contract, their name, surname, position, and contact details are included. Data is retained for 10 years after the specific contract expires.
​
Response to inquiries sent by email or through our website: Legal basis under GDPR Article 6(1)(f) – legitimate interests. Categories of data include names, email addresses, and the content of the sent message. Data is retained for 1 year.
Direct marketing: Legal basis under GDPR Article 6(1)(a) – consent. Categories of data include names, surnames, email addresses, and telephone numbers. Data is retained until consent is withdrawn.
Information collected through cookies: Legal basis under GDPR Article 6(1)(a) – consent. Specific information about collected cookies is provided in the cookie management window. The duration of specific cookie activity is provided in the cookie management window.
Debt management: Legal basis under GDPR Article 6(1)(f) – legitimate interests. Categories of data include names, surnames, personal identification numbers, and debt amounts. Data is retained for 5 years from the date of debt settlement.
IMPORTANT: We do not process special categories of personal data (sensitive data), such as data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, health data, sexual life, or data concerning criminal convictions and offenses.
​
NORAS OIL AS DATA CONTROLLER
​
Noras Oil, as a Data Controller, may process personal data specified in personal data processing agreements concluded with our customers.
​
HOW WE PROTECT YOUR DATA
​
To ensure an appropriate level of security when processing data, we have implemented suitable technical and organizational measures. The latest information on how we ensure the security of your personal data can be found here.
​
TO WHOM WE PROVIDE YOUR DATA
​
Noras Oil only engages data processors who ensure compliance with GDPR and the same level of personal data security as specified in our data protection policy when processing data.
​
Payments in the electronic store are processed using the makecommerce.lt platform, which is managed by Maksekeskus AS (Niine 11, Tallinn 10414, Estonia, reg. no.: 12268475), therefore your personal information, required for payment execution and confirmation, will be transferred to Maksekeskus AS.
Data may be transferred to:
State institutions as required by law. Data centers, hosting, cloud, website administration, and related services providers, software development, maintenance, and enhancement companies, information technology infrastructure service providers, and communication service providers. External auditing companies for legal and compliance consultation. Debt management companies. Subcontractors. Law enforcement authorities upon their request or at our initiative if there is suspicion of a criminal offense being committed, as well as to courts and other dispute resolution authorities. Do We Transfer Your Data Outside the European Union and European Economic Area?
We ensure that your data is processed in accordance with the requirements and standards set out in EU legislation and inform you that your data is processed only within the borders of the European Union and the European Economic Area.
Consequences of Not Providing Data
​
You have the right to refuse to provide your personal data, but providing your personal data is necessary for the purposes stated in this Privacy Notice. Therefore, if you do not provide your personal data, we will not be able to achieve the stated purposes.
​
YOUR RIGHTS AND HOW TO EXERCISE THEM
​
In accordance with the provisions of GDPR, as a data subject, you can exercise the following rights:
The right to access personal data: You can request information on whether your personal data is being processed, and if so, you have the right to access the personal data being processed about you.
The right to rectify personal data: You can request the correction of your personal data if you believe that the personal data we process is inaccurate, incomplete, or incorrect.
The right to erasure (the right to be forgotten): You can request the deletion of your personal data if you believe that your personal data is being processed unlawfully or unfairly.
The right to restrict processing: You can request the restriction (suspension) of the processing of your personal data, except for storage – in cases such as when you request the correction of your personal data (while the accuracy of the personal data is being verified and/or corrected), it is determined that your personal data is being processed unlawfully, and you do not consent to the deletion of data, or you have objected to the processing of your personal data, and so on.
​
The right to data portability: You can request the transfer of your personal data, which is processed by automated means, to you and/or to another data controller in a structured, commonly used, and machine-readable format.
The right to object to processing: You can express your objection to the processing of personal data when the data is processed based on a legitimate interest or a public interest legal basis.
The right not to be subject to automated decision-making, including profiling, which produces legal effects concerning you or similarly significantly affects you.
The right to withdraw consent at any time for the processing of personal data, such as for direct marketing.
You can exercise your rights by:
Sending us a request by email to info@norasoil.com. The request must be signed with an electronic signature or include a copy of an identity document certified by a notary so that we can verify your identity.
Sending a request by registered mail to SvajonÄ—s g. 15, LT-94101 KlaipÄ—da, Lithuania. The request must be signed and include a copy of an identity document certified by a notary.
You can also exercise your rights through a representative. In this case, your representative must provide their name, surname, contact details, a copy of an identity document certified by a notary, information about you, such as your name, surname, and other information by which we can identify you as a data subject, and provide a copy of the document justifying their representation.
The request must be legible, signed, and include the data subject's name, surname, place of residence, and other data required for communication in the desired form. It must also provide information about which data subject rights and to what extent the data subject wishes to exercise.
We will provide a response to your request no later than 30 (thirty) calendar days from the date of receipt of the request. In exceptional cases requiring additional time, we may, after informing you, extend the deadline for responding to your request or other requirements specified in your request for up to 60 (sixty) calendar days from the date of your request.
WHERE CAN YOU ADDRESS QUESTIONS ABOUT PERSONAL DATA?
​
If you have questions about the information provided in this Privacy Notice or about the protection of your personal data and your rights, please contact our data protection representative in any convenient way:
By email: info@norasoil.com
By mail: SvajonÄ—s g. 15, LT-94101 KlaipÄ—da, Lithuania
If a mutually satisfactory solution cannot be reached, you have the right to contact the State Data Protection Inspectorate at L. Sapiegos g. 17, Vilnius, Lithuania, or by email at ada@ada.lt.
Closing Remarks of the Privacy Notice
This Privacy Notice is subject to change at the discretion of the Data Controller or in response to changes in applicable laws.
The most current version of the Privacy Notice is available on our website, and we recommend reviewing the latest version.
Last updated: July 2023.