Privacy Policy

UAB Asprovita Data Protection Policy Asprovita UAB Data Protection Notice Asprovita UAB (hereinafter referred to as “Vitaflora”, “we” or “us”) welcomes you to its websites and mobile applications (together these platforms are referred to as the online offer(s). We thank you for your interest in our company and our products.

1. “Vitaflora” respects your privacy The protection of your privacy when processing personal data and the protection of all business data is very important to us and we pay great attention to this in our business process. We process the personal data collected when you visit our online offer confidentially and only in accordance with the requirements of legal acts. Data protection and information security are part of our company policy.

2. Controller “Vitaflora” is the controller responsible for the processing of your data. Exceptions are provided in this data protection notice. Our contact information: UAB Asprovita Ateities g. 7-5 Druskinininkai, LT-66301, Lithuania E-mail:shop@vitaflora.lt +37069986311

3. Collection, processing, use of personal data

 3.1 Categories of processed data We may collect your personal data in various ways. You provide us with the personal data we process during your cooperation with us (for example, by filling out online forms, receiving information about our products and services and their prices, visiting our service centers). We may also collect your personal data from external sources, such as publicly available sources. The personal data we collect includes the following categories: General personal data (name, surname, date of birth and personal identification number), personal identification document data, VAT number Contact information, such as e-mail address, address and telephone number. From legal clients, we may collect information related to your duties and your contact information in the company you represent, as well as information about your powers of attorney (right of representation). Information related to customer relationships, such as customer communications, customer contact information, responses and feedback provided, surveys of the quality of our services, billing and payment information. Creditworthiness assessment and information about debts (including the start and end dates of debts, the amount of debts, the addresses of available assets and other information that we receive from debt collection or credit rating companies). Correspondence or other data generated in the performance of a contract.

 3.2 Processing principles Personal data is all information relating to identified or identifiable natural persons, such as: names, addresses, telephone numbers, e-mail addresses, basic contract data, contract accounting and payment data, from which a person can be identified. We collect, process and use personal data (including IP addresses) only when permitted by law or with consent to process or use personal data for a specific purpose, such as registration during.

 3.3 Processing purposes and legal basis The main purpose of processing your personal data is to provide you with services in order to perform or prepare a contract, to manage and maintain the relationship between us and you (a natural person or a company that you represent, as a manager, employee, agent, etc.). In this case, the processing of personal data is based on the contract between you and us or on our legitimate interests if the contract is between us and the company you represent. We and our appointed service providers also process your personal data for the following purposes:

  3.3.1 · To provide this online offer Legal basis: In principle, our legitimate interest is direct marketing, if this is carried out in accordance with the provisions of data protection and competition law.

  3.3.2 · To respond to customer inquiries in the form of a contract Legal basis: In principle, our legitimate interest is direct marketing and the improvement of our services and products, if this is carried out in accordance with the provisions of data protection and competition law, contractual obligations and with the appropriate consents.

  3.3.3 · For troubleshooting and security reasons Legal basis: for the fulfilment of our legal obligations in the field of data protection, in particular legitimate interests in handling service disruptions and protecting our offers.

  3.3.4 · For our own or third party advertising, market research and analysis, carried out in accordance with the law or with your consent Legal basis: consent or, in principle, our legitimate interest in direct marketing, provided that this is carried out in accordance with the provisions of data protection and competition law. We may send you email notifications about updates to our products and services. In this case, the processing of your personal data will be based on our legitimate interest in providing you with relevant information about Vitaflora and offering you our products and services. You can opt out of receiving marketing communications at any time. If, under applicable law, consent is required to process your personal data for the purpose of providing marketing communications, we will process your personal data only on the basis of such consent.

  3.3.5 · Protection and defence of our rights Legal basis: Our legitimate interest in exercising and defending our rights.

  3.3.6 · Organisation of training (registration of participants, provision of training to participants, issuance of certificates, organisation of security of the training process) In order to ensure the aforementioned processes, we will receive and process the following personal data: name, surname, e-mail address, contact information and other information necessary to identify training participants, organise the registration process, administer and control participants. In order to register training certificates, we will store your personal data on the basis of your consent.

  3.3.7 · Provision of warranty and post-warranty services In order to provide warranty and post-warranty services, we will receive and process the following personal data: name, surname, e-mail address, contact information, personal identification number, personal identification document data, VAT number and other information necessary for the provision of services. Your personal data will be stored for as long as necessary to achieve the intended purposes of personal data processing and in accordance with the provisions of applicable laws and regulations. The legal basis is the performance of contractual obligations by providing access to the Vitaflora online portal, where our services are ordered. We use your personal information to provide you with access to our Vitaflora service center portal, where you can request services online, cooperate with us and receive information about the provision of services.

  3.3.8 · Response to user inquiries submitted by filling out the online contact form of the Bosch PowerTools Service Center Portal Legal basis – fulfillment of contractual obligations or legitimate interest in improving products and/or services.

  3.3.9 · Provision of online e-commerce offers Legal basis – fulfillment of contractual obligations by providing access to the Bosch Business Portal and ordering our products. We use your personal information to provide you with access to the Bosch Business Portal, where you can purchase Bosch products online, cooperate with us and receive information about Bosch products. The Bosch Business Portal is intended for Robert Bosch business customers who are officially registered entrepreneurs and use Bosch products in their commercial activities.

  3.3.10 · Response to user inquiries submitted by filling out the contact form on the Bosch Business Portal Legal basis – fulfillment of contractual obligations or legitimate interest in improving products and/or services.

  3.3.11 · Sending the newsletter by e-mail with the recipient’s consent Legal basis – consent.

  3.3.12 · Lotteries, promotions, competitions Legal basis – if we offer you to participate in a lottery, promotion or competition, we will use your information to advertise our products to the extent permitted by law or this paragraph. You will find detailed information about competitions in the respective conditions for participation in the lottery, promotion or competition.

 3.4 Log files Every time you use the Internet, your browser transmits certain information that we store in so-called log files. We store the log files for 7 days to detect service disruptions and for security reasons (e.g. to investigate possible attacks). After this period, they are deleted. Log files that need to be retained for evidentiary purposes are not deleted and are stored until the respective disruption is resolved or, in some cases, transferred to the investigating authorities. The log files are also used for analysis purposes (without IP addresses or full IP addresses), see the section "Operating system", and for information about the Internet browser used, including plug-ins (e.g. flash player); http status code (e.g. "request successful", "requested file not found").

  3.4.1 · "For advertising, market research and analysis carried out by ourselves or by third parties in accordance with the law and with the consent given" The following information is stored in the log files: The IP (Internet Protocol) address of the end device from which the online offer is accessed; The Internet address of the website from which the online offer was accessed (so-called originating or referring URL); The name of the service provider through which the online offer is accessed; The names of the files or information retrieved; The date and time and duration of the data storage; The amount of data transferred; The operating system and information about the Internet browser used, plug-ins (e.g. flash player); The http status code (e.g. "request successful", "requested file not found"). Chatbot With this online offer, we provide you with the opportunity to get to know our products and services in the form of a chat. The chat is recorded. Once the chat is finished, it will be deleted, unless the chat is a request for help or service provision. In such cases, the content of the chat is assigned to the customer account and stored for the purpose of fulfilling contractual obligations.

 3.5 Children This online offer is not intended for children under the age of 13.

 3.6 Data transfer

  3.6.1. · Data transfer to controllers In principle, your personal data will only be transferred to other controllers if this is necessary to fulfill contractual obligations or if we ourselves or a third party have a legitimate interest in transferring the data or if you have given your consent to this. Detailed information on the legal basis and recipients or categories of recipients can be found in the section "Purposes of processing and legal basis" (see section 3.3). We may also transfer data to other controllers where this is required by applicable law or in compliance with administrative or judicial instructions

  3.6.2. · Service providers (general) We work with external service providers to perform tasks such as marketing services, programming, data hosting and the helpline. We have selected these service providers with great care and regularly monitor them, particularly by closely monitoring how they handle the data they store. All service providers are required to maintain confidentiality and comply with the statutory requirements. Service providers may be other companies in the Bosch Group.

  3.6.3. · Transfer to recipients outside the EEA We may transfer personal data to recipients outside the EEA in so-called third countries. In such cases, we ensure that the recipient of the data ensures an appropriate level of data protection before the transfer or obtain your consent for such a transfer. You have the right to receive and inspect an overview of the third-party recipients and a copy of the specially agreed terms and conditions aimed at ensuring an appropriate level of data protection. To do this, please use the requests in the "Contact" section (see section 13).

3.7 Duration of data storage; storage periods In principle, we store your data for as long as it is necessary to provide our online offers and related services or for as long as we have a legitimate interest in storing this data (e.g. we may have a legitimate interest in sending you marketing emails in order to fulfill our contractual obligations). In all other cases, we delete your personal information, except for data that we are obliged to store for the fulfillment of contractual obligations (e.g. in compliance with the requirements for retention periods for documents, contracts, invoices under tax and business law).

4. Use of cookies

We may use cookies and tracking mechanisms to provide our online services. Cookies are text files that are stored on your device when you use our online services. Tracking can be carried out using various technologies. We process information using pixel technology and/or by analyzing log files.   4.1 Categories We distinguish between mandatory cookies, which are necessary to perform the technical functions of the online service, and optional cookies and tracking mechanisms. In most cases, it is possible to use the online service without accepting cookies that are not mandatory for technical purposes.

  4.1.1. · Cookies required for technical purposes Cookies required for technical purposes are cookies without the use of which we would not be able to technically ensure the provision of the online service. These are cookies that, for example, store data that ensures smooth playback of audio or video content. Such cookies are deleted when you leave the website.

  4.1.2. · Cookies and tracking mechanisms that are not required for technical purposes We use marketing cookies and tracking mechanisms. We only use such cookies and tracking mechanisms if you have given your prior consent in each case. With the exception of cookies that save the current state of your privacy settings (opt-in cookie). These cookies are based on our legitimate interest.

4.2. General information By using marketing cookies and tracking mechanisms, we and our partners can provide you with offers based on your interests, which we learn from analyzing your behavior.       

  4.2.1 · Statistics We use statistical tools to measure, for example, your visits to the website. Conversion tracking: Our conversion tracking partners place a cookie ("conversion cookie") on your computer if you reach our website via an advertisement placed by the respective partner. These cookies are usually only valid for 30 days. If you visit certain parts of our website and the cookie has not expired, we and the respective referral partner recognize that the user clicked on the advertisement and was redirected to our website. This can also be done across multiple devices. The information obtained with referral cookies is used to compile statistics and determine the number of users who clicked on the respective advertisement and were redirected to the website.

  4.2.2. · Social plugins Some of our online services include content and services from other providers (e.g. Facebook, Twitter) that use cookies and active modules. More information about social plugins can be found in the section "Social plugins" (see section 7).

 4.3 Overview of the marketing tools and cookies we use Please note that when using the tools, your data may be transferred to recipients outside the EEA that do not have a level of personal data protection that complies with the GDPR (e.g. the USA). You can find more information about this in the descriptions of the individual marketing tools below: Name: Google Analytics Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland Functions: Analysis of user behavior (retrieval of pages, number of visitors and visits, downloads), creation of pseudonymous user profiles based on information from logged-in Google users across multiple devices (cross-device tracking), enrichment of pseudonymous user data for the purpose of group-specific information provided by Google, retargeting, UX testing, conversion tracking and retargeting in conjunction with Google Ads Name: Google Tag Manager Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland Function: Administration of website tags via the user interface, integration of application codes into our websites Name: Google Ads Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland Function: Ad placement, remarketing, conversion tracking For more information, please visit:https://adssettings.google.com/authenticated

 4.4. Managing cookies and tracking You can manage your cookie and tracking settings in your browser and/or in our privacy settings. Note: The settings you make only apply to the browser with which you made the settings.

  4.4.1. · Disabling all cookies You can disable all cookies in your browser settings. Please note that this may affect the functionality of the website.   

  4.4.2. · Managing your settings for cookies and tracking mechanisms that are not required for technical purposes When you visit our websites, cookies will ask you whether you agree to the use of marketing cookies or tracking mechanisms. You can withdraw your consent with effect for a later time in your privacy settings, or give your consent at any time.

5. Google

 5.1 Google Maps This website uses the Google Maps map service via API. Its provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. In order to use the Google Maps functions, it is necessary to save your IP address. This information is usually transmitted to a Google LLC server in the USA and stored there. The provider of this website has no influence on the transmission of this data. Google Maps is used to provide our online offers smoothly and to make it easy to find the locations listed on our website. This is an important legitimate interest for us as defined in Article 6 (1) (f) GDPR. You can find more information about the processing of user data in Google's privacy policy: https://www.google.de/intl/de/policies/privacy/.

 5.2 Google reCAPTCHA In some cases, we use the reCAPTCHA service of Google LLC to ensure appropriate data security in contact forms. This is primarily necessary to distinguish whether the data was entered by a real person or by a machine in the course of automated processing. This is an important legitimate interest for us as defined in Article 6 (1) (f) GDPR. The service includes the transmission of the IP address and, if necessary, other data required by Google for its reCAPTCHA service. For this purpose, separate data protection conditions of Google LLC apply. More information on the privacy policy of Google LLC can be found at https://www.google.com/intl/de/policies/privacy/.

 5.3 Google Web Fonts This website uses so-called web fonts, which are provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. They are used to ensure uniform display of fonts. When you open the website, the necessary web fonts are loaded into your browser's cache in order to display the text correctly. For this purpose, the browser you use must connect to Google's servers. This informs Google that our website was accessed from your IP address. By using Google Web Fonts, we aim to present our online offerings in a uniform and orderly manner. This is an important legitimate interest for us as defined in Article 6(1)(f) GDPR. If your browser does not support Web Fonts, the standard fonts on your computer will be used. You can find more information about Google Web Fonts at https://developers.google.com/fonts/faq and in Google's privacy policy: https://www.google.de/intl/de/policies/privacy/.

6. Microsoft Azure Content Delivery Network In order to optimize the loading times of our online offerings, we provide Azure Content Delivery Network (CDN) services. The providers are Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA, and Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18 D18, Ireland. CDNs help to deliver the content of our online offering faster, especially large media files such as graphics, text or scripts, by using a network of geographically distributed servers, thereby reducing data loading times. The use of CDN services is based on our overriding legitimate interest as defined in Article 6(1)(f) GDPR, i.e. the efficient provision of our online offering. As part of this data processing, personal data is transferred to the USA. The transfer is based on European standard contractual clauses, in which Microsoft guarantees that the provision of the services will be in compliance with European data protection law. For more information about privacy related to Microsoft's CDN service, please visit:https://azure.microsoft.com/en-us/support/legal/. Microsoft's privacy policy can be found here: https://privacy.microsoft.com/en-us/privacystatement.

7. Social Plugins

We use various so-called social media plugins on our website. They are described separately in this section. When you use the plugins, your web browser establishes a direct connection to the servers of the respective social media. This way, the respective provider receives information that your web browser has accessed the corresponding page of our website, even if you do not have a user account with that provider or are logged out. Log files (including your IP address) are transmitted directly from your web browser to the respective provider's server and stored there, if necessary. The provider or its server may be located outside the EU or EEA (e.g. the USA). The plugins correspond to independent extensions of the social media providers. This means that we have no influence on how the social media providers collect and store data via these plugins. The purpose and scope of such collection, the further processing of data by the social media network and the options for setting your privacy policy can be found in the data protection provisions of the respective social media network. If you do not want the social network providers to receive data about this online offer or to further use this data, you should not use the corresponding plugins.
 7.1. Social plugins with the 2-click solution With the so-called 2-click solution, we protect you from the standard recording and evaluation of your visit to our websites by the social network providers. When you access a page of our online offer with such a plugin, it is initially deactivated. The plugins are not activated until the corresponding button is clicked.
 7.2. Plugins of the social network Facebook The social network Facebook on the website www.facebook.com, provider Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, and www.facebook.de, provider Facebook Ireland Limited, Hanover Reach, 5-7 Hanover Quay, Dublin 2, Ireland (hereinafter referred to as “Facebook”). An overview of the Facebook plugins and information on their display can be found here: https://developers.facebook.com/docs/plugins/?locale=en_EN; more information on data protection at Facebook can be found here: http://www.facebook.com/policy.
 7.3. Social network LinkedIn The social network LinkedIn plugins are provided by LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA (hereinafter referred to as LinkedIn). An overview of the LinkedIn plugins and information on their display can be found here:https://developer.linkedin.com/plugins; more information on data protection at LinkedIn can be found here: https://www.linkedin.com/legal/privacy-policy.
8. YouTube This online offer uses the YouTube video platform provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as YouTube). YouTube is a platform that allows you to view audio and video files. When you open the relevant page of our offer, the installed YouTube player will establish a connection to YouTube in order to download and play the video or audio file. During this process, data is sent to YouTube (the responsible party). We are not responsible for how this data is processed by YouTube. For more information on the scope and purpose of the data collected, their further processing and use by YouTube, your rights and the options for data protection, please refer to YouTube's privacy policy.
 9. External links This online offer uses the video platform YouTube, which is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as "YouTube"). YouTube is a platform that allows you to view audio and video files. When you open the relevant page of our offer, the installed YouTube player will establish a connection to YouTube in order to download and play the video or audio file. During this process, data is sent to YouTube (the responsible party). We are not responsible for how this data is processed by YouTube. For more information on the scope and purpose of the data collected, their further processing and use by YouTube, your rights and the options for data protection, please refer to YouTube's privacy policy. Our online offer contains links to third-party websites - providers that are not affiliated with us. When you click on a link, we have no influence on the collection, processing and use of personal data transmitted to third parties (e.g. IP address or URL of the linked website), as we naturally have no control over the behavior of third parties. We are not responsible for how third parties handle such personal data.
10. Security
Our employees and companies providing services on our behalf are required to comply with confidentiality obligations and applicable data protection laws. We take all necessary technical and organizational measures to ensure an appropriate level of security and to protect your personal data that we process, in particular against accidental or unlawful destruction, manipulation, loss, alteration, unlawful disclosure or unauthorized access. Our security measures are constantly being improved in line with technological progress.
11. User rights To exercise your rights, please use the information provided in the "Contact Us" section (see section 13). When doing so, please ensure that your identity can be identified.
 11.1. Right to information and access You have the right to obtain from us confirmation as to whether or not your personal data is being processed and, if so, access to your personal data.
 11.2. Right to erasure and rectification: You have the right to have inaccurate personal data rectified. If the statutory requirements are met, you have the right to have your data completed or deleted. This does not apply to data that is necessary for billing and accounting purposes and that must be stored for a specified period by law. If access to such data is not required, their processing is restricted (see below).
 11.3. Restriction of data processing If the statutory requirements are met, you have the right to request the restriction of the processing of your personal data
 11.4. Data portability You will continue to have the right to receive the data you have provided to us in a structured, common and machine-readable format or, where technically feasible, to have these data transmitted to a third party.
 11.5. Right to object
  11.5.1. · Objection to direct marketing You can also object at any time to the processing of your personal data for direct marketing purposes. Please note that for organizational reasons, your objection and the use of your data in an ongoing advertising campaign may overlap.
  11.5.2. Objection to processing based on legitimate interest You also have the right to object at any time to the processing of your personal data if this is based on a legitimate interest. We will then no longer process your data unless we can demonstrate legitimate interests that override your rights under the law.
  11.6. Withdrawal of consent If you have given your consent to the processing of your data, you have the right to withdraw it at any time with effect from the date of the decision. The processing of your data until your consent is withdrawn remains lawful.
  11.7. Right to lodge a complaint with a supervisory authority You have the right to lodge a complaint with a supervisory authority. You can contact the supervisory authority in your area of ​​residence or in the country that controls our activities. These are: State Data Protection Inspectorate of the Republic of Lithuania L.Sapiegos g. 17 10312 Vilnius (Entrance from the left side) Tel. +370 85271 2804 ada@ada.lt https://www.ada.lt
12. Changes to the Data Protection Policy We reserve the right to change our security and data protection measures. In such cases, we will also adjust our data protection notice accordingly. For this reason, please read the latest version of the data protection notice, as notices may change.
13. Contact To contact us, see Section 2 “Controller”, where the address is provided.
If you wish to exercise your rights and report data protection breaches, please open the following link: https://vitaflora.lt/lt/susisiekite-su-mumis To report data protection incidents, please use the following link: https://vitaflora.lt/lt/susisiekite-su-mumis For suggestions and complaints regarding the processing of your personal data, we recommend that you contact our Data Protection Officer. Data Protection Officer Information Security and Privacy (C/ISP) UAB Asprovita Ateities g. 7-5 Druskininkai, 66301, Lithuania or send an e-mail to eugenijus@vitaflora.lt Last updated: 2022-08-23 © UAB Asprovita 2022, all rights reserved