1. General Provisions

1.1. UAB "Solar Co" (hereinafter - "the Company") respects the privacy of all its service buyers, potential clients (who have tried the services but have not become clients), and all visitors to the www.solarco.lt website (hereinafter - "the Website") (hereinafter - "Clients") and is committed to ensuring the protection of personal data provided and received. The Company also takes care to ensure the rights of clients as data subjects.

1.2. This privacy policy regulates the main principles and procedures for the collection, processing, and storage of personal data of the Company’s clients.

1.3. By using the Website, as well as by ordering or otherwise utilizing the services offered by the Company and providing the Company with your personal data, you agree to the provisions of this Privacy Policy. Clients are considered to have familiarized themselves with the Privacy Policy when registering on the Website and checking the box to agree to the Company's privacy policy. The privacy policy can be reviewed at any time on the Website by clicking the corresponding link.

2. What terms are used?

2.1. Personal data – any information about a physical person whose identity is established or can be established (data subject); a physical person whose identity can be identified is a person whose identity can be identified directly or indirectly, primarily by an identifier such as name and surname, personal identification number, location data, and online identifier, or by one or more physical, physiological, genetic, mental, economic, cultural, or social identity traits of that person.

2.2. Data subject – a physical person – a client of the Company (including Website visitors) whose personal data is collected by the Company.

2.3. Data subject's consent – any freely given, specific, and unambiguous expression of the data subject's will, through a statement or clear affirmative action, by which they agree to the processing of personal data related to them.

2.4. Data processing – any operation or set of operations performed on personal data or sets of personal data, whether by automated or non-automated means, such as collection, recording, classification, organization, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination, or otherwise making data available, as well as comparison or combination with other data, restriction, erasure, or destruction.

2.5. Data processor – a natural or legal person, public authority, agency, or other body that processes personal data on behalf of the data controller.

2.6. Duomenų valdytojas – UAB “Solar Co” veikianti ir įsteigta bendrovė pagal Lietuvos Respublikos įstatymus, kodas 305842165, registruota adresu J. Basanavičiaus g. 1-84, Panevėžys, Lietuvos Respublika, duomenys apie kurią kaupiami ir saugomi Juridinių asmenų registre.

2.7. Direct marketing – activities aimed at contacting the client by mail, phone, or other direct means to offer goods or services and/or inquire about their opinion on the offered goods or services, including through automated means. 3. What cookies do we use and how?

3. Cookies: Purpose, Types, and User Rights

3.1. What is a cookie – small files that are sent to the user's web browser and placed on the user's computer or other devices when visiting the website for the first time. Later, cookies are used on the website to ensure the best possible user experience, identifying the user's computer and facilitating access to the website or its information, thereby adapting the website's content for the user's convenience.

3.2. These cookies are used on the Website as well as in related Company systems to properly and effectively serve the Client. 

3.3. To ensure a more convenient and efficient browsing experience on the Website and to provide you with relevant offers, we use the following cookies on the Website: PHPSESSID (session information), “CookieInfoScript” (consent to the use of cookies), _gat, _ga, _git, __utma, __utmb, __utmc, __utmt, __utmz (cookies used by Google Analytics), datr, Fr, sb, locale, reg_ext_ref, reg_fb_gate, reg_fb_ref (cookies used by Facebook Pixel), and “GPS”, “PREF”, “VISITOR_INFO1_LIVE”, “YSC” (YouTube video content streaming information).

3.4. Client's right to refuse cookies – The Client may delete or block some or all of the cookies stored on their computers or other devices by changing the settings of the browser they use. More information about deleting or blocking cookies can be found on the website of the browser's manufacturer. Please note that by performing these actions, some website features may partially or completely stop working and become unavailable. The Client understands that third-party (partner, statistics collection systems, communication systems, etc.) plugins may be used on the Website, which also use cookies to ensure their proper functionality. We emphasize that the website operator does not control, cannot be held responsible for, and is not liable for cookies used by third parties, their content, or the privacy protection applied on these websites, which we recommend reviewing individually in each case.

4. What personal data do we collect?

4.1. The Company collects and later processes the Client's personal data that you provide when using and ordering services on the Website or ordering services in another way: name, surname, personal identification number (optional), address, email address, phone number, and other data related to the specifics of the service order. Please note that you provide the data voluntarily when registering and/or ordering, managing the services provided by the Company.

4.2. The personal data provided by the Client is stored by the Company for the duration of the Client's cooperation (during the service provision period) and for 10 (ten) years after the end of this period. The data may be stored for a shorter period if there is no legal basis for such storage.

5. For what purposes and how do we process personal data?

5.1. The data the Company holds about the Client will be processed in a lawful, fair, and transparent manner (principle of lawfulness, fairness, and transparency).

5.2. The Company processes the above-mentioned Client's personal data for the purposes of processing and administering the service purchase/order, managing accounting documents related to the service order, contacting you regarding the fulfillment of contractual obligations, and for direct marketing purposes (with the prior consent of the data subjects).

5.3. We ensure that the Client's personal data is and will be processed in a lawful, fair, and transparent manner, collected for specified, clearly defined, and legitimate purposes, and not processed further in a way that is incompatible with those purposes. The data will be adequate, relevant, and limited to what is necessary for the purposes for which it is processed, accurate, and, where necessary, updated. The data will be processed in such a way that, using appropriate technical and organizational measures, the security of personal data is ensured, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage (principle of integrity and confidentiality).

6. What rights do you have as data subjects?

6.1. The Client has the right to withdraw their consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. The data subject is informed of this before giving their consent. Withdrawing consent is as easy as giving it.

6.2. You have the rights of data subjects, which we will implement upon receiving a request from the Client via registered mail to the address J. Basanavičiaus g. 1-84, Panevėžys, and upon proper verification of your identity. The Client has the right to access their personal data and how it is processed, request correction of inaccurate personal data related to the Client, and also request that incomplete personal data of the Client be completed.

6.3. The Client has the right to request that the Company delete personal data related to the Client if they are no longer necessary for achieving the purposes for which they were collected or otherwise processed; if the Client withdraws consent, and there is no other legal basis for processing the Client's personal data; if the personal data has been processed unlawfully; or based on other grounds specified in the Regulation. The Client also has the right to request that the Company restrict the processing of their personal data; to receive personal data related to the Client, which was provided to the Company, in a structured, commonly used, and machine-readable format; and the Client has the right to request that the Company transfer their personal data to another data controller. Additionally, the Client has the right to object to the processing of their related personal data (e.g., for direct marketing or other purposes).

7. How we process personal data for direct marketing purposes.

7.1. The Company will contact the Client only with the Client's prior consent and in accordance with the provisions of the E-Commerce Law, the Personal Data Protection Law, and the Regulation. We will send the Company's newsletters via email or phone and/or inquire about the quality of existing services and other related matters.

7.2. We process the following Client's personal data for direct marketing purposes: name, email address, phone number.

7.3. The Client's personal data for direct marketing purposes is stored until the Client submits a request to opt-out of receiving direct marketing communications (such an opt-out link is provided at the bottom of each sent email).

8. Who do we share personal data with?

8.1. Access to the Client's personal data is granted to the company's employees only when necessary to fulfill their duties and only if the employee has committed to maintaining confidentiality.

8.2. The company may provide the Client's personal data to data processors who provide services to the company and process the Client's personal data on behalf of the company and for the benefit of the company or the Client, to law enforcement authorities when there is a legal basis, and to other third parties with the Client's consent. Such data processors are entitled to process the Client's personal data only in accordance with the company's instructions.

8.3. The Client's personal data may also be provided in response to official requests from state authorities or courts, but only after ensuring the legality of these requests.