Privacy policy

This document sets out how Novastar LT UAB collects, processes and to whom its transmits your personal data as you use our services or have other legal relationships with us; in addition, it provides important information about your data processing rights.

The controller of your personal data is Novastar LT UAB, company registration number:304781485, address: Kareivių 12, Vilnius, LT-09117, contact telephone number: +37052142939, e-mail address: info@novastar.lt.

data protection officer we have appointed to take care of your data protection can be reached by email: duomenuapsauga@novastar.lt.

What data relating to you do we collect?

When you call Novastar customer service, we collect and process the following personal data relating to you on the basis of your consent, for the purpose of ensuring customer service quality and recording transactions:

• Your telephone number;
• The conversation record;
• Technical details of the conversation (date, duration);

When you contact Novastar customer service using electronic means of communication, we collect and process the following personal data for the purposes of this communication and customer service quality assurance:

• Your e-mail address;
• The history of communication with you;

If you shopping in our e-shop without creating a personal account, we collect and process the following personal data for the purposes of conducting e-commerce:

• Your full name;
• Your e-mail address;
• Your telephone number;
• The invoicing address;
• The goods delivery address (which is only required if home delivery has been selected).

In addition, during your shopping in our e-shop, we collect the following personal data relating to you for the purposes of provision of more convenient service:

• The history of your purchases;
• The history of payments;
• The history of communication with you;

You have the opportunity to create your personal account in our e-shop to make your shopping and use of the e-shop more convenient. When you create and are using your personal account, we collect and process the following personal data relating to you:

• Your name and surname;
• Your e-mail address;
• Your telephone number;
• The history of your behavior in our e-shop;
• The history of communication with you;
• The history of reviewed goods;
• Your questions and feedback on the goods.

If you create a personal account without making a purchase in our e-shop, you may, at your discretion, provide us with additional data that are not mandatory in order to be able to use your personal account in the e-shop. We process such data to simplify the purchasing process for your future purchases. You may choose to provide us with the following additional data:

• Personal ID code;
• The address for delivery of the goods;
• Your chosen most convenient parcel machine.

What is the purpose for which we collect and process your personal data?

We collect and process your personal data for the following purposes:

• To prepare, conclude and perform a sale and purchase contract (electronic commerce);
• To ensure and improve the quality of service and services and record transactions;
• For direct marketing purposes. Please be advised that we personalise our direct marketing based on the history of the person’s browsing and shopping on the website in order to provide you with the most relevant information. If you give your consent to direct marketing, it will be sent by email and phone.

Legal basis for the processing of your personal data:

• Conclusion and performance of a contract;
• Fulfillment of obligations provided for in the legislation;
• Pursuance of legitimate interests;
• Provision of consent.

What is the period of retention of your data?

We retail your personal data obtained through e-commerce for 5 years from the date of your purchase and/or the last visit to the e-shop account. If you create a cart in our e-shop, but do not purchase any goods, for your convenience, the cart will be stored for 2 weeks; however, you may choose to delete the items in your cart. For remarketing purposes, the data shall be processed for 3 years from the date of receipt of the consent. E-mail marketing shall be carried out for 1 year from the date of opening of the last message. Telephone conversation records shall be kept for 6 months from the end of the conversation. We shall store the content of electronic communication for 2 years.

To whom and why do we transfer your data processed for e-commerce purposes?

In the cases provided for by the legislation personal data are transferred to our partners for the purposes of performance of the sale and purchase contract or for other legitimate reasons. We transfer your data:

• To the payment service provider Paysera through which payments for goods and services are made;
• To leasing companies with which you enter into item hire-purchase contracts;
• To companies providing additional services (such as insurance and extended warranty for the goods) in our online shop;
• To suppliers of goods which directly supply them;
• To companies providing cargo transportation services that deliver your goods to you;
• To companies providing warranty service for the goods;
• To companies providing advertising and marketing services;
• To companies providing accounting software and services;
• To companies carrying out our IT system maintenance.

We may also provide your data to law enforcement and public authorities and courts under the procedure laid down in the legislation.

How do we process personal data for the purpose of job candidate selection?

If you have sent your CV in order for your data to be included in our candidate database, or have sent your CV on the basis of an advertisement on our website or on a specialised website for recruitment and job search, we will process the data you have submitted voluntarily and other personal data listed below for the purposes of employee selection.

We will process your personal data submitted as a result of your participation in the selection until the end of the selection, i. e., until we decide to employ a specific candidate, his/her probationary period expires or we decide to terminate the selection without selecting any candidate. Unless you express your objection, we will retain your data for 2 years after the end of the selection, and if we need a new employee in our company during this period, we will contact you. We will destroy your personal data upon the expiry of the 2-year period. If you object to the retention of your data after the selection, please inform us via e-mail or in the information form that we will provide you to sign during the meeting.

If you have submitted your CV and other data without a published selection, we will retain your data for 3 years without asking for a separate consent, based on your will to provide data.

We will process your personal data on the basis of your expressed will to participate in the selection or to store the data in the database, and after the end of the selection we will process them on the basis of a legitimate interest. Submission of data is voluntary, but without them we would not be able to assess the suitability of your candidacy. You may cancel your participation in the selection or the retention of data in the candidate database at any time.

By exercising our right under personal data protection law, we may contact your previous employers and ask them for their opinion on your qualifications, professional abilities and professional qualities. However, we will not contact your current employer without your express prior consent.

How do we process personal data received for the purpose of electronic communication?

The basis for the processing of your personal data provided during electronic communication is the conclusion and performance of the contract. Your e-mail address, the content of the electronic communication and the related data shall be processed in accordance with the principle of proportionality. Such data shall be primarily visible to the person with whom you are directly communicating. However, in certain cases, your correspondence may also be read by other employees, e. g., for the purposes of electronic workplace monitoring, investigation of potential breaches of legislation or internal rules, employee replacement, for other related purposes and in similar situations. In addition, the data obtained during electronic communication are processed for internal administration purposes.

What rights do you have? How can you access the data relating to you we hold?

You have the right to:

• Access the data relating to you held by us;
• Request correction of incorrect personal data;
• Request erasure of personal data;
• Disagree to the processing of your data on the basis of consent or to revoke your consent at any time;
• The right to restriction of processing;
• The right to data portability;
• Object against the processing of personal data, for example, where the processing is based on a legitimate interest;
• The right to file a complaint to the supervisory authority (the State Data Protection Inspectorate).

If you intend to exercise your data subject’s rights, you may contact us via e-mail: duomenuapsauga@novastar.lt. You may also use this e-mail for contacting us regarding any other issues related to the processing of personal data.

Where to apply regarding data protection issues?

If you want to exercise your data subject's rights or have other questions regarding the processing of personal data, please contact us via e-mail: duomenuapsauga@novastar.lt.