The general legal framework governing the protection of personal data is the General Regulation on the Protection of Data no. 679/2016 ("GDPR") applicable in the European Union, and this Cookies Policy follows the requirements of GDPR.
This Cookies Policy (”Cookies Policy”) describes different types of cookies used for the website owned and controlled by uždaroji akcinė bendrovė “Ozantis” (“SC Ozas”), a Lithuanian company, having its registered office in Ozas str. 18, LT-08243 Vilnius, Lithuania, registered under no. 126345741. SC Ozas acts as Data Controller.
What are cookies?
An “Internet Cookie” (also known as “browser cookie” or “HTTP cookie” or “cookie”) is a small file, consisting of letters and numbers, which will be stored on computer, mobile device or other equipment of an user by which internet can be accessed.
Cookies are installed through the request issued by a web server to a browser (e.g.: Internet Explorer, Firefox, Chrome). Once they are installed, cookies have a determined lifetime, and remain “passive” meaning that they do not contain software, viruses or spyware and will not access the information on the user’s hard drive on whose equipment they have been installed.
A cookie consists of two parts:
How and why do we use cookies?
SC Ozas uses cookies to enhance its website usage and functionality and to better understand the manner in which visitors use the website, as well as the services provided by SC Ozas.
Storage of cookies on your computer offers us an easy and convenient opportunity to customize or enhance your experience on our websites and make your next visit more pleasant.
SC Ozas does not use cookies to collect personal information, such as your name. However, we can make the connection between the data contained by a cookies and your personal data collected through other means (e.g., sign up forms).
HOW TO MANAGE COOKIES?
Refusal to use cookies
You have the option to accept cookies which will allow you to use of website’s functions with no restrictions when visiting our website. If you deny the use of strictly necessary cookies this can affect the user’s experience and functionality while using the website.
Denial of other cookies would probably not affect your user’s experience and functionality while using the website. If you deny all cookies, primary and third party cookies will be disabled. In addition, primary cookies will be deleted. We will not be able to delete third party cookies. Therefore, you are required to delete them manually. This can be done from your browser’s settings.
Disable and/or delete cookies through your browser
Alternatively and/or in addition, you are able to change the cookies settings from your internet browser. Your internet browser will allow you to change your cookies settings. Such browser’s settings for cookies are usually found in “option”, “tools” or “preferences” tab of your internet browser. Also, you can consult the “Help” menu in your browser. Different browsers can use different mechanisms to disable cookies.
Cookie settings in Internet Explorer
Cookie settings in Microsoft Edge
Cookie settings in Firefox
Cookie settings in Chrome for Desktop
Cookie settings in Chrome for Android
Cookie settings in Safari
Regarding the browser’s settings for deleting previous cookies, the same principles will apply as those for deactivation of new cookies in the browser’s settings. Please follow the proper instructions of your browser.
There are online tools available to delete all cookies stored after visiting different websites, such as www.allaboutcookies.org.
When you visit this Website from other computers, you must repeat the settings change.
WHAT TYPES OF COOKIES WE USE?
Strictly Necessary Cookies guarantee you functions without which you will not be able to use this Website, and will ensure, among others, that you will be displayed a version with broadband connection of the data quantity corresponding to that of internet connection used by you when accessing a website’s functionality. Moreover, if you change pages, such cookie will perform the switching function from http to https. In addition, this type of cookies will store your decision regarding the use of cookies on our Website.
The Strictly Necessary Cookies that we use are:
The use of Strictly Necessary Cookies for the above-mentioned purposes is based on your legitimate interests to ensure operation, access and proper technical use of our Website and to provide you the services that you explicitly required.
Statistical Cookies: These cookies are used to provide us statistical data about the performance of our Website (e.g., to count visits, traffic sources).
Marketing Cookies: These cookies allow the Website to store the choices you made and offer you improved and more personal functions. This category can include third party cookies.
Currently used cookies and their description is available on our website www.ozas.lt in section "Show details" of the informational cookie message.
| Cookie title | Short description | Validility period | Description |
| CakeCookie[working-hours] | Unique session identifier | 24 hours | Unique session identifier |
| CakeCookie[language] | Unique identifier of selected language | until closing of the Website | Unique identifier of selected language |
| IDE | “Google” doubleclick service cookies (unique identifier) | 30 min | Indented to display to the user relevant (topics of interest) advertisement, on other Google services, like “Youtube”, “Google Search”. Personalizes advertisements displayed to the user across all devices used. |
| NID | „Google“ cookie | 180 days | „Google“ cookies used for advertising purposes |
| __cfduid | Separation of sers | 30 min | Used in order to identify separate clients behind the joint IP address and to apply security settings based on the user. |
| _dc_gtm_UA-10802973-1 | Used in order to control the query speed | 8 hours | Cookie collects information regarding behavior of users on the website and is used in order to optimize the offers and to provide in other websites. |
| _fbp | Used by Facebook to deliver a series of advertisement products on Facebook | 90 days | This cookie will help deliver our advertising to people who have already visited our website when they are on Facebook or a digital platform powered by Facebook Advertising. |
| _ga | „Google Analytics“ (Unique user identifier) | 2 years | Registers a unique ID that is used to generate statistical data on how the visitor uses the website. |
| _gat | “Google Analytics“ (unique user identifier) | 1 min | Used by Google Analytics to throttle request rate. |
| _gat_UA-10802973-1 | Cookie used in order to collect information on how the users behave on the website (unique session identifier) | 1 min | Cookie used in order to collect information on how the users behave on the website and is used in order to separate unique users by assigning them a unique identifier (ID). |
| _gid | “Google Analytics“ (unique user identifier) | 24 hours | „Google Analytics“ cookies used in order to separate users. |
| fr | “Facebook“ advertising (unique user identifier) | 90 days | Facebook cookie used for the advertising, shown on “Facebook” website even for unregistered users |
| CAKEPHP | Unique session identifier | 30 min | Cookie collects data regarding users and is used in order to separate unique users, by assigning them unique identifier (ID). |
| cookies-accepted | Informational bar / pop-up regarding cookies | 90 days | Pop-up window in which informational notice is displayed regarding usage of cookies. This cookie shows that the user has accepted the cookie policy, privacy policy and terms and conditions. |
COOKIE CONSENT
SC Ozas intends to use certain categories of cookies for various reasons, but it needs your consent to do this. Click on “Allow all cookies” to accept or “Show details” for more information about the categories of cookies used and to make choices.
You will have the possibility to select the specific cookie categories used on this Website. The cookie notice will be displayed until you express your preferences. We will not use other categories of cookie except for those strictly necessary for a proper operation of the website if the event that you choose not to use these categories of cookie.
Preferences
Except for the categories of cookie which are strictly necessary for Website operation, you may accept or refuse the use of cookie for each category of cookie by selecting in the options box which will be displayed on the screen.
Once you consented us to use categories of cookies, you can return to your choice and disable the cookie files (except for strictly necessary cookies to operate this internet page) by accessing the button “Info” and “Change cookie settings”.
AMENDMENTS TO THIS COOKIE POLICY
This cookie policy was amended on 2021.10.01.
SC OZAS reserves the right to revise and update this Privacy Policy at any time. Additional information will be included in this updated document, available at the Website.
Therefore, please check the relevant section of our Privacy Policy when you visit the website, because it may have changed since the last visit.
Our shopping center’s business includes several situations in which we will process your personal data. More details can be found below.
We are uždaroji akcinė bendrovė “Ozantis”, a Lithuanian company, with its registered office in Vilnius, Ozo g. 18, registered under no. 126345741 (hereinafter referred to as “SC OZAS”).
This privacy policy is addressed to all data subjects who visit our shopping centre, access its website, participate in promotional campaigns or similar events carried out by us within the shopping centre or online or data subjects who represent suppliers/partners/collaborators or tenants in the contractual relationship with SC OZAS.
The way we process your personal data differs depending on your relationship with SC OZAS. To receive more information choose the category below that is applicable to you:
I am a visitor or customer of the shopping centre
I am a user of the shopping centre website
I am the legal representative or contact person of a supplier, collaborator or tenant of the shopping centre
I am part of the staff of suppliers, collaborators or tenants of the shopping centre
We undertake to process personal data in compliance with applicable legislation on the protection of personal data and good practices in this area. More information is available in the section on Data security and accuracy.
In addition, a Data Protection Officer has been appointed at the NEPI Rockcastle Group level, who can be contacted should there be any concerns about the protection of personal data and the exercise of data protection rights. The Data Protection Officer can be contacted by written, dated and signed request, using the contact details mentioned below:
by post, at: Ozo str. 18, Vilnius LT-08243, uždaroji akcinė bendrovė “Ozantis”;
by email, at the email address: duomenu.apsauga@nepirockcastle.com.
When you access the SC OZAS website (the “Website”), some of your personal data will be processed by SC OZAS, mainly to be able to provide you with the requested service, that is the access to the Website.
We are collecting data through cookies or other similar technical means (i.e., small text files that are stored on your computer, phone, tablet or mobile device, and contain information about your activity on those sites/applications), e.g.: sub-pages accessed, period spent on a specific page.
More information regarding usage of cookies is available in the Cookie Policy.
|
No. |
Purpose of processing personal data |
Legal basis of processing personal data |
| 1 |
Use of marketing cookies for the purpose of:
More information on cookies is available in the Cookie Policy |
Your consent |
| 2 |
Create statistics designed to provide information about the performance of the Website and the marketing campaigns displayed (e.g. the number of users who accessed the campaign page, the number of users who saw the campaign banner, etc.), made by using analysis cookies More information on cookies is available in the Cookie Policy |
Our legitimate interest in (i) improving the content of the Website and the campaigns conducted on the Website as well as the better evaluation of the performance indicators (KPI) of the commercial campaigns carried out on the Website and (ii) ensuring the operation, access and technical use of the Website and providing you with the services you have explicitly requested |
| 3 |
Use of cookies necessary to ensure the operation of the Website More information on cookies is available in the Cookie Policy |
Perform the contract regarding the provision of our services (i.e. ensuring access to the Website) |
SC OZAS will create and analyse your profiles based on the personal data we hold about you - data about your interaction with the Website, data collected through cookies. As a result of analysing such data, we will be able to identify your preferences, interests and capabilities in terms of procurement, and thus relate them to the services we provide or to the products we promote.
Then, through automated procedures, SC OZAS sets the content of the direct marketing materials that can be sent to you. In the legal language these automated procedures are referred to as “automated individual process”.
Thus, the direct marketing materials that we will send you will be as specific, convincing and applicable as possible to you, and as a consequence may influence you (i.e. in the sense of purchasing the product/service included in the marketing material), as SC OZAS manages to correctly identify your preferences or characteristics.
With regard to the processing of data by automated individual processes, you have several additional rights, i.e. you can (a) obtain human intervention, (b) express your point of view, (c) get explanations about the decision made and (d) contest that decision. In addition, you can withdraw consent at any time in the manner prescribed in this Privacy Policy in the section dedicated to Data subjects rights.
The personal data processed are kept for the period of time necessary to comply with the legal obligations imposed on us by the regulations specific to our field of activity.
Regarding the use of your personal data for direct marketing activities, they will be stored by SC OZAS from the moment you gave us your consent for this processing until the date you withdrew it.
Currently used cookies and their storage period is available in our Website in section "Show details" of the informational cookie message.
Access to your data will be provided only to those persons or entities with whom we collaborate in fulfilling the purposes of processing, and for whom we (we or the intended recipients) can justify a legitimate reason or if we have a legal obligation to provide your data.
The following entities and their employees may have access to your data:
IT service providers (e.g., software maintenance and development, site maintenance and development).
Marketing service providers, including market research service providers, marketing communications service providers, online tool traffic and behaviour monitoring service providers, various marketing customization service providers, providers of marketing services through social media resources, providers of services for the preparation of the content of marketing forms.
Managing group company - NEPI Rockcastle Lithuania, UAB (registered under no. 304909465).
Other group companies.
As SC OZAS is part of the Nepi Rockcastle group of companies (the “Group”), your personal data will be processed for the purposes of consolidated management of the Group’s activities, for audit purposes and in any other situation when such processing is required or allowed by law, if we can (SC OZAS or the recipient companies in the Group) justify a legitimate basis in this regard or if we obtain your consent in this regard. The list of the Group companies can be found at the following address: https://nepirockcastle.com/portfolio/ .
We will also provide your personal data to judicial bodies, public institutions, or central and local public authorities, based on a duly substantiated request or legal obligation.
As a rule, SC OZAS will not transfer your personal data to third countries outside the European Economic Area. However, if such a transfer takes place, SC OZAS will take appropriate protection measures to ensure the protection of the personal data transferred.
Identification data, such as: first name and last name, date of birth
Special identification data, that is personal identity number
Contact details, such as: email address, phone number
Image (video or photo)
Data on the vehicle for which a parking space is granted in the car park of the shopping centre: vehicle plate number (with image)
Data on access to the shopping centre parking, e.g.: arrival date and time, departure date and time, length of stay, payment related data
IP, MAC of the devices, login time (mobile, laptop, tablet)
Data on participation in promotional campaigns and similar events, e.g.: prizes won
|
No. |
Purpose of processing personal data |
Legal basis of processing personal data |
| 1 |
Video surveillance by means of the CCTV system installed inside the shopping centre, in the common areas, access roads, as well as car park areas |
Legitimate interest in ensuring the security of persons and property inside the shopping centre and its premises |
| 2 |
Video surveillance of the parking control system equipment |
Legitimate interest in ensuring security of the property, settlement of damage |
| 3 |
Providing access to the parking lot of the shopping centre |
Perform the contract regarding the provision of our services or lease of parking space of the parking lot (i.e. granting access to the parking lot of the shopping centre) |
| 4 |
Take and use photos (which also include your image) in order to promote the shopping centre |
Your consent |
| 5 |
Solve requests for data and information received from the competent authorities and institutions |
Legal obligation |
| 6 |
Grant access to the free WiFi network |
Perform the contract regarding the provision of our services (i.e. granting access to the facilities and services provided by the shopping centre) |
| 7 |
Organise raffles, competitions, events or marketing campaigns in the shopping centre, including handing out prizes won |
Perform the contract (i.e. in accordance with the regulation of the concerned raffle, competition or campaign) or legal obligation (regarding declaration and payment of taxes) |
| 8 |
Management of notifications/complaints submitted within the shopping centre |
Our legitimate interest in resolving complaints sent to us and in maintaining good relations with visitors/customers of the shopping centre |
| 9 |
Management of requests regarding lost objects, filed inside the shopping centre |
Our legitimate interest in resolving requests regarding lost objects |
| 10 |
Carry out economic, financial and/or administrative management activities |
Legal obligation |
| 11 |
Settlement of disputes, investigations or any other petitions/complaints to which SC OZAS is a party |
Legitimate interest in defending our rights in court/in front of any competent authority |
| 12 |
Archiving |
Legal obligation |
| 13 |
Carry out risk controls on SC OZAS procedures and processes, as well as conduct audits or investigations of SC OZAS |
Our legitimate interest in managing risks and ensuring compliance with SC OZAS procedures and processes |
The personal data processed are kept for the period of time necessary to comply with the legal obligations imposed on us by the regulations specific to our field of activity.
Depending on the context in which we process your personal data, the following rules for determining the storage period will apply:
CCTV system: video recordings stored by the CCTV system are usually kept for a period of 14 (fourteen) days. Storage period may be extended if required by law or it is necessary in order to investigate a specific incident / event and to ensure that the interests of the SC OZAS are protected / damage is compensated.
Parking system: video surveillance of the parking and payment equipment - no longer than 1 month; arrival / departure to the parking lot related data - no longer than 2 months; payment related data - in accordance with tax regulation (usually - 10 years). Storage period may be extended if required by law or it is necessary in order to investigate a specific incident / event and to ensure that the interests of the SC OZAS are protected / damage is compensated.
WiFi network: Data is stored during the session and not longer than 1 (one) day after the session ends.
Inquiries, complaints, lost and found related data - no longer than 3 years from the date of dispatch of the reply, receipt of the document (in case no reply).
Contract data - no longer than 10 years after the end of the contract.
Marketing related data: in accordance with the rules of specific marketing campaign.
Other – in accordance with the storage periods, established by legal regulation.
Access to your data will only be provided to those individuals or entities with whom we collaborate for processing purposes and for whom we (the new or the intended recipients) can justify a legitimate ground in accordance with the GDPR or if we have an obligation legal to provide your data.
The following entities and their employees may have access to your data:
Security service providers, operator of the parking system - to ensure CCTV video surveillance and access control system in parking spaces, to operate the parking system, SC OZAS collaborates with specialised companies, authorised to carry out security, surveillance and operational activities.
Other service providers - with regard to participation in campaigns and events, as well as the handling of complaints, grievances and/or requests regarding lost items addressed to the staff of the Info Desk offices within the shopping centres, SC OZAS usually collaborates with specialised service companies.
Legal consultants.
Managing group company - NEPI Rockcastle Lithuania, UAB (registered under no. 304909465).
Other group companies.
As SC OZAS is part of the Nepi Rockcastle group of companies (the “Group”), your personal data will be processed for the purposes of consolidated management of the Group’s activities, for audit purposes and in any other situation when such processing is required or allowed by law, if we can (SC OZAS or the recipient companies in the Group) justify a legitimate basis in this regard or if we obtain your consent in this regard. The list of the Group companies can be found at the following address: https://nepirockcastle.com/portfolio/ .
Your personal data will also be processed in relation to a number of third party partners (“Partners”). They are the partners that SC OZAS promotes in its relationship with you by direct marketing and are usually the tenants of SC OZAS. The partners do not have access to your personal data, except if SC OZAS obtained your prior agreement in this respect.
We will contractually require these entities and their staff to respect the confidentiality of this data, ensuring a high level of security for the processing of your data.
We will also provide your personal data to judicial bodies, public institutions, or central and local public authorities, based on a duly substantiated request or legal obligation.
As a rule, SC OZAS will not transfer your personal data to third countries outside the European Economic Area. However, if such a transfer takes place, SC OZAS will take appropriate protection measures to ensure the protection of the personal data transferred.
Identification data, such as: first name and last name
Contact details, such as: email address, phone number
Occupational data, such as: position held, company in which you are employed or which you represent
|
No. |
Purpose of processing personal data |
Legal basis of processing personal data |
| 1 |
Concluding and executing lease or other commercial contracts |
Legitimate interest in carrying out our activity and validly concluding commercial contracts agreements specific to our field of activity (i.e. commercial spaces lease and other agreements) or performance of contract |
| 2 |
Settlement of disputes, investigations or any other petitions/complaints to which SC OZAS is a party |
Legitimate interest in defending our rights in court/in front of any competent authority |
| 3 |
Archiving |
Legal obligation |
| 4 |
Carry out risk controls on SC OZAS procedures and processes, as well as conduct audits or investigations of SC OZAS |
Our legitimate interest in managing risks and ensuring compliance with SC OZAS procedures and processes |
The personal data processed are kept for the period of time necessary to comply with the legal obligations imposed on us by the regulations specific to our field of activity.
Depending on the context in which we process your personal data, the following rules for determining the storage period will apply:
Inquiries, complaints, contacting related data - no longer than 3 years from the date of dispatch of the reply, receipt of the document (in case no reply) or data.
Contract data - no longer than 10 years after the end of the contract.
Other – in accordance with the storage periods, established by legal regulation.
Access to your data will only be provided to those individuals or entities with whom we collaborate for processing purposes and for whom we (the new or the intended recipients) can justify a legitimate ground in accordance with the GDPR or if we have an obligation legal to provide your data.
The following entities and their employees may have access to your data:
Legal consultants.
Managing group company - NEPI Rockcastle Lithuania, UAB (registered under no. 304909465).
Other group companies.
As SC OZAS is part of the Nepi Rockcastle group of companies (the “Group”), your personal data will be processed for the purposes of consolidated management of the Group’s activities, for audit purposes and in any other situation when such processing is required or allowed by law, if we can (SC OZAS or the recipient companies in the Group) justify a legitimate basis in this regard or if we obtain your consent in this regard. The list of the Group companies can be found at the following address: https://nepirockcastle.com/portfolio/ .
We will contractually require these entities and their staff to respect the confidentiality of this data, ensuring a high level of security for the processing of your data.
We will also provide your personal data to judicial bodies, public institutions, or central and local public authorities, based on a duly substantiated request or legal obligation.
As a rule, SC OZAS will not transfer your personal data to third countries outside the European Economic Area. However, if such a transfer takes place, SC OZAS will take appropriate protection measures to ensure the protection of the personal data transferred.
Identification data, such as: first name and last name
Contact details, such as: email address, phone number
Occupational data, such as: position held, company in which you are employed or which you represent
Image (photo or video)
Data on the vehicle for which a parking space is granted in the car park of the shopping centre: vehicle plate number (with image)
Data on access to the shopping centre parking, e.g.: arrival date and time, departure date and time, length of stay, payment related data, information filled in section “notes”
IP, MAC of the devices, login time (mobile, laptop, tablet)
|
No. |
Purpose of processing personal data |
Legal basis of processing personal data |
| 1 |
Video surveillance by means of the CCTV system installed inside the shopping centre, in the common areas, access roads, as well as car park areas |
Legitimate interest in ensuring the security of persons and property inside the shopping centre and its premises |
| 2 |
Video surveillance of the parking control system equipment |
Legitimate interest in ensuring security of the property, settlement of damage |
| 3 |
Providing access to the parking lot of the shopping centre |
Perform the contract regarding the provision of our services or lease of parking space of the parking lot (i.e. granting access to the parking lot of the shopping centre) |
| 4 |
Grant access to staff of the tenants, service providers, contractors and other collaborators inside the shopping area outside the hours when the shopping centre is not open |
Legitimate interest in ensuring the security of persons and property inside the shopping centre |
| 5 |
Solve requests for data and information received from the competent authorities and institutions |
Legal obligation |
| 6 |
Grant access to the free WiFi network |
Perform the contract regarding the provision of our services (i.e. granting access to the facilities and services provided by the shopping centre) |
| 7 |
Management of notifications/complaints submitted within the shopping centre |
Our legitimate interest in resolving complaints sent to us and in maintaining good relations with visitors/customers of the shopping centre |
| 8 |
Management of requests regarding lost objects, filed inside the shopping centre |
Our legitimate interest in resolving requests regarding lost objects |
| 9 |
Settlement of disputes, investigations or any other petitions/complaints to which SC OZAS is a party |
Legitimate interest in defending our rights in court/in front of any competent authority |
| 10 |
Archiving |
Legal obligation |
| 11 |
Carry out risk controls on SC OZAS procedures and processes, as well as conduct audits or investigations of SC OZAS |
Our legitimate interest in managing risks and ensuring compliance with SC OZAS procedures and processes |
The personal data processed are kept for the period of time necessary to comply with the legal obligations imposed on us by the regulations specific to our field of activity.
Depending on the context in which we process your personal data, the following rules for determining the storage period will apply:
CCTV system: video recordings stored by the CCTV system are usually kept for a period of 14 (fourteen) days. Storage period may be extended if required by law or it is necessary in order to investigate a specific incident / event and to ensure that the interests of the Controller are protected / damage is compensated.
Parking system: video surveillance of the parking and payment equipment - no longer than 1 month; arrival / departure to the parking lot related data - no longer than 2 months; payment related data - in accordance with tax regulation (usually - 10 years); in case of lease of the parking space to the tenants and / or employees of the tenants of the shopping center - no longer than 1 month after the end of the lease contract. Storage period may be extended if required by law or it is necessary in order to investigate a specific incident / event and to ensure that the interests of the Controller are protected / damage is compensated.
WiFi network: Data is stored during the session and not longer than 1 (one) day after the session ends.
Inquiries, complaints, lost and found related data - no longer than 3 years from the date of dispatch of the reply, receipt of the document (in case no reply).
Contract data - no longer than 10 years after the end of the contract.
Other – in accordance with the storage periods, established by legal regulation.
Access to your data will only be provided to those individuals or entities with whom we collaborate for processing purposes and for whom we (the new or the intended recipients) can justify a legitimate ground in accordance with the GDPR or if we have an obligation legal to provide your data.
The following entities and their employees may have access to your data:
Security and security service providers, operator of the parking system - to ensure CCTV video surveillance and access control system in parking spaces, to operate the parking system, SC OZAS collaborates with specialised companies, authorised to carry out security, surveillance and operational activities.
Other service providers - with regard to the handling of complaints, grievances and/or requests regarding lost items addressed to the staff of the Info Desk offices within the shopping centres, SC OZAS usually collaborates with specialised service companies.
Legal consultants.
Managing group company - NEPI Rockcastle Lithuania, UAB (registered under no. 304909465).
Other group companies.
We will contractually require these entities and their staff to respect the confidentiality of this data, ensuring a high level of security for the processing of your data.
We will also provide your personal data to judicial bodies, public institutions, or central and local public authorities, based on a duly substantiated request or legal obligation.
As a rule, SC OZAS will not transfer your personal data to third countries outside the European Economic Area. However, if such a transfer takes place, SC OZAS will take appropriate protection measures to ensure the protection of the personal data transferred.
We will take all necessary security measures to protect your personal data transmitted, stored or otherwise processed against destruction, loss, unlawful or accidental change, unauthorised disclosure or unauthorised access, as well as against any other unlawful processing. The security measures we implement with regard to your personal data can ensure the confidentiality, integrity, availability and continued resilience of processing systems and services, as well as the capacity to restore the availability of and access to personal data in a timely manner if a physical or technical incident occurs.
All personal data will be processed through secure pages using the SSL encryption system, marked with a padlock symbol, located at the top of the browser window.
For more information on security standards on the Website, go to the “Help” section.
SC OZAS makes all necessary efforts and uses appropriate IT technologies to ensure the protection and security of the data you provide us.
In the cases provided by the GDPR in connection with personal data breaches, SC OZAS will properly inform the relevant authorities and relevant persons.
SC OZAS processes personal data that is accurate and has an updated procedure in place. Thus, SC OZAS takes all necessary steps to ensure that inaccurate personal data, in view of the processing purposes, are erased or rectified without delay.
Right of access - you may request confirmation if your personal data are processed or not by SC OZAS, and if so, you may request access thereto, as well as certain information about this. Upon request, SC OZAS will also issue a copy of the processed personal data. The request for additional copies will be charged based on the actual costs incurred by SC OZAS,
Right to rectification - you can get your inaccurate personal data rectified and also supplement incomplete data, including by providing additional information.
Right to delete data ("the right to be forgotten") - in situations expressly regulated by law, you can obtain from SC OZAS the deletion of the data. Thus, you can request deletion of personal data if:
the data are no longer necessary for the purposes for which they were collected or otherwise processed;
you withdraw your consent on the basis of which processing takes place;
you oppose to the processing under the right of opposition;
processing your personal data is illegal;
data must be deleted for compliance with a legal obligation incumbent on SC OZAS.
Right to restrict processing - you may request the restriction of processing of personal data in certain situations governed by law, as follows:
you contests the accuracy of your data, for the time SC OZAS checks the accuracy of the concerned data;
processing is illegal and you oppose to the deletion of data;
you need these data to establish, exercise or defend some rights in court, and SC OZAS no longer needs this data;
you opposed the processing of personal data for the period in which we check if our legitimate interests prevail over the interests of your rights and freedoms.
In these situations, except for storage, the data will not be processed anymore.
Right to object to the processing of personal data - you can object at any time, for reasons related to your particular situation, to processing (including profiling) based on the legitimate interest of SC OZAS or, where appropriate, on the exercise by SC OZAS of a task which is in the public interest or results from the exercise of a public authority with which he would have invested SC OZAS.
Marketing materials sent electronically may contain brief information on your option of objecting to the processing of personal data in order to perform direct marketing. If you object to the processing of personal data for direct marketing purposes, your personal data will no longer be used in for these purposes.
The right to object to the direct marketing activity performed by PC OZAS is available when the processing of personal data for direct marketing purposes is based on (i) the legitimate interest of PC OZAS, or (ii) on the existing contractual relationship with PC OZAS and concerns products that are similar to those already contracted, and not on the consent given.
Right to data portability - you can receive your personal data in a structured, readable format, and you can request that the data be passed to another operator. This right applies only to personal data provided directly by you to SC OZAS, and only if the processing of personal data is done by automated means and is legally based on either the execution of a contract or the consent of that person,
Right to complain - you can complain about how SC OZAS processes your personal data. The complaint will be filed with the State data protection inspectorate ("SDPI") – details at https://vdai.lrv.lt,
Right to withdraw your consent - you may at any time withdraw your consent to the processing of personal data by SC OZAS in cases where processing is based on consent. Withdrawal of the consent will only have effect for the future, and processing prior to the withdrawal remains valid. For example, such a case is your option to withdraw your consent to direct marketing messaging.
Additional rights related to automated decisions used in the delivery of SC OZAS services - if SC OZAS makes automated decisions about personal data and these decisions affect you significantly, you can (a) obtain human intervention with respect to said intervention, (b) express your point of views on such processing, (c) obtain explanations of the decision made and (d) contest that decision.
These rights (except the right to contact SDPI, which you can exercise under the conditions established by this authority - in this regard you can see the official website https://vdai.lrv.lt) may be exercised, either individually or by aggregation sending a letter/message in the following ways:
by post, at: Ozo str. 18, Vilnius LT-08243, uždaroji akcinė bendrovė “Ozantis”;
by email, at the email address: duomenu.apsauga@nepirockcastle.com.
In addition, a Data Protection Officer ("DPO") has been appointed at the Group level, who can be contacted if there are any concerns about the protection of personal data and the exercise of data protection rights. The DPO may be contacted by submitting a written, dated and signed application to the aboveindicated address.
The Website of OZAS shopping center, available at www.ozas.lt, is owned by uždaroji akcinė bendrovė „Ozantis“ (“SC OZAS”), a Lithuanian company, having its registered office in Ozas str. 18, LT-08243 Vilnius, Lithuania, registered under no. 126345741.
Privacy Policy, available at: www.ozas.lt, form part of these Terms and Conditions, and provide a detailed description of how we collect, use and process users’ data while navigating on the Website, as well as their rights related to personal data.
In order to use the Website, users must be minimum 14 years old and agree to this Terms and Conditions regulation.
By accessing and using the Website, the user acknowledges and accepts these Terms and Conditions, as well as other policies relevant for the Website.
If you do not agree to these Terms and Conditions or a part of these Terms and Conditions, please do not use the Website in any way.
Website
www.ozas.lt
Company
SC OZAS - Lithuanian company, having its registered office in Ozo str. 18, LT-08243 Vilnius, Lithuania, registered under no. 126345741SC OZAS, part of NEPI Rockcastle group.
Group
Any other entities of NEPI Rockcastle group. The list of companies within NEPI Rockcastle Group can be found here: List of Group Companies
User/Users
Any user/users navigating and/or reading and/or using and/or signing up the Website and/or subscribe to the Newsletter.
Agreement
Means the Agreement executed between the User and the Company, according to these Terms and Conditions.
Third Party Partners
Third Party Partners refers to partners on whose behalf we communicate with users, and are divided into: tenants of NEPI Rockcastle group’s shopping centers, mass-media partners, collaborators and event planners.
Third Party Partners do not have access to users’ personal data, except when the Company procured the prior consent of an User in this regard.
Consent to Personal Data Processing
Means any freely given, specific, informed and unambiguous indication of the Data Subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the Processing of Personal Data concerning him/her.
Data Protection Officer
The Company will designate a person whose purpose is to inform and advise the data controller or the processor as well as the employees in charge of data processing regarding their obligations under the law, as well as to supervise the compliance of laws related to data protection and of controller’s or processor’s policies with respect to personal data protection, cooperation with the supervisory authority, taking over the role of contact point in relation to the supervisory authority regarding processing issues.
The contact person of the data controller:
duomenu.apsauga@nepirockcastle.com
Usage of Website represent the user’s express and unequivocal consent for execution of the Agreement including these Terms and Conditions and Privacy Policy.
By accepting these Terms and Conditions, the user acknowledges that any other subsequent or simultaneous commitments in relation to these Terms and Conditions are replaced by these Terms and Conditions. These Terms and Conditions does not create rights for third persons.
Users are not entitled:
The general legal framework governing the protection of personal data is the General Regulation on the Protection of Data no. 679/2016 ("GDPR") applicable in the European Union.
The Website www.ozas.lt uses cookies. For more information about personal data collected by cookies files, User must consult the Cookies Policy available at Cookies Policy.
You can find more information about the processing of your personal data for these purposes, including how to withdraw your consent, in Privacy Policy, available at Privacy Policy.
The Company observes other persons’ intellectual property rights and requires users to comply with any intellectual property rights owned by the Company or third persons.
The Website’s content and graphics including, but not limited to the entire textual context, technical sources of all existing and future services and facilities, are owned by the Company and/or its business Partners, as appropriate. These are protected by copyrights, trademark rights and other laws and treaties. The Company assumes no liability for the veracity of intellectual property rights owned by its business Partners and which are used on the Website following the latter’s agreement. In the event that the Website’s content includes specific reference to Company’s business Partners, either to their intellectual property rights or business activities pursued by them, namely marketing campaigns, products and services, prices, etc., the Company bears no liability for the accuracy and legality of such information made fully available by its business Partners, the latter bearing the entire legal liability for such content.
By using certain Website’s specific tools, where specified, users assign to the Company their intellectual property rights including, but not limited to texts published on the Website, files loaded on the Website.
Users must observe all intellectual property rights of the Company as well as of its business Partners promoted on the Website, provided by the legislation in force. Users are prohibited to use any image, trademark or sign belonging to the Company or third parties, if they did not procure the prior written consent of the legal holders.
Users may view, download and print Website’s pages only for their personal use which is subject to the restrictions below or to any other clauses in these Terms and Conditions. Any use of content for purposes other than the personal use, may be done only with the Company’s prior written consent and by indicating the source of information.
In this regard, Users are not allowed:
Requests for using the Website’s content for purposes other than the personal use can be sent to Ozo str. 18, Vilnius LT-08243, UAB “Ozantis”, or by email to info@ozas.lt.
These Terms and Conditions do not grant users any right, title or interest regarding the Website, content owned by other persons and published on the website, trademarks, signs or other intellectual property rights held by the Company.
Considering that the Company wishes to improve users’ experience on the Website, it encourages opinions and suggestions; however, the Company may use comments or suggestions without any obligation to the users.
Opinions and suggestions can be sent to SC OZAS address at Ozo str. 18, Vilnius LT-08243, or by email to info@ozas.lt
Waivers and assignments
No situation when the Company fails to act immediately to enforce one of its rights will be deemed a waiver to such right or its enforcement.
If any provision of these Terms and Conditions will be held invalid or ineffective, the other provisions will not be affected thereby and will remain in force and fully valid being interpreted in the largest extent permitted by law.
In the case described above, the invalid or ineffective provision will be replaced by another provision legally accepted that best approximates the Company’s initial purpose. This applies also for omissions.
Users may not assign their rights in part or in full, pursuant to these Terms and Conditions.
The Company may assign its rights to any of its subsidiaries or to any other NEPI Rockcastle group companies, or to any successor in title associated with the Website.
The Company makes the Website available AS SUCH, WITH ALL ITS FLAWS and AS IT IS AVAILABLE, without any express or implied guarantee. WE ALSO DECLINE ANY GUARANTEE, INCLUDING ANY MARKETING GUARANTEE, SATISFACTORY QUALITY, ACCURACY FOR A SPECIAL PURPOSE OR NEED. WE DO NOT GUARANTEE THAT THE RESULT WHICH CAN BE OBTAINED BY USING THE WEBSITE WILL BE EFFECTIVE, SAFE OR ACCURATE OR MEET THE USER’S REQUIREMENTS.
The Company does not guarantee that the Website will be constantly available.
If maintenance works are required and the Website is unavailable for maintenance reasons, the Company will inform the User when they access the Website.
The Company will not be liable for internet/network drop and, in particular, for drops due to which the Website cannot be accessed following technical or other difficulties that the Company is unable to control, such as force majeure, third parties fault.
The Company is not liable for inaccurate and/or untrue personal data provided by Users, particularly for those provided by minors aimed to create the appearance of being at least 14 years old.
The User acknowledges that the Company has no control nor obligation to act with respect to:
The Company is not liable for any indirect, special, incidental damage resulting from the use of or incapacity to use the Website.
These Terms and Conditions are governed by and interpreted in accordance with the Lithuanian law.
The parties will amicably settle any dispute in connection with these Terms and Conditions within 15 business days as of the User’s written notice in this regard. In the event that the parties fail to reach an agreement, such dispute will be settled by the competent Lithuanian court.
Consumers may not waive their rights under the law. Any contractual clauses that remove or limit the consumers’ rights under the law will have no legal effects on them.
This Terms and Conditions regulation was updated on 2021.10.01.
SC OZAS reserves the right to revise and update these Terms and Conditions at any time.
Therefore, please check the relevant section of the Terms and Conditions when you visit the Website, because it may have changed since the last visit.
If you have any questions about the information contained in this page please write us at infocentras@ozas.lt.
By continuing to use the Website after enforcement of certain amendments/supplements, the User agrees to observe such amendments/supplements.
IF THE USER DOES NOT WISH TO ACCEPT THESE TERMS AND CONDITIONS, INCLUDING THEIR AMENDMENTS/SUPPLEMENTS, THE USER MUST STOP USING THE WEBSITE.
Privacy notification concerning the processing of personal data
when accessing the premisses and territory of shopping center „OZAS”
Uždaroji akcinė bendrovė “Ozantis” (“Controller” or “SC OZAS”), a Lithuanian company, having its registered office in Ozas str. 18, LT-08243 Vilnius, Lithuania, registered under no. 126345741, processes the personal data of data subjects that physically access the premisses and territory of shopping center „OZAS”, as follows:
Purposes of processing
to ensure security and safety of assets, for which purpose it decided to use video surveillance of public areas by the means of CCTV system installed on the premises and territory of the asset, in the common areas, access ways, parking areas
solving the requests for data and information received from the competent authorities and institutions
archiving, settling disputes, investigations, or any other petitions / complaints to which our company is party, as well as conducting risk controls on procedures and processes, as well audits or investigations at the company level
granting free access to the WiFi network
participating in the center’s marketing campaigns and awarding of prizes gained in such campaigns (e.g.: signing handing-over minutes etc.)
handling complaints filed in the center premises (e.g.: complaints forms etc.)
processing the lost&found requests filed in the center premises (e.g.: lost&found forms etc.).
Processed categories of data
in the context of using the CCTV video surveillance system: the image of the data subjects
in the context of accessing the Free WiFi: the IP, MAC of the devices, login time;
as regards the center’s campaigns, the types of processed data are to be detailed in the campaign regulation, as published on the center’s website.
Categories of data subjects whose personal data are processed
visitors and clients of the center
personnel of the tenants of the center
personnel of the providers/partners/collaborators of the Controller and/or the tenants.
Legal grounds for processing
In view of the above, we process the personal data of the data subjects that work within or just visit the premises, as the case may be, based on:
legitimate interest of the controller (e.g. protection of property and other assets, protection of individuals, handling data subjects and/or authorities requests, processing operations within the Group the controller belongs to)
the consent of the data subject (e.g. participation in campaigns)
Storage period
The processed personal data is kept for the period of time necessary for the purpose of processing.
As far as video recordings are concerned, they are usually kept for a period of 14 (fourteen) days, unless the extension of their processing period is imposed by law or justified by legal procedures.
The Wifi login related data is stored during the session and not longer than 1 (one) day after the session ends.
As regards the center’s campaigns, the data storage coordinates are to be included in the campaign regulation, as published on the website or in the premises of the center.
Third party access
In order to ensure CCTV video surveillance, as well as to issue access cards in the premises and in the parking areas, the building owner cooperates with specialized and authorized companies (IT service providers, security service providers, organisers of campaigns, legal consultants, asset manager of the center) according to the law, for the purpose to carry out such activities.
Personal data thus processed may also be made available to competent authorities and institutions, in accordance with the law, or processed within the NEPI Rockcastle Group, for the purpose of group management consolidated activities, for audit purposes and in any other situation where the law imposes or permits such processing.
As regards the center’s campaigns and events, as well the handling of complaints and/or lost & found requests, if filed in the center’s premises, to the Info Desks, the data controller usually collaborates with specialized 3rd party providers.
Rights of data subjects whose data are processed as described herein
Right of access - you may request confirmation if your personal data are processed or not by SC OZAS, and if so, you may request access thereto, as well as certain information about this. Upon request, SC OZAS will also issue a copy of the processed personal data. The request for additional copies will be charged based on the actual costs incurred by SC OZAS,
Right to rectification - you can get your inaccurate personal data rectified and also supplement incomplete data, including by providing additional information.
Right to delete data ("the right to be forgotten") - in situations expressly regulated by law, you can obtain from SC OZAS the deletion of the data. Thus, you can request deletion of personal data if:
the data are no longer necessary for the purposes for which they were collected or otherwise processed;
you withdraw your consent on the basis of which processing takes place;
you oppose to the processing under the right of opposition;
processing your personal data is illegal;
data must be deleted for compliance with a legal obligation incumbent on SC OZAS.
Right to restrict processing - you may request the restriction of processing of personal data in certain situations governed by law, as follows:
you contests the accuracy of your data, for the time SC OZAS checks the accuracy of the concerned data;
processing is illegal and you oppose to the deletion of data;
you need these data to establish, exercise or defend some rights in court, and SC OZAS no longer needs this data;
you opposed the processing of personal data for the period in which we check if our legitimate interests prevail over the interests of your rights and freedoms.
In these situations, except for storage, the data will not be processed anymore.
Right to object to the processing of personal data - you can object at any time, for reasons related to your particular situation, to processing (including profiling) based on the legitimate interest of SC OZAS or, where appropriate, on the exercise by SC OZAS of a task which is in the public interest or results from the exercise of a public authority with which he would have invested SC OZAS.
Marketing materials sent electronically may contain brief information on your option of objecting to the processing of personal data in order to perform direct marketing. If you object to the processing of personal data for direct marketing purposes, your personal data will no longer be used in for these purposes.
The right to object to the direct marketing activity performed by PC OZAS is available when the processing of personal data for direct marketing purposes is based on (i) the legitimate interest of PC OZAS, or (ii) on the existing contractual relationship with PC OZAS and concerns products that are similar to those already contracted, and not on the consent given.
Right to data portability - you can receive your personal data in a structured, readable format, and you can request that the data be passed to another operator. This right applies only to personal data provided directly by you to SC OZAS, and only if the processing of personal data is done by automated means and is legally based on either the execution of a contract or the consent of that person,
Right to complain - you can complain about how SC OZAS processes your personal data. The complaint will be filed with the State data protection inspectorate ("SDPI") – details at https://vdai.lrv.lt,
Right to withdraw your consent - you may at any time withdraw your consent to the processing of personal data by SC OZAS in cases where processing is based on consent. Withdrawal of the consent will only have effect for the future, and processing prior to the withdrawal remains valid. For example, such a case is your option to withdraw your consent to direct marketing messaging.
Additional rights related to automated decisions used in the delivery of SC OZAS services - if SC OZAS makes automated decisions about personal data and these decisions affect you significantly, you can (a) obtain human intervention with respect to said intervention, (b) express your point of views on such processing, (c) obtain explanations of the decision made and (d) contest that decision.
These rights (except the right to contact SDPI, which you can exercise under the conditions established by this authority - in this regard you can see the official website https://vdai.lrv.lt) may be exercised, either individually or by aggregation sending a letter/message in the following ways:
by post, at: Ozo str. 18, Vilnius LT-08243, UAB “Ozantis”;
by email, at the email address: duomenu.apsauga@nepirockcastle.com.
In addition, a Data Protection Officer ("DPO") has been appointed at the Group level, who can be contacted if there are any concerns about the protection of personal data and the exercise of data protection rights. The DPO may be contacted by submitting a written, dated and signed application to the aboveindicated address.
