Cosmetics shop RITUALS | Shopping and Entertainment center OZAS

SC Ozas intends to use certain categories of cookies for various reasons, but it need your consent to do this. Click on “Accept” to accept or “Cookies Policy” for more information about the categories of cookies used.

You will have the possibility to select the specific cookie categories used on this Website. The cookie notice will be displayed until you express your preferences. We will not use other categories of cookie except for those strictly necessary for a proper operation of the website if the event that you choose not to use these categories of cookie.

Preferences Center

Except for the categories of cookie which are strictly necessary for Website operation, you may accept or refuse the use of cookie for each category of cookie by selecting in the options box which will be displayed on the screen.

Once you consented us to use categories of cookies, you can return to your choice and disable the cookie files (except for strictly necessary cookies to operate this internet page) by accessing the options bar on the Website footer whereby the use of cookies is notified.

AMENDMENTS TO THIS COOKIE POLICY

This cookie policy was amended on 2019.08.05.

All amendments related to this Cookie Policy will be communicated to you sufficiently before such amendments will be effective.

This document, Privacy Policy, regulates how SC OZAS processes personal data of SC OZAS website users (the "Website") SC OZAS.

Protecting your personal data in the course of our business is a major concern of uždaroji akcinė bendrovė “Ozantis” ("SC OZAS") . That is why we aim to offer you a secure online experience, respecting the right to privacy and the protection of personal data.

Under Regulation 2016/679 on the protection of individuals with regard to the processing of personal data and on the free movement of such data ("GDPR") SC OZAS has the obligation to process personal data in accordance with the principles of processing and only for the purposes specified below, as well as under safe conditions.

Principles of processing

SC OZAS processing of personal data of Website users is done in accordance with the following principles:

Personal data are processed in a legal, fair and transparent manner with respect to users,
Personal data are only collected for specified, explicit and legitimate purposes and are not processed in a manner that is incompatible with these purposes,
Personal data must be adequate, relevant and non-excessive in relation to the purpose for which they are collected and/or further processed,
Personal data must be accurate and, if necessary, updated; all reasonable measures must be taken to erase or correct inaccurate, incomplete data, having regard to the purposes for which they were collected or for which they are further processed,
Personal data are not kept longer than necessary for the purposes for which they were collected or for which they are further processed,
Personal data will be processed safely, ensuring a level of protection against illegal or unauthorised access, as well as loss, destruction, damage. SC OZAS will maintain the privacy of the Website users' personal data, as required by the GDPR,
The observance of the principles set out in sections (a) to (f) above must be demonstrated, for which purpose the rules and requirements for the processing of personal data should be documented.

Processing purposes

SC OZAS will only process those personal data that are appropriate, relevant and strictly necessary for the identified processing purposes.

Personal data are processed for the following purposes, which we will always present to you specifically and explicitly, in principle by means of the notifications, or by any other means that are used to provide information to users (such as posters, symbols, etc.):

to contact you through the means of communication to provide you with information (i.e. non-marketing information),
to create and analyse profiles about you in order to present you content that is suited to your preferences and to improve our services,
to perform marketing or general advertising activities as well as customer loyalty activities and surveys,
to perform economic, financial and/or administrative management activities in SC OZAS,
to centralise your operations and maintain an internal database that stores your information about you in order for SC OZAS to access it for use (that is, the use of these data involves processing them by SC OZAS’s internal applications, in the course of business),
to perform internal analyses (including statistical analyses, reports) on the customer portfolio, improving and developing services, and to conduct market studies and analyses to improve and develop SC OZAS, Group and Partner services,
to archive, settle disputes, investigations or any other petitions/complaints to which SC OZAS is a party and to perform risk checks on the procedures and processes of SC OZAS and to conduct audits or investigations of SC OZAS,
to ensure a high level of security both in what concerns the computer systems (e.g. applications, network, infrastructure, website) and physical locations,
to provide you with support services when you request so,

Information

Every time we get personal data from you or we obtain your data from other entities, we'll let you know about issues related to:

identity and contact details of operator and officer of personal data,
the type of data,
the purposes of processing,
the basis of processing,
the need for processing as a result of a legal provision/execution of a contract, and the consequences of your refusal,
the categories of recipients to whom we submit your personal information,
if we transmit these data to a third country,
the duration for which we store these data and
your rights in relation to the processing of personal data.

This information will be available either in notifications or other means used by SC OZAS to achieve this purpose (e.g. posters, symbols, etc.)

Access to your data

Access to your data will only be provided to those individuals or entities with whom we collaborate for processing purposes and for whom we (the new or the intended recipients) can justify a legitimate ground in accordance with the GDPR provisions or if we have an obligation legal to provide your data.

The following entities and their employees will have access to your data:

IT service providers (e.g., software maintenance and development, site maintenance and development),
market research service providers, service providers used for the transmission of the marketing communications, providers of traffic monitoring service and online tools users’ behavior, providers of customisation of various types of marketing, providers of marketing services through social media resources, content providers for marketing,
NEPI Rockcastle Group managing company and companies in the NEPI Rockcastle Group (the "Group"),
property manager of the shopping center.

We will require these entities and their staff to respect the confidentiality of these data, ensuring a high level of security for your data processing.

We will also provide your personal data to judicial bodies, public institutions, or central and local public authorities, based on a duly substantiated request or legal obligation.

Security of personal data

We will take all necessary security measures to protect your personal data transmitted, stored or otherwise processed against destruction, loss, unlawful or accidental change, unauthorised disclosure or unauthorised access, as well as against any other unlawful processing. The security measures we implement with regard to your personal data can ensure the confidentiality, integrity, availability and continued resilience of processing systems and services, as well as the capacity to restore the availability of and access to personal data in a timely manner if a physical or technical incident occurs.

All personal data will be processed through secure pages using the SSL encryption system, marked with a padlock symbol, located at the top of the browser window.

For more information on security standards on the Webite, go to the "Help" section.

In the cases provided by the GDPR in connection with personal data breaches, SC OZAS will properly inform the relevant authorities and relevant persons.

Accuracy of personal data

SC OZAS processes personal data that is accurate and has an updated procedure in place. Thus, SC OZAS takes all necessary steps to ensure that inaccurate personal data, in view of the processing purposes, are erased or rectified without delay.

Storage period

Your personal data are processed and stored during the necessary period for which we provide the Website services to you.

Periods of usage of cookies are established in Cookie Policy.

Your rights

As a Website user you have the following rights which can be exercised individually or cumulatively with respect to the personal data SC OZAS holds about you:

Right of access- you may request confirmation if your personal data are processed or not by SC OZAS, and if so, you may request access thereto, as well as certain information about this. Upon request, SC OZAS will also issue a copy of the processed personal data. The request for additional copies will be charged based on the actual costs incurred by SC OZAS,
Right to rectification- you can get your inaccurate personal data rectified and also supplement incomplete data, including by providing additional information.
Right to delete data ("the right to be forgotten") - in situations expressly regulated by law, you can obtain from SC OZAS the deletion of the data. Thus, you can request deletion of personal data if:
- the data are no longer necessary for the purposes for which they were collected or otherwise processed;
- you withdraw your consent on the basis of which processing takes place;
- you oppose to the processing under the right of opposition;
- processing your personal data is illegal;
- data must be deleted for compliance with a legal obligation incumbent on SC OZAS.
Right to restrict processing- you may request the restriction of processing of personal data in certain situations governed by law, as follows:
- you contests the accuracy of your data, for the time SC OZAS checks the accuracy of the concerned data;
- processing is illegal and you oppose to the deletion of data;
- you need these data to establish, exercise or defend some rights in court, and SC OZAS no longer needs this data;
- you opposed the processing of personal data for the period in which we check if our legitimate interests prevail over the interests of your rights and freedoms.

In these situations, except for storage, the data will not be processed anymore.

Right to object to the processing of personal data- you can object at any time, for reasons related to your particular situation, to processing (including profiling) based on the legitimate interest of SC OZAS or, where appropriate, on the exercise by SC OZAS of a task which is in the public interest or results from the exercise of a public authority with which he would have invested SC OZAS.

Marketing materials sent electronically may contain brief information on your option of objecting to the processing of personal data in order to perform direct marketing. If you object to the processing of personal data for direct marketing purposes, your personal data will no longer be used in for these purposes.

The right to object to the direct marketing activity performed by PC OZAS is available when the processing of personal data for direct marketing purposes is based on (i) the legitimate interest of PC OZAS, or (ii) on the existing contractual relationship with PC OZAS and concerns products that are similar to those already contracted, and not on the consent given.

Right to data portability- you can receive your personal data in a structured, readable format, and you can request that the data be passed to another operator. This right applies only to personal data provided directly by you to SC OZAS, and only if the processing of personal data is done by automated means and is legally based on either the execution of a contract or the consent of that person,
Right to complain- you can complain about how SC OZAS processes your personal data. The complaint will be filed with the State data protection inspectorate ("SDPI") – details at https://vdai.lrv.lt,
Right to withdraw your consent- you may at any time withdraw your consent to the processing of personal data by SC OZAS in cases where processing is based on consent. Withdrawal of the consent will only have effect for the future, and processing prior to the withdrawal remains valid. For example, such a case is your option to withdraw your consent to direct marketing messaging.
Additional rights related to automated decisions used in the delivery of SC OZAS services - if SC OZAS makes automated decisions about personal data and these decisions affect you significantly, you can (a) obtain human intervention with respect to said intervention, (b) express your point of views on such processing, (c) obtain explanations of the decision made and (d) contest that decision.

These rights (except the right to contact SDPI, which you can exercise under the conditions established by this authority - in this regard you can see the official website https://vdai.lrv.lt) may be exercised, either individually or by aggregation sending a letter/message in the following ways:

by post, at: Ozo str. 18, Vilnius LT-08243, UAB “Ozantis”;
by email, at the email address: apsauga@nepirockcastle.com.

In addition, a Data Protection Officer ("DPO") has been appointed at the Group level, who can be contacted if there are any concerns about the protection of personal data and the exercise of data protection rights. The DPO may be contacted by submitting a written, dated and signed application to the aboveindicated address.

Privacy Policy and other documents relating to the processing of personal data

This Privacy Policy is the general framework that reflects the principles of personal data processing at SC OZAS.

When visiting the website (the "Website"), SC OZAS processes the following personal data: the IP address, the browser type, the type of computer used and the usage system, the date and time of access and your location. As a result of the use of the Website, we place cookies or other similar technical means on your computer to help you access the services of our Website with ease and efficiency, and to provide, protect and improve our Website services. Further information about cookies are found in the Cookies Policy available at [ cookie politikos adresas ].

Changes to the Privacy Policy

This Privacy Policy was last updated on 2019.08.05.

SC OZAS reserves the right to revise and update this Privacy Policy at any time. Additional information will be included in this updated document, available at the Website.

Therefore, please check the relevant section of our Privacy Policy when you visit the Website, because it may have changed since the last visit.

If you have any questions about the information contained in this page please write us at duomenu.apsauga@nepirockcastle.com.

Cookie title	Short description	Validility period	Description
CakeCookie[working-hours]	Unique session identifier	24 hours	Unique session identifier
CakeCookie[language]	Unique identifier of selected language	until closing of the Website	Unique identifier of selected language
IDE	“Google” doubleclick service cookies (unique identifier)	30 min	Indented to display to the user relevant (topics of interest) advertisement, on other Google services, like “Youtube”, “Google Search”. Personalizes advertisements displayed to the user across all devices used.
NID	„Google“ cookie	180 days	„Google“ cookies used for advertising purposes
__cfduid	Separation of sers	30 min	Used in order to identify separate clients behind the joint IP address and to apply security settings based on the user.
_dc_gtm_UA-10802973-1	Used in order to control the query speed	8 hours	Cookie collects information regarding behavior of users on the website and is used in order to optimize the offers and to provide in other websites.
_fbp	Used by Facebook to deliver a series of advertisement products on Facebook	90 days	This cookie will help deliver our advertising to people who have already visited our website when they are on Facebook or a digital platform powered by Facebook Advertising.
_ga	„Google Analytics“ (Unique user identifier)	2 years	Registers a unique ID that is used to generate statistical data on how the visitor uses the website.
_gat	“Google Analytics“ (unique user identifier)	1 min	Used by Google Analytics to throttle request rate.
_gat_UA-10802973-1	Cookie used in order to collect information on how the users behave on the website (unique session identifier)	1 min	Cookie used in order to collect information on how the users behave on the website and is used in order to separate unique users by assigning them a unique identifier (ID).
_gid	“Google Analytics“ (unique user identifier)	24 hours	„Google Analytics“ cookies used in order to separate users.
fr	“Facebook“ advertising (unique user identifier)	90 days	Facebook cookie used for the advertising, shown on “Facebook” website even for unregistered users
CAKEPHP	Unique session identifier	30 min	Cookie collects data regarding users and is used in order to separate unique users, by assigning them unique identifier (ID).
cookies-accepted	Informational bar / pop-up regarding cookies	90 days	Pop-up window in which informational notice is displayed regarding usage of cookies. This cookie shows that the user has accepted the cookie policy, privacy policy and terms and conditions.

4F

Alikante

Apotheka

ASAKI

Atėjo laikas

Auksinė dovanėlė

Aukso Stilius

Babor

Bags & More

Baleto studija EVOLUTION

Batanica

BATŲ NAMAI

Beauty Nail

BENU vaistinė

BERSHKA

BETTY BARCLAY

BITĖ

Bonocosì

Caffeine

Caif Cafe

Can Can

Cascada

Case4you

Celio*

Rituals

COOKIES POLICY

Privacy Policy

Website Terms and Conditions