Privacy Policy

1. General provisions

1.1. This privacy policy (hereinafter – the Policy) sets out how UAB “Jungtinis tiekimas” (hereinafter – the Company) processes personal data.

1.2. The Company processes personal data in accordance with the GDPR, the laws of the Republic of Lithuania, and good practice principles.

1.3. This Policy applies to personal data subjects whose personal data is processed by the Company, including:

• employees, representatives, and contact persons of legal entities, including clients, suppliers, and partners;
• job candidates;
• website visitors.

1.4. The personal data of the Company’s employees is processed in accordance with a separate employee personal data processing and privacy notice, which employees are introduced to separately.

2. Data controller

UAB “Jungtinis tiekimas”
Legal entity code: 300548074
Registered office address: J. Urbšio g. 1, LT-35169 Panevėžys, Lithuania
Email: info@jts.lt
Phone number: +370 45 432326

For questions related to the processing of personal data or the exercise of data subject rights, you may contact us by email at info@jts.lt.

3. Sources of personal data

The Company may receive personal data:

• directly from data subjects;
• from clients, suppliers, partners, or their representatives;
• from publicly available or other lawful sources.

4. Processing of personal data of representatives of legal entities, clients, suppliers, and partners

4.1. Personal data processed

The Company may process the following data of employees, representatives, and contact persons of legal entities, clients, suppliers, and partners:

• name and surname;
• position;
• represented company;
• work phone number;
• work email address;
• communication and correspondence information;
• information related to contract performance, orders, deliveries, invoices, and payments.

4.2. Purposes of processing

Personal data is processed for the following purposes:

• concluding and performing contracts;
• administering and fulfilling orders;
• communicating with clients, suppliers, and partners;
• fulfilling accounting and legal obligations;
• establishing, exercising, or defending legal claims.

4.3. Legal bases for processing

Personal data is processed on the basis of:

• Article 6(1)(b) of the GDPR – performance of a contract;
• Article 6(1)(c) of the GDPR – compliance with a legal obligation;
• Article 6(1)(f) of the GDPR – legitimate interest in ensuring effective administration of business relations, communication, and performance of contractual relations.

4.4. Retention periods

Personal data is stored:

• for the duration of the contract;
• after the end of the contract for as long as required by applicable laws, for example, accounting documents are generally stored for 10 years;
• for as long as necessary to establish, exercise, or defend legal claims.

5. Processing of personal data of job candidates

5.1. Personal data processed

The Company may process:

• candidate’s name and surname;
• contact details;
• information provided in the CV;
• information about qualifications, education, and work experience;
• other information provided by the candidate.

5.2. Purpose of processing

Personal data is processed for the purpose of carrying out employee recruitment.

5.3. Legal bases for processing

Personal data is processed on the basis of:

• Article 6(1)(b) of the GDPR – taking steps prior to entering into a contract;
• Article 6(1)(f) of the GDPR – legitimate interest in carrying out employee recruitment, assessing candidates’ suitability, and defending the Company’s legal interests after the recruitment process;
• Article 6(1)(a) of the GDPR – candidate’s consent for longer data retention for future recruitment, where applicable.

5.4. Retention periods

Candidate data is stored:

• during the recruitment process;
• after the recruitment process for no longer than 6 months on the basis of the Company’s legitimate interest;
• for a longer period only with the candidate’s consent.

6. Processing of personal data of website visitors

6.1. Personal data processed

The Company may process:

• IP address;
• cookie information;
• login and browsing information;
• other technical data.

6.2. Purposes of processing

Personal data is processed for the following purposes:

• ensuring the operation of the website;
• ensuring website functionality and security;
• statistics and website improvement.

6.3. Legal bases for processing

Personal data is processed on the basis of:

• Article 6(1)(f) of the GDPR – legitimate interest in ensuring website operation and security;
• Article 6(1)(a) of the GDPR – consent for non-essential cookies, where applicable.

6.4. Retention periods

Cookies may be stored only during a website visit or for a longer period, depending on the specific purpose and settings of the cookie. Technical logs are stored for as long as necessary to ensure website operation, security, and incident investigation.

More detailed information about the use of cookies is provided in the Company’s cookie policy.

7. Recipients of personal data

Personal data may be transferred to:

• employees of the Company;
• IT, accounting, logistics, legal, and other service providers;
• state institutions and supervisory authorities where required by law;
• other persons or entities where necessary to implement the Company’s legitimate interests or where required by law.

8. Transfer of personal data outside the European Economic Area

As a general rule, the Company does not transfer personal data outside the EEA. If such transfer were carried out, the Company would ensure appropriate safeguards in accordance with GDPR requirements.

9. Rights of data subjects

9.1. Data subjects have the right to:

• access their personal data;
• request correction of inaccurate data;
• request deletion of data;
• restrict data processing;
• object to data processing;
• data portability;
• withdraw consent where processing is based on consent;
• submit a complaint to the State Data Protection Inspectorate;
• apply to a court for violation of their rights.

9.2. A data subject may submit a request regarding the exercise of their rights using the contact details specified in Section 2 of this Policy.

9.3. After receiving a data subject’s request, the Company responds no later than within 1 month from the date of receipt of the request, except in cases provided for by law.

9.4. The Company has the right to refuse to exercise data subject rights in cases established by law.

10. Automated decision-making

The Company does not carry out automated decision-making or profiling that would produce legal effects for data subjects.

11. Personal data security

The Company applies appropriate technical and organizational measures to ensure the protection of personal data, including:

• access control;
• data protection procedures;
• incident management processes;
• periodic review of security measures;
• confidentiality obligations of employees and engaged persons.

12. Changes to the Privacy Policy

The Company has the right to periodically update this Policy. The latest version of the Policy is published on the Company’s website.

Last updated: 2026-05-31