Personal data security

WEBSITE AND MOBILE APPLICATION

Date of Last Revision: 03.12.2024 

 

GENERAL PROVISIONS

UAB "SCI Health" (hereinafter "we") is committed to protecting and respecting your privacy. We make every effort to ensure that our processing of personal data complies with the Law on Legal Protection of Personal Data of the Republic of Lithuania, Law on Electronic Communications of the Republic of Lithuania, the European Parliament and Council Regulation (EU) 2016/679 of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (General Data Protection Regulation). The controller of your personal data is UAB "SCI Health", legal entity code 304181241, address: Ateities st. 10, LT-08303 Vilnius, Lithuania, email info@uvtactus.eu. Please read this Privacy Policy carefully to understand the purposes for which we collect your data and how we will use it.

This Privacy Policy covers the following topics:

• Purposes of using your personal data
• Cases of personal data transfer to third parties and data transferred
• Storage period of your personal data
• Marketing messages
• Your rights
• Use of cookies
• Processing of children's personal data
• Changes to the Privacy Policy
• Ways to contact us

When visiting our website for the first time, we will ask you to confirm that you agree to the use of cookies under the terms set out in this Privacy Policy.

THE TYPE OF INFORMATION ABOUT YOU THAT SCI HEALTH COLLECTS

Personal Information and Contact Details
Your name, surname, payer address, order information (date, ordered items, bar/pin code, etc.), delivery address, and contact details (email address, phone number are used for:

• Contacting you during order placement when you enter your data but don't complete payment (data retained for 2 years)
• Delivering purchased items and preparing orders for pickup (data retained for 10 years)
• Sending marketing information about new products and services (data retained for 2 years or until consent withdrawal)
• Sending order-related communications (data retained for 1 year)
• Phone order identification (data retained for 1 year)
• Fraud prevention and detection (data retained for 2-10 years)

Health Information:
Information about your use of the UV Tactus device, information you disclose to SCI Health personnel is used for:

• Remind you about session
• To provide You with information, and to answer any questions that you may have, about the SCI Health Mobile App, the UV Tactus Device and/or other medical devices, products and/or services which are, or may be, offered or sold by SCI Health
• To provide you with information as needed for you to acquire and use the UV Tactus
• To obtain information from you about your medical condition and treatments
• To make improvements to the UV Tacctus device, the SCI Health Mobile App, and/or other SCI Health products and/or services
• To communicate with you about the UV Tactus Device, the SCI Health Mobile App, and/or other products or services offered by SCI Health
• For internal quality assessment, business improvement, and product development
• For patient treatment adherence
• For any other purpose not prohibited by applicable law

Interest and Demographic Information
Information about your interests, city of residence, gender, and birth date is used for:

• Age verification to ensure users are over 14
• Customer segmentation and personalized offers
• Service quality surveys

Payment Information
Used for:

• Processing payments and refunds (data retained for 10 years)
• Fraud prevention and detection (data retained for 2-10 years)

Communication History
Your interactions with us through phone, email, remote consultation, or website inquiries are retained for:

• Service quality assurance and dispute resolution (data retained for 2 years)
• Remote consultation support (data retained for 2 years or until consent withdrawal)

Purchase and Activity History
Information about your purchases, viewed items, and shopping cart is used for:

• Processing sales
• Customer support
• Abandoned cart reminders (data retained for 90 days)
• Personalized marketing

Device Information
Information about your device, IP address, and location (if shared) is used for:

• Website and app improvement
• Security purposes
• Setting default preferences

We use your personal data for the purposes specified in this Privacy Policy and in cases where it is necessary to pursue or defend legitimate claims. For this reason, we process your personal data based on legitimate interest, seeking to protect and ensure our rights, your rights, and the rights of others. We may also process your personal data when it is necessary to comply with our legal obligations or to protect vital interests of you or another natural person.

WHERE SCI HEALTH STORES INFORMATION ABOUT YOU.

All or some portion of Your personal information, and other information about You as described above may be stored on (i) Your computer, or mobile device that You use to access SCI Health’s Websites or and/or the SCI Health Mobile App, and (iii) SCI Health’s information network, including, without limitation, “cloud” storage providers.
 

WHAT PERSONAL DATA WE SHARE WITH THIRD PARTIES

We strive to gain and maintain your trust, therefore we will only transfer your personal data when absolutely necessary.

Categories of Data Recipients
We may transfer your personal data to the following categories of recipients:

• Any company within our group (including our subsidiaries and our controlling company and all its subsidiaries)
• Our insurers and professional consultants for risk management, professional advice, or legal claims
• Payment service providers who process financial transactions on our website (only to the extent necessary for payment processing, refunds, and complaint handling)
• Specific service providers such as:
  • Website hosting providers
  • Courier services
  • Server maintenance providers
  • Email service providers
  • Newsletter distribution services
  • Survey conductors
  • Social media account administrators
  • Customer service centers
  • Data protection officer service providers

Data Protection Standards
We only engage service providers who have implemented or commit to implementing appropriate technical and organizational measures that ensure adequate data processing security levels and comply with GDPR requirements.

Additional Data Sharing
We may also share your personal data:

• To fulfil our legal obligations
• To protect your interests or those of others
• For direct marketing purposes (with your consent) to our marketing service partners

International Transfers
Recipients may be established outside Lithuania, the European Union, or the European Economic Area. We only transfer data to third parties who comply with GDPR requirements.

Social Media
We use accounts on Facebook, Instagram, and YouTube for:

• News and information distribution
• Games and contests organization
• Statistical analysis

Social media operators collect statistical data about user actions (views, likes, reactions, video views, location, language, age, interests, behaviour, devices, gender, etc.).

HOW LONG WE STORE YOUR PERSONAL DATA

In all cases, we store your personal data no longer than necessary to achieve specific purposes. Detailed information about personal data storage periods can be found in the "How We Use Your Personal Data" section of this Privacy Policy.

MARKETING COMMUNICATIONS

Consent and Communication Methods
With your consent, we will provide marketing communications via email, SMS messages, and phone calls to your provided number to inform you about our news and products, including service quality surveys.

Opting Out
You can opt out of direct marketing communications from UAB SCI Health at any time by:

• Emailing info@uvtactus.eu
• Using the unsubscribe link in email communications
• Informing our staff during conversations
• Contacting our specialists

Processing Your Request
When you opt out of direct marketing communications, we will update your personal data processing settings to stop sending you direct marketing messages.

Important Notes

• The online store www.uvtactus.eu is an integrated network of various interconnected services, so updating personal data in our systems may take several days
• You may continue to receive marketing messages during this processing period
• After opting out of marketing communications, you will still receive service-related information (such as order updates)

YOUR RIGHTS

In this section of the Privacy Policy, we outline your rights under data protection laws. Since some rights encompass multiple aspects, we present only the main points here. We recommend reviewing the relevant legislation and supervisory authority guidelines for complete information about these rights.

Your Data Protection Rights

• Right to receive information about personal data processing
• Right to access your personal data that we store
• Right to request correction of your personal data
• Right to request deletion of your personal data ("right to be forgotten")
• Right to restrict processing of your personal data
• Right to object to processing of your personal data
• Right to object to processing for direct marketing purposes
• Right to data portability
• Right to withdraw consent
• Right to file a complaint with the supervisory authority

How to Exercise Your Rights
To exercise your rights or inquire about data processing, contact us at info@uvtactus.eu.

Key Rights in Detail Access Rights
You have the right to:

• Receive confirmation if we process your data
• Access your processed data and information about its processing
• Receive a copy of your data in a structured, commonly used, machine-readable format
• We may refuse access if legally justified

Right to Correction
You can request correction of inaccurate data and completion of incomplete data.

Right to Erasure
You can request deletion when:

• Data is no longer needed for original purposes
• You withdraw consent with no other legal basis for processing
• You object to processing
• Data was processed unlawfully
• Legal obligations require deletion

Right to Restrict Processing
Applicable when:

• You contest data accuracy
• Processing is unlawful but you oppose erasure
• We no longer need the data but you require it for legal claims
• You've objected to processing pending verification

Right to Object
You can object to processing:

• Based on legitimate interests
• For direct marketing purposes
• We will stop processing unless we demonstrate compelling legitimate grounds

Data Portability
Applies when processing is:

• Automated
• Based on consent or contract

Right to Withdraw Consent
You can withdraw consent at any time, without affecting prior processing legality.

Complaints
You can file complaints with the State Data Protection Inspectorate (L. Sapiegos g. 17, LT-10312 Vilnius, www.vdai.lrv.lt). Please contact us first to resolve issues.

 

THE USE OF COOKIES

When you browse on SCI Health, UAB website, we seek to display information and functions personalized to your interests. We use cookies to help us provide you with a personalized experience. Cookies are small text files stored by your web browser. They help us to recognize you when you return to our website, to collect information about your use of the website and to tailor the content of the website to your interests. Cookies also help us to ensure the proper functioning of the website, to monitor the duration and frequency of visits to SCI Health, UAB website, and to collect statistical information about the number of the website users. By analysing this information, we can improve the performance of our website and your user experience. When you visit SCI Health, UAB website, you can select whether you want to accept cookies. If you do not wish to receive cookies on your computer or other device, you can withdraw your consent at any time by changing your browser settings and delete cookies that have already been saved.

Information about cookies used on our website

If you want learn more about cookies and how to manage or delete them, please visit http://www.allaboutcookies.org

If you want to learn how to disable website tracking using Google Analytics cookies, please visit http://tools.google.com/dlpage/gaoptout

Types of cookies
Cookies include session cookies and long-term cookies as well as first-party or third-party cookies. The definitions of these terms are provided below so that you can have a better understanding of the nature and purpose of our cookies.

Session cookies
Session cookies allow users to be recognized for the duration of a single session so that any page changes or item selection are remembered when they move from page to page. These cookies make navigating across numerous website pages faster and easier, because there is no need to repeatedly process the information when a new page is opened. Session cookies are temporary and disappear once you close your browser or log off the website.

Long-term cookies
Long-term cookies are stored on your computer for a specified period of time following the end of your session and they may be record specific user settings or actions when the user returns to the website.

First-party cookies
These cookies are essential to the proper functioning of SCI Health, UAB website. 

Third-party cookies
These are cookies operated by other organizations via our website. In our case, the Google Analytics cookies used on SCI Health, UAB website are utilized to analyze the website traffic. Google Analytics collects anonymous information about the number of users, the location from which our website has been accessed, and the parts of the website browsed by the users. These cookies are created by Google Analytics. To learn more about Google Analytics, please visit http://www.google.com/analytics.

Any information collected using cookies is stored until these cookies expire and is not used for any purpose other than those listed in this policy.

Our website contains links to other websites operated by individuals, companies or organizations. Please note that SCI Health, UAB is not responsible for the content or privacy practices of linked websites. When you click on these links and enter these other websites, you should review the privacy policies which may apply to these websites.

PROCESSING OF CHILDREN'S PERSONAL DATA

Our website services are intended only for persons over 14 years of age. Only persons over 18 years can consent to direct marketing messages. If we have reasonable suspicion that we are processing data of persons younger than specified in this section, we will remove their data from our databases.

 

PRIVACY POLICY CHANGES

We may periodically update this Privacy Policy to properly reflect how we process your personal data. When we make significant changes, we will notify you through the website or other appropriate communication channels, such as email, so you can review these changes before continuing to use our website.

 

HOW TO CONTACT US

We always want to hear from our customers and are ready to answer any questions.

Contact us if you:

• Have questions or feedback about this Privacy Policy
• Want us to stop using your personal data
• Want to exercise your rights specified in the Privacy Policy or submit a complaint

You can contact our Data Protection Officer at info@uvtactus.eu.

 

ACCEPTANCE OF THIS PRIVACY POLICY
THIS PRIVACY POLICY IS INCORPORATED INTO AND SUBJECT TO THE TERMS OF USE, AND BY ACCESSING, VISITING AND/OR USING SCI HEALTH’S WEBSITE(S), THE SCI HEALTH MOBILE APP YOU REPRESENT AND WARRANT THAT YOU HAVE READ, UNDERSTOOD, ACCEPTED AND AGREED TO ALL OF THE TERMS AND CONDITIONS SET FORTH ABOVE IN THIS PRIVACY POLICY AND THE TERMS OF USE, ON BEHALF OF YOURSELF, YOUR MINOR CHILD (IF APPLICABLE), AND/OR ANY PERSON OR ENTITY FOR WHOM YOU ARE ACTING.