With this Privacy Policy we provide the mandatory information on processing your personal data in accordance with the General Data Protection Regulation of the European Union (EU No 2016/679) (hereinafter – the Regulation).

The data controller, which determines the purposes for which and the means by which personal data is processed, is “NorDan” UAB (former “Venta Windows”, UAB), legal entity code 300568002, address Mažeikiai county, Mažeikiai, Montuotojų street 6, Lithuania, e-mail: info@nordan.lt

This Privacy Policy applies to all natural persons who visit our website, communicate with our company or provide their personal data in any other way. We may change or update this Privacy Policy from time to time, so make sure you check back occasionally. Terms used in this Privacy Policy correspond to the terms outlined in the Regulation.

The following information includes four purposes of data processing: recruitment and administration of the recruitment database; (iii) administration of claims, inquiries and orders; (iv) communication via e-mail; (v) use of cookies; (vi) use of social media networks; (vii) video surveillance; (viii) conclusion and execution of contracts. This Privacy Policy also introduces your rights as a data subject, data provision to recipients and other conditions for processing your personal data, which apply to all personal data processed by the company for the above purposes.

Recruitment and administration of the recruitment database

If you submitted your CV, cover letter, recommendations and/or other documents and data for a particular vacancy according to a job posting placed on our website or other specialised platform for jobseekers, your voluntarily submitted personal data will be processed for the purpose of employee selection.

In this case, we will process your personal data until the end of the recruitment process, i.e. until a suitable candidate is selected, the end of his/her probationary period or until we decide to complete the selection without recruiting any candidate. This period usually does not last longer than 4 months. After the end of the recruitment process, we will keep your CV and other submitted data for a period of 2 years for the purpose of the recruitment database administration, so that we could contact you in case of future vacancies, unless you disagree with such processing of your personal data.

Your personal data will be processed on the basis of your consent to participate in the recruitment process; and after the selection process, your personal data will be stored on the basis of our legitimate interest. Once the data is submitted, we can also perform some actions following the statutory obligations. Data submission to participate in an employee recruitment process is voluntary; however, if you do not provide this information, we will not be able evaluate your candidacy. You can object to data storage after the end of the employee selection. In this case we will destroy your personal data and will not send you job offers in the future, unless you voluntarily participate in the recruitment process again or re-send your data. If you object to such storage of your personal data after the end of employee selection, let us know when sending your CV or other personal information, by replying to an e-mail or signing an information form at the meeting.

Please be advised that, according to the personal data protection legislation, we have the right to contact your former employers for references about your qualifications, professional abilities and professional characteristics. However, your employer will not be contacted without your explicit consent.

Administration of claims and complaints

If you submit a complaint, request or feedback to our company by email or other means, we will process your voluntarily submitted personal data to respond to such complaint, request or feedback.

If your complaint relates to a potential dispute, possible damage, etc., your personal data, given the general limitation period, can be stored for a maximum period of 10 years.

Processing of your personal data will be based on the expression of your free will, i.e. consent to submit such data; however, in some cases (if any disputes may arise), the legal act may become the basis for further storage of such complaints.

E-mail communication

Based on the Regulation, content of email correspondence is considered as personal data and this also applies when these correspondents are employees of legal entities. In this respect, the rules for processing of personal data defined by the Regulation shall be applied to the content of communication as well as to email addresses.

The basis for processing of your personal data is expression of your free will to communicate via e-mail and submission of particular data during such communication, i.e. consent. Moreover, processing of your personal data may also be based on execution of contractual and statutory obligations.

We will process your email, correspondence and related information in accordance with the principle of proportionality. This data will primarily be visible to our employee who is directly communicating with you. However, in certain cases, your correspondence may also be accessed by other employees of our company, for example, in the course of internal administration, investigation of potential violations of legal acts or internal rules, in case of a substitute employee and related situations.

Direct marketing

If you are our client or have expressed your will to receive our newsletters, your voluntarily submitted personal data will be processed to provide you with information about our products and services, news, promotions, events and other direct marketing material.

Direct marketing e-mails without your consent will only be sent if you are our client. This marketing will be carried out in accordance with the law.

Your personal data will be processed for direct marketing purposes for a period of 5 years from consent being given or from the end of our contractual relationship.

Any e-mail you receive from us will allow you to opt-out of receiving future e-mails. You can also opt-out or withdraw your consent by using contact details of the company.

Use of cookies

Cookies are small textual files which your browser places on your computer. Different cookies are used for different purposes. Cookies also help to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website and also allows us to improve our site.

Most of the browsers allow users to reject all cookies, and some of them allow to reject only the third party cookies. You may use any of these options. However, if you use your browser settings to block all cookies, you may not be able to access all or parts of our site.

Our website uses the following cookies:

• cookies that are required for the operation of our website (session cookies). These cookies are intended to improve functioning of our website and collect general (anonymous) information about the use of our website.
• Analytical cookies (tracking cookies from Google Analytics). Analytical cookies allow us to recognise and to count the number of visitors to our website, to see how visitors move around the website when they are using it. This helps us to improve the service which we offer to you by helping us make sure our users are finding the information they are looking for;
• Functional cookies. These cookies are used for recognising website users when they return to the website. This allows to personalize content on social media sites and memorize relevant information.

List of cookies used in our website is provided below:

Use of social networks

Our company has a LinkedIn account. Privacy notice for this social media network is available at

https://www.linkedin.com/legal/privacy-policy that you submit on social media sites (including messages, use of “Like” and “Follow” functions as well as other communication) is controlled by the social network manager.

We advise you to read the third-party privacy notices and contact service providers directly if you have any questions about processing of your personal information.

Video surveillance

Video surveillance is carried out in the premises (workshop, warehouse, at the entrance to the administration, hallways) and territory (around the premises) of the company at the location: Montuotojų str. 6, Mažeikiai, Lithuania. The grounds for such video surveillance is safeguarding of property and persons on our premises. Video surveillance is based on legitimate grounds. Video records are kept for 30 days.

Provision of personal data to recipients

Your personal data may be provided to

• IT, server, e-mail or courier service providers;
• Lawyers, attorneys, consultants, auditors, bailiffs, debt collection companies;
• Law enforcement and supervisory institutions, courts and other dispute settlement bodies;
• Potential or existing successors of our business or their authorized consultants or persons;

What are the principles of personal data protection that we follow?

By collecting and using the personal data that you have entrusted to us as well as data received from other sources, we adhere to the following principles:

• Your personal data shall be processed in a lawful, fair and transparent manner (the principle of legality, integrity and transparency);
• Your personal data shall be collected for specified, clearly defined and legitimate purposes and not further processed in a way incompatible with those purposes (the purpose limitation principle);
• Your personal data shall be adequate, appropriate and necessary only for the purposes for which they are processed (the data reduction principle);
• the processed personal data shall be accurate and updated, if necessary (principle of accuracy);
• Your personal data shall be stored in such a form that you can be identified no longer than necessary for the purposes for which your personal data is processed (the principle of limiting the duration of storage);
• Your personal data shall be managed in such a way as to ensure adequate protection of personal data, including protection against unauthorized processing or processing of unauthorized data and unintentional loss, destruction or damage by appropriate technical or organizational measures (the principle of integrity and confidentiality).

Data subject rights implementation

We inform you that you have the following rights as the data subject: the right of access to your personal data and to be informed of how your data is processed; the right to request to correct or supplement incomplete personal data, taking into account the purposes for processing of personal data; the right to request to destroy your data or suspend its processing (except for storage); the right to request to restrict processing of your personal data; the right to data transfer; the right to submit a complaint to the State Data Protection Inspectorate; the right to withdraw your consent for data processing.

In order to implement your data subject’s rights, we will have to identify you. Without identifying you, we cannot be sure if the person contacting us is indeed the same person whose personal information we process, and therefore we would not be able to exercise your rights.

We may refuse to process the request for enforcement of your rights, or we may ask for a corresponding fee if your request is clearly unjustified or excessive, as well as in other cases provided by law.

If you would like to exercise your rights as a data subject or should you have any questions about processing of your personal data, please contact us at the above address.