Please wait

COOKIES POLICY

The general legal framework governing the protection of personal data is the General Regulation on the Protection of Data no. 679/2016 ("GDPR") applicable in the European Union, and this Cookies Policy follows the requirements of GDPR.

This Cookies Policy (”Cookies Policy”) describes different types of cookies used for the website owned and controlled by uždaroji akcinė bendrovė “Ozantis” (“SC Ozas”), a Lithuanian company, having its registered office in Ozas str. 18, LT-08243 Vilnius, Lithuania, registered under no. 126345741. SC Ozas acts as Data Controller.

What are cookies?

An “Internet Cookie” (also known as “browser cookie” or “HTTP cookie” or “cookie”) is a small file, consisting of letters and numbers, which will be stored on computer, mobile device or other equipment of an user by which internet can be accessed.

Cookies are installed through the request issued by a web server to a browser (e.g.: Internet Explorer, Firefox, Chrome). Once they are installed, cookies have a determined lifetime, and remain “passive” meaning that they do not contain software, viruses or spyware and will not access the information on the user’s hard drive on whose equipment they have been installed.

A cookie consists of two parts:

  • cookie name and
  • content or value.

How and why do we use cookies?

SC Ozas uses cookies to enhance its website usage and functionality and to better understand the manner in which visitors use the website, as well as the services provided by SC Ozas.

Storage of cookies on your computer offers us an easy and convenient opportunity to customize or enhance your experience on our websites and make your next visit more pleasant.

SC Ozas does not use cookies to collect personal information, such as your name. However, we can make the connection between the data contained by a cookies and your personal data collected through other means (e.g., sign up forms).

HOW TO MANAGE COOKIES?

Refusal to use cookies

You have the option to accept cookies which will allow you to use of website’s functions with no restrictions when visiting our website. If you deny the use of strictly necessary cookies this can affect the user’s experience and functionality while using the website.

 

Denial of other cookies would probably not affect your user’s experience and functionality while using the website. If you deny all cookies, primary and third party cookies will be disabled. In addition, primary cookies will be deleted. We will not be able to delete third party cookies. Therefore, you are required to delete them manually. This can be done from your browser’s settings.

Disable and/or delete cookies through your browser

Alternatively and/or in addition, you are able to change the cookies settings from your internet browser. Your internet browser will allow you to change your cookies settings. Such browser’s settings for cookies are usually found in “option”, “tools” or “preferences” tab of your internet browser. Also, you can consult the “Help” menu in your browser. Different browsers can use different mechanisms to disable cookies.

Cookie settings in Internet Explorer
Cookie settings in Microsoft Edge
Cookie settings in Firefox
Cookie settings in Chrome for Desktop
Cookie settings in Chrome for Android
Cookie settings in Safari

Regarding the browser’s settings for deleting previous cookies, the same principles will apply as those for deactivation of new cookies in the browser’s settings. Please follow the proper instructions of your browser.

There are online tools available to delete all cookies stored after visiting different websites, such as www.allaboutcookies.org.

When you visit this Website from other computers, you must repeat the settings change. 

WHAT TYPES OF COOKIES WE USE?

Strictly Necessary Cookies guarantee you functions without which you will not be able to use this Website, and will ensure, among others, that you will be displayed a version with broadband connection of the data quantity corresponding to that of internet connection used by you when accessing a website’s functionality. Moreover, if you change pages, such cookie will perform the switching function from http to https. In addition, this type of cookies will store your decision regarding the use of cookies on our Website.

The Strictly Necessary Cookies that we use are:

  • cookies used for the sole purpose of carrying out the transmission of a communication by internet;
  • strictly necessary cookies in order for us to provide proper functionality of the Website and the services explicitly required by you (i.e. if these cookies are disabled, we will not be able to provide you the explicitly required service).

 

The use of Strictly Necessary Cookies for the above-mentioned purposes is based on your legitimate interests to ensure operation, access and proper technical use of our Website and to provide you the services that you explicitly required.

Statistical Cookies: These cookies are used to provide us statistical data about the performance of our Website (e.g., to count visits, traffic sources).

Marketing Cookies: These cookies allow the Website to store the choices you made and offer you improved and more personal functions. This category can include third party cookies.

Currently used cookies and their description is available on our website www.ozas.lt in section "Show details" of the informational cookie message.

Cookie titleShort descriptionValidility periodDescription
CakeCookie[working-hours]Unique session identifier24 hoursUnique session identifier
CakeCookie[language]Unique identifier of selected languageuntil closing of the WebsiteUnique identifier of selected language
IDE“Google” doubleclick service cookies (unique identifier)30 minIndented to display to the user relevant (topics of interest) advertisement, on other Google services, like “Youtube”, “Google Search”. Personalizes advertisements displayed to the user across all devices used.
NID„Google“ cookie180 days„Google“ cookies used for advertising purposes
__cfduidSeparation of sers30 minUsed in order to identify separate clients behind the joint IP address and to apply security settings based on the user.
_dc_gtm_UA-10802973-1Used in order to control the query speed8 hoursCookie collects information regarding behavior of users on the website and is used in order to optimize the offers and to provide in other websites.
_fbpUsed by Facebook to deliver a series of advertisement products on Facebook90 daysThis cookie will help deliver our advertising to people who have already visited our website when they are on Facebook or a digital platform powered by Facebook Advertising.
_ga„Google Analytics“ (Unique user identifier)2 yearsRegisters a unique ID that is used to generate statistical data on how the visitor uses the website.
_gat“Google Analytics“ (unique user identifier)1 minUsed by Google Analytics to throttle request rate.
_gat_UA-10802973-1Cookie used in order to collect information on how the users behave on the website (unique session identifier)1 minCookie used in order to collect information on how the users behave on the website and is used in order to separate unique users by assigning them a unique identifier (ID).
_gid“Google Analytics“ (unique user identifier)24 hours„Google Analytics“ cookies used in order to separate users.
fr“Facebook“ advertising (unique user identifier) 90 daysFacebook cookie used for the advertising, shown on “Facebook” website even for unregistered users
CAKEPHPUnique session identifier30 minCookie collects data regarding users and is used in order to separate unique users, by assigning them unique identifier (ID).
cookies-acceptedInformational bar / pop-up regarding cookies90 daysPop-up window in which informational notice is displayed regarding usage of cookies. This cookie shows that the user has accepted the cookie policy, privacy policy and terms and conditions.

COOKIE CONSENT

SC Ozas intends to use certain categories of cookies for various reasons, but it needs your consent to do this. Click on “Allow all cookies” to accept or “Show details” for more information about the categories of cookies used and to make choices.

You will have the possibility to select the specific cookie categories used on this Website. The cookie notice will be displayed until you express your preferences. We will not use other categories of cookie except for those strictly necessary for a proper operation of the website if the event that you choose not to use these categories of cookie.

Preferences

Except for the categories of cookie which are strictly necessary for Website operation, you may accept or refuse the use of cookie for each category of cookie by selecting in the options box which will be displayed on the screen.

Once you consented us to use categories of cookies, you can return to your choice and disable the cookie files (except for strictly necessary cookies to operate this internet page) by accessing the button “Info” and “Change cookie settings”.

AMENDMENTS TO THIS COOKIE POLICY

This cookie policy was amended on 2021.10.01.  

SC OZAS reserves the right to revise and update this Privacy Policy at any time. Additional information will be included in this updated document, available at the Website.

Therefore, please check the relevant section of our Privacy Policy when you visit the website, because it may have changed since the last visit.

PRIVACY POLICY

PRIVACY NOTICE ON THE PROCESSING OF PERSONAL DATA


Our shopping center’s business includes several situations in which we will process your personal data. More details can be found below.

We are uždaroji akcinė bendrovė “Ozantis”, a Lithuanian company, with its registered office in Vilnius, Ozo g. 18, registered under no. 126345741 (hereinafter referred to as “SC OZAS”).

This privacy policy is addressed to all data subjects who visit our shopping centre, access its website, participate in promotional campaigns or similar events carried out by us within the shopping centre or online or data subjects who represent suppliers/partners/collaborators or tenants in the contractual relationship with SC OZAS.

The way we process your personal data differs depending on your relationship with SC OZAS. To receive more information choose the category below that is applicable to you:

I am a visitor or customer of the shopping centre
I am a user of the shopping centre website
I am the legal representative or contact person of a supplier, collaborator or tenant of the shopping centre
I am part of the staff of suppliers, collaborators or tenants of the shopping centre


In all cases, you have several rights that can be exercised, individually or cumulatively, with respect to personal data that SC OZAS holds in relation to you. Information on these rights as well as how they can be exercised is available in the Rights of data subjects section.

We undertake to process personal data in compliance with applicable legislation on the protection of personal data and good practices in this area. More information is available in the section on Data security and accuracy.

In addition, a Data Protection Officer has been appointed at the NEPI Rockcastle Group level, who can be contacted should there be any concerns about the protection of personal data and the exercise of data protection rights. The Data Protection Officer can be contacted by written, dated and signed request, using the contact details mentioned below:

1. Visitors of the shopping centre website

When you access the SC OZAS website (the “Website”), some of your personal data will be processed by SC OZAS, mainly to be able to provide you with the requested service, that is the access to the Website.

1.1 Personal data we process

We are collecting data through cookies or other similar technical means (i.e., small text files that are stored on your computer, phone, tablet or mobile device, and contain information about your activity on those sites/applications), e.g.: sub-pages accessed, period spent on a specific page.

More information regarding usage of cookies is available in the Cookie Policy.

1.2 Use of personal data

No.

Purpose of processing personal data

Legal basis of processing personal data

1

Use of marketing cookies for the purpose of:

  • conducting profiling activities, also called web profiling which involves the use of cookies to track online the general activity of a user in order to present content tailored to his preferences,

  • conducting targeting and retargeting campaigns

More information on cookies is available in the Cookie Policy

Your consent

2

Create statistics designed to provide information about the performance of the Website and the marketing campaigns displayed (e.g. the number of users who accessed the campaign page, the number of users who saw the campaign banner, etc.), made by using analysis cookies

More information on cookies is available in the Cookie Policy

Our legitimate interest in (i) improving the content of the Website and the campaigns conducted on the Website as well as the better evaluation of the performance indicators (KPI) of the commercial campaigns carried out on the Website and (ii) ensuring the operation, access and technical use of the Website and providing you with the services you have explicitly requested

3

Use of cookies necessary to ensure the operation of the Website

More information on cookies is available in the Cookie Policy

Perform the contract regarding the provision of our services (i.e. ensuring access to the Website)

1.3 Additional information on profiling activity

SC OZAS will create and analyse your profiles based on the personal data we hold about you - data about your interaction with the Website, data collected through cookies. As a result of analysing such data, we will be able to identify your preferences, interests and capabilities in terms of procurement, and thus relate them to the services we provide or to the products we promote.

Then, through automated procedures, SC OZAS sets the content of the direct marketing materials that can be sent to you. In the legal language these automated procedures are referred to as “automated individual process”.

Thus, the direct marketing materials that we will send you will be as specific, convincing and applicable as possible to you, and as a consequence may influence you (i.e. in the sense of purchasing the product/service included in the marketing material), as SC OZAS manages to correctly identify your preferences or characteristics.

With regard to the processing of data by automated individual processes, you have several additional rights, i.e. you can (a) obtain human intervention, (b) express your point of view, (c) get explanations about the decision made and (d) contest that decision. In addition, you can withdraw consent at any time in the manner prescribed in this Privacy Policy in the section dedicated to Data subjects rights.

1.4 Storage period

The personal data processed are kept for the period of time necessary to comply with the legal obligations imposed on us by the regulations specific to our field of activity.

Regarding the use of your personal data for direct marketing activities, they will be stored by SC OZAS from the moment you gave us your consent for this processing until the date you withdrew it.

Currently used cookies and their storage period is available in our Website in section "Show details" of the informational cookie message.

1.5 Third party access

Access to your data will be provided only to those persons or entities with whom we collaborate in fulfilling the purposes of processing, and for whom we (we or the intended recipients) can justify a legitimate reason or if we have a legal obligation to provide your data.

The following entities and their employees may have access to your data:

  • IT service providers (e.g., software maintenance and development, site maintenance and development).

  • Marketing service providers, including market research service providers, marketing communications service providers, online tool traffic and behaviour monitoring service providers, various marketing customization service providers, providers of marketing services through social media resources, providers of services for the preparation of the content of marketing forms.

  • Managing group company - NEPI Rockcastle Lithuania, UAB (registered under no. 304909465).

  • Other group companies.

As SC OZAS is part of the Nepi Rockcastle group of companies (the “Group”), your personal data will be processed for the purposes of consolidated management of the Group’s activities, for audit purposes and in any other situation when such processing is required or allowed by law, if we can (SC OZAS or the recipient companies in the Group) justify a legitimate basis in this regard or if we obtain your consent in this regard. The list of the Group companies can be found at the following address: https://nepirockcastle.com/portfolio/ .

We will also provide your personal data to judicial bodies, public institutions, or central and local public authorities, based on a duly substantiated request or legal obligation.

As a rule, SC OZAS will not transfer your personal data to third countries outside the European Economic Area. However, if such a transfer takes place, SC OZAS will take appropriate protection measures to ensure the protection of the personal data transferred.

2. Visitors and customers of the shopping centre

2.1 Personal data we process

  • Identification data, such as: first name and last name, date of birth

  • Special identification data, that is personal identity number

  • Contact details, such as: email address, phone number

  • Image (video or photo)

  • Data on the vehicle for which a parking space is granted in the car park of the shopping centre: vehicle plate number (with image)

  • Data on access to the shopping centre parking, e.g.: arrival date and time, departure date and time, length of stay, payment related data

  • IP, MAC of the devices, login time (mobile, laptop, tablet)

  • Data on participation in promotional campaigns and similar events, e.g.: prizes won

2.2 Use of personal data

No.

Purpose of processing personal data

Legal basis of processing personal data

1

Video surveillance by means of the CCTV system installed inside the shopping centre, in the common areas, access roads, as well as car park areas

Legitimate interest in ensuring the security of persons and property inside the shopping centre and its premises

2

Video surveillance of the parking control system equipment

Legitimate interest in ensuring security of the property, settlement of damage

3

Providing access to the parking lot of the shopping centre

Perform the contract regarding the provision of our services or lease of parking space of the parking lot (i.e. granting access to the parking lot of the shopping centre)

4

Take and use photos (which also include your image) in order to promote the shopping centre

Your consent

5

Solve requests for data and information received from the competent authorities and institutions

Legal obligation

6

Grant access to the free WiFi network

Perform the contract regarding the provision of our services (i.e. granting access to the facilities and services provided by the shopping centre)

7

Organise raffles, competitions, events or marketing campaigns in the shopping centre, including handing out prizes won

Perform the contract (i.e. in accordance with the regulation of the concerned raffle, competition or campaign) or legal obligation (regarding declaration and payment of taxes)

8

Management of notifications/complaints submitted within the shopping centre

Our legitimate interest in resolving complaints sent to us and in maintaining good relations with visitors/customers of the shopping centre

9

Management of requests regarding lost objects, filed inside the shopping centre

Our legitimate interest in resolving requests regarding lost objects

10

Carry out economic, financial and/or administrative management activities

Legal obligation

11

Settlement of disputes, investigations or any other petitions/complaints to which SC OZAS is a party

Legitimate interest in defending our rights in court/in front of any competent authority

12

Archiving

Legal obligation

13

Carry out risk controls on SC OZAS procedures and processes, as well as conduct audits or investigations of SC OZAS

Our legitimate interest in managing risks and ensuring compliance with SC OZAS procedures and processes

2.3 Storage period:

The personal data processed are kept for the period of time necessary to comply with the legal obligations imposed on us by the regulations specific to our field of activity.

Depending on the context in which we process your personal data, the following rules for determining the storage period will apply:

  • CCTV system: video recordings stored by the CCTV system are usually kept for a period of 14 (fourteen) days. Storage period may be extended if required by law or it is necessary in order to investigate a specific incident / event and to ensure that the interests of the SC OZAS are protected / damage is compensated.

  • Parking system: video surveillance of the parking and payment equipment - no longer than 1 month; arrival / departure to the parking lot related data - no longer than 2 months; payment related data - in accordance with tax regulation (usually - 10 years). Storage period may be extended if required by law or it is necessary in order to investigate a specific incident / event and to ensure that the interests of the SC OZAS are protected / damage is compensated.

  • WiFi network: Data is stored during the session and not longer than 1 (one) day after the session ends.

  • Inquiries, complaints, lost and found related data - no longer than 3 years from the date of dispatch of the reply, receipt of the document (in case no reply).

  • Contract data - no longer than 10 years after the end of the contract.

  • Marketing related data: in accordance with the rules of specific marketing campaign.

  • Other – in accordance with the storage periods, established by legal regulation.

2.4 Third party access:

Access to your data will only be provided to those individuals or entities with whom we collaborate for processing purposes and for whom we (the new or the intended recipients) can justify a legitimate ground in accordance with the GDPR or if we have an obligation legal to provide your data.

The following entities and their employees may have access to your data:

  • Security service providers, operator of the parking system - to ensure CCTV video surveillance and access control system in parking spaces, to operate the parking system, SC OZAS collaborates with specialised companies, authorised to carry out security, surveillance and operational activities.

  • Other service providers - with regard to participation in campaigns and events, as well as the handling of complaints, grievances and/or requests regarding lost items addressed to the staff of the Info Desk offices within the shopping centres, SC OZAS usually collaborates with specialised service companies.

  • Legal consultants.

  • Managing group company - NEPI Rockcastle Lithuania, UAB (registered under no. 304909465).

  • Other group companies.

As SC OZAS is part of the Nepi Rockcastle group of companies (the “Group”), your personal data will be processed for the purposes of consolidated management of the Group’s activities, for audit purposes and in any other situation when such processing is required or allowed by law, if we can (SC OZAS or the recipient companies in the Group) justify a legitimate basis in this regard or if we obtain your consent in this regard. The list of the Group companies can be found at the following address: https://nepirockcastle.com/portfolio/ .

Your personal data will also be processed in relation to a number of third party partners (“Partners”). They are the partners that SC OZAS promotes in its relationship with you by direct marketing and are usually the tenants of SC OZAS. The partners do not have access to your personal data, except if SC OZAS obtained your prior agreement in this respect.

We will contractually require these entities and their staff to respect the confidentiality of this data, ensuring a high level of security for the processing of your data.

We will also provide your personal data to judicial bodies, public institutions, or central and local public authorities, based on a duly substantiated request or legal obligation.

As a rule, SC OZAS will not transfer your personal data to third countries outside the European Economic Area. However, if such a transfer takes place, SC OZAS will take appropriate protection measures to ensure the protection of the personal data transferred.

3. Representatives of the contractual partners (suppliers/tenants of shopping centres/collaborators)

3.1 Personal data we process

  • Identification data, such as: first name and last name

  • Contact details, such as: email address, phone number

  • Occupational data, such as: position held, company in which you are employed or which you represent

3.2 Use of personal data

No.

Purpose of processing personal data

Legal basis of processing personal data

1

Concluding and executing lease or other commercial contracts

Legitimate interest in carrying out our activity and validly concluding commercial contracts agreements specific to our field of activity (i.e. commercial spaces lease and other agreements) or performance of contract

2

Contacting possible future tenants of the shopping centre (prospective tenants)

Legitimate interest in promoting our business and promoting the shopping centre to potential tenants (prospective tenants)

3

Carry out know-your-customer (KYC) checks in relation to potential contractual partners

Legitimate interest in performance of KYC procedure

4

Settlement of disputes, investigations or any other petitions/complaints to which SC OZAS is a party

Legitimate interest in defending our rights in court/in front of any competent authority

5

Archiving

Legal obligation

6

Carry out risk controls on SC OZAS procedures and processes, as well as conduct audits or investigations of SC OZAS

Our legitimate interest in managing risks and ensuring compliance with SC OZAS procedures and processes

3.3 Storage period

The personal data processed are kept for the period of time necessary to comply with the legal obligations imposed on us by the regulations specific to our field of activity.

Depending on the context in which we process your personal data, the following rules for determining the storage period will apply:

  • Inquiries, complaints, contacting related data - no longer than 3 years from the date of dispatch of the reply, receipt of the document (in case no reply) or data.

  • Contract data - no longer than 10 years after the end of the contract.

  • Other – in accordance with the storage periods, established by legal regulation.

3.4 Third party access

Access to your data will only be provided to those individuals or entities with whom we collaborate for processing purposes and for whom we (the new or the intended recipients) can justify a legitimate ground in accordance with the GDPR or if we have an obligation legal to provide your data.

The following entities and their employees may have access to your data:

  • Legal consultants.

  • Managing group company - NEPI Rockcastle Lithuania, UAB (registered under no. 304909465).

  • Other group companies.

As SC OZAS is part of the Nepi Rockcastle group of companies (the “Group”), your personal data will be processed for the purposes of consolidated management of the Group’s activities, for audit purposes and in any other situation when such processing is required or allowed by law, if we can (SC OZAS or the recipient companies in the Group) justify a legitimate basis in this regard or if we obtain your consent in this regard. The list of the Group companies can be found at the following address: https://nepirockcastle.com/portfolio/ .

We will contractually require these entities and their staff to respect the confidentiality of this data, ensuring a high level of security for the processing of your data.

We will also provide your personal data to judicial bodies, public institutions, or central and local public authorities, based on a duly substantiated request or legal obligation.

As a rule, SC OZAS will not transfer your personal data to third countries outside the European Economic Area. However, if such a transfer takes place, SC OZAS will take appropriate protection measures to ensure the protection of the personal data transferred.

4. Staff of suppliers, collaborators or tenants of the shopping centre

4.1 Personal data we process

  • Identification data, such as: first name and last name

  • Contact details, such as: email address, phone number

  • Occupational data, such as: position held, company in which you are employed or which you represent

  • Image (photo or video)

  • Data on the vehicle for which a parking space is granted in the car park of the shopping centre: vehicle plate number (with image)

  • Data on access to the shopping centre parking, e.g.: arrival date and time, departure date and time, length of stay, payment related data, information filled in section “notes”

  • IP, MAC of the devices, login time (mobile, laptop, tablet)

4.2 Use of personal data

No.

Purpose of processing personal data

Legal basis of processing personal data

1

Video surveillance by means of the CCTV system installed inside the shopping centre, in the common areas, access roads, as well as car park areas

Legitimate interest in ensuring the security of persons and property inside the shopping centre and its premises

2

Video surveillance of the parking control system equipment

Legitimate interest in ensuring security of the property, settlement of damage

3

Providing access to the parking lot of the shopping centre

Perform the contract regarding the provision of our services or lease of parking space of the parking lot (i.e. granting access to the parking lot of the shopping centre)

4

Grant access to staff of the tenants, service providers, contractors and other collaborators inside the shopping area outside the hours when the shopping centre is not open

Legitimate interest in ensuring the security of persons and property inside the shopping centre

5

Solve requests for data and information received from the competent authorities and institutions

Legal obligation

6

Grant access to the free WiFi network

Perform the contract regarding the provision of our services (i.e. granting access to the facilities and services provided by the shopping centre)

7

Management of notifications/complaints submitted within the shopping centre

Our legitimate interest in resolving complaints sent to us and in maintaining good relations with visitors/customers of the shopping centre

8

Management of requests regarding lost objects, filed inside the shopping centre

Our legitimate interest in resolving requests regarding lost objects

9

Carry out know-your-customer (KYC) checks in relation to potential contractual partners

Legitimate interest in performance of KYC procedure

10

Settlement of disputes, investigations or any other petitions/complaints to which SC OZAS is a party

Legitimate interest in defending our rights in court/in front of any competent authority

11

Archiving

Legal obligation

12

Carry out risk controls on SC OZAS procedures and processes, as well as conduct audits or investigations of SC OZAS

Our legitimate interest in managing risks and ensuring compliance with SC OZAS procedures and processes

 

4.3 Storage period

The personal data processed are kept for the period of time necessary to comply with the legal obligations imposed on us by the regulations specific to our field of activity.

Depending on the context in which we process your personal data, the following rules for determining the storage period will apply:

  • CCTV system: video recordings stored by the CCTV system are usually kept for a period of 14 (fourteen) days. Storage period may be extended if required by law or it is necessary in order to investigate a specific incident / event and to ensure that the interests of the Controller are protected / damage is compensated.

  • Parking system: video surveillance of the parking and payment equipment - no longer than 1 month; arrival / departure to the parking lot related data - no longer than 2 months; payment related data - in accordance with tax regulation (usually - 10 years); in case of lease of the parking space to the tenants and / or employees of the tenants of the shopping center - no longer than 1 month after the end of the lease contract. Storage period may be extended if required by law or it is necessary in order to investigate a specific incident / event and to ensure that the interests of the Controller are protected / damage is compensated.

  • WiFi network: Data is stored during the session and not longer than 1 (one) day after the session ends.

  • Inquiries, complaints, lost and found related data - no longer than 3 years from the date of dispatch of the reply, receipt of the document (in case no reply).

  • Contract data - no longer than 10 years after the end of the contract.

  • Other – in accordance with the storage periods, established by legal regulation.

4.4 Third party access

Access to your data will only be provided to those individuals or entities with whom we collaborate for processing purposes and for whom we (the new or the intended recipients) can justify a legitimate ground in accordance with the GDPR or if we have an obligation legal to provide your data.

The following entities and their employees may have access to your data:

  • Security and security service providers, operator of the parking system - to ensure CCTV video surveillance and access control system in parking spaces, to operate the parking system, SC OZAS collaborates with specialised companies, authorised to carry out security, surveillance and operational activities.

  • Other service providers - with regard to the handling of complaints, grievances and/or requests regarding lost items addressed to the staff of the Info Desk offices within the shopping centres, SC OZAS usually collaborates with specialised service companies.

  • Legal consultants.

  • Managing group company - NEPI Rockcastle Lithuania, UAB (registered under no. 304909465).

  • Other group companies.

We will contractually require these entities and their staff to respect the confidentiality of this data, ensuring a high level of security for the processing of your data.

We will also provide your personal data to judicial bodies, public institutions, or central and local public authorities, based on a duly substantiated request or legal obligation.

As a rule, SC OZAS will not transfer your personal data to third countries outside the European Economic Area. However, if such a transfer takes place, SC OZAS will take appropriate protection measures to ensure the protection of the personal data transferred.

5. Security and accuracy of personal data

We will take all necessary security measures to protect your personal data transmitted, stored or otherwise processed against destruction, loss, unlawful or accidental change, unauthorised disclosure or unauthorised access, as well as against any other unlawful processing. The security measures we implement with regard to your personal data can ensure the confidentiality, integrity, availability and continued resilience of processing systems and services, as well as the capacity to restore the availability of and access to personal data in a timely manner if a physical or technical incident occurs.

All personal data will be processed through secure pages using the SSL encryption system, marked with a padlock symbol, located at the top of the browser window.

For more information on security standards on the Website, go to the “Help” section.

SC OZAS makes all necessary efforts and uses appropriate IT technologies to ensure the protection and security of the data you provide us.

In the cases provided by the GDPR in connection with personal data breaches, SC OZAS will properly inform the relevant authorities and relevant persons.

SC OZAS processes personal data that is accurate and has an updated procedure in place. Thus, SC OZAS takes all necessary steps to ensure that inaccurate personal data, in view of the processing purposes, are erased or rectified without delay.

6. Rights of the data subjects with respect to the processing of personal data:

  1. Right of access - you may request confirmation if your personal data are processed or not by SC OZAS, and if so, you may request access thereto, as well as certain information about this. Upon request, SC OZAS will also issue a copy of the processed personal data. The request for additional copies will be charged based on the actual costs incurred by SC OZAS,

  2. Right to rectification - you can get your inaccurate personal data rectified and also supplement incomplete data, including by providing additional information.

  3. Right to delete data ("the right to be forgotten") - in situations expressly regulated by law, you can obtain from SC OZAS the deletion of the data. Thus, you can request deletion of personal data if:

    • the data are no longer necessary for the purposes for which they were collected or otherwise processed;

    • you withdraw your consent on the basis of which processing takes place;

    • you oppose to the processing under the right of opposition;

    • processing your personal data is illegal;

    • data must be deleted for compliance with a legal obligation incumbent on SC OZAS.

  1. Right to restrict processing - you may request the restriction of processing of personal data in certain situations governed by law, as follows:

    • you contests the accuracy of your data, for the time SC OZAS checks the accuracy of the concerned data;

    • processing is illegal and you oppose to the deletion of data;

    • you need these data to establish, exercise or defend some rights in court, and SC OZAS no longer needs this data;

    • you opposed the processing of personal data for the period in which we check if our legitimate interests prevail over the interests of your rights and freedoms.

In these situations, except for storage, the data will not be processed anymore.

  1. Right to object to the processing of personal data - you can object at any time, for reasons related to your particular situation, to processing (including profiling) based on the legitimate interest of SC OZAS or, where appropriate, on the exercise by SC OZAS of a task which is in the public interest or results from the exercise of a public authority with which he would have invested SC OZAS.

Marketing materials sent electronically may contain brief information on your option of objecting to the processing of personal data in order to perform direct marketing. If you object to the processing of personal data for direct marketing purposes, your personal data will no longer be used in for these purposes.

The right to object to the direct marketing activity performed by PC OZAS is available when the processing of personal data for direct marketing purposes is based on (i) the legitimate interest of PC OZAS, or (ii) on the existing contractual relationship with PC OZAS and concerns products that are similar to those already contracted, and not on the consent given.

  1. Right to data portability - you can receive your personal data in a structured, readable format, and you can request that the data be passed to another operator. This right applies only to personal data provided directly by you to SC OZAS, and only if the processing of personal data is done by automated means and is legally based on either the execution of a contract or the consent of that person,

  2. Right to complain - you can complain about how SC OZAS processes your personal data. The complaint will be filed with the State data protection inspectorate ("SDPI") – details at https://vdai.lrv.lt,

  3. Right to withdraw your consent - you may at any time withdraw your consent to the processing of personal data by SC OZAS in cases where processing is based on consent. Withdrawal of the consent will only have effect for the future, and processing prior to the withdrawal remains valid. For example, such a case is your option to withdraw your consent to direct marketing messaging.

  4. Additional rights related to automated decisions used in the delivery of SC OZAS services - if SC OZAS makes automated decisions about personal data and these decisions affect you significantly, you can (a) obtain human intervention with respect to said intervention, (b) express your point of views on such processing, (c) obtain explanations of the decision made and (d) contest that decision.

These rights (except the right to contact SDPI, which you can exercise under the conditions established by this authority - in this regard you can see the official website https://vdai.lrv.lt) may be exercised, either individually or by aggregation sending a letter/message in the following ways:

In addition, a Data Protection Officer ("DPO") has been appointed at the Group level, who can be contacted if there are any concerns about the protection of personal data and the exercise of data protection rights. The DPO may be contacted by submitting a written, dated and signed application to the aboveindicated address.

 

WEBSITE TERMS AND CONDITIONS

  1. General Provisions 

The Website of OZAS shopping center, available at www.ozas.lt, is owned by uždaroji akcinė bendrovė „Ozantis“ (“SC OZAS”), a Lithuanian company, having its registered office in Ozas str. 18, LT-08243 Vilnius, Lithuania, registered under no. 126345741.

Privacy Policy, available at: www.ozas.lt, form part of these Terms and Conditions, and provide a detailed description of how we collect, use and process users’ data while navigating on the Website, as well as their rights related to personal data. 

In order to use the Website, users must be minimum 14 years old and agree to this Terms and Conditions regulation.

By accessing and using the Website, the user acknowledges and accepts these Terms and Conditions, as well as other policies relevant for the Website.

If you do not agree to these Terms and Conditions or a part of these Terms and Conditions, please do not use the Website in any way.

  1. Definitions

Website

www.ozas.lt

Company

SC OZAS - Lithuanian company, having its registered office in Ozo str. 18, LT-08243 Vilnius, Lithuania, registered under no. 126345741SC OZAS, part of NEPI Rockcastle group.

Group

Any other entities of NEPI Rockcastle group. The list of companies within NEPI Rockcastle Group can be found here: List of Group Companies

User/Users

Any user/users navigating and/or reading and/or using and/or signing up the Website and/or subscribe to the Newsletter.

Agreement

Means the Agreement executed between the User and the Company, according to these Terms and Conditions.

Third Party Partners

Third Party Partners refers to partners on whose behalf we communicate with users, and are divided into: tenants of NEPI Rockcastle group’s shopping centers, mass-media partners, collaborators and event planners.

Third Party Partners do not have access to users’ personal data, except when the Company procured the prior consent of an User in this regard.

Consent to Personal Data Processing

Means any freely given, specific, informed and unambiguous indication of the Data Subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the Processing of Personal Data concerning him/her.

Data Protection Officer

The Company will designate a person whose purpose is to inform and advise the data controller or the processor as well as the employees in charge of data processing regarding their obligations under the law, as well as to supervise the compliance of laws related to data protection and of controller’s or processor’s policies with respect to personal data protection, cooperation with the supervisory authority, taking over the role of contact point in relation to the supervisory authority regarding processing issues.

The contact person of the data controller:

  • Representative of the Company or of other NEPI Rockcastle group companies:

duomenu.apsauga@nepirockcastle.com

  1. Agreement execution

Usage of Website represent the user’s express and unequivocal consent for execution of the Agreement including these Terms and Conditions and Privacy Policy.

By accepting these Terms and Conditions, the user acknowledges that any other subsequent or simultaneous commitments in relation to these Terms and Conditions are replaced by these Terms and Conditions. These Terms and Conditions does not create rights for third persons.

  1. Use of the Website

Users are not entitled:

  • to access and use the Website for purposes and by means which qualify as a misuse;
  • to use the Website in a such a manner or take any action which causes or might cause damages to the Website or deterioration of the Website performance, availability or accessibility;
  • to use the Website in any illegal, fraudulent or injurious manner or in connection with any illegal, fraudulent or injurious activity;
  • to use the Website in order to copy, store, host, transmit, use, publish or distribute any materials containing (or related to) spyware, computer viruses, Trojan horse, worms or any other computer malware software;
  • to carry out any systematic or automatic data collection activities (including, but not limited to data retrieval and collection) regarding to or in relation to the Website, without the Company’s prior written consent;
  • to use the data collected from the Website for any direct or indirect marketing activities, including, but not limited to email marketing, SMS marketing, telemarketing and direct marketing by post;
  • to use the data collected from the Website in order to contact natural, legal persons or other persons and entities.
  1. Processing of Personal Data

The general legal framework governing the protection of personal data is the General Regulation on the Protection of Data no. 679/2016 ("GDPR") applicable in the European Union.

The Website www.ozas.lt uses cookies. For more information about personal data collected by cookies files, User must consult the Cookies Policy available at Cookies Policy.

You can find more information about the processing of your personal data for these purposes, including how to withdraw your consent, in Privacy Policy, available at Privacy Policy.

  1. Intellectual property

The Company observes other persons’ intellectual property rights and requires users to comply with any intellectual property rights owned by the Company or third persons.

The Website’s content and graphics including, but not limited to the entire textual context, technical sources of all existing and future services and facilities, are owned by the Company and/or its business Partners, as appropriate. These are protected by copyrights, trademark rights and other laws and treaties. The Company assumes no liability for the veracity of intellectual property rights owned by its business Partners and which are used on the Website following the latter’s agreement. In the event that the Website’s content includes specific reference to Company’s business Partners, either to their intellectual property rights or business activities pursued by them, namely marketing campaigns, products and services, prices, etc., the Company bears no liability for the accuracy and legality of such information made fully available by its business Partners, the latter bearing the entire legal liability for such content.

By using certain Website’s specific tools, where specified, users assign to the Company their intellectual property rights including, but not limited to texts published on the Website, files loaded on the Website.

Users must observe all intellectual property rights of the Company as well as of its business Partners promoted on the Website, provided by the legislation in force. Users are prohibited to use any image, trademark or sign belonging to the Company or third parties, if they did not procure the prior written consent of the legal holders.

Users may view, download and print Website’s pages only for their personal use which is subject to the restrictions below or to any other clauses in these Terms and Conditions. Any use of content for purposes other than the personal use, may be done only with the Company’s prior written consent and by indicating the source of information.

In this regard, Users are not allowed:

  • to republish materials from the Website (including republication on other websites);
  • to sell, lease or sublicence materials from the Website;
  • to disclose to the public any materials from the Website;
  • to reproduce, duplicate, copy or use the materials from the Website for marketing purposes;
  • to redistribute materials from the Website, except for specific content or expressly made available for redistribution.

Requests for using the Website’s content for purposes other than the personal use can be sent to Ozo str. 18, Vilnius LT-08243, UAB “Ozantis”, or by email to info@ozas.lt.

These Terms and Conditions do not grant users any right, title or interest regarding the Website, content owned by other persons and published on the website, trademarks, signs or other intellectual property rights held by the Company.

Considering that the Company wishes to improve users’ experience on the Website, it encourages opinions and suggestions; however, the Company may use comments or suggestions without any obligation to the users.

Opinions and suggestions can be sent to SC OZAS address at Ozo str. 18, Vilnius LT-08243, or by email to info@ozas.lt

Waivers and assignments

No situation when the Company fails to act immediately to enforce one of its rights will be deemed a waiver to such right or its enforcement.

If any provision of these Terms and Conditions will be held invalid or ineffective, the other provisions will not be affected thereby and will remain in force and fully valid being interpreted in the largest extent permitted by law.

In the case described above, the invalid or ineffective provision will be replaced by another provision legally accepted that best approximates the Company’s initial purpose. This applies also for omissions.

Users may not assign their rights in part or in full, pursuant to these Terms and Conditions.

The Company may assign its rights to any of its subsidiaries or to any other NEPI Rockcastle group companies, or to any successor in title associated with the Website.

  1. Limits of Liability

The Company makes the Website available AS SUCH, WITH ALL ITS FLAWS and AS IT IS AVAILABLE, without any express or implied guarantee. WE ALSO DECLINE ANY GUARANTEE, INCLUDING ANY MARKETING GUARANTEE, SATISFACTORY QUALITY, ACCURACY FOR A SPECIAL PURPOSE OR NEED. WE DO NOT GUARANTEE THAT THE RESULT WHICH CAN BE OBTAINED BY USING THE WEBSITE WILL BE EFFECTIVE, SAFE OR ACCURATE OR MEET THE USER’S REQUIREMENTS.

The Company does not guarantee that the Website will be constantly available.

If maintenance works are required and the Website is unavailable for maintenance reasons, the Company will inform the User when they access the Website.

The Company will not be liable for internet/network drop and, in particular, for drops due to which the Website cannot be accessed following technical or other difficulties that the Company is unable to control, such as force majeure, third parties fault.

The Company is not liable for inaccurate and/or untrue personal data provided by Users, particularly for those provided by minors aimed to create the appearance of being at least 14 years old.

The User acknowledges that the Company has no control nor obligation to act with respect to:

  • the content accessed by User through the Website;
  • the content’s effect on the User, accessed through the Website;
  • interpretation or usage of Website’s content by the User;
  • the actions taken by the User after accessing the Website’s content;
  • content or accuracy, compliance with copyright, legality or decency of materials/information found on the links to other websites, privacy policy and terms and conditions regulation applied by such websites. The prior consultation of legal terms and other information related to personal data collection is recommended. The rules contained herein are applicable only for information collected on this Website;
  • damages produced by errors, inaccuracy or failure to update the information published on the Website and originating from external sources;
  • damages arising due to a failure of the Website or from the impossibility to access certain links published on the Website.

The Company is not liable for any indirect, special, incidental damage resulting from the use of or incapacity to use the Website.

  • The User acknowledges that products or promotions published on the Website do not belong to the Company but to its business Partners, and that the prices displayed are given for information purposes and are subject to unannounced changes for which the Company bears no legal liability. Presentations displayed on the Website regarding products, services and promotions presented on the Website belong exclusively to business Partners which are fully liable under the law for the information provided.
  • The User acknowledges that the Company is not liable for any loss, costs, trial, claims, expenses or other liabilities if these are directly caused by failure to comply with these Terms and Conditions.
  • The User acknowledges that if prices or other details related to products/promotions of Company’s business Partners were wrongly displayed, the Company reserves the right to change the information displayed on the Website bearing no liability in this regard.
  • User understands that images are displayed on the Website as an example, and the delivered products of Company’s business Partners can differ in any way both in terms of image as well as due to changes in the characteristics, design, and the Company will not be made liable in this regard.
  • The Company guarantees the optimal Website performance only by using Internet Explorer browser version 9 (at least), Google Chrome, Mozilla Firefox, Safari.
  1. Applicable law

These Terms and Conditions are governed by and interpreted in accordance with the Lithuanian law.

The parties will amicably settle any dispute in connection with these Terms and Conditions within 15 business days as of the User’s written notice in this regard. In the event that the parties fail to reach an agreement, such dispute will be settled by the competent Lithuanian court.

Consumers may not waive their rights under the law. Any contractual clauses that remove or limit the consumers’ rights under the law will have no legal effects on them.

  1. Amendments to the Terms and Conditions

This Terms and Conditions regulation was updated on 2021.10.01.

SC OZAS reserves the right to revise and update these Terms and Conditions at any time. 

Therefore, please check the relevant section of the Terms and Conditions when you visit the Website, because it may have changed since the last visit.

If you have any questions about the information contained in this page please write us at infocentras@ozas.lt.

By continuing to use the Website after enforcement of certain amendments/supplements, the User agrees to observe such amendments/supplements.

IF THE USER DOES NOT WISH TO ACCEPT THESE TERMS AND CONDITIONS, INCLUDING THEIR AMENDMENTS/SUPPLEMENTS, THE USER MUST STOP USING THE WEBSITE.

Back

Privacy notification concerning the processing of personal data

when accessing the premisses and territory of shopping center „OZAS”
 

Uždaroji akcinė bendrovė “Ozantis” (“Controller” or “SC OZAS”), a Lithuanian company, having its registered office in Ozas str. 18, LT-08243 Vilnius, Lithuania, registered under no. 126345741, processes the personal data of data subjects that physically access the premisses and territory of shopping center „OZAS”, as follows:

Purposes of processing

  1. to ensure security and safety of assets, for which purpose it decided to use video surveillance of public areas by the means of CCTV system installed on the premises and territory of the asset, in the common areas, access ways, parking areas

  2. solving the requests for data and information received from the competent authorities and institutions

  3. archiving, settling disputes, investigations, or any other petitions / complaints to which our company is party, as well as conducting risk controls on procedures and processes, as well audits or investigations at the company level

  4. granting free access to the WiFi network

  5. participating in the center’s marketing campaigns and awarding of prizes gained in such campaigns (e.g.: signing handing-over minutes etc.)

  6. handling complaints filed in the center premises (e.g.: complaints forms etc.)

  7. processing the lost&found requests filed in the center premises (e.g.: lost&found forms etc.).


Processed categories of data

  • in the context of using the CCTV video surveillance system: the image of the data subjects

  • in the context of accessing the Free WiFi: the IP, MAC of the devices, login time;

  • as regards the center’s campaigns, the types of processed data are to be detailed in the campaign regulation, as published on the center’s website.


Categories of data subjects whose personal data are processed

  • visitors and clients of the center

  • personnel of the tenants of the center

  • personnel of the providers/partners/collaborators of the Controller and/or the tenants.


Legal grounds for processing

In view of the above, we process the personal data of the data subjects that work within or just visit the premises, as the case may be, based on:

  • legitimate interest of the controller (e.g. protection of property and other assets, protection of individuals, handling data subjects and/or authorities requests, processing operations within the Group the controller belongs to)

  • the consent of the data subject (e.g. participation in campaigns)

Storage period

The processed personal data is kept for the period of time necessary for the purpose of processing.

As far as video recordings are concerned, they are usually kept for a period of 14 (fourteen) days, unless the extension of their processing period is imposed by law or justified by legal procedures.

The Wifi login related data is stored during the session and not longer than 1 (one) day after the session ends.

As regards the center’s campaigns, the data storage coordinates are to be included in the campaign regulation, as published on the website or in the premises of the center.


Third party access

In order to ensure CCTV video surveillance, as well as to issue access cards in the premises and in the parking areas, the building owner cooperates with specialized and authorized companies (IT service providers, security service providers, organisers of campaigns, legal consultants, asset manager of the center) according to the law, for the purpose to carry out such activities.

Personal data thus processed may also be made available to competent authorities and institutions, in accordance with the law, or processed within the NEPI Rockcastle Group, for the purpose of group management consolidated activities, for audit purposes and in any other situation where the law imposes or permits such processing.

As regards the center’s campaigns and events, as well the handling of complaints and/or lost & found requests, if filed in the center’s premises, to the Info Desks, the data controller usually collaborates with specialized 3rd party providers.


Rights of data subjects whose data are processed as described herein

  1. Right of access - you may request confirmation if your personal data are processed or not by SC OZAS, and if so, you may request access thereto, as well as certain information about this. Upon request, SC OZAS will also issue a copy of the processed personal data. The request for additional copies will be charged based on the actual costs incurred by SC OZAS,

  2. Right to rectification - you can get your inaccurate personal data rectified and also supplement incomplete data, including by providing additional information.


 

  1. Right to delete data ("the right to be forgotten") - in situations expressly regulated by law, you can obtain from SC OZAS the deletion of the data. Thus, you can request deletion of personal data if:

  • the data are no longer necessary for the purposes for which they were collected or otherwise processed;

  • you withdraw your consent on the basis of which processing takes place;

  • you oppose to the processing under the right of opposition;

  • processing your personal data is illegal;

  • data must be deleted for compliance with a legal obligation incumbent on SC OZAS.

  1. Right to restrict processing - you may request the restriction of processing of personal data in certain situations governed by law, as follows:

  • you contests the accuracy of your data, for the time SC OZAS checks the accuracy of the concerned data;

  • processing is illegal and you oppose to the deletion of data;

  • you need these data to establish, exercise or defend some rights in court, and SC OZAS no longer needs this data;

  • you opposed the processing of personal data for the period in which we check if our legitimate interests prevail over the interests of your rights and freedoms.

In these situations, except for storage, the data will not be processed anymore.

  1. Right to object to the processing of personal data - you can object at any time, for reasons related to your particular situation, to processing (including profiling) based on the legitimate interest of SC OZAS or, where appropriate, on the exercise by SC OZAS of a task which is in the public interest or results from the exercise of a public authority with which he would have invested SC OZAS.

    Marketing materials sent electronically may contain brief information on your option of objecting to the processing of personal data in order to perform direct marketing. If you object to the processing of personal data for direct marketing purposes, your personal data will no longer be used in for these purposes.

    The right to object to the direct marketing activity performed by PC OZAS is available when the processing of personal data for direct marketing purposes is based on (i) the legitimate interest of PC OZAS, or (ii) on the existing contractual relationship with PC OZAS and concerns products that are similar to those already contracted, and not on the consent given.

  1. Right to data portability - you can receive your personal data in a structured, readable format, and you can request that the data be passed to another operator. This right applies only to personal data provided directly by you to SC OZAS, and only if the processing of personal data is done by automated means and is legally based on either the execution of a contract or the consent of that person,

  2. Right to complain - you can complain about how SC OZAS processes your personal data. The complaint will be filed with the State data protection inspectorate ("SDPI") – details at https://vdai.lrv.lt,

  3. Right to withdraw your consent - you may at any time withdraw your consent to the processing of personal data by SC OZAS in cases where processing is based on consent. Withdrawal of the consent will only have effect for the future, and processing prior to the withdrawal remains valid. For example, such a case is your option to withdraw your consent to direct marketing messaging.

  4. Additional rights related to automated decisions used in the delivery of SC OZAS services - if SC OZAS makes automated decisions about personal data and these decisions affect you significantly, you can (a) obtain human intervention with respect to said intervention, (b) express your point of views on such processing, (c) obtain explanations of the decision made and (d) contest that decision.


These rights (except the right to contact SDPI, which you can exercise under the conditions established by this authority - in this regard you can see the official website https://vdai.lrv.lt) may be exercised, either individually or by aggregation sending a letter/message in the following ways:


In addition, a Data Protection Officer ("DPO") has been appointed at the Group level, who can be contacted if there are any concerns about the protection of personal data and the exercise of data protection rights. The DPO may be contacted by submitting a written, dated and signed application to the aboveindicated address.


 

Back