PRIVACY AND COOKIE POLICY

1.             GENERAL PROVISIONS AND DEFINITIONS

1.1.         Global Packaging, UAB, legal entity code 307487535, registered office address Nendrės str. 2-28, Panevėžys, Republic of Lithuania (hereinafter – the Company), has prepared this Privacy and Cookie Policy (hereinafter – the Policy), which sets out the principles for the collection, processing and storage of personal data of visitors (users) of the Company’s website, the purposes and means of personal data processing, as well as the rights of data subjects and the procedures for exercising those rights.

1.2.         The following terms are used in this Policy:

1.2.1.       Personal data means any information relating to an identified or identifiable natural person (data subject); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name and surname, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

1.2.2.       Data subject means a visitor (user) of the Company’s Website whose identity is established or can be established, and whose personal data is processed by the Company.

1.2.3.       Data subject’s consent means any freely given, specific and unambiguous indication of the data subject’s wishes, given by a statement or a clear affirmative action, by which the data subject signifies agreement to the processing of personal data relating to him or her by the Company.

1.2.4.       Data processing means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, sorting, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making the data available, alignment or combination with other data, restriction, erasure or destruction.

1.2.5.       Data processor means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the data controller.

1.2.6.       Data controller means Global Packaging, UAB, legal entity code 307487535, registered office address Nendrės g. 2-28, Panevėžys, Republic of Lithuania (the Company).

1.2.7.       Data recipient means a natural or legal person, public authority, agency or another body to which personal data are disclosed, whether it is a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with European Union or Member State law shall not be regarded as data recipients.

1.2.8.       Website means the website used by the Company, available at the following address: https://pack-global.com.

1.2.9.       Cookies are small text files that a Website stores on a visitor’s end device (computer, mobile phone). The use of Cookies allows the Website to function properly or more efficiently, as well as to provide analytical information to the owners of the Website. If the use of Cookies is not acceptable to you, you may manage and/or control them through your browser settings, including deleting Cookies from your browsing history.

1.3.         Other terms used in this Policy (if any) shall have the same meaning as defined in the GDPR and/or other legal acts regulating the protection of personal data.

1.4.         This Policy has been prepared in accordance with the GDPR, the Law on Legal Protection of Personal Data of the Republic of Lithuania, the Law on Electronic Communications of the Republic of Lithuania, the ePrivacy Directive – Directive 2002/58/EC of the European Parliament and of the Council concerning the processing of personal data and the protection of privacy in the electronic communications sector, and/or other legal acts regulating the processing of personal data.

2.             PRINCIPLES OF PERSONAL DATA PROCESSING

2.1.         When processing personal data, the Company follows these principles:

2.1.1.       The Company processes personal data solely for lawful purposes and the purposes defined in this Policy, and does not further process the data in a manner incompatible with those purposes (purpose limitation principle).

2.1.2.       Personal data are processed accurately, fairly, and lawfully, in accordance with the requirements of legal acts (lawfulness, fairness and transparency principle).

2.1.3.       The Company processes personal data in a way that ensures that the data are accurate and, where necessary, kept up to date (accuracy principle).

2.1.4.       The Company processes personal data only to the extent necessary to achieve the purposes of personal data processing (data minimisation principle).

2.1.5.       Personal data are stored in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed (storage limitation principle).

2.1.6.       When processing personal data, the Company applies appropriate technical and organisational measures to ensure the proper security of personal data, including protection against unauthorised or unlawful processing, and against accidental loss, destruction or damage (integrity and confidentiality principle).

2.1.7.       The Company is responsible for ensuring compliance with the principles set out in this Policy and must be able to demonstrate such compliance (accountability principle).

3.             PURPOSES OF PERSONAL DATA PROCESSING

3.1.         The Company processes your personal data for the following purposes:

3.1.1.       For the purpose of pursuing the Company’s legitimate interests, in order to properly manage and administer the Website and to facilitate the search for information (legal basis: Article 6(1)(f) of the GDPR).

3.1.2.       To ensure the functionality of the Website.

3.1.3.       To implement new features on the Website that would facilitate its use, improve information search capabilities, and enable access to the Website for a wider range of users.

3.1.4.       To enable data subjects to submit inquiries online. The legal basis for the processing of personal data for this purpose is the data subject’s consent (legal basis: Article 6(1)(a) of the GDPR).

3.1.5.       For the purpose of examining complaints, requests and other submissions of individuals.

3.1.6.       To ensure the development and improvement of the services provided.

4.             PROCESSING OF PERSONAL DATA ON THE WEBSITE

4.1.         The Company processes personal data on the Website in compliance with all legal acts regulating the protection of personal data.

4.2.         The Company processes personal data on the Website by:

4.2.1.       Storing Cookies used on the Website on your end device from which you access the Website. The following personal data are collected through Cookies: IP address, device information, browsing information, browser type.

4.2.2.       When a visitor submits an inquiry through the Website section at https://pack-global.com/contact. When submitting an inquiry, it is required to provide your name, email address, and telephone number. These personal data are processed by the Company on the basis of its legitimate interest, in order to provide a response to the appropriate recipient. The Company may also process other personal data provided voluntarily by the individual submitting the inquiry in the respective Website section.

4.2.3.       The Company also processes personal data when it is contacted via the email or telephone number provided on the Website. In such cases, the Company processes personal data in order to administer inquiries, ensure the quality of the services provided, and protect its legitimate interests.

4.3.         The Company processes personal data only for the period necessary to achieve the respective processing purpose. Once the purpose is achieved, the personal data are deleted or otherwise irreversibly destroyed, unless applicable legal acts require the data to be retained for a specified period. After the retention period expires, personal data are permanently deleted or destroyed. The specific retention period depends on the legal basis for data processing.

4.4.         Personal data provided in inquiries submitted through the Website are stored until a response to the inquiry is provided, after which they are deleted.

5.             COOKIES USED

5.1.         Cookies used on the Company’s Website are stored on the visitor’s (user’s) end device when they access the Website – some upon the first visit, others during each browsing session.

5.2.         The Website uses essential and functional Cookies to ensure the proper functioning of the Website, so that the visitor (user) can use all Website functionalities and browse the Website conveniently. The Website also uses analytical Cookies that collect general statistical information about visitors’ (users’) use of the Website.

5.3.         If the Website user chooses to enable or disable Cookies, the possibility to use the Website remains, however, certain functions of the Website may become unavailable.

5.4.         The Company uses Cookies in order to:

5.4.1.       Ensure the functionality of the Website;

5.4.2.       Implement new features on the Website that facilitate its use and information search, and allow a wider range of users to use the Website;

5.4.3.       Ensure the development of the services provided;

5.4.4.       Improve the browsing experience of Website visitors.

5.5.         The table below lists the Cookies used on the Company’s Website, including their storage periods and descriptions:

5.6.         By using the Company’s Website, the visitor (user) agrees that Cookies may be stored on their computer / device.

5.7.         The consent to store Cookies is expressed by clicking the “AGREE” button when a notification appears on the Website containing the text: “We use anonymous cookies to ensure the functionality of this website. More information is available in the Privacy Policy. By continuing to browse the website, you agree to the use of cookies.”

5.8.         The consent given may be withdrawn at any time by the visitor (user) by changing their browser settings and deleting stored cookies. How this can be done depends on the operating system and browser used by the visitor (user).

6.             RIGHTS OF THE DATA SUBJECT

6.1.         The data subject has the right to:

6.1.1.       Be informed about the processing of their personal data.

6.1.2.       Access their personal data and information on how they are processed. For this purpose, the data subject may contact the Company with a request to provide information regarding which personal data are being processed and for what purposes.

6.1.3.       Request the rectification of their personal data. If it is established that inaccurate or incomplete personal data are being processed by the Company, the data subject has the right to request that such personal data be corrected or supplemented.

6.1.4.       Request the erasure of their personal data.

6.1.5.       Request the restriction of the processing of their personal data.

6.1.6.       Object to the processing of their personal data, including the processing of certain non-mandatory personal data.

6.1.7.       Request the transfer of their personal data.

6.2.         The rights of data subjects set out in this Policy shall be exercised in accordance with the procedures established by the GDPR.

7.             MEASURES TO ENSURE THE SECURITY OF PERSONAL DATA

7.1.         The Company implements and ensures appropriate organizational and technical measures to protect personal data from accidental or unlawful destruction, alteration, disclosure, as well as from any other unlawful processing.

7.2.         Only those persons who have the right of access to the personal data processed by the Company and only to the extent necessary for the purposes set out in this Policy may have access to such data.

7.3.         The Company ensures proper network management, maintenance of information systems, and the implementation of other technical measures necessary to ensure the protection of personal data.

7.4.         When processing personal data, the Company applies an appropriate level of organizational and technical measures and continuously updates and improves the systems and processes in which personal data are processed.

8.             COMPLAINTS AND INQUIRIES

8.1.         If you have any questions regarding privacy or personal data protection, or if you suspect that the Company is processing personal data in violation of the requirements of legal acts regulating personal data protection, the Data Subject has the right to submit a complaint or inquiry to the Company at the address Nendrės str. 2-28, Panevėžys, Republic of Lithuania, or by email at info@pack-global.com.

8.2.         Upon receiving a complaint or inquiry from a Data Subject, the Company shall provide a response no later than within 30 (thirty) calendar days, in the form and manner requested by the Data Subject. If clarification of the complaint or inquiry is required, the Company shall promptly contact the Data Subject requesting clarification. In such a case, the response period shall be calculated from the date of submission of the clarified complaint or inquiry. This term may be extended for an additional 2 (two) months, depending on the complexity of the complaint or inquiry and the number of other complaints and inquiries being processed by the Company. The Data Subject shall be informed in writing of any extension of the deadline.

8.3.         The Company examines complaints or inquiries submitted by Data Subjects free of charge. However, if the Data Subject clearly abuses their rights or repeatedly and unreasonably submits complaints or inquiries, the Company has the right to charge a fee based on the principle of cost recovery.

8.4.         The Company may retain complaints, inquiries and correspondence related to the exercise of Data Subjects’ rights for 1 (one) year from the expiration of the deadline for submitting any claims.

8.5.         If the Data Subject believes that the processing of personal data carried out on the Company’s Website does not comply with the GDPR, the Law on Legal Protection of Personal Data of the Republic of Lithuania, or other legal acts regulating personal data processing, or otherwise violates the rights and freedoms of the Data Subject, they may file a complaint with the State Data Protection Inspectorate (address: L. Sapiegos g. 17, 10312 Vilnius, tel. +370 5 271 2804, +370 5 279 1445, fax +370 5 261 9494, website: vdai.lrv.lt, email: ada@ada.lt)

9.             TRANSFER OF PERSONAL DATA TO THIRD PARTIES

9.1.         The personal data of the Data Subject may be disclosed to third parties that provide services to the Company and ensure the operation and maintenance of the information systems used by the Company. In such cases, the personal data of the Data Subject are disclosed to third parties only to the extent necessary for the proper provision of their services.

9.2.         The personal data of the Data Subject may also be disclosed to law enforcement authorities in accordance with the procedures established by the laws of the Republic of Lithuania.

9.3.         In all other cases, the personal data of the Data Subject may be disclosed to third parties only with the Data Subject’s consent.

10.          EFFECTIVE DATE AND AMENDMENTS TO THE POLICY

10.1.      This Policy enters into force on the date it is published on the Website.

10.2.      This Policy is reviewed and updated on a regular basis, and any amendments are published on the Website. After reviewing and/or updating the Policy, the Company ensures that the Data Subject has the technical possibility to provide renewed consent to the updated Policy. The amendments or additions to the Policy take effect on the date of their publication, i.e., the date they appear on the Website.

10.3.      The Policy may also be reviewed at any time due to new circumstances related to personal data processing, changes in legal requirements, or in the event that errors are identified.

11.          CONTACT INFORMATION

11.1.      If the Data Subject has any questions, comments or complaints regarding the personal data collected, used or stored by the Company, they may contact the Company at Nendrės str. 2-28, Panevėžys, Republic of Lithuania, or by email at info@pack-global.com.

Latest update: 2025/11/11