Data Protection
AB “Tautrimas Aštrauskas Clinic” (hereinafter – TAK) considers the protection of personal data of you—our website visitors and other data subjects—to be of great importance. Therefore, we are committed to respecting and safeguarding every data subject’s privacy.
TAK ensures that personal data are processed lawfully, fairly, and transparently, collected only for specified and clearly defined purposes, and not further processed in a manner incompatible with those purposes.
This Privacy Policy provides essential information about TAK’s processing of personal data, the storage of such data, and the rights of data subjects.
Key Terms
- Personal data – any information relating to an identified or identifiable natural person (data subject); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name and surname, a personal identification number, location data, an online identifier, or to one or more factors specific to that natural person’s physical, physiological, genetic, mental, economic, cultural, or social identity;
- Data processing – any operation or set of operations performed on personal data or on sets of personal data by automated (electronic means) or non-automated (paper-based) means, such as collection, recording, sorting, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, as well as alignment or combination with other data, restriction, erasure, or destruction;
- Data controller – a natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. For the purposes of this Data Protection scope, the Data Controller is UAB “Tautrimas Aštrauskas Clinic,” legal entity code: 302777470, registered office: Vičiūnų 24, Kaunas LT-45325, contact details: email info@tautrimas.com, tel.: +370 685 03095; +370 37 733202.
- Data processor – a natural or legal person, public authority, agency, or other body which assists the Data Controller, under its authority, in achieving the specified purposes.
- Data recipient – a natural or legal person, public authority, agency, or other body to whom personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with European Union or Member State law shall not be regarded as recipients; the processing of those data by such public authorities shall be in compliance with the applicable data protection rules according to the purposes of the processing;
- Third party – a natural or legal person, public authority, agency, or other body other than the data subject, data controller, data processor, or persons who are authorized to process personal data under the direct authority of the data controller or data processor;
- Consent of the data subject – any freely given, specific, and unambiguous indication of the data subject’s wishes, given by a statement or by a clear affirmative action, by which he or she signifies agreement to the processing of personal data relating to him or her;
- Data subject – a natural person, a website visitor, whose personal data are processed by TAK;
- Special categories of data – personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, as well as data revealing health information, data concerning a natural person’s sex life and/or sexual orientation.
- Supervisory authority – the State Data Protection Inspectorate.
- Data Protection Officer (DPO) – a person appointed by the Data Controller who helps ensure compliance with the General Data Protection Regulation, the Law on Legal Protection of Personal Data of the Republic of Lithuania, and other legal acts regulating personal data protection, participates in all matters related to personal data protection, and provides consultations in the field of personal data protection.
Personal Data
- Lawful criteria for the processing of personal data
TAK collects and further processes your personal data only on the basis of lawful grounds defined in the legal acts regulating personal data protection:
- with your consent, in order to respond to your inquiries;
- for the purpose of concluding and/or performing an agreement with partners and/or suppliers;
- to comply with lawful requirements of legal acts.
- Purposes of personal data processing
TAK, as the data controller, for the purposes of inquiry administration, consultations in plastic and reconstructive surgery, provision of non-surgical aesthetic medicine services and other healthcare services, provision of plastic and reconstructive surgery and other surgical services, provision of non-surgical aesthetic medicine and other non-surgical healthcare services, and informing potential clients.
- Processed personal data
TAK processes the following data:
- with your consent, the personal data you provide in the inquiry form implemented on the website tautrimas.com.
- with your consent, the personal data you provide by email to info@tautrimas.com or other emails used by TAK employees (for example, info@tautrimas.com, etc.).
- with your consent, the personal data you provide on the “Tautrimas Aštrauskas Clinic” profiles on the social networks Facebook and Instagram.
- with your consent, the personal data you provide during telephone conversations with TAK employees (tel. +370 68 50 3095, +370 37 73 3202, +370 67724347).
- personal data obtained when signing consents for consultations and when concluding contracts for the provision of non-surgical aesthetic medicine services and other healthcare services, plastic and reconstructive surgery and other surgical services, non-surgical aesthetic medicine and other non-surgical healthcare services, as well as when concluding business (cooperation) agreements (partners and/or suppliers);
- other data collected on the basis of your consent and defined in detail at the time your consent is requested;
- data whose collection is required by legal acts in order to lawfully carry out TAK’s activities.
- Cookies
To improve your experience when visiting the TAK website, we use cookies—small pieces of text information that are automatically created while browsing the website and are stored on your computer or other end device. The information collected by cookies allows us to ensure the smooth operation of the website, enable more convenient browsing for you, learn more about our users’ behavior, analyze trends, and improve the website, our customer service, and the services provided by TAK.
Cookie data are not transferred to third parties.
You can choose whether to accept cookies. If you do not agree to cookies being stored on your computer or other end device, you can change your browser settings and disable all cookies or enable/disable them individually. Please note, however, that in some cases this may slow down your internet browsing, limit certain website functions, or block access to the site.
For more information about cookies and those used on our website, please see our Cookie Policy page.
- Personal data retention period
We keep your personal data no longer than required by the purposes of processing or as stipulated by legal acts if they provide for a longer retention period.
We strive not to retain outdated or unnecessary information and to ensure that personal data and other client information are continuously updated and accurate.
- Provision of personal data
TAK provides your data:
- with your consent, to clearly defined data recipients and processors;
- to institutions or organizations as required by legal acts;
- to other third parties with your consent, which may be obtained for a specific case.
Personal Data Security Measures Used by TAK
TAK’s online activities comply with all requirements set by applicable international legal acts, European Union legal acts, and the laws of the Republic of Lithuania.
- General Data Protection Regulation (GDPR)
When processing data subjects’ personal data, TAK complies with the provisions of the General Data Protection Regulation and has implemented appropriate organizational and technical measures to ensure the security of personal data, helping protect personal data from accidental or unlawful destruction, alteration, disclosure, as well as any other unlawful actions.
- Mainrights of data subjects’ andimportant information about data security at the institution
You have the right to:
- be informed about the processing of your personal data (Articles 12–14 of the Regulation);
- access your personal data being processed (Article 15 of the Regulation);
- request rectification of inaccurate personal data concerning you (Article 16 of the Regulation);
- request erasure of personal data concerning you (“the right to be forgotten”) (Article 17 of the Regulation), if one of the following reasons applies:
- the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
- you withdraw consent on which the processing is based, and there is no other legal ground for the processing;
- you object to the processing pursuant to Article 21(1) of the Regulation and there are no overriding legitimate grounds for the processing.
- restrict processing (Article 18 of the Regulation) if:
- the personal data are inaccurate;
- the processing of personal data is unlawful and you oppose the erasure of the data;
- the data controller no longer needs the personal data for processing purposes, but you require them for the establishment, exercise, or defense of legal claims;
- you object to processing pursuant to Article 21(1) of the Regulation, if the controller’s legitimate grounds do not override your reasons;
- to data portability, where processing is based on consent or a contract and the data are processed by automated means (Article 20 of the Regulation);
- object to the processing of personal data for reasons related to your particular situation when data are processed in the performance of a task carried out in the public interest vested in the data controller, except where the controller demonstrates compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or for the establishment, exercise, or defense of legal claims (Article 21 of the Regulation).
To exercise these rights, you may submit a request to UAB “Tautrimas Aštrauskas Clinic”.
Data controller details:
