1. You have the right to refuse or withdraw your consent to the processing of your Personal Data at any time, where such processing is based on your consent.

2. In certain cases, we may send you service-related and Website or Platform operational messages using the contact information you provide. For example, we may inform you about technical changes to the Website or Platform, updates to services, or important order-related information. These communications are necessary for proper service delivery and are not considered promotional messages.

3. You have the right to update and correct the information you have provided to us. In some cases, it is necessary for us to have accurate and up-to-date information about you, and therefore, we may ask you periodically to confirm that the data we hold is correct.

4. For service provision purposes, we may sometimes apply automated decision-making based on data processing, for example, to identify your needs related to the service or to meet service requirements. Automated decision-making involves processing Personal Data using software code or algorithms without human intervention. We regularly review the automated decision-making methods used to ensure fairness, efficiency, and impartiality. You have the right to object to the results of automated decision-making—in such cases, your situation will be reviewed by our specialists.

5. HOW WE USE YOUR PERSONAL DATA AND WHAT PRINCIPLES WE FOLLOW

1. We collect and process only such Personal Data as are necessary to achieve the purposes of Personal Data processing specified by us.

2. When processing your Personal Data, we:

   1. Comply with applicable laws and regulations, including the GDPR requirements;

   2. Process your Personal Data lawfully, fairly, and transparently;

   3. Collect your Personal Data for specified, explicit, and legitimate purposes and do not process it in ways incompatible with those purposes, except as permitted by law;

   4. Take all reasonable steps to ensure that Personal Data which are inaccurate or incomplete, with respect to the purposes for which they are processed, are promptly rectified, supplemented, restricted in processing, or erased;

   5. Retain Personal Data in a form that permits identification of data subjects for no longer than necessary for the purposes for which the data are processed;

   6. Do not disclose your Personal Data to third parties or make them public other than as specified in this Privacy Policy or as required by applicable law;

   7. Ensure that your Personal Data are processed securely by implementing technical and organizational security measures and grant access to Personal Data only to those employees who require such access to perform their work duties.

​​

6. TO WHOM AND WHEN DO WE TRANSFER YOUR PERSONAL DATA

1. We may transfer your Personal Data to data processors or recipients who assist us in carrying out our activities, including but not limited to:

   1. Advertising service providers;

   2. Financial accounting service providers;

   3. IT solution providers;

   4. Payment service providers;

   5. Food suppliers;

   6. Schools.

2. We may also disclose Personal Data to law enforcement and pre-trial investigation authorities, courts, and other dispute resolution bodies, as well as other persons performing functions prescribed by law, in accordance with the procedures established by the laws of the Republic of Lithuania. Such disclosures are made only when required by law or when these entities request mandatory information.

3. Personal Data may also be transferred to companies intending to purchase or acquiring our business, or companies cooperating with us jointly or in other forms, including companies established by us.

4. Generally, we process Personal Data within the territory of the European Union / European Economic Area (EU / EEA), but in some cases your Personal Data may be transferred outside the EU / EEA. Such transfers outside the EU / EEA are based on:

   1. A data processing or transfer agreement describing such transfer and incorporating the European Commission’s standard contractual clauses; or

   2. A decision by the European Commission recognizing the third country as providing an adequate level of data protection; or

   3. A special permit issued by the State Data Protection Inspectorate authorizing such transfer; or

   4. Your consent to the transfer of your Personal Data outside the EU / EEA.

​

7. WHAT RIGHTS DO YOU HAVE

1. As a data subject, you have the following rights related to your Personal Data:

   1. To be informed about the processing of your Personal Data and to access your Personal Data, i.e., to receive confirmation whether we process your Personal Data, and if so, to request access to the processed Personal Data and related information;

   2. To request correction of inaccurate, incorrect, or incomplete information about you;

   3. To request deletion of your Personal Data when there is a legal basis for erasure;

   4. To request restriction of the processing of your Personal Data when you contest its accuracy, object to processing, disagree with erasure of unlawfully processed data, or when you need the data to assert, exercise, or defend legal claims;

   5. To object to the processing of your Personal Data based on legitimate interests of ours or third parties (including profiling, if applicable);

   6. To request the transfer (portability) of your Personal Data provided to us under a contract or consent, which we process automatically in a commonly used electronic format;

   7. To object to fully automated decision-making, including profiling, if such decisions have legal or similarly significant effects on you;

   8. To withdraw your consent to the processing of your Personal Data at any time, including when data are processed for direct marketing purposes or profiling related to direct marketing;

   9. To file a complaint to the State Data Protection Inspectorate.

2. We may refuse to fulfill your request when GDPR or other laws permit refusal, except in cases of objection to processing for direct marketing or when processing is based on your consent.

3. To withdraw consent or exercise any of your rights, please contact us via email at support@ordero.lt. To better understand your request, we may ask you to complete a request form and sign it with an advanced or qualified electronic signature.

4. For security reasons, in some cases we may verify your identity before processing your request. This may include requesting an identity document or other information.

5. Some of your rights can be exercised directly by modifying your account settings on the Website or Platform, or by deleting your account. Please note that changing settings or deleting your account may result in loss of some or all information associated with your account.

6. We usually do not charge a fee for exercising your rights. However, the law allows us to charge a reasonable fee or refuse your request if it is manifestly unfounded or excessive.

7. If you do not wish your Personal Data to be processed for direct marketing, surveys, including profiling, you may object without providing reasons by emailing support@ordero.lt or by following the unsubscribe link included in our communications.

8. Upon receiving your request or instruction regarding Personal Data processing, we will respond and take the requested action within one month from the date of receipt, or inform you of refusal and the reasons. This period may be extended by two additional months depending on the complexity and number of requests. In such case, you will be notified about the extension within one month of receiving the request.

9. If your Personal Data are deleted upon your request, we may still keep copies as necessary to protect our or others’ legitimate interests, comply with state authorities’ requirements, resolve disputes, detect malfunctions, or enforce agreements.

​

8. NEWSLETTERS, DIRECT MARKETING AND QUALITY SURVEYS

1. We may send you information about our activities and services (direct marketing messages) via your email address and/or phone number if you have given us your consent to do so, or if you, your child, or your represented organization are our client. With your consent, we may also ask you to help us evaluate the quality of our services, operations, and customer support.

2. To provide you with more personalized news and direct marketing messages, we may tailor these communications based on how you use our services. We use automated decision-making, including profiling, to deliver direct marketing services adapted to your needs and interests. This includes taking into account your preferences and behavior (for example, the food dish you selected or food items you showed interest in). The purpose of these measures is solely to improve your experience. If you choose not to receive our news, you will still retain the right to use our services and receive the same quality of service.

3. Your contact details may be shared with our partners/data processors who provide us with newsletter delivery or quality assessment services.

4. If you no longer wish to receive direct marketing messages, you can unsubscribe using the method specified in the electronic messages (e.g., by clicking the “unsubscribe” link in a newsletter) or by sending us a notification via email at support@ordero.lt. 

5. After you withdraw your consent, we will strive to stop sending you newsletters immediately; however, this may take some time. Since our newsletter campaigns are planned in advance, you may receive one final newsletter even after withdrawing consent.

6. Withdrawal of consent does not automatically oblige us to delete your Personal Data or provide you with information about the Personal Data we process. To request these actions, you must submit a separate request.

7. We may use your email address and phone number for direct marketing purposes to provide you with newsletters, offers, and information about similar services that we believe may interest you, as well as to inquire about the quality of our services and support - even without your consent - if you are already our client and have not objected to such use of your Personal Data when providing them to us. Even if you have not objected immediately, you can at any time easily express your objection to all or part of such processing activities by:

   1. Changing your newsletter subscription settings in your account on the Website;

   2. Notifying us of your objection using the method indicated in the electronic messages and/or offers (e.g., by clicking the “unsubscribe” link); or

   3. Sending us a notification of objection via the email address specified in this Privacy Policy.

​

9. HOW WE PROTECT YOUR PERSONAL DATA

1. Your Personal Data is processed responsibly and securely and is protected against loss, unauthorized use, and alteration. We have implemented physical and technical measures to safeguard the information we collect from accidental or unlawful destruction, damage, alteration, loss, disclosure, as well as any other unauthorized processing. The security measures for Personal Data are established based on the risks associated with its processing.

2. Our employees are contractually obliged in writing not to disclose or share your Personal Data with third parties or unauthorized individuals.

​

10. HOW WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES

1. A cookie is a small text file stored in your device’s (computer, tablet, mobile phone) browser or device itself. In this Privacy Policy, the term “cookies” refers to cookies and similar technologies, such as pixel tags, web beacons, and clear GIFs.

2. Cookies may be used to analyze information flows and user behavior, build trust, ensure security and proper functioning of the Website and Platform, remember preferences, and personalize displayed content.

3. We may use essential cookies necessary for the operation of the Website and Platform, analytical cookies that analyze the use of the Website and Platform, functional cookies that remember user preferences, ensure smooth and secure operation of the Website and Platform, and help improve its features, performance cookies, third-party cookies, and advertising cookies designed to display both personalized and general advertisements to you.

4. List of cookies used on the Website and Platform: