Privacy notice on the processing of campaign personal data

In accordance with Regulation (EU) 2016/679 General Data Protection Regulation (further – the GDPR) and other applicable legislation, this is to inform you that the personal data you have provided us with will be handled by the Yukon Advanced Optics Worldwide, UAB (further – the Company) which is responsible for its processing, for the purposes of:

1) Direct marketing offers, including creating advertising audiences for future sales promotion campaigns

We will process your personal data to provide you with information related the sales promotion campaign (further – the Campaign), including, but not limited to:

  • sending the Campaign discount code;
  • providing additional information related to the Campaign;
  • contacting you with reminders about the discount code’s expiration;
  • assisting you in selecting the most suitable product;
  • sharing updates about our latest news and future product offerings.

For this purpose, we will process your personal data:

  • name – to personalize our communication with you (e.g., addressing you via phone or email). Please avoid sharing excessive personal data (your surname) – providing your first name is sufficient;
  • email address – to contact you, deliver the Campaign discount code, provide additional Campaign information, and send news and offers following the Campaign;
  • telephone number – to contact you regarding Campaign details, assist with product selection, help locate the nearest point of sale, and send reminders about the Campaign or code expiration via calls and/or SMS.

We will also process the email address and telephone number you provided in the Campaign to create general advertising audiences for similar future sales promotion campaigns. This may include uploading your contact data to advertising platforms in order to generate custom or lookalike audiences for targeted advertising on advertising platforms (e.g. Meta, Google, Bing).

2) Personalized offers about our products

We will also process information about your interactions with our emails sent via our communication platform (e.g., Omnisend), such as email opens, clicks, unsubscribes, deliverability, and how many times these actions occurred. We plan to use it to increase your engagement and/or provide personalized offers that better match your interests and behavior.

Who is responsible for the processing of your personal data?

Organization name: Yukon Advanced Optics Worldwide, UAB

Address: Lithuania, Vilnius, Ateities str. 21c

Telephone: +370 5 2330307

Email: gdpr@yukonww.com

What makes the processing of your personal data legitimate?

The legal basis for the above-mentioned personal data processing purposes is your expressed consent (Article 6(1)(a) of the GDPR):

  • which you provide by agreeing to participate in the Campaign and receive related direct marketing communications and updates about our latest news and future product offerings, including creating general advertising audiences for future sales promotion campaigns;
  • which includes the processing of your data for personalized offers about our products.

How long will we keep your personal data?

Your personal data will be retained until you request its deletion or withdraw the consent you have granted / objection to processing or:

  • for the purpose of direct marketing offers – 2 years;
  • for the purpose of creating advertising audiences for future sales promotion campaigns – 2 years.

To whom will your personal data be disclosed?

Any information that you provide may be shared with third parties (data processors, which provide the Company with services and act on its behalf, e.g.:

  • distributors of the Company’s products for assisting us in the Campaign and direct marketing offering via telephone – Thomas Jacks Limited;
  • ecommerce email marketing and SMS platform for assisting us in direct marketing offering via email and SMS – Omnisend, UAB;
  • media agency for assisting us in the collection of your personal data – Inspired Communications, UAB;

The Company ensures that processing of personal data by such third parties will be performed in accordance with lawful instructions of the Company and in compliance with the GDPR and other legal requirements.

The Company shall also provide your personal data for Meta Platforms, Inc. (Facebook, Instagram), Google LLC (Google) and Microsoft Corporation (Bing), X Corp. (X) in compliance with the GDPR and other legal requirements.

The Company will not provide your personal data to other third parties unless required by the legislation, applicable to the Company.

The Company will not transfer your personal data to third countries (outside the EU/EEA) unless this is deemed necessary*, however this is carried out in accordance with an adequate level of protection of the personal data, where there is a lawful basis for the transfer of the personal data, and under at least one of the following conditions:

  • the non-EU/EEA country in which the data recipient is located ensures an adequate level of protection of personal data as decided by the European Commission;
  • the data controller or data processor implements appropriate data security measures, such as, for example, the transfer of personal data is carried out in accordance with a contract containing standard terms and conditions approved by the European Commission or other standard terms and conditions approved in accordance with the established procedure, an approved code of conduct, or the data recipient has been issued with a certificate;

derogations apply, for example, where you have expressly consented to the transfer of personal data, the transfer of personal data is necessary for the performance of a contract concluded with you, or the transfer of personal data is necessary for the exercise or defense of legal claims or for important reasons of public interest.

What are your rights in relation to your personal data processing?

Right of access You have the right to obtain from the Company the confirmation as to whether your personal data is being processed and to access the information about how the Company processes your personal data, as well as to receive the copy of your personal data.
Right to rectification You have the right to obtain from the Company the rectification of your inaccurate personal data. You also have the right to have incomplete personal data completed, also by providing a supplementary statement.
Right to erasure (‘right to be forgotten’) You have the right to obtain from the Company the erasure of your personal data, if conditions established in Article 17 of the GDPR are met.

Please note that Article 17(3) of the GDPR establishes some exceptions for such cases where processing is necessary. If they are applied in your case, we will inform you about them accordingly.
Right to restriction of processing You have the right to obtain from the Company restriction of processing if conditions established in Article 18 of the GDPR are met.

Where processing has been restricted, such personal data shall, except for storage, only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest.
Right to data portability You have the right to receive your personal data, which you have provided to the Company, in a structured, commonly used, and machine-readable format and have the right to transfer this data to another controller, if:

  • the processing is based on a consent or on a contract, and
  • the processing is carried out by automated means.

You also have the right to have the personal data transferred directly from the Company to such another controller, where technically feasible.
Right to object You have the right to object at any time to processing of your personal data for the purposes of the legitimate interests of the Company, including profiling based on those provisions.

The Company will no longer process the personal data unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or for the establishment, exercise, or defense of legal claims.
Right to withdraw the consent Where the processing of your personal data is based on your consent, you have the right to withdraw this consent at any time. Your withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
Right to lodge a complaint with a supervisory authority You have the right to lodge a complaint with a supervisory authority in the EU member state of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of your personal data infringes the GDPR.

Lithuanian supervisory authority is Lithuanian State Data Protection Inspectorate, address L. Sapiegos str. 17, 10312 Vilnius, Lithuania, e-mail ada@ada.lt, website https://vdai.lrv.lt/.

The Company would recommend and be grateful if you contact us before lodging a complaint to the relevant supervisory authority and express your concerns or questions to us. We will do our best to assist you with all your queries.

All abovementioned requests shall be sent via e-mail to gdpr@yukonww.com or by post: Lithuania, Ateities g. 21C, LT-06326 Vilnius, Yukon Advanced Optics Worldwide, UAB. The Company will examine your request to exercise the rights of the data subject within 1 month. This period may be extended, if necessary, for a further period of 2 months, taking into account the complexity and number of requests. In this case, the Company will notify you of any such extension within 1 month of receipt of the request, together with the reasons for the delay.