Privacy Policy

Date of the latest version of this policy: 2026-07-20

About

We – Agrokoncerno pienas, UAB (hereinafter referred to as the Data Controller or the Company), are www.futuremilkfarm.com the operators of the website. This website and the companies associated with the Data Controller (the list of such companies is available on the website  https://www.agrokoncernogrupe.lt/lt/kontaktai/ in the “Contacts” section) sets out the rules governing how we collect and process your personal data.

We understand that the protection and confidentiality of your personal data are of utmost importance to you. Therefore, the companies within our group apply strict standards and requirements to ensure the protection and confidentiality of your personal data. We emphasize that we make every effort to ensure compliance with the requirements of the General Data Protection Regulation (GDPR) and other European Union and Republic of Lithuania legal acts governing the protection of personal data.  Given that personal data protection is a highly dynamic area requiring the continuous monitoring of our personal data processing activities and their compliance with applicable data protection requirements, when processing your personal data we also follow the recommendations and guidance issued by the State Data Protection Inspectorate and other competent authorities of the European Union.

To ensure compliance with applicable legal requirements, we implement all necessary and advanced technical and organisational measures for the protection of personal data. We emphasize that the provisions of this Policy may be periodically amended, updated, and supplemented in order to ensure the highest possible level of protection of your personal data and the quality of the services we provide, including franchise-related services. Information regarding updates to this Policy and the date of its latest version can be found at the end of this Policy.

Definitions of Terms Used in the Policy

GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons regarding the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation – GDPR).

ADTAĮ – The Law on the Legal Protection of Personal Data of the Republic of Lithuania.

Applicable Legislation – GDPR, ADTAĮ, and any other European Union legal acts in force at the relevant time, as well as any nationally or internationally binding data protection laws or regulations.

Personal data – any information that can be used to identify and individual, as well as any information relating to an individual who has already been identified.

We strive to ensure that all of our personal data processing activities comply at all times with the requirements of the Applicable Legislation, this Policy, and our Company’s internal rules governing the processing of Personal Data.

To maintain your trust in our Company, if you have any questions regarding the protection of your Personal Data, please contact us using the contact details provided in this Policy.

  1. How we collect your Personal Data

We obtain almost all of your Personal Data directly from you; however, in certain cases, Personal Data may also be collected from other sources. Below we provide the possible sources of your Personal Data:

– You provide most of your Personal Data directly to us, for example, when you contact us by email, through a contact form, or by other means to request consultations, access rights, documents, services, including franchise-related services, or for other purposes, or when you participate in  „Agrokoncernas group“ events organised by us, or enter into service agreements, including franchise agreements, letters of intent, and/or other contracts with us;

– In certain cases, we may obtain information about you (as an individual or as a representative, employee, or other associate of your company) from publicly available sources, such as your company’s website (e.g., lists of employees or representatives), public announcements, and similar sources;

– We may also obtain your Personal Data from third parties, such as credit reference agencies (e.g., Creditinfo), tax authorities, business partners, governmental institutions, and other similar entities;

– We also collect your Personal Data automatically, for example, when you enter areas and/or premises monitored by our video surveillance systems (in such cases, we may collect your image, vehicle registration number, and similar information). Please note that, depending on the existing pre-contractual or contractual relationship between us, your intentions, the nature of our cooperation, and other specific circumstances of our relationship with you, we may collect information about you that differs from the categories described in this Policy, to the extent that such information is necessary for the performance of a specific contract, the intention to enter into a contract, or other related purposes. Where we process your Personal Data in your capacity as our customer, partner, supplier, or other business associate, we will provide you with additional information regarding such processing in accordance with the requirements of the Applicable Legislation.

  1. Legal bases for the processing of your Personal Data

We process the Personal Data listed in this Policy and provided by you on the legal bases set out below. In accordance with the provision of the Applicable Legislation, specific categories of Personal Data may be processed on the basis of more than one legal ground:

– Your consent (in certain cases and only where it has been freely given by you);

– The legitimate interests of our Company, except where such interests are overridden by your interests or fundamental rights and freedoms;

– Entering into and performing a contract with you;

– Compliance with legal obligations applicable to our Company arising from the provisions of applicable laws and regulations. To the extent and under the conditions provided for by the Applicable Legislation, the processing of the same Personal Data may be based on one or more of the legal grounds listed above. Your personal data may be processed for one or more purposes. Below is a list of the principle purposes for which we process Personal Data:

– To provide services to you, including franchise-related services, and/or to establish other legal relationships with you, as well as, where necessary, to purchase goods from you (or your employer or represented entity) or procure services from you;

– To inform you about our activities, the services we provide, including franchise-related services, the products we offer for sale, and other relevant matters;

– In certain cases, we may process your Personal Data in order to protect and defend our legitimate interests in the event of legal proceedings or other disputes.

  1. Personal Data we process

In our operations, we adhere to the personal data protection principles established by the GDPR, including the principle of data minimisation. Therefore, when processing your data, we strive to limit the amount of your Persona Data processed to the minimum necessary. The categories of Personal Data most commonly processed by us include the following:

– Personal Data that is necessary for entering into and performing a contract with you and for fulfilling contractual obligations. In such cases, we typically process your first name, surname, date of birth (and, in exceptional cases, your personal identification number), address, telephone number, email address, and bank account details. In certain circumstances, depending on the nature of the contractual relationship, we may also process data relating to your business or professional activities.

– Information relating to your commercial or business activities and their specific characteristics may also be processed. You provide such data to us by email, through contact forms, by completing relevant order and/or enquire forms in writing, by telephone, and through other communication channels. In certain cases, your Personal Data may be processed in the course of performing a contract or a pre-contractual document (e.g., a letter of intent), for the purposes of maintaining communication, responding promptly to enquiries, providing services, including franchise-related services, and selling or purchasing goods.

– Personal Data that is necessary for verifying your identity. It may be necessary to verify your identity when entering into or performing a contract. In certain cases, we collect Personal Data relating to the employees and representatives of our partners, clients, or other third parties in order to ensure that we are dealing with a duly authorized person.

– When using the website or portal, we may also process technical and usage data, such as your IP address, geographic location, date and time of access, browser and device type, actions performed within the portal, the history of submitted forms or documents, and information relating to page views and requests. These data are processed for the purposes of ensuring the operation and security of the website and portal, user authentication, the provision of services, communication, and the protection of our legitimate interests.

Below we provide information summarising the main categories of your Personal Data that we process, the legal bases of such processing, and the purposes for which we process such Personal Data:

Personal Data Purpose of Processing Personal Data Legal Basis for Personal Data Processing
First name, surname, email address, telephone number, payment details (e.g., bank account number) To enter into and perform contracts and/or other agreements, sell goods and provide services to you, maintain accounting records, comply with obligation imposed by tax authorities and other regulatory requirements, and maintain communication with you (as a customer, partners, or other business associate) in connection with the provision of services, the fulfilment of orders, and your interest in our products and services, including franchise-related services. GDPR Article 6(1): (b) performance of a contract; (c) compliance with a legal obligation to which the controller is subject; (f) legitimate interests pursued by the controller. Personal Data are also processed on the basis of our legitimate interest in providing you with the information you require, maintaining cooperation with you, and resolving any issues that may arise as efficiently and promptly as possible.
Franchise applicants, prospective franchisees, and the contact details of their representatives, managers, shareholders, or other related persons; information regarding their business activities, experience, business plans, proposed business location, financial capacity, submitted documents, questionnaires, letters of intent, and any other information necessary for the assessment and evaluation of a potential franchise relationship To assess the possibility of entering into a franchise agreement or any other arrangement related to a franchise relationship, to conduct pre-contractual communications, prepare and perform agreements, evaluate the conditions of cooperation, and protect the Company’s legitimate interests. GDPR Article 6(1): (b) processing is necessary in order to take steps at the request of the data subject prior to entering into a contract and/or for the performance of a contract; (f) processing is necessary for the purposes of the legitimate interests pursued by the data controller. Personal Data are processed on these legal bases for the purpose of assessing the possibility of entering into a franchise agreement or another franchise-related arrangement, conducting pre-contractual communications, preparing and performing agreements, evaluating the conditions of cooperation, and protecting the Company’s legitimate interests.
Your contact details, informed related to the nature of your activities (e.g., sector of business or farming activity, size of the business or farm, location, etc.), your opinions about our products and/or services, our activities, and other related information. These data are collected for direct marketing purposes, including providing you with offers and invitations to participate in relevant events, exhibitions, visits, tours, field days, and other activities, as well as informing you about new relating to our products and services, discounts, and special offers. GDPR Article 6(1): (a) the data subject has given consent to the processing of their Personal Data for one or more specific purposes; (f) processing is necessary for the purposes of the legitimate interests pursued by the data controller. These Personal Data are processed for direct marketing purposes, including informing you about events, exhibitions, visits, tours, field days, news regarding our products and services, discounts, special offers, and other information that may be relevant to you.
Personal Data that have been provided to us, regardless of the original purpose or legal basis for which such data were initially processed. Your Personal Data may be processed for the purpose of protecting and defending our interests in the event of legal proceedings or other disputes. GDPR Article 6(1): (c) processing is necessary for compliance with a legal obligation to which the data controller is subject. We also rely on our legitimate interest in protecting and defending our rights and legitimate interests in the event of legal proceedings, disputes, claims, or other conflict resolution processes.
Data relating to the use of the website or portal, including IP address, geographic location, device and browser details, date and time of access, actions performed within the portal, records of submitted forms and documents, and other technical information. To ensure the operation and security of the website and portal, user authentication, service administration, incident prevention, and the protection of our legitimate interests. GDPR Article 6(1): (b) processing is necessary for the performance of a contract or in order to take steps at the request of the data subject prior to entering into a contract; (f) processing is necessary for the purposes of the legitimate interests pursued by the data controller. The processing of such data is necessary to ensure the operation and security of the website and portal, user authentication, service administration, incident prevention, and the protection of our legitimate interests.
Your image and vehicle registration number may be processed for video surveillance purposes. Information regarding the surveillance is provided by means of signs and notices displayed at or near the entrances to the respective video-monitored areas, buildings, or premises. Your Personal Data are processed for the purpose of ensuring the security of our premises and territories, as well as the safety of you, our personnel, property, and equipment. GDPR Article 6(1): (f) processing is necessary for the purposes of the legitimate interests pursued by the data controller. The processing of such Personal Data is based on our legitimate interest in ensuring the security and protection of our premises and territories, as well as the safety of individuals, property, and assets located therein.
The content of your enquiry, including the events or matter in respect of which you are contacting us, the relevant circumstances, date and location, your request, claim, feedback, details of the purchased product or service, and any other information provided in your enquiry; Other documents and/or data submitted together with your enquiry, such as purchase documents and related information, photographs, and other supporting materials. Your Personal Data may be processed for the purpose of maintaining communication with you when you submit requests, complaints, feedback, inquires, or other communications to us. GDPR Article 6(1): (c) processing is necessary for compliance with a legal obligation to which the data controller is subject. Applicable legislation requires us to review and respond to requests submitted by our data subjects. Accordingly, we are obliged to process the relevant Personal Data to the extent necessary for handling and responding to your requests, enquires, or complaints. We also have a legitimate interest in receiving feedback from our customers regarding the services we provide and the cooperation between us. Therefore, where you submit feedback concerning our services, we process the Personal Data that you provide together with such feedback or enquiry to evaluate, respond to, and improve our services and customer experience.

  1. How long we retain your Personal Data

We process your request, letter, enquiry, or other communication, together with any data submitted therewith and related thereto, until we have reviewed your enquiry, provided a response, and fulfilled the relevant request. Thereafter, such data will be retained for an additional period of five (5) years following the fulfilment of the relevant request.

Where a contract, agreement, or other document giving rise to mutual obligations has been concluded between us, we will process your Personal Data for the duration of the contractual relationship and the performance of the relevant obligations. Thereafter, we will retain such Personal Data for an additional period of ten (10) years following the fulfilment or termination of the relevant contract, agreements, or other document.

If a legal or other dispute arises between parties, or if there is a reasonable likelihood that such a dispute may arise in the future, we may retain your Personal Data for a longer period, namely until the applicable limitation periods for submitting a complaint, claim, or other legal demand have expired and/or until a final, non-appealable decision has entered into force.

We process your Personal Data for direct marketing purposes for a period of three (3) years following the date on which your provided your consent to receive direct marketing communications.

Personal Data relating to franchise applicants or prospective franchisees with whom no franchise agreement or other arrangement is concluded will be retained for no longer than three (3) years from the date of the last communication or the decision not to pursue further cooperation, unless a longer retention period is necessary for the protection of our legitimate interests, the handling of a disputer, or compliance with obligation imposed by applicable laws and regulations.

Upon expiry of the Personal Data processing and retention periods set out in this Policy, we will delete your Personal Data or irreversibly and securely anonymise it as soon as reasonably practicable and within the period reasonably necessary to carry out such actions. Below is a summary of the applicable Personal Data retention periods:

No. Purpose of Personal Data processing Retention period
1. Personal Data processing for the purposes of providing services/selling goods, franchise-related activities, and/or the procurement of services or goods 10 years from the completion of the most recent order or from the termination of the contractual relationship, whichever occurs later
2. Personal Data processing for the purpose of handling and responding to requests, letters, enquiries, and other communications 5 years from the fulfilment of the relevant request, letter, enquiry, or other communication
3. Personal Data processing relating to franchise applicants or prospective franchisees for the purposes of pre-contractual communications, assessment, evaluation, and communication, where no franchise agreement or other arrangement is concluded 3 years from the date of the last communication or the decision not to continue the cooperation, unless a longer retention period is necessary for the protection of legitimate interests or for compliance with applicable legal requirements
4. Direct marketing activities 3 years from the date on which your consent to the processing of Personal Data for direct marketing purposes was obtained, or until such consent is withdrawn, whichever occurs first

  1. Sources of your Personal Data

We obtain almost all of your Personal Data directly from you. In certain cases, you also provide us with Personal Data when ordering services, including franchise-related services. As noted above, you may also provide us with certain Personal Data in the course of communicating with us, including when submitting requests, applications, complaints, or other enquiries in writing, by email, post, telephone, or through other means of communication.

In certain cases, we may obtain your Personal Data from our business partners, suppliers, public authorities, tax authorities, state registers (including the Real Estate Register, the Register of Legal Entities, and others), as well as from third parties maintaining joint debtor databases and credit information systems (e.g., Creditinfo Lietuva UAB, Scorify UAB, Coface, and others). We will inform you of the receipt of such Personal Data in accordance with the requirements of the Applicable Legislation.

  1. When and to which third parties we disclose your Personal Data

Company is committed to maintaining the confidentiality of its customers’ Personal Data. Personal Data may be disclosed to third parties where such disclosure is necessary for the conclusion or performance of a contract with a customer, or for other lawful reasons. Information may also be provided to third parties at your request or in connection with your contractual obligations to such third parties, including auditors, affiliated entities (e.g., companies within the Agrokoncernas Group, shareholders and/or other participants), banks, other financial institutions, or business partners.

We may disclose your Personal Data to data processors that provide services to us (or perform work on our behalf) and process your data on behalf of our Company in its capacity as the Data Controller. Such data processors are entitled to process Personal Data only in accordance with our instruction and only to the extent necessary for the proper performance of their contractual obligations. When engaging data processors, we take all necessary measures to ensure that they have implemented appropriate technical and organisational security measures and maintain the confidentiality of Personal Data. We enter into data processing agreements with the relevant processors, which set out the requirements applicable to the processing of Personal Data. Below is an illustrative (non-exhaustive) list of categories of data processors:

– Tax authorities;

– Banks and other financial institutions that assist in the processing of payment transactions;

– Business partners involved in the provision of services to you or the supply of goods to you, provided that only the Personal Data necessary for the relevant purpose are disclosed to such entities;

– Entities that organise exhibitions, events, or competitions in which you participate or may participate, where such disclosure is necessary for the administration and organisation of the relevant event, exhibition, or competition;

– Companies providing IT infrastructure maintenance, support, and security services, which ensure the functionality, availability, and protection of the information systems used by us;

– Other parties, where disclosure is required by applicable laws and regulations or where it is necessary for the protection, establishment, exercise, or defence of our legitimate interests;

– Auditor engaged to perform audits of the Company and/or the companies within the Agrokoncernas Group, to the extent necessary for the conduct of such audit services and compliance with applicable legal and regulatory requirements;

– Affiliated parties, including companies within the Agrkoncernas Group, shareholders, and/or other participants;

– Legal, financial, business, tax, creditworthiness, or reliability assessment consultant and service providers, where their involvement is necessary for franchise relationship, pre-contractual assessments, the conclusion of a contract, or the protection of our legitimate interests;

– Providers of website, portal, cloud computing, hosting, authentication, email, cybersecurity, and other information technology services, to the extent necessary to ensure the operation, availability, maintenance, and security of the website, portal, and related services.

  1. Transfer of Personal Data to third parties

In certain cases, in order to provide services to you, sell goods to you, or ensure the servicing and support of the services you have purchased, certain of your Personal Data may be transferred to third countries that provide an adequate level of data protection as required by the Applicable Legislation. When transferring Personal Data to third countries, we ensure that one or more of the safeguards set out below are implemented:

– A data processing agreement or service agreement is concluded with the relevant entity in the third country (the data recipient), incorporating the Standard Contractual Clauses approved by the European Commission, thereby ensuring appropriate safeguards for the protection of Personal Data;

– The entity is established in a country that has been recognised by the European Commission as providing an adequate level of protection for Personal Data.

  1. Cookies and other similar technologies

The website or portal may use cookies and similar technologies that are necessary for the operation and security of the website or portal, maintaining user sessions, and storing user preferences. In addition, subject to your consent, cookies and similar technologies may be used for analytics and marketing purposes. Necessary cookies are used on the basis of our legitimate interests, while cookies that are not essential for the operation of the website or portal are used only with your consent. More detailed information regarding the cookies used, their purposes, retention periods, and the management of your consent may be provided in a separate Cookie Policy or through the cookie settings interface available on the website portal.

  1. Data subject rights and their exercise

Applicable Legislation, including the GDPR, grants you certain rights that you may exercise at any time. Below is a summary of your rights as a data subject:

– Right of access to your personal data processed by us. You have the right to obtain confirmation from us as to whether or not we process your Personal Data. Where we do process your Personal Data, you have the right to access such Personal Data and to receive information regarding: the purposes of processing; the categories of Personal Data being processed; the categories of recipients to whom the Personal Data have been or will be disclosed; the period for which the Personal Data will be stored, or, where that is not possible, the criteria used to determine that period; the sources from which the Personal Data were obtained, where they were not collected directly from you; and the significance and possible consequences of such processing for you.

– Right to rectification of Personal Data. If you believe that the Personal Data we process about you are incomplete, or incorrect, you have the right to request that we amend, supplement, update, or correct such information without undue delay.

– Right to withdraw consent to the processing of Personal Data. If we process certain categories of your Personal Data on the basis of your consent, you have the right to withdraw that consent at any time. Upon receipt of your withdrawal, we will cease any further processing of your Personal Data that is based on your consent. Please note that, in certain cases, withdrawing your consent may mean that you will no longer receive communications from us, including invitations and offers relating to events, exhibitions, promotional activities, and other similar opportunities. The withdrawal of consent shall not affect the lawfulness of any processing carried out on the basis of your consent before its withdrawal.

– Right to lodge a complaint. If you believe that we are processing your Personal Data unlawfully or in violation of the requirements of the Applicable Legislation, we encourage you to contact us directly and explain your concerns. Doing so will enable us to review the matter and seek an amicable and efficient resolution. However, if you are not satisfied with our efforts to resolve the issue promptly and amicably, you have the right to lodge a complaint with the State Data Protection Inspectorate or any other competent supervisory authority in accordance with applicable data protection laws.

– Right to object to processing based on legitimate interests. Applicable Legislation provides that you have the right to object to the processing of your Personal Data where such processing is based on your legitimate interests. Where you exercise this right, we will assess your objection and cease processing your Personal Data unless we can demonstrate compelling legitimate grounds for the processing that overrides your interests, rights, and freedoms, or where the processing is necessary for the establishment, exercise, or defence of legal claims. Please note that, in certain cases, taking into account the nature of the services we provide, the exercise of this right may result in the limitation of certain services or, where applicable, our inability to provide such services to you. To exercise this right, please submit a written request using the contact details provided in this Policy.

– Right to erasure of Data (“Right to be Forgotten”). You have the right to request that we erase your Personal Data. This right may be exercise if:

  • The Personal Data we hold about you are no longer necessary for the purposes for which they were collected or otherwise processed;
  • We processed your Personal Data on the basis of your consent and you have withdrawn that consent;
  • We determine that your interest override our legitimate interest (where the processing of your Personal Data is based on our legitimate interests);
  • The Personal Data we process about you were obtained unlawfully. To exercise this right, please submit a written request to us using the contact details provided in this Policy.

– Right to restriction of processing. You have the right to require us to restrict the processing of your Personal Data in circumstances specified by the Applicable Legislation (for example, where Personal Data are being processed unlawfully, where you, as the data subject, contest the accuracy of the data, where you object to the processing based on our Company’s legitimate interests, etc.). To exercise this right, please submit a written request to us using the contact details provided in this Policy.

– Right to data portability. You have the right to request that we transfer your Personal Data, which we process by automated means, to another data controller. Subject to technical feasibility, we will provide the data you have requested to be transferred in a commonly used, machine-readable format. Where technically feasible and provided that doing so does not impose disproportionate time or financial costs on us, we will transmit the relevant data, together with the necessary metadata, directly to the data controller specified by you. To exercise this right, please submit a written request to us using the contact details provided in this Policy.

We do not make decisions based solely on automated processing of Personal Data, including profiling, that produce legal effects concerning you or similarly significantly affect you. Should such automated decision-making be implemented in the future, we will inform you thereof in accordance with the procedure and requirements set out in the Applicable Legislation.

  1. Security of your Personal Data.

Given that our Company is committed to protecting your interests as a data subject and ensuring the security of your Personal Data, we have implemented appropriate organisational and technical security measures designed to protect Personal Data against accidental or unlawful destruction, alteration, disclosure, as well as against any other unlawful processing. The measures implemented by the Company to ensure the security and confidentiality of Personal Data include, among other things, the protection of personnel, IT infrastructure, internal networks, office premises, and technical equipment. In any event, before using your personal computer or other devices, we recommend that you ensure that your internet connection and computer equipment are protected by certified software against malware and other cyber threats, and that firewalls and other security measures are properly enabled and maintained on your devices.

  1. Our contact details

If you would like to learn more about the Personal Data protection measures implemented by the Company, have any complaints, or wish to exercise your rights as a data subject, please contact us by telephone +370 37 490490, email address info@futuremilkfarm.com or central office address Vėrupės str. 1, Babtai, Kaunas district,

Changes to the Policy

There are currently no amendments or updates to this Policy.