- GENERAL PROVISIONS
1.2. Personal data is processed in accordance with the European Union General Data Protection Regulation No. 2016/679 (hereinafter referred to as the Regulation), the law on Legal Protection of Personal Data of Republic of Lithuania and other legal acts of the Republic of Lithuania.
1.3. The processing of personal data is subject to the principles of data processing set out in the Regulation.
- PURPOSES OF PROCESSING PERSONAL DATA
- Enforce the rights and implement the obligations arising from operating agreements;
- To fulfil the legal obligations established in the laws of the Republic of Lithuania (including requirements applicable in the field of tax, social insurance, provision of statistical data, control of budgetary institutions and other obligations established by legal acts);
- Properly identify the Data Subject in the Company’s information systems;
- Properly manage working relations;
- Inform the Data Subject of labour market questions (provide information on new employment, etc.).
- PROCESSED PERSONAL DATA
- Date of birth and personal code (for settlement accounting);
- Email address;
- Telephone number;
- Address of residence;
- Information on work activities and professional experience;
- Information on education, qualifications and educational institutions;
- Information about the place of employment;
- Information about the price of the services provided;
- Data on settlement accounts at the bank;
- Data on social networks used by a person.
The following cookies are used on the site to ensure more convenient and effective browsing of the website and to provide the information specified in this policy:
PHPSESSID, currency, language, gtag.js, analytics.js, ga.js.
- ENFORCEMENT OF DATA SUBJECTS' RIGHTS
- The data subject shall have all the rights set out in the Regulation:
1) the right to know (be informed) of the processing of its personal data;
2) the right of access to the processed personal data;
3) the right to request the rectification of personal data;
4) the right to request the deletion of personal data;
5) the right to restrict the processing of personal data;
6) the right to disagree with the processing of personal data;
7) the right to transfer personal data.
- In order to exercise its rights, the data subject must submit a request to the Company.
- The request must be signed, contain the name of the data subject, the information on the right and the scope of the request and the manner in which the data subject wishes to receive the reply.
- If the data subject does not specify the method of receiving the response, the information shall be provided in the manner chosen by the Company.
- The company has the right to ask the data subject to specify the submitted request if it handles a large amount of information relating to the data subject and is not able to submit it in full.
- The Company has the right to refuse to provide the requested information to the data subject or to refuse to perform the actions if:
1) the data subject’s request is unreasonable or disproportionate;
2) the data subject already has the requested information;
3) the provision of the information requested by the data subject is impossible or would involve disproportionate effort, working time and financial costs;
4) personal data must be protected in accordance with legal requirements;
5) if it violates the rights or legitimate interests of other persons.
- The Company examines the data subject’s request within 30 calendar days and informs about the actions taken or refused:
1) the data subject;
2) the recipients of the data on the request, if they have been provided with the personal data of the data subject. The recipients of the data are not informed when such presentation would involve disproportionate costs or would be not appropriate.
6. TERMS OF PERSONAL DATA STORAGE
6.1. The personal data of the data subjects shall be stored:
1) Up to 5 (five) years from the year the account was deleted;
2) When data storage is regulated by mandatory provisions of legal acts: within the timeframe set by legal acts of the Republic of Lithuania.
6.2. Data is deleted when it falls due. On this basis, the data subject is not informed additionally if the data is deleted.
7. PROCEDURES FOR HANDLING REQUESTS AND DISPUTE RESOLUTION
7.1. The data subject has the right to file a complaint against the Company’s actions (inaction) that violate the rights or legitimate interests of the data subject.
7.2. The complaint is submitted to the Company. The complaint may also be sent by e-mail.
7.3. Verbal or written appeals are not considered as complaints, where are not mentioned actions (inaction) of the Company, but is asked to explain, provide other information or desired documents.
7.4. The Company must examine the complaint and submit a response to the data subject within 30 calendar days.
7.5. The data subject may complain to the Public Data Protection Inspectorate (address: A. Juozapavičiaus str. 6, 09310 Vilnius, Lithuania, e-mail: email@example.com) within 3 months of receiving a response from the Company or within 3 months. from the date on which the time limit for submission of the reply expires.
7.6. The actions (inaction) of the Public Data Protection Inspectorate may be appealed to the court by the data subject in accordance with the law.
8. FINAL PROVISIONS