PRIVACY POLICY

What is this Privacy Policy about?

This Privacy Policy gives information to you, visitors of the website https://eubluecard.lt/ (hereinafter the Website), about how the personal data that you provide to the Public Institution Invest Lithuania (legal entity ID 124013427, office address: Upės g. 23, Vilnius, Republic of Lithuania, hereinafter the Institution) after visiting the Institution’s office or Website, or contacting the Institution by email or telephone.

What personal data do we collect from you?

After you visit the Website of the Institution, visit our office, or contact us by email or telephone, we may collect the following personal data:

• For the purpose of implementing marketing campaigns for the improvement of the Website (for example, the use of cookies) we may collect the IP addresses and visit activity data of users of the Website. This data shall only be processed subject to the consent of the data subject. More information on the use of cookies is available in the Chapter entitled “Which cookies are used on this Website?” of this Privacy Policy found hereunder.

• Any other personal data which you may provide to us at any time when interacting with us, which may include contacting use via email, letter or telephone, or visiting our office. This data shall only be processed subject to the consent of the data subject and shall be stored by the Institution for 2 (two) years.

How is your personal data processed?

Your personal data shall be processed in line with the requirements established by the Law on Legal Protection of Personal Data of the Republic of Lithuania and other relevant legal acts. Your personal data shall be processed responsibly and safely. Both in establishing measures for the processing of personal data and in the course of such data processing, the Institution shall implement the appropriate technical and organisational measures provided for in the aforementioned legal acts and intended for the protection of the personal data being processed against accidental or unauthorised destruction, damage, alteration, loss or disclosure, or any other unauthorised processing. The appropriate measures shall be established with consideration to threats that may arise due to the processing of personal data.

Which cookies are used on the Website?

A cookie refers to information transmitted by the internet server to the browser and then stored on the browser. This information is sent to the internet server each time the browser requests to open a page from the server. This allows the internet server to set and monitor the browser.

More information about the cookies used on the Website can be found here:

Who can we disclose your personal data to?

We can disclose your personal data to personal data processors who provide services (perform works) for us and process your data on behalf of the Institution as the data controller, i.e. providers of information technologies services, auditors, lawyers, and consultants.

Data processors have the right to process personal data only in accordance with our instructions and to the extent necessary to perform the function required. When utilising data processors, we shall take all necessary measures to ensure that our data processors have implemented the appropriate organisational and technical measures to ensure the safety and to preserve the secrecy of personal data.

Your data may be transferred to state authorities and institutions, and other persons who carry out functions assigned to them by law.

What are your rights?

You have the right to:

• Submit to us a written request to provide information as to whether any data associated with you is being processed and, if yes, to allow you to familiarise yourself with your personal data and the following information: the purpose of such data processing; categories of personal data used; the data recipients to whom your data shall be or has already been disclosed, or the types of such data recipients; and, where possible, the anticipated storage period of your personal data or, if this information is not available, the criteria applied to establish this period;

• Request that any inaccurate data be corrected, or any incomplete personal data associated with you be added to;

• Request us to delete your personal data. Your rights notwithstanding, the right to request deletion of data is not absolute, and can be exercised when at least one of the following reasons are present: the personal data in question is no longer necessary for the attainment of the purposes for which they were collected or otherwise processed; you have decided to withdraw your consent to the processing of your personal data when this data is being processed exclusively based on your consent and there are no other grounds to process your personal data; your personal data was being processed unlawfully; when a duty is imposed on us to delete your data, in which case we your data must be deleted;

• Request to restrict the processing of your personal data when one of the following applies: you contest the accuracy of the data for the period during which we can check the accuracy of your personal data; the processing of your personal data is unlawful but you disagree with your data being deleted and instead ask that its use be restricted; we no longer need your data for the purposes of data processing, however, you need it to establish, exercise or defend legal claims. When the processing of your personal data is restricted, we may process such data, exclusive of storage, only subject to your consent or in seeking to establish, exercise or defend legal claims and/or protect your rights or those of other persons, or due to reasons of public interest;

• Withdraw your consent to the processing of your personal data when your personal data is being processed exclusively based on your consent;

• Request that we send your personal data that is being processed to another data controller, when this is technically feasible;

• Submit to us or the State Data Protection Inspectorate a complaint if you believe that your rights as a personal data subject are being and/or may be breached.

How can you exercise your rights?

To exercise the aforementioned your rights, please send your requests, complaints or demands to us in writing:

• By email to info@investlithuania.com;

• By post to Upės g. 23, Vilnius, Republic of Lithuania;

• Delivered in person to our office at Upės g. 23, Vilnius, Republic of Lithuania;

We shall reply to any requests, complaints or demands received in writing in accordance and within the terms established by the relevant legal acts. We aim to provide information to you as soon as possible, and not later than within 30 days from the receipt of your communication.

If, upon receipt of a request, complaint or demand the identity of the applicant raises any suspicions, we shall have the right to ask the applicant to produce an identity document and/or confirm their identity in accordance with the procedures established by the relevant laws and/or via electronic communications that allow for the proper identification of a person.

Should be we unable to provide you with the required information and/or you have any claims concerning our processing of your personal data, you shall have the right to apply to the State Data Protection Inspectorate and to file a complaint.

How shall we inform you of any changes to the Privacy policy?

We may update or modify this Privacy policy at any time. Such updated or modified Privacy policy shall come into force as of its publication on the Website. Therefore, you should check the Privacy policy on the the Website regularly to ensure you accept the currently valid version of the Privacy policy.

After updating the Privacy policy, we shall inform you about changes that in our opinion are of material importance by publishing them on the Website. To find out when the Privacy policy was last updated, please check the “Update date” hereunder.

How can you contact us?

If you have any questions pertaining to the terms of the present Privacy policy, please contact us as per the information given below, by telephoning or sending an inquiry by email or registered post to:

PUBLIC INSTITUTION INVEST LITHUANIA

Legal entity ID: 124013427

Address: Upės g. 23, Vilnius, Republic of Lithuania

Tel. +370 52 627 438

Email info@investlithuania.com

Updated on: 12-11-2018