Privacy notice

• The right to be informed in a transparent way, including the rights you have. We inform you by means of this Privacy Notice.
• The right to be informed about the processing of your data, and to know what data we process about you. You can request a copy of your data by contacting the DPO.
• The right to data rectification and erasure. If you find that your data is incomplete or inaccurate, you can contact the DPO and we will look into your case. You can also ask us to remove your data. We will be able to do this if there are no other legal acts that oblige us to keep the data.
• The right to restriction of processing. For example, until we clarify inaccuracies.
• The right to data portability.
• The right to object to our processing of your data and to withdraw your consent at any time.
• The right to object to automated decision-making, including profiling, which has significant consequences for you. The Institution does not currently apply such decision-making.

Please note that in order to exercise your rights, we will need to establish your identity. Also, if a request is of a large volume, we may charge a fee for its fulfilment.

When the Institution acts as a data processor, we follow the data controller’s instructions and the provisions of the data processing agreement.

You are responsible for ensuring that the data you provide to us is accurate, correct and complete. If the data you have provided changes, you must inform us immediately by email. We will not be liable in any event for any damage caused to you as a result of you providing incorrect or incomplete personal data or failing to inform us of any changes to such data.

Information published on the Institution’s websites, its copying, reproduction, links to it are allowed only with written permission of the Institution. It can be obtained by applying to info@investlithuania.com. This permission shall not imply any transfer of rights in the material.

We may transfer your personal data when:

• You have given your consent to the transfer;
• We must do so in the manner prescribed by laws when required by a public authority / law enforcement body / pre-trial investigation authority, court or their representatives, when suspecting a criminal offence, in the event of a dispute, e.g., by the STI, the Centre of Registers, the FCIS, the Police, the Disputes Commission, criminal intelligence authorities, etc.
• We use a data processor or partners for certain data processing operations:
  • audit firms;
  • consultants for operations, security, process, etc;
  • insurance companies;
  • companies providing information technology services;
  • publicity and media service companies;
  • archive service providers;
  • accounting service providers;
  • communications service providers;
  • providers of physical security services;
  • parties concerned – in the case of reorganisation or other restructuring of the Institution;
  • Travel organizing companies, hotels, etc.
  • similar operations
• and in other cases when the data recipient has a lawful basis for processing your personal data.

All your data shall be processed within the European Economic Community and shall not be transferred to third countries. If it is necessary to transfer data to other countries, we may rely on the European Commission’s adequacy decision (if the European Commission decides that the adequate level of data protection is ensured in the specific country where the data recipient is established and/or carries out its business). Other mechanisms may also be used to ensure adequate data protection, such as standard contractual clauses enshrined in legal acts regulating personal data protection.

If you have any questions or want to exercise your rights, you can contact us in any way that suits you:

• By email: dap@investlithuania.com
• By post to the address: VšĮ Investuok Lietuvoje, Upės g. 23-1, LT-08128 Vilnius, Lithuania
• Visiting our head office at the address: VšĮ Investuok Lietuvoje, Upės g. 23-1, LT-08128 Vilnius, Lithuania

Please note that in order to implement your rights, we will need to establish your identity. If the scope of the request is unjustified or repetitive, we may charge you a fee for its fulfilment. Possible ways to verify your identity:

• By submitting a document directly to the Institution and presenting a personal identity document to Institution employee;
• If the request is submitted by post or via persons providing postal or other parcel delivery services: the application must be accompanied by a copy of the personal identity document certified by a notary public or in other manner established by legal acts;
• If the request is submitted by email: it shall be signed with a qualified electronic signature. Signing the request with a qualified electronic signature allows the Institution properly identify the sender and ensure that the requested information or information on the fulfilment (refusal) of the requested action is only disclosed to the intended recipient.

We will always try to find a mutually satisfactory solution, yet if you still have concerns about our acts or omissions, you can always contact the State Data Protection Inspectorate (details at https://vdai.lrv.lt).

We regularly review this Privacy Notice for compliance with legal acts and personal data processed by the Institution.

We may update or amend this Privacy Notice at any time. Such updated or amended Privacy Notice shall enter into force from the date of its posting on our website.

This Privacy Notice was last modified on 11 August 2023.