Privacy policy
What is this Privacy Policy about?
This Privacy Policy gives information to you, visitors of the website https://investlithuania.com/ (hereinafter the Website), about how the personal data that you provide to the Public Institution Invest Lithuania (legal entity ID 124013427, office address: Upės g. 23-1, Vilnius, Republic of Lithuania, hereinafter the Institution) is processed after visiting the Institution’s office or Website, or contacting the Institution by email or telephone.
Data protection officer: Mindaugas Valančius, email address: dap@investlithuania.com
What personal data do we collect from you?
After you visit the Website of the Institution, visit our office, or contact us by email or telephone, we may collect the following personal data:
- For the purposes of signing and executing contracts with clients, the name, surname, personal identification code, bank account number, and workplace of the Data Subject, and other information related to the conclusion and implementation of the contract, depending on the contract type. Such Personal Data shall be processed in order to facilitate implementation of the contract signed with the Data Subject, or in order to take actions prior to the signing of the contract at the request of the Data Subject, and shall be retained and stored for 10 (ten) years from the termination of the respective contract;
- For the purpose of administering our information database, the name, surname, company name, phone number, email address, position (title), and education record of the Data Subject. This Personal Data shall be processed with the consent of the Data Subject and shall be retained and stored for 10 (ten) years from the date of entry into the information database.
- For the purpose of the organisation and execution of public procurements, the name, surname, personal identification code, date of birth, address, phone number, and email address of the supplier participating in the tender. Dependent upon the object of purchase and the qualification requirements, other personal data may be required (this may include the verification of criminal records, checks on whether all tax-related obligations or any other obligations related to the object of the procurements have been fulfilled, and qualification requirements specified in the procurement documents). The name, surname, personal identification code, date of birth, address, email address, phone number, and bank account number of the successful bidder shall also be collected, along with a copy of their certificate of individual business activity or a copy of their business certification. The supplier recognised as the successful bidder may also be required to present the following: their CV, copies of their diplomas, other available certificates, details of the number of successfully completed contracts, criminal record certificates, and any certificates of settlement with the State Tax Inspectorate or the State Social Insurance Fund Board under the Ministry of Social Security and Labour etc. This Personal Data shall be processed owing to the necessity of implementing the contract signed with the Data Subject, or before taking any action prior to the conclusion of a contract at the request of the Data Subject and shall be retained and stored for 10 (ten) years from the termination of the respective contract.
- For the purpose of direct marketing, the name, surname, phone number, and email address of the Data Subject. This Personal Data shall be processed on the basis of legitimate interests related to fulfilling the purpose of operation assigned to The Organisation in its Articles of Association, namely, to attract foreign direct investment to the industrial and service sectors of the Republic of Lithuania, in particular to those segments which create a high added value, by disseminating information on the investment environment of Lithuania, and shall be retained and stored for 5 (five) years from the first contact with a person for the purpose of direct marketing.
- For the purpose of administering the database of candidates for a vacancy in The Organisation, and for the purpose of informing prospective candidates of vacancies with the aim of making a job offer in the future, the name, surname, date of birth, phone number, workplace, email address, residential address, and educational background of the Data Subject, plus details of the position(s) they applied to, the date of receipt of their CV, notes on their character, and data related to their occupational experience. Data related to their occupational experience may include their last place of work, the number of years they spent at that workplace, the position they occupied, other relevant occupational competences (such as foreign language skills, their reading level, the level of their written and spoken communication, and their IT skills). Other data such as their desired remuneration, and any other information provided in their CV, letter of reference, cover letter and (or) letter of application may also be collected. These details shall be processed on the basis of the Data Subject’s consent, and shall be retained and stored by The Organisation for 2 (two) years from the date on which consent is received;
- For the purpose of publicity activities, the image, name, surname, workplace, and position (title) of the Data Subject. This Personal Data shall be processed on the basis of the consent of the Data Subject and shall be retained and stored for 2 (two) years from the date on which consent is received;
- For the purpose of public information and awareness of the effectiveness of campaigns run to improve website marketing strategy (use of cookies), the IP addresses of website visitors, and data on the use of the website and state of subscription. This Personal Data shall be processed on the basis of the consent of the Data Subject and shall be retained and stored for 1 (one) year from the date on which consent is received;
- For the purpose of administering projects funded under the FDI tool Invest LT+, Smart Invest LT, the name, surname, position (title), workplace, email address, and phone number of the Data Subject, plus a link to their LinkedIn profile and data on their remuneration. This Personal Data shall be processed owing to the necessity of implementing the contract signed with the Data Subject, or to take actions prior to the conclusion of a contract at the request of the Data Subject, and shall be retained and stored for 10 (ten) years from the date of expiry of the contract;
- For the purpose of conducting statistical research, the name, surname, workplace, position (title), phone number, and email address of the Data Subject, along with information of a general nature on The Organisation, such as the number of its employees and the economic activities carried out. This Personal Data shall be processed on the basis of legitimate interests related to fulfilling the purpose of operation assigned to The Organisation as specified in its Articles of Association, namely, to attract foreign direct investments to the industrial and service sectors of the Republic of Lithuania, in particular to those segments which create a high added value, by disseminating information on the investment environment in Lithuania and, for the benefit of the public interest, by accumulating information on the investment environment of the Republic of Lithuania. Such data shall be retained and stored for 5 (five) years;
- For the purpose of event organisation, we may collect your name, surname, telephone number, workplace, position, email address, and your photograph. This data shall only be processed subject to your consent and shall be stored by the Institution for 2 (two) years (this constitutes the optimal period when such information may be relevant without the need to update it).
- For the purpose of implementing marketing campaigns for the improvement of the Website (for example, the use of cookies) we may collect the IP addresses and visit activity data of users of the Website. This data shall only be processed subject to the consent of the data subject. More information on the use of cookies is available in the Chapter entitled “Which cookies are used on this Website?” of this Privacy Policy found hereunder. This data shall only be processed subject to the consent of the data subject and shall be stored by the Institution for 1 (one) year.
- Any other personal data which you may provide to us at any time when interacting with us, which may include contacting use via email, letter or telephone, or visiting our office. This data shall only be processed subject to the consent of the data subject and shall be stored by the Institution for 2 (two) years.
- For the purpose of employment in a specific position in another company, institution or organisation, we may collect your name, surname, date of birth, telephone number, current workplace, email address, place of residence (address), educational record, job preferences, date of receipt of your curriculum vitae, your personal qualities as defined by you, your working experience (which includes your last workplace, the duration of service at that workplace and the positions held, and any other work experience), your knowledge of foreign languages (which includes languages, and levels of reading, writing and speaking), your ability to use different computer applications, any other data and motives, your desired salary, and any other information provided in your curriculum vitae and recommendation and/or motivation letter. This data shall only be processed subject to your consent and shall be stored for 2 (two) years after the expiry of the job advertisement.
How is your personal data processed?
Your personal data shall be processed in line with the requirements established by the Law on Legal Protection of Personal Data of the Republic of Lithuania and other relevant legal acts. Your personal data shall be processed responsibly and safely. Both in establishing measures for the processing of personal data and in the course of such data processing, the Institution shall implement the appropriate technical and organisational measures provided for in the aforementioned legal acts and intended for the protection of the personal data being processed against accidental or unauthorised destruction, damage, alteration, loss or disclosure, or any other unauthorised processing. The appropriate measures shall be established with consideration to threats that may arise due to the processing of personal data.
Which cookies are used on the Website?
A cookie refers to information transmitted by the internet server to the browser and then stored on the browser. This information is sent to the internet server each time the browser requests to open a page from the server. This allows the internet server to set and monitor the browser.
More information about the cookies used on the Website can be found here: https://investlithuania.com/cookie-policy
Use of your personal data provided to us via social media
All information provided by you to us via social media (including messages, the use of the fields Like and Follow, and other communication) is controlled by the controller of the social network.
Currently, we have accounts with the following social networks:
- Facebook -@Invest.Lithuania, whose privacy policy is available at https://www.facebook.com/privacy/explanation;
- LinkedIn – Invest Lithuania, Invest Lithuania Information Technology, Invest Lithuania Business Services, Invest Lithuania Manufacturing whose privacy policy is available at https://www.linkedin.com/legal/privacy-policy;
- Twitter – @Invest_LT, @investlt_gbs, @investLT_ICT, @investLT_MRO, @fintechlt whose privacy policy is available at https://twitter.com/en/privacy;
- Youtube – Invest Lithuania whose privacy policy is available at https://policies.google.com/privacy?hl=en#application.
We recommend that you read the privacy notices of third parties and contact the service providers directly should you have any questions concerning their use of your personal data.
Who can we disclose your personal data to?
We can disclose your personal data to personal data processors who provide services (perform works) for us and process your data on behalf of the Institution as the data controller, i.e. providers of information technologies services, auditors, lawyers, and consultants.
Data processors have the right to process personal data only in accordance with our instructions and to the extent necessary to perform the function required. When utilising data processors, we shall take all necessary measures to ensure that our data processors have implemented the appropriate organisational and technical measures to ensure the safety and to preserve the secrecy of personal data.
Your data may be transferred to state authorities and institutions, and other persons who carry out functions assigned to them by law.
What are your rights?
You have the right to:
- Submit to us a written request to provide information as to whether any data associated with you is being processed and, if yes, to allow you to familiarise yourself with your personal data and the following information: the purpose of such data processing; categories of personal data used; the data recipients to whom your data shall be or has already been disclosed, or the types of such data recipients; and, where possible, the anticipated storage period of your personal data or, if this information is not available, the criteria applied to establish this period;
- Request that any inaccurate data be corrected, or any incomplete personal data associated with you be added to;
- Request us to delete your personal data. Your rights notwithstanding, the right to request deletion of data is not absolute, and can be exercised when at least one of the following reasons are present: the personal data in question is no longer necessary for the attainment of the purposes for which they were collected or otherwise processed; you have decided to withdraw your consent to the processing of your personal data when this data is being processed exclusively based on your consent and there are no other grounds to process your personal data; your personal data was being processed unlawfully; when a duty is imposed on us to delete your data, in which case we your data must be deleted;
- Request to restrict the processing of your personal data when one of the following applies: you contest the accuracy of the data for the period during which we can check the accuracy of your personal data; the processing of your personal data is unlawful but you disagree with your data being deleted and instead ask that its use be restricted; we no longer need your data for the purposes of data processing, however, you need it to establish, exercise or defend legal claims. When the processing of your personal data is restricted, we may process such data, exclusive of storage, only subject to your consent or in seeking to establish, exercise or defend legal claims and/or protect your rights or those of other persons, or due to reasons of public interest;
- Withdraw your consent to the processing of your personal data when your personal data is being processed exclusively based on your consent;
- Request that we send your personal data that is being processed to another data controller, when this is technically feasible;
- Submit to us or the State Data Protection Inspectorate a complaint if you believe that your rights as a personal data subject are being and/or may be breached.
How can you exercise your rights?
To exercise the aforementioned your rights, please send your requests, complaints or demands to us in writing:
- By email to info@investlithuania.com;
- By post to Upės str. 23-1, Vilnius, Republic of Lithuania;
- Delivered in person to our office at Upės str. 23, Vilnius, Republic of Lithuania;
- By applying directly to the data protection officer of the Institution (contact details are provided above).
We shall reply to any requests, complaints or demands received in writing in accordance and within the terms established by the relevant legal acts. We aim to provide information to you as soon as possible, and not later than within 30 days from the receipt of your communication. If necessary, this period may be extended for and additional two months depending on the complexity and number of requests. The Institution shall inform you about any extension to the time needed within one month from the receipt of your communication and shall provide you with the reasons for the delay at the same time.
If, upon receipt of a request, complaint or demand the identity of the applicant raises any suspicions, we shall have the right to ask the applicant to produce an identity document and/or confirm their identity in accordance with the procedures established by the relevant laws and/or via electronic communications that allow for the proper identification of a person.
Should be we unable to provide you with the required information and/or you have any claims concerning our processing of your personal data, you shall have the right to apply to the State Data Protection Inspectorate and to file a complaint.
How shall we inform you of any changes to the Privacy policy?
We may update or modify this Privacy policy at any time. Such updated or modified Privacy policy shall come into force as of its publication on the Website. Therefore, you should check the Privacy policy on the Website regularly to ensure you accept the currently valid version of the Privacy policy.
After updating the Privacy policy, we shall inform you about changes that in our opinion are of material importance by publishing them on the Website. To find out when the Privacy policy was last updated, please check the “Update date” hereunder.
How can you contact us?
If you have any questions pertaining to the terms of the present Privacy policy, please contact us as per the information given below, by telephoning or sending an inquiry by email or registered post to:
PUBLIC INSTITUTION INVEST LITHUANIA
Legal entity ID: 124013427
Address: Upės str. 23, Vilnius, Republic of Lithuania
Tel. +370 52 627 438
Email info@investlithuania.com
Updated on: 12-11-2018