| Purpose of processing personal data |
Personal data processed |
How long the personal data is stored |
Legal basis for processing personal data |
| Organisation and conduct of public procurement |
Supplier’s representative: name, surname, personal identification number, title, telephone number, email address, qualification documents (curriculum vitae, experience, implemented contracts, certificates, criminal record certificate, solvency certificate, etc. where required) |
5 years after the end of the contract |
Legal obligation, Article 6(1)(c) of the GDPR
|
| Establishing and executing the Institution’s contracts with legal entities |
Representatives of the legal entity: name, surname, contact details (telephone number, email address, etc.), details of the legal entity represented, details of the contract concluded |
10 years after the end of the contract |
Legal obligation, Article 6(1)(c) of the GDPR
Legitimate interest, Article 6(1)(f) of the GDPR |
| Concluding and performing the Institution’s agreements with natural persons |
Representatives of natural persons: name, surname, contact details (telephone, email address, etc.), number of individual activity / business licence / farmer’s certificate, date of birth, details of contract concluded |
10 years after the end of the contract |
Legal obligation, Article 6(1)(c) of the GDPR
Legitimate interest, Article 6(1)(f) of the GDPR |
| Recruitment for vacant job positions |
Candidate’s: name, surname, email address, phone number, salary expectations, when they can start working, CV and other information provided by the candidate, information from the recruitment Institution / partner / labour exchange |
Until the end of the recruitment. With the data subject’s consent – up to 3 years |
Consent, Article 6(1)(a) of the GDPR
Conclusion and performance of a contract, Article 6(1)(2) of the GDPR |
| Administration of projects financed under the TUI Invest LT+, Smart Invest LT |
Name, surname, position, workplace, email address, phone number, LinkedIn account link, salary details |
10 years after the end of the contract |
Conclusion and performance of a contract, Article 6(1)(2) of the GDPR |
| Direct marketing |
Name, surname, email address, statistical information |
Until withdrawal of consent |
Legitimate interest, Article 6(1)(f) of the GDPR
Consent, Article 6(1)(a) of the GDPR |
| Managing a database of contacts of potential business partners |
Name, contact details, company information, other data provided by the potential investor |
Until withdrawal of consent |
Legitimate interest, Article 6(1)(f) of the GDPR
Consent, Article 6(1)(a) of the GDPR |
| Market research |
Depending on the specific market research conducted, the following information can be collected: name, surname, demographic information (gender, age, citizenship, country of residence, etc.), work experience information (employer information, experience, economic activity, position, etc.), contact information (phone number, email address, address, etc.), interview/survey information (video/audio recording with consent, notes, survey responses, etc.) |
Until withdrawal of consent
Until the research results are prepared and presented |
Consent, Article 6(1)(a) of the GDPR |
|
Events, seminars, webinars, training, hackathons, consulting and organising, disseminating statistical material
|
Participant’s: name, surname, telephone number, email, address, particulars of the organisation (name, address, etc.) which is being represented |
2 years after the end of the event / project |
Consent, Article 6(1)(a) of the GDPR
|
|
Collecting the accountability evidence for the European Union funds
|
Name, surname, represented organisation / company, address of the organisation / company represented, contact email address, photo / video material |
5 years after project completion |
Legal Obligation, Art. 6(1)(c) of the GDPR |
| Optimising website security, traffic and content |
Information about visitors to web pages collected using cookies |
In accordance with Google privacy policy |
Consent, Article 6(1)(a) of the GDPR
Legitimate interest, Article 6(1)(f) of the GDPR |
| Handling of requests and communication |
Name, surname, telephone, email, address, message |
10 years after receipt of the message |
Legitimate interest, Article 6(1)(f) of the GDPR |
| Facebook, LinkedIn, Instagram, Twitter data |
Data specified in the privacy policy of the social network |
Time limits specified in the privacy policy of a social network |
Consent, Article 6(1)(a) of the GDPR |
| Publicising the Institution’s activities |
Name, surname, position, email, phone number, organisation name, description |
Until withdrawal of consent |
Legitimate interest, Article 6(1)(f) of the GDPR
Consent, Article 6(1)(a) of the GDPR |
| Travel arrangements for partners |
Data of travelers: name, surname, personal identification number, date of birth, other passport or identity document data, contact data, travel information (travel purpose and route, place, dates and time, ticket, reservation, vehicle, baggage information, etc.), accommodation information (hotel information, reservations, etc.), other information that will be needed to provide travel organization services. |
10 years after the end of the contract |
Conclusion and performance of a contract, Article 6(1)(2) of the GDPR |
