Data protection policy

THE IMPLEMENTATION OF THE RIGHTS OF THE DATA SUBJECT

• Request to issue a permit to tranfer personal data to third countries – Privacy notice
• Provision of information or consultation – Privacy notice
• Registration of Data Protection Officers – Privacy notice
• Prior consultations – Privacy notice
• Notification on Personal Data Breaches – Privacy notice
• Complaint handling – Privacy notice
• Fulfilment of functions Data Protection Officer of the Inspectorate – Privacy notice
• Newsletters – Privacy notice

THE IMPLEMENTATION OF THE RIGHTS OF THE DATA SUBJECT

What rights do you have?

You, as the data subject, shall have the right to address the Inspectorate regarding the issues associated with the processing of your personal data, i.e., you shall have these rights:
1. The right to information about the data processing;
2.The right of access;
3.The right to rectification;
4. The right to erase (“the right to be forgotten”);
5. The right to restriction of processing;
6. The right to data portability *;
7. The right to object**;
8. The right to withdraw consent***.

* This right is applicable in those cases when the Inspectorate processes your personal data on the basis of your consent or contract concluded with you.
** This right is applicable in those cases when the Inspectorate processes your personal data for the performance of a public task or in accordance to its lawful interests.
*** This right is applicable in those cases when the Inspectorate processes your personal data on the basis of your consent, for example, for the purpose of sending newsletters.

Please be informed that in case you object to the decision of the Inspectorate, which was adopted in respect of your request on data subject’s rights, you are entitled to lodge a complaint to Vilnius Regional Administrative Court.

How can you address us?

In order to exercise your rights under the GDPR, you may address the Inspectorate with a written request (free form or by using the recommended form), confirming your identity. If there is no possibility to identify the applicant, the request will not be assessed.
The requests regarding the processing of your personal data may be submitted to the Inspectorate:
1. Personally, to the Inspectorate at the address: 17 L. Sapiegos Str., LT-10312 Vilnius;
2. Via post or through couriers at the address: 17 L. Sapiegos Str., LT-10312 Vilnius;
3. Via electronic delivery box (e-delivery);
4. Via E-mail: [email protected] or [email protected].

In case of the right to be informed about the processing of personal data (general information), you may ask the Inspectorate employee handling the correspondence or via the above-mentioned contacts.

In case of the right to withdraw your consent regarding the processing of personal data for the purpose of sending the newsletters, you may exercise your will through one of these methods:
1. In the received E-Mail, by clicking on the “Naujienlaiškio prenumeratos atsisakymas” (“Cancellation of the Newsletter Subscription”);
2. By addressing the Inspectorate from the E-Mail address, which was registered for the newsletters.   

Requirements for the request, when it is submitted in writing:
1. The request must be legible;
2. The request must be signed****;
3. Your date of birth and the contact details for the communication purposes shall be indicated in the request*****;
4. The right You wish to exercise and, when applicable, the arguments and documents substantiating this request, shall be indicated in the request;
5. The methods through which You wish to receive the answer (for example, residence address; address for the correspondence; the E-Mail address, e-delivery box or at the Inspectorate’s premises);
6. If the representative is submitting the request on Your behalf, not only the above data must be indicated in the request, but also Your representative’s the name, surname, and contact details for the communication purposes and/or contact through which the representative wishes to receive an answer regarding the request submitted.
**** You do not need to sign the request for information on the processing of personal data or in case you want to exercise Your right to withdraw the consent to receive the Inspectorate’s newsletters.
***** When the Inspectorate does not process your name, surname and/or date of birth, you do not need to indicate them in the request, however, you must submit other data, from which you can be unambiguously identified and which can be verified by the Inspectorate.

How can you confirm your identity during the submission of the request?

Identification methods:
1.    When submitting the request at the Inspectorate: by submitting the identification document to the employee of the Inspectorate;
2.    When delivering the request via post or courier: by adding the copy of the identification document*** ***;
3.    When submitting the request via E-mail: the request must be electronically signed (for more information see the sub-chapter “Can you submit the request via E-mail?”).

When submitting the request via the representative: additionally, the document confirming the representation a copy thereof approved in accordance with the procedure laid down by legal acts.
*** *** If the Inspectorate does not process your personal data contained in the personal document, you must submit other kind of information, from which you may be unambiguously identified, which the Inspectorate is able to inspect.

Can you submit the request via E-mail?

You can, however, the requests submitted this way must be signed by a qualified e-signature or be compiled through electronic means allowing to ensure the integrity and indispensability of the text (except if you want to withdraw your consent to receive the Inspectorate’s newsletters. For more information see the sub-chapter “How can you address us?”). The signing of the request with a qualified e-signature allows the Inspectorate to properly identify you and ensure that the information you request or information on the actions (refusal to act) in relation to your request is only to the person to whom it is addressed, i.e. to you.

If you are a citizen of a foreign state and you submit the request via e-mail and do not have any objective capabilities to confirm your identity in accordance to the procedure indicated above, and, due to objective reasons, you cannot submit the request by at the premises of the Inspectorate or to send the request via post or courier, then, by submitting the request via e-mail, you must confirm your identity by adding the copy of your identification document or, if the Inspectorate does not process your personal data contained in the identification document, other kind of information, from which you can be unambiguously identified and which can be verified by the Inspectorate, shall be submitted.

The scanned copies of signed requests or request submitted via e-mail and not signed by qualified e-signature do not comply with the requirements laid down in legal acts. Submission of such request may be an obstacle to the acceptance of your request, thus, if you do not have a qualified e-signature, you submit the request in person or via post.

Within which time the Inspectorate will answer you?

Your requests for the exercise of your rights under the GDPR shall be answered within one month. Depending on the complexity and number of the requests, this period may be extended by 2 months.

For more information on the exercise of the rights of data subjects, please refer to the Rules on the Implementation of the Rights of the Data Subject in the Inspectorate (in Lithuanian only).