This Privacy Policy (hereinafter the Privacy Policy) regulates the principles of collection, processing and storage of personal data of any potential and existing customers of UAB Vlantana (hereinafter the Company) who are natural persons, as well as representatives and/or employees of customers who are legal persons visiting the website www.vlantana.eu and/or acquiring the services provided by the Company, as well as job candidates and business partners, and sets out the purposes and means of the processing of their personal data.
The Privacy Policy was drawn up pursuant to the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter the Regulation).
Privacy Policy
This Privacy Policy is to notify any potential and existing customers of UAB Vlantana who are natural persons, as well as representatives and/or employees of customers who are legal persons, job candidates, and business partners about the processing of their personal data.
Definitions
“Personal data” means any information relating to an identified or identifiable natural person (“data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
“Personal data breach” means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed.
“Data subject” means a natural person who is a visitor to the Company website, a buyer of the services provided by the Company (potential or existing customer who is a natural person, including a representative and/or employee of a customer who is a legal person), a job candidate or a business partner (including a representative and/or an employee of a business partner who is a legal person) whose personal data is collected and processed by the Company.
“Consent of the data subject” means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.
“Rights of the data subject” means the ability of the data subject to participate in and control the activities of the controller and/or processor where his or her personal data are processed: to know, to be informed about the processing of his or her personal data by the Company; to have access to his or her personal data processed by the Company and find out how they are processed; to request the rectification, destruction of his or her personal data, except for storage, or suspension of the processing of his or her personal data if the data are processed in breach of the provisions of legislation; to object to the processing of his or her personal data; to request the erasure of his or her personal data; to receive data related to him or her which he or she has submitted to the controller; to lodge a complaint with the supervisory authority (the State Data Protection Inspectorate).
“Processing” means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
“Automated processing” means any processing operations carried out in whole or in part by automatic means. Those include any information and communication technologies which enable the processing of personal data, such as computers, communication networks, etc.
“Controller” means a natural or legal person, public authority, agency or another body that, alone or jointly with others, determines the purposes and means of the data processing. In this case:
“Processor” means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
“Joint controllers” means two or more controllers which jointly determine the purposes and means of personal data processing. In this case, the Company, together with other companies in the group, use common databases of information systems and manage personal data as joint controllers when exchanging them. An agreement shall be concluded between the joint controllers setting out, in a transparent manner, their respective responsibilities for the exercise of the functions established in accordance with the Regulation, defining the respective actual functions of the joint controllers and their relations with data subjects. The essence of the arrangement shall be made available to the data subject upon his or her written request. The data subject may exercise his or her rights under the Regulation in respect of and against each of the controllers.
“Recipient” means a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities which, under the European Union or Member State law, may receive personal data in the course of a specific investigation shall not be regarded as recipients of the data.
“Cookie” means a small text file saved by a website on your computer or mobile device when you visit that website.
Other terms used in this Privacy Policy shall be understood as defined in the Regulation and other legal acts regulating the processing of personal data.
“Personal data breach” means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed.
“Data subject” means a natural person who is a visitor to the Company website, a buyer of the services provided by the Company (potential or existing customer who is a natural person, including a representative and/or employee of a customer who is a legal person), a job candidate or a business partner (including a representative and/or an employee of a business partner who is a legal person) whose personal data is collected and processed by the Company.
“Consent of the data subject” means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.
“Rights of the data subject” means the ability of the data subject to participate in and control the activities of the controller and/or processor where his or her personal data are processed: to know, to be informed about the processing of his or her personal data by the Company; to have access to his or her personal data processed by the Company and find out how they are processed; to request the rectification, destruction of his or her personal data, except for storage, or suspension of the processing of his or her personal data if the data are processed in breach of the provisions of legislation; to object to the processing of his or her personal data; to request the erasure of his or her personal data; to receive data related to him or her which he or she has submitted to the controller; to lodge a complaint with the supervisory authority (the State Data Protection Inspectorate).
“Processing” means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
“Automated processing” means any processing operations carried out in whole or in part by automatic means. Those include any information and communication technologies which enable the processing of personal data, such as computers, communication networks, etc.
“Controller” means a natural or legal person, public authority, agency or another body that, alone or jointly with others, determines the purposes and means of the data processing. In this case:
- UAB Vlantana, legal person number 163377040, with its address at Dvaro g. 1, Gobergiškė village, 92498 Klaipėdos district municipality, telephone No +370 46 416505, e-mail office@vlantana.lt;
“Processor” means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
“Joint controllers” means two or more controllers which jointly determine the purposes and means of personal data processing. In this case, the Company, together with other companies in the group, use common databases of information systems and manage personal data as joint controllers when exchanging them. An agreement shall be concluded between the joint controllers setting out, in a transparent manner, their respective responsibilities for the exercise of the functions established in accordance with the Regulation, defining the respective actual functions of the joint controllers and their relations with data subjects. The essence of the arrangement shall be made available to the data subject upon his or her written request. The data subject may exercise his or her rights under the Regulation in respect of and against each of the controllers.
“Recipient” means a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities which, under the European Union or Member State law, may receive personal data in the course of a specific investigation shall not be regarded as recipients of the data.
“Cookie” means a small text file saved by a website on your computer or mobile device when you visit that website.
Other terms used in this Privacy Policy shall be understood as defined in the Regulation and other legal acts regulating the processing of personal data.
Personal Data Processing Principles
When processing your personal data, the Company adheres to the following principles:
- The Company processes personal data exclusively for legitimate purposes defined in this Privacy Policy and does not further process them in a manner incompatible with those purposes (purpose limitation principle);
- Personal data are processed in an accurate, fair and lawful manner in accordance with the requirements of the legislation (lawfulness, fairness and transparency principle);
- The Company processes personal data in such a way that the personal data are accurate and constantly updated in case of any changes thereto (accuracy principle);
- The Company carries out the processing of personal data only to the extent necessary to achieve the purposes of the processing of personal data (data minimisation principle);Personal data are stored in a form that permits the identification of data subjects for no longer than it is necessary for the purposes for which the personal data were collected and processed (storage limitation principle);
- In the course of processing of the personal data, the Company ensures appropriate security of the personal data, including the protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical and organisational measures (integrity and confidentiality principle);
- The Company is responsible for compliance with the principles set forth in this Privacy Policy and must be able to demonstrate compliance with them (accountability principle).
Purposes and Legal Bases of Personal Data Processing
The Company processes your personal data as follows:
| Purpose of processing | Legal basis | Processed personal data | Storage terms * |
|---|---|---|---|
| for the purpose of candidate selection and internal administration | on the basis of legislation and/or consent | processes the following personal data of you as a job candidate: name, surname, telephone number, e-mail address, data on education and qualifications as well as other personal data contained in your CV and description of professional activities, and/or data to be processed by the Company due to an obligation laid down on it by any laws or other regulations | until the end of selection for the job vacancy, and then, if the candidate was not selected, the selection data are destroyed. Personal data of the successful candidate are stored in his or her personal file for the storage periods of the personal data of employees established in the legislation. If you have not been selected, your personal data may be stored with your consent for 3 (three) years after the completion of the selection for the purpose of notifying you about any vacancies in the Company |
| for the purpose of concluding and executing a service agreement and internal administration, including, but not limited to, the accounting of the Company business partners and maintaining proper communication with them | on the basis of a service agreement and legitimate interest | processes the following personal data of you as a contractor: name, surname, personal number, date of birth, address for correspondence, position, e-mail address, telephone number, copy of individual activity certificate, VAT number, bank account number | the entire period of performance of the service agreement and 10 (ten) years after the expiry of the agreement |
| on the basis of a legitimate interest | processes the following personal data of you as a representative and/or an employee of a contractor (legal person): vname, surname, position, work e-mail address and work telephone number, signature and other personal data submitted by you and/or data to be processed by the Company due to an obligation laid down on it by any laws or other regulations | ||
| for the purpose of provision of services, including, but not limited to, the administration of orders for services, conclusion of service agreements, accounting and performance of contractual obligations, as well as the administration of customer payments, maintenance of appropriate communication with them, coordination of meetings, performance of internal and external audits, and fulfilment of legal requirements | on the basis of a service agreement and legitimate interest | processes the following personal data of you as a customer who is provided any cargo, including intermodal cargo, transportation services: name, surname, personal number, place of residence, telephone number, e-mail address, address for correspondence, VAT number and other personal data submitted by you submit and/or data to be processed by the Company due to an obligation laid down on it by any laws or other regulations | the entire period of performance of the service agreement and 10 (ten) years after the expiry of the agreement |
| on the basis of a legitimate interest | processes the following personal data of you as a representative and/or an employee of a customer (legal person) who is provided any cargo, including intermodal cargo, transportation, truck wash and/or warehousing services: name, surname, position, work e-mail address, work telephone number and other personal data submitted by you or the Company customer (legal person) and/or data to be processed by the Company due to an obligation laid down on it by any laws or other regulations | ||
| on the basis of a service agreement and legitimate interest | processes the following personal data of you as a student of the Driver Training Centre: name, surname, date of birth, personal number, address of residence, e-mail address, telephone number, signature, acquired qualification, assessment of theoretical and practical skills, copy of identity document and driver’s medical examination certificate, image and other personal data submitted by you and/or data to be processed by the Company due to an obligation laid down on it by any laws or other regulations | ||
| on the basis of a legitimate interest | processes the following personal data of you as a representative and/or an employee of a customer (legal person) who is provided the Driver Training Centre services: name, surname, position, personal number, e-mail address, telephone number, signature, acquired qualification, assessment of theoretical and practical skills, copy of identity document and driver’s medical examination certificate, image and other personal data submitted by you or the Company customer (legal person) and/or data to be processed by the Company due to an obligation laid down on it by any laws or other regulations | ||
| for the purpose of provision of accommodation services, including, but not limited to, the accounting of motel customers, registration of advance bookings of accommodation services, provision of information on the bookings, filling of registration cards, customer service, provision of additional beds, the administration of customer payments and debt management, as well as the maintenance of proper communication with them and the fulfilment of legal requirements | on the basis of the legislation, agreement, consent and/or legitimate interest | processes the following personal data of you as a person provided any accommodation services: address of residence, date of birth, identity document number, nationality of the person to be accommodated and the state that issued the identity document, names of the accompanying spouse and/or minor child(ren), dates of check in and check out, duration of stay at the motel and room number, payable amount, type of payment, payment card data, vehicle licence plate number, other personal data submitted by you and/or data to be processed by the Company due to an obligation laid down on it by any laws or other regulations | 5 (five) years as of the date of booking |
| for the purpose of providing catering services | on the basis of a legitimate interest | processes the following personal data of you as a representative and/or an employee of a customer (legal person) provided catering services: name, surname, position, work e-mail address, work telephone number | for the period necessary to achieve the purposes for which data are processed and in accordance with the requirements for the storage of such data laid down by law, statute of limitations for bringing or defending legal claims and, where such claims are brought, for the period necessary for that purpose |
| for the purpose of issuing a gas station discount card, issuing accounting documents and declaring the purchase of goods to public authorities, including but not limited to, the issuing and administration of VAT invoices for purchases of goods and/or services | on the basis of legislation and/or consent | processes the following personal data of you as a customer provided the gas station services: name, surname, address of residence, telephone number, e-mail address, VAT number, sole proprietorship number, number of business certificate or individual activity certificate, data of goods and/or services, signature, other personal data submitted by you and/or data to be processed by the Company due to an obligation laid down on it by any laws or other regulations | the entire period of performance of the service agreement and 10 (ten) years after the expiry of the agreement |
| on the basis of a legitimate interest | processes the following personal data of you as a representative and/or an employee of a customer (legal person) provided the gas station services: name, surname, position, work e-mail address, work telephone number, signature and other personal data submitted by you or the Company customer, and/or data to be processed by the Company due to an obligation laid down on it by any laws or other regulations | ||
| for the purpose of sale of second-hand vehicles, including, but not limited to, the conclusion of purchase and sale agreements, fulfilment of accounting and contractual obligations, administration of buyers’ payments, maintenance of appropriate communication with them, performance of internal and external audits, fulfilment of legal requirements, and prevention of money laundering and terrorist financing | on the basis of a purchase and sale agreement, legislation and/or legitimate interest | processes the following personal data of you as a buyer of second-hand vehicles: name, surname, personal number, address of residence, telephone number, e-mail address, signature, identity document number and date of issue, copy of identity document, method of payment for the goods and information of performed payment, name and price of the item of goods, and other personal data submitted by you and/or data to be processed by the Company due to an obligation laid down on it by any laws or other regulations | the entire period of performance of the purchase and sale agreement and 10 (ten) years after the expiry of the agreement |
| on the basis of a legitimate interest | processes the following personal data of you as an authorised representative of a buyer of second-hand vehicles (natural person): name, surname, personal number, address for correspondence, telephone number, e-mail address, signature, identity document number and date of issue, copy of identity document, and other personal data submitted by you and/or data to be processed by the Company due to an obligation laid down on it by any laws or other regulations | ||
| on the basis of a legitimate interest | processes the following personal data of you as a representative and/or an employee of a buyer of second-hand vehicles (legal person): name, surname, position, personal number, work e-mail address, work telephone number, signature, identity document number and date of issue, copy of identity document, and other personal data submitted by you, the Company buyer (legal person), and/or data to be processed by the Company due to an obligation laid down on it by any laws or other regulations | ||
| for the purpose of administration of requests and/or complaints, including, but not limited to, handling thereof and the preparation of replies thereto, as well as the assurance of quality of the services provided | on the basis of consent and/or legitimate interest | processes the following personal data of you as a person submitting a request and/or complaint: name, surname, address for correspondence, telephone number, e-mail address and other data contained in your request and/or complaint | 1 (one) year after the date of examination of the request or complaint and/or submission of the response |
| for the purpose of administration of inquiries submitted by e-mail, telephone, via the Company website or using other means of communication, including, but not limited to, handling thereof and the preparation of replies thereto | on the basis of consent | processes the following personal data of you as a person submitting an inquiry: name, e-mail address and other personal data submitted in the inquiry | year after the date of examination of the inquiry and/or submission of the response |
| for the purpose of proper management and administration of the website, including, but not limited to, ensuring its functioning and security and collection of statistical information | on the basis of a legitimate interest (in the case of necessary cookies) and consent (in the case of statistical cookies) | processes the following personal data of you as a person visiting the Company website: unique, randomly generated identifier, time of login, network and location data | storage terms are described in detail in the Cookie Policy and Cookie Setting sections of the website |
| for the purpose of ensuring the security of employees, customers and other visitors of the Company and the Company assets, as well as clarifying the circumstances of the incidents | on the basis of a legitimate interest | processes the following personal data of persons entering the field of view of cameras: įimage, sound, and location of data subjects entering the field of view of cameras | only for as long as necessary to achieve the established purposes, but no longer than 60 (sixty) days, after which the video is automatically deleted and a new video is stored in its place. The company does not make any copies of the video data, except when it is necessary to clarify the circumstances of certain incidents, in which case a copy of the video may be stored until the circumstances of a particular incident have been investigated |
Collection and Processing of Personal Data
Personal data are collected directly from you and/or the Company’s customer or contractor (legal entity) (in cases where you are its representative and/or employee) at the time of placing an order and concluding a service contract, visiting the website, submitting an inquiry via the website, contacting the Company by phone, e-mail or other means of communication.
The Company collects personal data of you as a job candidate directly from you when you send your CV or make it public, as well as from entities providing job search, recruitment and/or mediation services, including, but not limited to, employment agencies, job search websites and/or specialised career social networks.
The Company collects personal data of you as a person who is provided with accommodation services directly from you or from entities operating the booking systems.
Your video data are obtained from the video surveillance and recording hardware and software of UAB Vlantana. Video surveillance of UAB Vlantana is carried out using stationary, rotating and mobile video cameras installed in the lobby of the Company administration, motel cafe, gas station, AMIC (Alarm, Monitoring and Intervention Center) room, night watchmen’s room, laundry, document division, warehouses, refrigerator, garage parts warehouse and garage, as well as the outdoor area: near the gas station, motel and the rest of the territory within the perimeter at Dvaro g. 1, Gobergiškė village, Klaipeda district municipality, and in the Company warehouses between the racks, ramps, in common warehouse areas and outdoor area at Dvaro g. 2, Gobergiškė village, Klaipeda district municipality, as well as in the site territory within the perimeter at Vilniaus pl. 28, 30, Gobergiškė village, Klaipeda district municipality.
Where your consent is required for the processing of your personal data, it is expressed by your active actions, i.e. by you contacting the Company with an inquiry, ticking the consent box or clicking the consent button before submitting your personal data electronically, as well as by responding to the e-mail sent to you by the Company indicating that you give your consent.
Where the Company processes your personal data on the basis of consent, you have the right to withdraw your consent to the processing of personal data at any time, without affecting the lawfulness of processing based on consent before its withdrawal. The provided consent may be withdrawn by contacting the Company by e-mail gdpr@vlantana.lt.
In all cases, you may choose not to provide the Company with certain personal data, but in this case you may be limited in obtaining the services provided by the Company.
Your personal data processed by the Company will be processed solely by persons for require them for the performance of their work functions and/or contractual obligations, and only when it is necessary in order to achieve the purposes specified in this Privacy Policy.
Regardless of how your personal data have been collected, they are stored only to the extent and only as long as it is necessary to achieve the established purposes, but at least for the period provided in the current version of the Index for the Storage of General Documents approved by Order No V-100 of the Chief Archivist of Lithuania of 9 March 2011, other legal acts regulating the Company internal procedures, and the Company internal documents.
Upon the expiry of period of storage of your personal data or the documents where your personal data are indicated, the personal data and/or documents will be destroyed in such a way that they cannot be recovered and their contents cannot be identified.
The Company collects personal data of you as a job candidate directly from you when you send your CV or make it public, as well as from entities providing job search, recruitment and/or mediation services, including, but not limited to, employment agencies, job search websites and/or specialised career social networks.
The Company collects personal data of you as a person who is provided with accommodation services directly from you or from entities operating the booking systems.
Your video data are obtained from the video surveillance and recording hardware and software of UAB Vlantana. Video surveillance of UAB Vlantana is carried out using stationary, rotating and mobile video cameras installed in the lobby of the Company administration, motel cafe, gas station, AMIC (Alarm, Monitoring and Intervention Center) room, night watchmen’s room, laundry, document division, warehouses, refrigerator, garage parts warehouse and garage, as well as the outdoor area: near the gas station, motel and the rest of the territory within the perimeter at Dvaro g. 1, Gobergiškė village, Klaipeda district municipality, and in the Company warehouses between the racks, ramps, in common warehouse areas and outdoor area at Dvaro g. 2, Gobergiškė village, Klaipeda district municipality, as well as in the site territory within the perimeter at Vilniaus pl. 28, 30, Gobergiškė village, Klaipeda district municipality.
Where your consent is required for the processing of your personal data, it is expressed by your active actions, i.e. by you contacting the Company with an inquiry, ticking the consent box or clicking the consent button before submitting your personal data electronically, as well as by responding to the e-mail sent to you by the Company indicating that you give your consent.
Where the Company processes your personal data on the basis of consent, you have the right to withdraw your consent to the processing of personal data at any time, without affecting the lawfulness of processing based on consent before its withdrawal. The provided consent may be withdrawn by contacting the Company by e-mail gdpr@vlantana.lt.
In all cases, you may choose not to provide the Company with certain personal data, but in this case you may be limited in obtaining the services provided by the Company.
Your personal data processed by the Company will be processed solely by persons for require them for the performance of their work functions and/or contractual obligations, and only when it is necessary in order to achieve the purposes specified in this Privacy Policy.
Regardless of how your personal data have been collected, they are stored only to the extent and only as long as it is necessary to achieve the established purposes, but at least for the period provided in the current version of the Index for the Storage of General Documents approved by Order No V-100 of the Chief Archivist of Lithuania of 9 March 2011, other legal acts regulating the Company internal procedures, and the Company internal documents.
Upon the expiry of period of storage of your personal data or the documents where your personal data are indicated, the personal data and/or documents will be destroyed in such a way that they cannot be recovered and their contents cannot be identified.
Provision of Personal Data and Data Recipients
Your personal data may be provided to third parties only if there is at least one of the conditions for lawful processing of personal data provided for in Article 6(1) of the Regulation, having assessed the purpose of the processing of personal data and the scope of the personal data provided.
Your personal data processed by the Company may be provided without obtaining your separate consent to:
Your personal data processed by the Company may also be disclosed to the Company data processors who process your personal data on behalf of the Company.
Your personal data are provided to recipients located in the Member States of the European Union and other countries of the European Economic Area under the same conditions and in the same manner as to the recipients located in the Republic of Lithuania.
Transfer of your personal data processed by the Company to third countries outside the European Union and the European Economic Area will be carried out only by ensuring an adequate level of protection of personal data, i.e. in accordance with the standard contractual clauses of the European Commission, adequacy decisions adopted by the European Commission, provisions of other applicable legislation and the grounds for data transfer provided for therein, and/or with your consent.
Your personal data processed by the Company may be provided without obtaining your separate consent to:
- companies affiliated with the Company and belonging to the same group of companies;
- state and municipal institutions, agencies and other recipients of data/registers and information systems thereof, to which the Company is obliged to provide your personal data under any laws and other regulations of the Republic of Lithuania;
- debt recovery companies which have taken over any claims to your debt or have been instructed to carry out recovery actions on behalf of the Company;
- business partners of the Company to the extent necessary for the proper performance of an agreement concluded between the Company and you or the company or employer represented by you;
- aw enforcement authorities.
Your personal data processed by the Company may also be disclosed to the Company data processors who process your personal data on behalf of the Company.
Your personal data are provided to recipients located in the Member States of the European Union and other countries of the European Economic Area under the same conditions and in the same manner as to the recipients located in the Republic of Lithuania.
Transfer of your personal data processed by the Company to third countries outside the European Union and the European Economic Area will be carried out only by ensuring an adequate level of protection of personal data, i.e. in accordance with the standard contractual clauses of the European Commission, adequacy decisions adopted by the European Commission, provisions of other applicable legislation and the grounds for data transfer provided for therein, and/or with your consent.
Rights of the Data Subject
To exercise your rights as a data subject (except the right to know/be informed about the processing of your personal data at the Company), please submit a written request to the Company in person, via a representative, by registered mail or using electronic means of communication. Please note that you must verify your identity when submitting a request to the Company.
Your rights as a data subject are exercised in the Company free of charge. However, if your requests are manifestly unfounded or excessive, in particular due to their repetitive character, the Company may charge a reasonable fee taking into account its administrative costs.
- Right to be aware/to be notified about the processing of your personal data.
- Right to access your personal data and find out how they are processed. You have the right to contact the Company with a request to provide information on which your personal data are processed and for what purpose;
- Right to demand the rectification of personal data. Where you have established that your personal data processed by the Company are inaccurate or incomplete, you have the right to contact the Company with a request for rectification or supplementing of such personal data;
- Right to erasure of your personal data (right to be forgotten). You have the right to contact the Company with a request to erase your personal data on one of the following grounds:
- the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
- you have withdrawn the consent used as the basis for processing and there are no other legal bases for the processing of your personal data;
- you object to the processing and there are no overriding legitimate reasons for processing;
- the personal data have been unlawfully processed.
- Right to demand the restriction of processing of your personal data. You have the right to contact the Company with a request to restrict the processing of your personal data on one of the following grounds:
- you contest the accuracy of the personal data for a period enabling the Company to verify the accuracy of the personal data;
- the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead;
- the Company no longer needs the personal data for the established purposes of the processing, but they are required by you for the establishment, exercise or defence of legal claims;
- you have objected to processing pending the verification whether the legitimate grounds of the Company override those of the data subject.
- Right to object to the processing of your personal data. You have the right to object to the processing of certain optional personal data concerning you. This objection may be expressed by not filling in certain sections of the documents, as well as by submitting a request for the termination of the processing of your optional personal data at a later stage. Upon your request, the Company will provide you with information about which of your data are processed on an optional basis. Having received a request to terminate the processing of optional personal data, the Company will immediately terminate such processing, unless this is contrary to the requirements of the legislation, and will notify you thereof;
- Right to data portability. You have the right to receive the personal data related to you that you have provided to the Company in a structured, common and machine-readable format, and also you have the right to transfer that data to another controller, and the Company must not impede that;
- Right to lodge a complaint with a supervisory authority. If you believe that the processing of personal data related to you by the Company is carried out in violation of the requirements provided in the Regulation, you have the right to lodge a complaint with the State Data Protection Inspectorate.
To exercise your rights as a data subject (except the right to know/be informed about the processing of your personal data at the Company), please submit a written request to the Company in person, via a representative, by registered mail or using electronic means of communication. Please note that you must verify your identity when submitting a request to the Company.
Your rights as a data subject are exercised in the Company free of charge. However, if your requests are manifestly unfounded or excessive, in particular due to their repetitive character, the Company may charge a reasonable fee taking into account its administrative costs.
Measures to Ensure the Security of Personal Data
When storing your personal data, the Company implements and ensures appropriate organisational and technical measures to protect your personal data against accidental or unlawful destruction, alteration, disclosure, as well as against any other unlawful processing.
Personal data security measures in the Company are determined taking into account the Regulation and other legal acts regulating the processing of personal data, as well as the requirements set by the supervisory authority.
Company employees or other persons responsible for the processing of personal data in the Company who have been granted the right to process your personal data collected by the Company and/or access such personal data observe the principle of confidentiality and keep confidential any information related to your personal data which they have accessed in the course of performance of their duties, unless such information is made public in accordance with the provisions of applicable laws or other regulations. The obligation to protect the confidentiality of personal data also applies in the event of transfer to other position, or termination of employment and/or contractual relations.
The Company ensures the security of the premises where personal data are stored, proper layout and maintenance of technical equipment, compliance with fire and rescue service regulations, proper management of the network (LAN, wireless), security of internet use, maintenance of e-mail program, information system databases and file storage, timely updating of antivirus programs and firewalls, and implementation of other technical measures required to ensure the protection of personal data.
The Company only engages processors that ensure the implementation of and compliance with appropriate organisational and technical personal data protection measures. The Company always signs with such processors a contract or an additional agreement on the protection of personal data which defines the scope of the processing of personal data and clearly specifies the obligations and responsibilities of the data processor.
Personal data security measures in the Company are determined taking into account the Regulation and other legal acts regulating the processing of personal data, as well as the requirements set by the supervisory authority.
Company employees or other persons responsible for the processing of personal data in the Company who have been granted the right to process your personal data collected by the Company and/or access such personal data observe the principle of confidentiality and keep confidential any information related to your personal data which they have accessed in the course of performance of their duties, unless such information is made public in accordance with the provisions of applicable laws or other regulations. The obligation to protect the confidentiality of personal data also applies in the event of transfer to other position, or termination of employment and/or contractual relations.
The Company ensures the security of the premises where personal data are stored, proper layout and maintenance of technical equipment, compliance with fire and rescue service regulations, proper management of the network (LAN, wireless), security of internet use, maintenance of e-mail program, information system databases and file storage, timely updating of antivirus programs and firewalls, and implementation of other technical measures required to ensure the protection of personal data.
The Company only engages processors that ensure the implementation of and compliance with appropriate organisational and technical personal data protection measures. The Company always signs with such processors a contract or an additional agreement on the protection of personal data which defines the scope of the processing of personal data and clearly specifies the obligations and responsibilities of the data processor.
Use of Cookies
Information collected with the help of cookies enables the Company to improve the functioning of its website ensuring you a comfortable and efficient search for information.
The main cookies used on the Company website, cookie categories, names, description and storage terms are described in detail in the Cookie Policy and Cookie Settings sections of the website.
Necessary cookies are always stored, because without these cookies the functioning of the website is impossible. Storing of all other categories of cookies is only enabled with your prior consent.
The consent to store optional cookies is expressed by clicking the ACCEPT SELECTED button on the website or the ACCEPT ALL button that appear next to the message with the text: This website uses cookies. If you wish to give your consent to use other than necessary cookies, please confirm your choice. For more information check our Cookie Policy.
The consent can be withdrawn at any time by changing your web browser settings and deleting stored cookies. How you can do this depends on your operating system and web browser.
After deleting the stored cookies, some features of the Company website may not work as intended.
The main cookies used on the Company website, cookie categories, names, description and storage terms are described in detail in the Cookie Policy and Cookie Settings sections of the website.
Necessary cookies are always stored, because without these cookies the functioning of the website is impossible. Storing of all other categories of cookies is only enabled with your prior consent.
The consent to store optional cookies is expressed by clicking the ACCEPT SELECTED button on the website or the ACCEPT ALL button that appear next to the message with the text: This website uses cookies. If you wish to give your consent to use other than necessary cookies, please confirm your choice. For more information check our Cookie Policy.
The consent can be withdrawn at any time by changing your web browser settings and deleting stored cookies. How you can do this depends on your operating system and web browser.
After deleting the stored cookies, some features of the Company website may not work as intended.
Our Social Media Accounts
The Company currently has its accounts in LinkedIn, Facebook, Instagram and Youtube social networks. All information provided by you to the Company through this social media (including notifications, use of Like and Follow buttons and other communications) or obtained through your visits to the Company’s social media accounts (including the information obtained through cookies used by social network managers) is controlled by the social network manager.
Since the Company has no control over the content of third party websites, used cookies, collected personal data and further processing, it is recommended that you read their privacy policies and contact them directly if you have any questions regarding the use of your personal data. You can read the privacy policies and privacy notices of media managers used by the Company on their websites https://www.facebook.com/policy (Facebook), http://instagram.com/legal/privacy (Instagram) and https://support.google.com/youtube/answer/10364219?hl=lt (Youtube).
Since the Company has no control over the content of third party websites, used cookies, collected personal data and further processing, it is recommended that you read their privacy policies and contact them directly if you have any questions regarding the use of your personal data. You can read the privacy policies and privacy notices of media managers used by the Company on their websites https://www.facebook.com/policy (Facebook), http://instagram.com/legal/privacy (Instagram) and https://support.google.com/youtube/answer/10364219?hl=lt (Youtube).
Changes to the Privacy Policy
This Privacy Policy is reviewed and updated on a regular basis and its amendments are posted on the website www.vlantana.eu.
The Privacy Policy was last updated on 30 December 2020.
The Privacy Policy was last updated on 30 December 2020.
Contact Details
If you have any questions, comments or complaints regarding your personal data collected, used and stored by the Company, please contact our Data Protection Officer on e-mail gdpr@vlantana.lt
