Public institution Enterprise Lithuania (hereinafter referred to as “Institution”) (legal entity code 302454111, registered address A. Goštauto str. 40A, 03163 Vilnius, tel. +370 5 249 9083) is your data controller and is responsible for the protection of your personal information that you disclose to the Institution.
Public institution Enterprise Lithuania carries out the processing of personal data in accordance with Regulation No. 2016/679 of the European Parliament and of the Council (General Data Protection Regulation) and the rules of personal data processing in the Institution approved by the General Director of the Public Institution Enterprise Lithuania and other legal acts of the Republic of Lithuania and the European Union, which establish the processing of natural persons’ personal data.
The Institution appoints the data protection officer Žana Mekšraitė, who shall act as data protection officer as set out in Article 39(1) of the GDPR. The officer, regarding your data collection, can be contacted by e-mail at: firstname.lastname@example.org or by tel. +370 607 88568.
When does the Institution acquire the right to process your data?
We only process your data:
- having received your express consent to the processing of your data for one or more purposes defined by the Institution;
- the conclusion and performance of contracts with you;
- where necessary for the fulfilment of the Institution’s legal obligations.
How does the Institution process your data?
Your data is processed in a lawful, transparent and fair manner by Institution for predefined purposes, ensuring the principle of data reduction (i.e. collecting only as much data as it is necessary to provide the service), ensuring the accuracy and timely updating of your data, ensuring the security and storage of the data for no longer than is necessary to achieve the intended purposes of the processing.
What personal data and for what purposes does the Institution process? *
|No.||Purpose of data collection||Legal basis for data collection||Description of categories of personal data||Data retention deadlines|
|1.||Customer service||Consent||Name, telephone number and/or e-mail address of the natural person or natural person representing the legal person, the legal person represented and his details (business name, contact details of the legal person).||5 years after the service was provided|
|2.||Conclusion and execution of contracts||Contract||Name, e-mail address, telephone number, individual (where customer/supplier – natural person) – business certificate/certificate and settlement account number.||10 years after the end of the contract|
|3.||Conduct of public procurement||Contract.
Legal obligation: Law on public procurement
|Name, e-mail, contact phone number of the vendor representative or the contact person responsible for submitting the proposal.
In individual cases where the supplier’s qualifications are checked, information on the specialists, staff, experts offered by the supplier shall be available: CV (name, date of birth, telephone, address of residence), proof of education or marriage certificates/divorce certificates include the personal identification number, name.
|Up to 5 years (purchase documents after the end of purchase);
10 years (contracts after their expiry)
|4.||Provision of advice||Legal obligation: Order No. 4-372 of the Minister of Economy of the Republic of Lithuania of 22th June, 2018, the Articles of Association of Enterprise Lithuania were approved.||Name, contact details (telephone number, e-mail address, municipality) of the person consulted.||5 years after the consultation was given (for impact assessment purposes).|
|5.||Administration of a network of business consultants||Contract.
Legal obligation: Order No. 4-659 of the Minister of Economy of the Republic of Lithuania of 16th November, 2017 on the approved description of the Institution and administration of the business consultants’ network.
|Business consultants – name, surname, personal number, settlement account number, contact information (telephone number, e-mail address), information on income (if the consultant applying is a natural person), information on education, professional and Institutional competencies.
Persons recommending customers – name, contact details (telephone number, e-mail address) of the person.
Entities receiving consultant services and their staff – name, surname, personal number, contact details (telephone number, e-mail address), settlement account number.
|10 years after the end of the contract with the consultant|
|6.||Administration of the competency voucher||Contract.
Legal obligation: Order No. 4-663 of the Minister of Economy of the United States of 27/10-2016 on the approval of the conditions and procedures and description of the inclusion of training providers and training programs in the list of training providers and training programs.
|Customers and their employees (representatives of training providers) – name, contact details (telephone number, e-mail address).
Customers and their employees (providers of training programs) – name, contact details (telephone number, e-mail address).
Customers and their employees (accountants of training providers) – name, criminal record information.
Subjects who have received training services and their staff – name, gender, age, date of birth, education.
|10 years after the end of the contract with the training provider|
|7.||Institution of events||Legal obligation: Order No. 4-372 of the Minister of Economy of the Republic of Lithuania, the statutes of the Public Institution Enterprise Lithuania were approved. Description of the ongoing project.||Name, contact details (telephone number, e-mail address, city), name of legal person represented, individual activity.||5 years after the service is provided – for impact assessment purposes|
|8.||Startup Visa Application Administration||Order of the Minister of Economy of the Republic of Lithuania of 26th January, 2017 “Regarding the assessment procedure, which determines whether the activities of the company to be established are related to the introduction of new technologies or other innovations significant for the economic and social development of the Republic of Lithuania and whether the foreigner has the necessary qualifications, financing and business plan”.||Applicant’s name, nationality, personal contact details (telephone number, e-mail address, address of residence), professional experience, startup product, name, business model, audio and video recording of the interview with the applicant.||10 years from the date of conclusion of the contract.
The personal data of unapproved applicants shall be stored for 1 year
|9.||Administration of exporters’ database (EDB/CRM)||Legal obligation: Order No. 4-372 of the Minister of Economy of the Republic of Lithuania of 22th June, 2018, the Articles of Association of Enterprise Lithuania were approved. Description of the implemented project.||Lithuanian customers and their employees – name, contact details (telephone number, e-mail address), data of the representative of the customer registered in the database (name, code, address, number of employees, turnover, export share from turnover, year of establishment, sectors in which the company works, descriptions of the company’s export market, products and services, information about the certificates held by the company, information about what events organized by The Business Company in Lithuania participated in, what services we provided to it.
Foreign clients and their employees – name, contact details (telephone number, e-mail address, country) of the consulting person, represented by the name of the legal person represented.
|5 years after registration of EDB (CRM)|
|10.||Start-up database administration||Legal obligation: Order No. 4-372 of the Minister of Economy of the Republic of Lithuania of 22th June, 2018, the Articles of Association of Enterprise Lithuania were approved.||Names, contact details (telephone number, e-mail address), data of the legal person represented (name, code, address, number of employees, turnover, year of establishment, descriptions of products and services, etc.) of the representatives of the customer registered in the database.||5 years after registration of EDB|
|11.||Administration of membership of the co-operation centers “Spiečius”||Contract||Name, contact details (e-mail address, telephone number) of the natural person representing the Party to the contract.
Where a Party to the contract, a natural person, is additionally requested to provide information on the personal identification number and settlement account number.
|10 years after the end of the contract|
|12.||Sending newsletters||Consent||Name, e-mail address.||5 years after registration or such until the customer refuses to receive the newsletter|
|13.||Impact assessment of the services provided||Legal obligation: Order No. 4-372 of the Minister of Economy of the Republic of Lithuania of 22th June, 2018, the Articles of Association of Enterprise Lithuania were approved.||Customer name, e-mail address, telephone number, legal person represented, company code, place of establishment (city), other legal entity data.||5 years after the service was provided|
|14.||Use and protection of existing material assets (video surveillance)||Legitimate interest||Indoor footage. Institution shall carry out the filming of the premises only if necessary to monitor and protect the property (premises, equipment) under management.||1 month|
|15.||Securing the quality of business advice number 1824(chat audio)||Consent||Audio of a conversation with a customer. The Institution shall record an audio conversation with the client for the purpose of quality assurance.||1 yearafter the service was provided|
|16.||Personnel selection||Consent||Applicant’s name, personal contact details (telephone number, e-mail address, address of residence), professional experience, information in support of qualifications and competences (language understanding, computer skills, Institutional and social skills) and other personal information provided by the applicant.||3 months, assessing the risks arising from the chosen applicant during the trial period|
|17.||Publicity of the Institution’s activities||Consent||Name, photo.||1 year after the date of acceptance|
|18.||Online pre-acceleration program services||Consent
Legal obligation: Order No. 4-372 of the Minister of Economy of the Republic of Lithuania of 22th June, 2018, the Articles of Association of Enterprise Lithuania were approved.
|Name and e-mail address of the natural person applying to Institution.||5 years after the service was provided|
1 The Institution shall store your data for no longer than is necessary to achieve the purpose for which it was collected or for the period provided for by the legislation.
*Not mentioned here are the purposes of internal administration (personnel management, management and use of available material and financial resources (including public procurements and bookkeeping), and clerical management) staff, suppliers of goods and services and their employees’, and customers’ and their employees’ personal data.
Public institution Enterprise Lithuania does not collect or process special categories of your personal data, except for Institution’s personnel data processed for internal administration purposes. Special categories of personal data include: related to your racial or ethnic origin, political, religious, philosophical or other beliefs, trade union membership, health, sex life, as well as information about your criminal record.
Where does the Institution receive your personal data from and who can use it?
The Institution processes personal data received directly from you and which you provide to us when you apply for and use of the services provided by the Institution, fill in data and registration forms for events by registering in databases managed by the Institution. The Institution also receives your data from legal entities when you are a representative, employee, owner or other person associated with these legal entities.
From Third Parties (Republic of Lithuania Statistics Department, UAB Credit info Lietuva, etc.). We only collect your data in relation to the legal entity you represent for the purposes of impact assessment.
Your personal data processed by the Institution may be transferred to a Third Party:
- only on the basis of a written agreement with a Third Party;
- only after the data subject has been informed in advance of the transfer of his/her data to Third Parties;
- only with your express consent to such transfer.
You will be informed in advance of any actions taken by the Institution for the transfer of your personal data.
Cookies refer to information items that are transferred from a website to your computer’s hard disk. These are small information files that allow websites to save and re-access information about the user’s browsing habits. Cookies are used by most websites because they are one of the many tools that help tailor web content to users’ needs. Cookies allow websites to provide services tailored to users’ needs (for example, by remembering your login details, while keeping purchases in your shopping cart, or displaying only content of interest to a particular user).
|Cookie||Retention time limit||Description||Source|
|Required cookies||These cookies allow the website to memorize things you choose (such as your city, language, or region) and offer enhanced features that are personalized to you. The information collected by these cookies can be made anonymous and cannot monitor your browsing activity on other websites.|
|_ga||2 years||The cookie collects information about user behavior on the site and is used to store statistical information.||Google Analytics|
|_gid||24 hours||The cookie collects information about user behavior on the site and is used to store statistical information.||Google Analytics|
|FB_PIXEL_ID||180 days||The cookie collects information about user behavior on the site and is used for remarketing.|
|_hjid||365 days||The cookie collects information about user behavior on the site and is used to store statistical information.||Running through hotjar.com|
How secure is your information?
Public institution Enterprise Lithuania implements appropriate Institutional and technical measures to protect your personal data from accidental or unlawful destruction, alteration, disclosure, as well as against any other unlawful processing. The staff of the Institution processing your personal data have signed up to the obligation to keep confidential any information relating to your personal data which they have read in the performance of their duties.
What are your rights?
You have the following permissions:
- the right to be informed of the processing of your personal data within the Institution;
- the right of access to information on how your personal data is processed;
- the right to request the rectification, destruction or suspension of the processing of personal data;
- the right to request erasure (“right to be forgotten”);
- the right to transfer data;
- the right to restrict processing;
- the right to object to the processing of your personal data.
How can you enforce these rights?
You can submit a request for the exercise of the above rights, as well as file complaints or submit notices to the Public Institution Enterprise Lithuania by e-mail email@example.com or by tel. +370 607 88568.
We will reply to your request no later than 30 calendar days of receipt of your request.