The Rural Business and Market Development Agency (hereinafter – the Agency) takes care of the privacy and protection of personal data of its interested parties, therefore it seeks to ensure fair and transparent processing of personal data and to inform interested parties in detail about the processing of their personal data.
We collect the following personal data:
- to organize and carry out public procurement – name, surname, personal identification code, date of birth, address, telephone number, email of the supplier participating in the procurement. postal address and other personal data are possible depending on the object of purchase and qualification requirements.
- to perform direct marketing – name, surname, telephone number, email address.
- to employ in a specific position in the institution – name, surname, date of birth, telephone number, place of work, email address, place of residence (address), education, desired job, CV receipt date, personal characteristics, work experience: last job, length of service in the workplace, positions held, other work experience; knowledge of foreign languages: language, reading, writing, speaking levels; ability to work with computer programs, other data and motives, desired salary; other information provided in the CV, recommendation and (or) cover letter. This Personal data is processed under consent and stored for 2 (two) months after the expiry of the competition/selection.
- to publicize the activity – the image, name, and surname of the data subject. This personal data is processed under the data subject’s consent and are stored for 4 (four) years after the consent date;
- any other personal data you may provide to us at any time by communicating with us – by email, writing, by making a telephone call, or upon arrival at the registered office. This data is processed with the data subject’s consent and stored for 4 years.
How we process personal data:
The Agency shall be the controller of the personal data of the interested parties processed.
Personal data is processed under the General data protection regulation (EU) 2016/679 and the requirements established by the Law on the Legal Protection of Personal data of the Republic of Lithuania and other legal acts. Personal data is processed accurately, fairly, lawfully, and securely. The Agency shall implement appropriate data protection technical and organizational measures to protect the personal data processed against accidental or unlawful destruction, damage, alteration, loss, disclosure, as well as from any other illegal processing.
Data subjects have the following rights as enshrined in the General Data Protection Regulation (hereinafter – the Regulation):
- the right to know (be informed) about the processing of your personal data in the Agency;
- the right of access to personal data processed and how it is processed;
- the right to request the rectification, destruction of your personal data, or the suspension, except for storage, of the processing of your personal data where the data is processed in breach of the provisions of the Regulation, the PDLPL, and other legal acts;
- the right to request the deletion (“right to be forgotten”) of personal data if this can be justified for one of the reasons set out in Article 17 (1) of the Regulation;
- the right to restrict the processing of personal data in at least one of the cases referred to in Article 18 (1) of the Regulation;
- the right to data portability where personal data is processed with consent under Article 6 (1) (a) or Article 9 (2) (a) of the Regulation or by contract under Article 6 (1) (b) and the data is processed by automatic means;
- the right to object to the processing of personal data when the personal data is processed under Article 6 (1) (f) of the Regulation unless the controller demonstrates that the processing is for compelling legitimate reasons, which are overriding the interests of the data subject; and freedoms, or to assert, enforce or defend legal claims;
- the right not to be subject to a decision based solely on automated data processing, including profiling;
- the right to be notified of a personal data breach.
How can you exercise your rights?
To exercise your rights, you may submit requests, complaints, or claims to the Agency in writing:
- by email: firstname.lastname@example.org;
- by post to L. Stuokos-Gucevičiaus str., 9-12, LT-01122, Vilnius;
- upon arrival at the office at L. Stuokos-Gucevičiaus str., 9-12, LT-01122, Vilnius;
We will respond to the received requests, complaints, or demands in writing under the procedure and terms established by legal acts and we will try to provide you with information as soon as possible, but no later than 20 business days from the request date. This period may, in exceptional cases, be extended to 40 business days, depending on the complexity of the requests.
If the Agency cannot provide you with the necessary information and (or) you have a claim regarding the processing of your personal data, you have the right to apply to the State Data Protection Inspectorate by submitting a complaint.
Recipients of personal data:
In processing your personal data, the Agency may use and transfer your personal data to processors providing services to the Agency (performing functions, i. e. auditors, lawyers, IT service providers, and other service providers) and process your data on behalf of the Agency as the data controller.
Processors shall have the right to process personal data only under the instructions of the Agency and only to the extent necessary. The Agency shall take all necessary measures, through the various data controllers, to ensure that our data controllers also have appropriate organizational and technical measures in place to ensure the security of personal data and to take all measures necessary to protect personal data.
Personal data may be transferred to state institutions and bodies, other persons performing direct functions assigned to them by law.
If you have any questions regarding the processing of personal data, please contact the details below by calling the telephone number below or sending an inquiry by email. by post, or by registered letter: