Personal data processing policy

On what basis do we process personal data?

The joint-stock company Organizacijų Vystymo Centras processes personal data according to Regulation (EU) 2016/697 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, the Law on Legal Protection of Personal Data of the Republic of Lithuania, and the Rules of Processing of Personal Data of Joint-Stock Company Organizacijų Vystymo Centras (hereinafter the “Rules”).

Based on what principles and main requirements are personal data processed?

Personal data are processed in strict adherence to the principles of lawfulness, fairness and transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity and confidentiality and the following main requirements:

  • personal data are only collected for the purposes listed in the Rules and processed in manners compatible with the purposes;
  • personal data in respect of the data subject are processed in a lawful, fair and transparent manner;
  • personal data are accurate and, if required for personal data processing, are regularly updated;
  • personal data are adequate, appropriate and as such are required in order to achieve the purposes for which they are processed;
  • personal data are stored (kept) in such a form as to ensure that the identity of the data subjects can be established for no longer than required for the purposes for which these data were collected and processed;
  • personal data are processed in such a manner as to ensure that, if appropriate technical and organisational measures are used, the appropriate security of personal data is assured;
  • the confidentiality principle is adhered to, and the secrecy of all and any information related to personal data is assured;
  • personal data are only collected according to the procedure prescribed by legislation and are received directly from the data subject, are received from other persons according to the procedure and basis prescribed by legislation, as well as by sending official enquiries to provide required information to entities that process the information and are entitled to provide it by request or under a personal data provision agreement.

For what purposes do we process personal data?

Personal data are processed for the following purposes:

  • the following personal data may be used for the purpose of administering information systems: personal no., given name, surname, data about the employer, contact information (telephone number, e-mail address), user workstation data;
  • the following personal data may be used for the purpose of organising video conferences: given name, surname, data about the employer, personal video and conversation data, video conference date, time and duration;
  • the following personal data may be used for the purpose of organising procurement: personal no., given name, surname, employer data, employment history, educational background and qualification data, criminal records due to which participation of a person in the procurement process is prohibited or restricted, contact information (telephone number, e-mail address, residence address);
  • the following personal data may be used for the purpose of administering the database of customer and other person CVs: given name, surname, contact information (telephone number, e-mail address, residence address), employer data, educational background, employment history, interview summary and photograph;
  • the following personal data may be used for the purpose of providing information to the public about our company activities: given name, surname, contact information (telephone number, e-mail address), employer data, educational background, employment history, photograph;
  • the following personal data of suppliers or customers (natural persons) may be processed for the purpose of performing goods, works and services contracts concluded with suppliers or customers: given name, surname, personal no., contact information (telephone number, e-mail address, residence address), bank account number and other personal data that were provided by the relevant person;
  • the following data may be used for the purpose of direct marketing: given name, surname and contact information (telephone number, e-mail address);
  • and for the other purposes stipulated in the Rules.