Privacy Policy
This privacy policy explains how MB “Puikūs metai” legal entity code 305216478, registered office address:Didžioji g. 6-3, LT-01128 Vilnius, Lithuania (hereinafter – the Organization) collects and uses the personal data of our customers as well as the visitors of the website gpyr.lt (hereinafter – the Website). Additional information about the processing of Personal Data can be found in the agreements and other related documents. Personal Data collected and used by the Organisation is processed by the Organisation’s employees, accountants or other persons providing financial services to the Organisation in accordance with the service agreements, taking into account the lawful basis and purpose of the processing.
Grounds for processing personal data
We process personal data on the following grounds:
Your consent to the processing of your personal data for one or more specific purposes;
the processing is necessary for the performance of obligations to you;
the processing is necessary for compliance with a legal obligation to which the Organisation is subject;
the processing is necessary for the legitimate interests of the Organisation.
Processing of personal data for purposes related to the provision of the Organisation’s services
In order to fulfil our obligations to you, the Organisation processes the following personal data about you:
data directly identifying the person: name, surname, date of birth, personal identification number, other personal identification number;
contact details: residential or business address, e-mail address, telephone number;
data related to Your education and occupation: current and previous employers, job titles, responsibilities, education;
data that you have made public.
The lawful grounds for processing are:
seeking to enter into and perform obligations to which you are a party;
your consent to the processing of the data, expressed directly, or, when it is permitted by the law, by your action of transferring the data;
Obligations to which the Organisation is subject;
a set of professional rights and obligations;
to enable us to defend ourselves against claims, demands or actions and to enforce our rights.
Processing of personal data for direct marketing purpose
The Organisation processes the following personal data about you for direct marketing purpose:
data directly identifying the person: name, surname;
contact details: residential or business address, e-mail address, telephone number;
data related to Your education and occupation: current employer, job title, responsibilities, education;
data that you have made public.
The lawful grounds for processing are: your consent to the processing of the data for direct marketing purpose.
Processing of personal data for other purposes
The Organisation processes Personal Data for other lawful purposes:
keeping accounting records for the purpose of settlement and other payments, compliance with accounting rules, and other obligations applicable to the Organisation, to the extent necessary to ensure the fulfilment of a legitimate purpose;
in the case of contracts which do not relate to the performance of obligations, the purpose of the processing of the personal data contained therein is the proper performance of the respective obligations;
for the purpose of concluding, performing, accounting for contracts (employment or otherwise) and for the purpose of the proper performance of the Organisation’s statutory duties as an employer.
Time limits for data processing
We process your Personal Data within the scope of the purposes for which it was collected. We will protect the Personal Data we receive in accordance with the legislation in force in the Republic of Lithuania. Your Personal Data will not be stored or processed for longer than is necessary for the purposes of the processing set out above. Longer storage of your Personal Data may be carried out where necessary to enable us to defend ourselves against claims, claims or lawsuits and to enforce our rights, as well as on the grounds set out in the legislation.
Transfer of data to third parties
The organisation may transfer your personal data for the purpose of fulfilling the obligations: to a state or municipal authority, institution or organisation, to professionals involved in the process of fulfilling the obligations, e.g. experts, evaluators, auditors, etc., depending on the purpose of the obligations.
Your rights as a data subject
Right of access. You have the right to have access to your data processed by the Organisation and to information about the purposes of the processing, the categories of personal data concerned, the recipients of the data, the period of retention of the data or the criteria for determining such period.
The right to request rectification. You have the right to have inaccurate personal data relating to you rectified by the Organisation and, taking into account the purposes for which the data were processed, you have the right to have incomplete personal data completed.
Right to erasure. You have the right to request that the Organisation erase the personal data relating to you if one of the following grounds is applicable: the personal data is no longer necessary for the purposes for which it was collected or otherwise processed; you withdraw the consent on which the processing is based and there is no other legal basis for the processing of the data; the processing of the personal data is unlawful; the personal data is subject to a legal obligation to delete in accordance with the laws of the European Union or the Republic of Lithuania.
The right to restrict the processing of data. You have the right to request that the Organisation restrict the processing of data where one of the following applies: You contest the accuracy of the data for a period of time within which the Organisation can verify the accuracy of your personal data; the processing of your personal data is unlawful and you do not consent to the erasure of the data and instead request the restriction of its use; the Organisation no longer needs the personal data for the purposes of the processing, but it is necessary for you to assert, exercise, or defend a legal claim; or you object to the processing of your data, pending verification that the Organisation’s legitimate grounds override yours.
Right to object. You have the right to object at any time, on grounds specific to you, to the processing of personal data concerning you, where the processing is based on your consent, to the processing of your personal data for one or more specified purposes, or where the processing is necessary for the legitimate interests of the Organisation or of a third party, unless such interests or fundamental rights and freedoms of yours, which are essential to the protection of your personal data, override them. The Organisation shall no longer process the personal data unless the Organisation substantiates that the processing is carried out for compelling legitimate reasons which override your interests, rights and freedoms as a data subject, or for the establishment, exercise or defence of legal claims.
Right to data portability. If your Personal Data is processed by automated means or on the basis of your consent or on the basis of a reciprocal contractual relationship, you have the right to receive the Personal Data relating to you that you have provided to the Organisation in a structured, commonly used and computer-readable format and you have the right to request the transfer of that data to another controller where technically feasible.
Right to lodge a complaint with a supervisory authority. In cases where you consider that your personal data are being processed unlawfully or that your rights in relation to processing are being infringed, you have the right to contact the State Data Inspectorate, whose contact details can be found at https://vdai.lrv.lt/, and to lodge a complaint in this respect.
If you have any complaints or questions about how we process your personal data, you can freely contact us at any time at hi@gijos.lt