DATA CONTROLLER
The controller of your personal data is VšĮ “Pakuotė Ratu” (legal entity code: 307979593, address: Draugystės g. 19, Kaunas, email: info@pakuoteratu.lt) (hereinafter – the Controller).
REGISTRATION FOR THE CONFERENCE
When you register for the conference, the Controller processes the following personal data: your first name and surname; contact telephone number; email address; if you register as a company representative: company name, company code, VAT number (if the company is a VAT payer), company address; the first name(s) and surname(s) of the participant(s) whom you register to attend the conference.
Data related to a completed payment (depending on the payment method you choose, we may process the following data related to the payment: date of the payment transaction; transaction amount; your payment service provider; your bank and transfer number; payment status; your first name and surname; order ID / number; order type (purchase); payment ID number (when paying by bank card); discount codes).
The source of this data is you and third parties (the payment service provider, the bank – where certain payment-related data is received), and certain data is also generated automatically (for example, the ID number assigned to your purchased ticket).
We process your personal data for the following purposes:
- for the proper administration and implementation of concluded financial transactions, including the use of your contact information (name, telephone number and email) for communication with you (sending participant tickets and conference-related notices);
- to inform you about the upcoming conference or to provide other information related to a conference in which you will participate or have participated;
- to send newsletters about a conference in which you will participate or have participated;
- for marketing of similar conferences organised by the Controller;
- for direct marketing.
The specified personal data is processed on the legal basis of the concluded transaction and in accordance with the purposes of personal data processing defined in this document. You have the right to withdraw your consent at any time – you may do so in the manner described in this Privacy Policy.
Personal data retention period. We process your personal data from the moment the conference is ordered / registration is completed. After the service has been provided, documents (data) confirming the economic transaction are retained for 10 years, as provided in item 10.15 of the General Index of Document Retention Periods approved by Order No. V-100 of 9 March 2011 of the Chief Archivist of Lithuania, i.e. on the basis of compliance with a legal obligation.
Evidence that you have been informed about the processing of personal data, as well as evidence of consent, is retained in accordance with this Policy. The legal basis for processing this personal data is legitimate interest.
At the end of the personal data retention period, we securely destroy your personal data.
PROTECTION OF LEGITIMATE INTERESTS
On the basis of its legitimate interest in protecting its rights, including in civil disputes, the Controller processes the names, surnames and personal identification numbers of persons participating in a case or their employees, the circumstances of the case, other information related to the case, and publicly available information. Data may be transferred to law-enforcement authorities, lawyers or bailiffs carrying out recovery. The data is destroyed 1 year after the final resolution of the case and full satisfaction of the Controller’s claims (if the claims are satisfied).
On the basis of the legitimate interest in protecting its rights, the Controller also processes personal data contained in consents relating to personal data processing, as well as personal data contained in documents intended for the exercise of data-subject rights or in documents by which we refuse to exercise those rights. Such personal data is destroyed 3 years after the end of the calendar year in which the processing of personal data was completed and/or the data-subject rights were exercised (or refused).
DATA SECURITY
We will take all technical and administrative security measures necessary to protect your Data against unlawful loss or access and against unlawful alteration, disclosure or deletion.
RECIPIENTS OF YOUR PERSONAL DATA
Certain personal data may be transferred to our authorised data processors, such as IT or cloud-service companies (for example, when servers are rented from an IT company, your personal data will be physically hosted (stored) by that IT company), and companies that provide us with online payment-collection services when you make a payment. We require our data processors to ensure appropriate protection of your data and ensure that your personal data is processed by them only to the extent instructed by us and only for the specified purposes.
Personal data may also be transferred to recipients that act as data controllers (independently or jointly with us), for example social-network operators, banks, payment service providers (when payments are made for paid services), etc.
If you have questions regarding our service providers, please contact us at info@pakuoteratu.lt.
In certain cases, we may disclose your information to entities other than those described above: in order to comply with applicable legal requirements or after receiving a binding court request (for example, a court order requiring us to provide data), in defence of our legal interests, to protect our rights or property or ensure their security, and in other cases with your consent or upon your lawful request.
TRANSFER OF DATA IN THE EVENT OF A CHANGE OF CONTROLLER
If the Controller’s business is transferred, the personal data we process will be transferred to the company acquiring the business, which will become your new data controller. The legal basis for such transfer of your data is our legitimate interest in transferring the business.
If the data controller changes, you will be informed by a separate notice from us. If material provisions of this Privacy Policy change after the controller changes, you will be informed by the new data controller.
Following these changes, your personal data will be processed only for the purposes for which it was collected from you.
TRANSFER OF DATA TO THIRD COUNTRIES
The parent headquarters of the controllers of social networks (Facebook, Instagram, LinkedIn, X, YouTube) and search services (Google) are established outside the European Union, in another country (the United States of America) in respect of which an adequacy decision has been adopted.
Data of European Union residents published on Facebook and Instagram is processed by the controller Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland). Information on how to exercise your rights as a data subject is available at: https://lt-lt.facebook.com/privacy/explanation/. If you have complaints regarding the actions of Meta Platforms Ireland Limited in processing your personal data or in exercising (or failing to exercise) your rights as a data subject, you have the right to lodge a complaint with the lead supervisory authority of Meta Platforms Ireland Limited – the Irish Data Protection Commission – or with the State Data Protection Inspectorate of Lithuania.
Data of European Union residents published on LinkedIn is processed by LinkedIn Ireland Unlimited Company (Wilton Plaza, Wilton Place, Dublin 2, Ireland). Information on how to exercise your rights as a data subject is available at: https://www.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy. If you have complaints regarding the actions of LinkedIn Ireland Unlimited Company in processing your personal data or in exercising (or failing to exercise) your rights as a data subject, you have the right to lodge a complaint with the lead supervisory authority of LinkedIn Ireland Unlimited Company – the Irish Data Protection Commission – or with the State Data Protection Inspectorate of Lithuania.
Data of European Union residents published on Google and YouTube is processed by Google Ireland Limited Company (Gordon House, Barrow Street, Dublin 4, IRELAND). Information on how to exercise your rights as a data subject is available at: https://policies.google.com/privacy?hl=en-US#europeanrequirements. If you have complaints regarding the actions of Google Ireland Limited Company in processing your personal data or in exercising (or failing to exercise) your rights as a data subject, you have the right to lodge a complaint with the lead supervisory authority of Google Ireland Limited Company – the Irish Data Protection Commission – or with the State Data Protection Inspectorate of Lithuania.
Certain providers of cookies placed on your device when you visit the website are also established in third countries. More information about these cases can be found in the cookie banner / policy.
HOW WE PROCESS YOUR PERSONAL DATA
We ensure that we will use your personal data in accordance with the requirements of applicable law, including but not limited to the following:
- your personal data will be processed in accordance with the principles of lawfulness, fairness and transparency;
- your personal data will be used only to the extent necessary to achieve the stated purposes;
- your personal data will be collected only for lawful purposes that we have clearly indicated to you and will not be used in any other way that is incompatible with those purposes;
- your personal data will be accurate and kept up to date;
- your personal data will be retained only for as long as necessary to achieve the purposes disclosed to you (or for as long as required by applicable law);
- your personal data will be used while ensuring an adequate level of security.
YOUR RIGHTS REGARDING YOUR PERSONAL DATA
Under legislation governing the protection of personal data, you have the following rights:
- you have the right to be informed whether we process your personal data and, if we do, to access the data being processed, request a copy of that data, and receive information about how we use your data, with whom we share it and how long we retain it. We may refuse to provide information or ask you to cover the cost of additional copies where you repeatedly request the same information;
- you have the right to request correction, supplementation or clarification of incorrect, inaccurate or incomplete personal data (right to rectification) where, after accessing your personal data, you determine that the data is incorrect, incomplete or inaccurate;
- you have the right to request that we delete information we hold about you if it is processed unlawfully or unfairly, if it is no longer necessary for the purpose for which we collected it, and there is no other legal basis on which we are required or entitled to retain it;
- you have the right to request that we restrict (suspend) the processing of your personal data, other than storage – for example, where you have submitted a request to correct personal data (while the accuracy of the data is being checked and/or the data is being corrected), where it is established that personal data is being processed unlawfully and you do not agree to its deletion, or where you have objected to the processing of personal data (while it is assessed whether our legitimate interests override your interests), etc. (right to restriction of processing);
- you have the right to receive from us and transmit to another data controller your personal data in a structured, commonly used and machine-readable format (or to request that we transmit your personal data to another data controller where technically feasible) (right to data portability). This right applies only where processing is based on your consent or on our contract with you and is carried out by automated means. It may be exercised only in relation to personal data that you yourself have provided to us;
- you have the right to withdraw at any time any consent you have given us for the processing of your personal data;
- you have the right at any time to withdraw the permission you have given us to use cookies. You can change your web-browser settings so that it does not accept cookies. This depends on the operating system and web browser you use. Detailed information about cookies, their use and opt-out options is available at http://AllAboutCookies.org or http://google.com/privacy_ads.html;
- you have the right, on grounds relating to your particular situation, to object at any time to the processing of personal data relating to you where such processing is carried out for the purposes of the legitimate interests pursued by the data controller or a third party;
- you also have the right to lodge a complaint with the State Data Protection Inspectorate in accordance with the procedure established by the Law on Legal Protection of Personal Data of the Republic of Lithuania.
SUBMISSION OF A REQUEST TO EXERCISE DATA-SUBJECT RIGHTS
You have the right to contact us regarding the exercise of data-subject rights by submitting a request in person, by post, by email or through another means of communication if it is possible through that means to verify your identity (where, in view of the specific circumstances, such verification is necessary).
A request to exercise data-subject rights must be legible and signed by the person and must specify the data subject’s first name, surname, address and/or other contact details for communication or through which the data subject wishes to receive a response regarding the exercise of data-subject rights.
A data subject may exercise their rights personally or through a representative. In the request, the representative must specify their own first name, surname, address and/or other contact details for communication through which the representative wishes to receive a response, as well as the first name and surname of the represented person, and must provide a document confirming representation or a copy thereof. If there are doubts regarding the identity of the data subject, we may request additional information necessary to verify it.
After receiving your request, no later than within one month from receipt of the request, we will provide you with information on the actions taken in response to the request.
PHOTOGRAPHY AND FILMING DURING EVENTS
Photography and filming may take place during events. Photographs and video recordings made during events may be used for publicity, communication and archiving of the event and the Organiser’s activities, including publication on the Organiser’s website, social-media accounts, newsletters and other communication channels.
If you do not wish to be photographed or filmed, please inform the Organiser in advance or contact the event-organiser team during the event. Where possible, the Organiser will take the participant’s request into account and will take reasonable measures so that the participant is not included in individual photographs or video recordings.
CHANGES TO THE PRIVACY POLICY
We continuously seek to develop and improve the Controller’s activities and therefore may from time to time amend and improve this Privacy Policy. We will publish updates to the Privacy Policy on this page and changes will take effect immediately. If changes to the Privacy Policy have a more significant impact on your rights and freedoms, we will endeavour to notify you personally.
Pakuotė Ratu, VšĮ
Draugystės g. 19, Kaunas LT-51230
Tel. +370 612 00700
Email info@pakuoteratu.lt