Privacy
PRIVACY NOTICE
+1 INTRODUCTION |
|||||||||||||||||||||||||||||||||||||||||
|
We, Tringala, G. Baleženčio firm (hereinafter – Tringala, the Firm), take care of the security of your personal data (personal data means any information that relates to an identified or identifiable living person, such as the name, surname, address, email address, website behaviour, etc.) The Privacy Notice below is addressed to all persons who contact, employ, apply for, or otherwise engage with the Firm, use the Firm’s services, or otherwise provide their personal data to the Firm. This privacy notice is created based on valid legal acts and recommendations, such as the General Data Protection Regulation (hereinafter - GDPR), the Law on Legal Protection of Personal Data, the guidelines of the State Data Protection Inspectorate (hereinafter - VDAI). The purpose of the privacy notice is to indicate the rights and obligations of the data subjects, as well as other information that must be provided in accordance with the GDPR. The Company's Services are not intended for children (i.e., persons under the age of 14). |
|||||||||||||||||||||||||||||||||||||||||
+2 DATA CONTROLLER |
|||||||||||||||||||||||||||||||||||||||||
| ingala, G. Baleženčio firm, legal entity code: 15373455, registered office address Miškininkų g. Tringala, G. Baleženčio firm, legal entity code: 15373455, registered office address Miškininkų g. 10, LT-62201 Alytus, Lithuania, is the data controller (as defined in the GDPR) of the personal data described in this Privacy Notice. | |||||||||||||||||||||||||||||||||||||||||
+3 DATA PROTECTION OFFICER |
|||||||||||||||||||||||||||||||||||||||||
| The Firm does not have an obligation to appoint the Data Protection Officer yet questions related to personal data proessing may be asked by E. mail: info@tringala.lt. | |||||||||||||||||||||||||||||||||||||||||
+4 WHEN DO WE PROCESS YOUR DATA? |
|||||||||||||||||||||||||||||||||||||||||
|
Data may be processed, for example, in the following cases, when: - - You provide the data, e.g., when applying for a job, browsing a website or social networks, making an email enquiry or subscribing to a newsletter; - The data is provided by the entity / company where you work or otherwise belong and which has a contractual or legal relationship with the Firm; - Participating in public tenders; - When you use our services; - The Firm submits a request on the basis of the legitimate interest (e.g., to Sodra, credit rating companies, public registers, etc.); - We receive data from other sources who pass it on to us as part of our work to comply with orders of public authorities, etc; - We obtain data from public sources when it is published by you or the company / Institution you represent. |
|||||||||||||||||||||||||||||||||||||||||
+5 WHAT PRINCIPLES DO WE FOLLOW WHEN PROCESSING YOUR DATA? |
|||||||||||||||||||||||||||||||||||||||||
|
The processing shall be carried out on the basis of the following principles specified in Article 5 of the GDPR: - the principle of lawfulness, fairness and transparency; - the principle of purpose limitation; - the principle of data minimisation; - the principle of accuracy; - the principle of storage limitation; - the principle of integrity and confidentiality. The Firm takes appropriate technical and organisational measures in order to ensure that it is able to meet the obligation under the accountability principle. |
|||||||||||||||||||||||||||||||||||||||||
+6 HOW DO WE PROTECT YOUR DATA? |
|||||||||||||||||||||||||||||||||||||||||
|
In order to protect your data, we have taken organisational and technical measures that are designed to properly regulate and process your data. Such measures include but are not limited to: the SDPI guidelines, the measures set out in the ISO/IEC 27001:2022 /ISO/IEC 27002:2022 information security management standard, the EDPS (European Data Protection Supervisor) and WP29 (Working Party 29) guidelines and recommendations. The organisational measures for the protection of personal data include, but are not limited to, the following: privacy policy, data subject access request procedures, risk assessments, information security incident management procedures, information security documents, records of data processing activities, data processing agreements with data processors, various staff procedures, ongoing staff training, etc. Technical measures for the protection of personal data are implemented on the basis of information security documents. Data processing agreement is always concluded when data processors are involved. |
|||||||||||||||||||||||||||||||||||||||||
+7 WHAT DATA DO WE PROCESS ABOUT YOU? |
|||||||||||||||||||||||||||||||||||||||||
The Firm, as the data controller, shall process your personal data:
|
|||||||||||||||||||||||||||||||||||||||||
+8 SOCIAL NETWORKS AND WEBSITES |
|||||||||||||||||||||||||||||||||||||||||
| 8.1, 8.2, 8.3 | |||||||||||||||||||||||||||||||||||||||||
+8.1 SOCIAL NETWORKS |
|||||||||||||||||||||||||||||||||||||||||
|
The Firm operates various websites which also process personal data generated during browsing (such as IP address, page visited, browser data, etc.), collected when ordering specialised information (e.g., market / sector reports), through contact forms, subscribing to newsletters, through cookies placed on websites, and also processed in social networks. Please find detailed information on this below. We currently hold the following social media accounts:
The information you provide to social media is controlled by the operator of the social network in question. The Firm, having access to this data, shall use it only for the purpose of managing its social media accounts. |
|||||||||||||||||||||||||||||||||||||||||
+8.2 COOKIES – GENERAL INFORMATION |
|||||||||||||||||||||||||||||||||||||||||
| 8.2.1, 8.2.2, 8.2.3 | |||||||||||||||||||||||||||||||||||||||||
+8.2.1 WHAT ARE COOKIES? |
|||||||||||||||||||||||||||||||||||||||||
|
Cookies are simple text files that are placed in the browser memory of your device (e.g., computer, mobile phone, tablet) with your consent when you browse a website. Cookies can be used to ensure the security of the website, to identify unique users, to store information about cookie options you have chosen, the pages you have browsed, what you have clicked on, etc. This is a common practice when browsing websites. Please note that cookies are in many cases managed in conjunction with the company that collects and processes the cookie information, e.g., Google, Meta (formerly Facebook), and you should also read the Privacy Notices of these companies. |
|||||||||||||||||||||||||||||||||||||||||
+8.2.2 HOW DO I CONTROL COOKIES? |
|||||||||||||||||||||||||||||||||||||||||
|
If you do not want your personal data to be processed by cookies, you can change the settings of your web browser so that cookies are not automatically accepted or delete cookies that have already been stored. You can do this at any time, as all browsers have an option to delete cookies. More detailed instructions depend on the browser you are using; you can find instructions for the most commonly used browsers here: - Cookie settings in Internet Explorer - Cookie settings in Microsoft Edge - Cookie settings in Firefox - Cookie settings in Chrome and Android - Cookie settings in Safari and iOS |
|||||||||||||||||||||||||||||||||||||||||
+8.2.3 HOW DO WE USE COOKIES? |
|||||||||||||||||||||||||||||||||||||||||
In most cases, we set cookies together with our technology partners through their use of, for example, cookie management tools, fonts etc. In other cases, certain security, analytical, advertising functions are performed by general data controllers. Here is a list of such partners and their privacy policies:
|
|||||||||||||||||||||||||||||||||||||||||
+8.3 COOKIES ON https://senas.tringala.lt |
|||||||||||||||||||||||||||||||||||||||||
|
|||||||||||||||||||||||||||||||||||||||||
+9 WHAT RIGHTS AND RESPONSIBILITIES DO YOU HAVE? |
|||||||||||||||||||||||||||||||||||||||||
|
- The right to be informed in a transparent way, including the rights you have. We inform you by means of this Privacy Notice. - The right to be informed about the processing of your data, and to know what data we process about you. You can request a copy of your data by contacting the info@tringala.lt. - The right to data rectification and erasure. If you find that your data is incomplete or inaccurate, you can contact the info@tringala.lt and we will look into your case. You can also ask us to remove your data. We will be able to do this if there are no other legal acts that oblige us to keep the data. - The right to restriction of processing. For example, until we clarify inaccuracies. - The right to data portability. - The right to object to our processing of your data and to withdraw your consent at any time. - The right to object to automated decision-making, including profiling, which has significant consequences for you. The Firm does not currently apply such decision-making. Please note that in order to exercise your rights, we will need to establish your identity. Also, if a request is of a large volume, we may charge a fee for its fulfilment. When the Firm acts as a data processor, we follow the data controller’s instructions and the provisions of the data processing agreement. You are responsible for ensuring that the data you provide to us is accurate, correct and complete. If the data you have provided changes, you must inform us immediately by email. We will not be liable in any event for any damage caused to you as a result of you providing incorrect or incomplete personal data or failing to inform us of any changes to such data. Information published on the Firm’s websites, its copying, reproduction, links to it are allowed only with written permission of the Firm. It can be obtained by applying to info@tringala.lt. This permission shall not imply any transfer of rights in the material. |
|||||||||||||||||||||||||||||||||||||||||
+10 TO WHOM AND WHEN CAN WE TRANSFER YOUR DATA? |
|||||||||||||||||||||||||||||||||||||||||
|
We may transfer your personal data when: - You have given your consent to the transfer; - We must do so in the manner prescribed by laws when required by a public authority / law enforcement body / pre-trial investigation authority, court or their representatives, when suspecting a criminal offence, in the event of a dispute, e.g., by the STI, the Centre of Registers, the FCIS, the Police, the Disputes Commission, criminal intelligence authorities, etc - We use a data processor or partners for certain data processing operations: o audit firms; o consultants for operations, security, process, etc; for consultants; o insurance companies; o companies providing information technology services; o publicity and media service companies; o archive service providers; o accounting service providers; o communications service providers; o providers of physical security services; o parties concerned – in the case of reorganisation or other restructuring of the Firm; o similar operations - and in other cases when the data recipient has a lawful basis for processing your personal data. All your data shall be processed within the European Economic Community and shall not be transferred to third countries. If it is necessary to transfer data to other countries, we may rely on the European Commission’s adequacy decision (if the European Commission decides that the adequate level of data protection is ensured in the specific country where the data recipient is established and/or carries out its business). Other mechanisms may also be used to ensure adequate data protection, such as standard contractual clauses enshrined in legal acts regulating personal data protection. |
|||||||||||||||||||||||||||||||||||||||||
+11 HOW CAN YOU CONTACT US WITH QUESTIONS OR IN ORDER TO EXERCISE YOUR RIGHTS? |
|||||||||||||||||||||||||||||||||||||||||
|
If you have any questions or want to exercise your rights, you can contact us in any way that suits you: - E. mail info@tringala.lt - By post to the address or visiting our head office at the address: Tringala, G. Baleženčio firma, Miškininkų g. 10, LT-62201 Alytus, Lithuania Please note that in order to implement your rights, we will need to establish your identity. If the scope of the request is unjustified or repetitive, we may charge you a fee for its fulfilment. Possible ways to verify your identity: - By submitting a document directly to the Firm and presenting a personal identity document to Firm employee; - If the request is submitted by post or via persons providing postal or other parcel delivery services: the application must be accompanied by a copy of the personal identity document certified by a notary public or in other manner established by legal acts; - If the request is submitted by email: it shall be signed with a qualified electronic signature. Signing the request with a qualified electronic signature allows the Firm properly identify the sender and ensure that the requested information or information on the fulfilment (refusal) of the requested action is only disclosed to the intended recipient. We will always try to find a mutually satisfactory solution, yet if you still have concerns about our acts or omissions, you can always contact the State Data Protection Inspectorate (details at https://vdai.lrv.lt ). |
|||||||||||||||||||||||||||||||||||||||||
+12 VALIDITY AND REVIEW OF THE PRIVACY NOTICE |
|||||||||||||||||||||||||||||||||||||||||
|
We regularly review this Privacy Notice for compliance with legal acts and personal data processed by the Firm. We may update or amend this Privacy Notice at any time. Such updated or amended Privacy Notice shall enter into force from the date of its posting on our website. This Privacy Notice was last modified on 11 November 2023. |
|||||||||||||||||||||||||||||||||||||||||
