ABOUT US AND OUR PRIVACY POLICY

In the capacity of controller of your personal data, ’) provides information on how processes your personal data and ensures their security as well as other information related to your personal data.

This Privacy Policy applies to you when you:

Visit our website www.expertlab.lt (the ‘Website’) and our accounts on social media;
contact us by email, by phone or by means of other electronic communications (e. g. by completing an enquiry form on the Website);
conclude an agreement/contract with us under which we provide services to you;
are our partners, suppliers or counterparties, or our cooperation is based on other grounds;
register for and participate in our events; subscribe to our newsletters;
apply for a job vacancy in our organisation or you want to do a traineeship;
contact us on other matters.

For the purposes of this Privacy Policy, personal data (the ‘Personal Data‘) means any information relating to an identified or identifiable natural person, directly or indirectly, in particular by reference to your name, surname, email address etc.

The Website may contain links to external websites (e. g. to social networks). Please note that the Privacy Policy does not apply when you visit such external websites. Prior to entering your Personal Data on such websites or using offers therein, please review their privacy policies and other terms and conditions.

ExpertLab maintains confidentiality of the Personal Data according to current legislation and implements technical and organisational measures aimed at protecting the Personal Data from unauthorised access, disclosure, accidental loss, modification or destruction or other unlawful processing.

ExpertLab processes the Personal Data in accordance with this Privacy Policy, the General Data Protection Regulation (2016/679) (GDPR) and other applicable legal acts governing protection of personal data.

This Privacy Policy may be amended in future having regard to amendments to legal acts and changes in the ExpertLab‘s activities, therefore, we recommend that you should familiarise yourself with the Privacy Policy from time to time.

YOUR PERSONAL DATA COLLECTED BY US. PURPOSES AND TERMS OF PERSONAL DATA PROCESSING

We process the Personal Data of various categories depending on the type of services or our cooperation. In each case, we ensure that only personal data which are necessary for each specific purpose are processed. Your Personal Data are processed for the following purposes:

The purpose of providing consulting services

We will process your Personal Data in order to fulfil our obligations and ensure smooth cooperation until complete performance of our agreement:

First name, surname, date of birth, personal ID number, taxpayer ID, address of place of residence / place of work, telephone number, email address, other communications details (such as social network account details etc.), details on correspondence, employer and job title; data on clients‘ representatives, employees, beneficiaries as well as other data pertaining to pre-contractual relationships or performance of agreements/contracts concluded between you and us.

We do not process special categories of personal data such as data on persons‘ health, religious beliefs, sexual orientation, record of criminal conviction; however, we can process such data in certain exceptional cases where this is required exclusively for the provision of our services or by imperative legal provisions.

Personal data required for the provision of consulting services are stored for 10 (ten) years after the date of expiry of the last service agreement concluded between you and us, except in cases where a longer term for retention of such data is established by law.

The purpose of administration and accounting

We will process your Personal Data the purposes of recording and storing agreements/contracts concluded between you and us, managing payments and debts, and keeping accounts:

First name, surname, personal ID No (if collecting such information is mandatory), taxpayer ID, employer and job title, address of place of residence / place of work, email address, telephone number, bank account No, other details required for accounting documents, and other mandatory information required for the performance of functions (including employer functions).

Personal data required for administration and accounting purposes are retained for statutory periods, and where no term of retention is established by law, the data will be stored for 10 (ten) years after the date of expiry of the last service agreement concluded between you and us.

The purpose of Prevention of money laundering and terrorist financing

We may be subject to obligations set forth in the Republic of Lithuania Law on the Prevention of Money Laundering and Terrorist Financing (the ‘Law‘). In providing services to you, we will process the Personal Data in order to perform our obligations in accordance with the Law and implementation of the ‘know your customer‘ principle.

For the anti-money-laundering and terrorist financing prevention purposes (as the case may be), we collect the Personal Data on customers, their representatives, employees and final beneficiaries as well as their family members: first name, surname, email address, telephone number, personal ID No, nationality, address of place of residence, details of personal ID documents (document type, number, expiry date, issuing state, photograph in the document and specimen of signature), information on whether the client/family members are politically exposed persons (PEPs), source of income, information on the person, and other data processed by us where it is necessary for compliance with a legal obligation applicable to us.

The Personal Data necessary for the anti-money-laundering and terrorist financing prevention purposes are stored:

Entries in the registers are stored, either in a hardcopy format or in an electronic data carrier, for 8 years after the expiry/termination of a contract or a business relationship with the customer;
Copies of the customer‘s personal identity document, beneficiary identification data, direct video transmission/broadcasting records, other data obtained in the customer identification process, invoice and/or contract documentation (original copies) are stored for 8 years after the expiry/termination of a contract or a business relationship with the customer;
Business correspondence with the customer is stored for 5 years for 8 years after the expiry/termination of a contract or a business relationship with the customer, either in hardcopy or electronic format;
Documents/data evidencing a monetary transaction/contract and other documents and data related to monetary transaction/contracts that have legal force are stored for 8 years after the date of the transaction/contract.
Information that documents results of an investigation is stored for 5 years either in hardcopy format or electronically.

The purposes of organising and holding events, sending invitations to events

We intend to invite you to training events, workshops and other events organised by us. Please be aware that photos of you may be taken or you may be filmed during events. If you disagree with the use of your image, please inform us prior to or after the event.

We will process your Personal Data for the purposes of organising and holding events and inviting you to them:

First name, surname, email address, telephone number, job title and other data provided by you, if any.

The Personal Data necessary for organising and holding events as well as sending invitations are stored until you withdraw your consent, or for 5 years after the date of giving consent.

For direct marketing purposes

We may send you notices, news, offers and other information on our services.

We may process the following Personal Data for direct marketing purposes:

First name, surname, email address, telephone number, job title and other data provided by you, if any.

The Personal Data necessary for direct marketing purposes are stored until you withdraw your consent, or for 5 years after the date of giving consent.

For employment purposes

Personal data on candidates for job vacancies who have sent us their CVs and/or motivational letters directly to the email address provided on the Website or through a link provided on the Website, through job advertisement portals or otherwise, are processed for the purposes of the candidates‘ selection for job vacancies or internship places. We process such personal data on candidates on a consent basis; you give your consent by providing your data to us when applying for a job or internship.

We process the following Personal Data for employment purposes:

First name, surname, date of birth, telephone number, employer, email address, address of place of residence, educational attainment, foreign language proficiency, preferred job, preferred pay, personal qualities, work experience: last employer, service record, position; other work experience; other information provided in the CV, letter of reference and/or motivational letter.

Personal data required for employment purposes are stored until the recruitment process is closed and an employment contract is concluded with the candidate.

Administration of queries

We process your Personal Data when you write us an email, complete a query form on the Website, call us or visit our offices.

For the purposes of queries received by means of electronic communications, we can process the following Personal Data:

First name, surname, IP address, telephone number, email address, address of place of residence/workplace, name of organisation you are representing, or other data provided by you to us.

Personal data required for the query administration purposes are stored for 2 (two) years from the date of receipt of your query.

Administration of social network accounts

For the purposes of administration of accounts on social networks (i. e. Facebook and LinkedIn), we will collect the data that you will provide to us as social network users by commenting, writing messages, pressing ‘Like’ and ‘Share’ and expressing your emotions otherwise, and other communication.

Currently we have the following social network accounts:

Linkedin – https://www.linkedin.com/company/expertlab-consulting/

Facebook – https://www.facebook.com/expertLabconsulting

We may process the following Personal Data for the purpose of administration of social network accounts:

Your personal data that you provide voluntarily according to the social networks‘ privacy rules: your social network profile name, profile photo, public comments provided in our accounts, as well as your queries to us.

We would like to remind you that information in Facebook and Linkedin accounts is stored on the terms and conditions set by the social network owners and according to your privacy settings. We recommend that you should read privacy notices of the third parties specified above and contact them directly if you have any questions as to the use of your personal data by such parties.

Storage of your Personal Data in our social network accounts: We will be able to view your personal data in our social network accounts as long as we use such accounts, unless you delete your Personal Data from them, ask us to delete them, or we delete them as part of management of the information in our accounts.

GROUNDS FOR THE PROCESSING OF YOUR PERSONAL DATA

. An agreement/contract concluded by and between you and us that provides a legal ground for the processing of your Personal Data.
. A consent signed by you whereby you grant us the right to process your Personal Data for the purpose specified in the consent, and only for such purposes (e. g. direct marketing purposes).

Legitimate interest. In certain cases we may process your Personal Data on the ground of legitimate interest in order to perform tasks arising from out activities, provided that such interest prevails over your interests and fundamental rights.

Legal obligation. Processing of the Personal Data is necessary for the fulfilment of a legal obligation we are subject to.

THIRD PARTIES TO WHOM WE MAY TRANSFER YOUR PERSONAL DATA

We have the right to transfer your Personal Data for processing to third parties that assist us in the performance of contracts concluded with you, such as external consultants, translators, notaries, lawyers etc. as well as to personal data processors hired by us, e. g. IT companies, database administration service providers, cloud service providers, companies providing accounting, advertising and marketing services etc. We request that the data processors store, process and treat the Personal Data responsibly and according to our instructions.

Your Personal Data may be disclosed to third parties also when this is required by applicable laws, e. g. to law enforcement bodies (the police or supervisory bodies) or in order to secure our rights or rights of our clients as well as security of our staff and resources.

We normally process the Personal Data within the territory of the European Union and the European Economic Area (EU/EEA) but in certain cases your Personal Data may be transmitted beyond the EU/EEA. Your Personal Data can be transmitted beyond the EU/EEA provided that the following conditions are fulfilled:

The data can only be transferred to our reliable partners with whom we have concluded agreements the standard terms and conditions of which have been approved by the European Commission and which ensure security of your Personal Data;
We have received a specific permission for such transfer from the State Data Protection Inspectorate of the Republic of Lithuania;
The European Commission has taken a decision on the suitability of the state of establishment of our partner, i. e. security of appropriate level is ensured; or
You have given your consent to the transfer of your Personal Data beyond the EU/EEA.

RIGHTS OF A DATA SUBJECT

Information about your rights related to the processing of your Personal Data by ExpertLab, and the exercise of such rights is provided below. For more information about the exercise of your rights please contact us using the email address provided in this Privacy Policy.

Right of access. You have the right to request access to your Personal Data processed by us. This right includes, e. g. the right to be informed about who processes your Personal Data, what categories of the Personal Data are processed and for what purpose.

Right to rectify data. You have the right to request that ExpertLab rectifies any incorrect or incomplete data.

Right to delete data. You may also request deletion of your Personal Data if they are no longer necessary for the purposes for which they were collected, or if you believe that the data processing is unlawful or that the Personal Data must be deleted to prevent a breach of a legal requirement. In cases where legal acts in a certain jurisdiction prohibit us from deleting the data stored and processed by us, we will not be able to honour your request but we will inform you about the relevant obligations.

Right to restrict data processing. You have the right to request that ExpertLab restricts processing of your Personal Data. You may exercise this right when:

You contest accuracy of the data (restriction will apply to a period during which we can check accuracy of the data);
Processing of the Personal Data is unlawful but you disagree with the deletion of the data and request restriction of their processing instead;
The Personal Data are no longer necessary to us for processing purposes but are necessary to you in order to make, satisfy or defend legal claims;
You object to the data processing on the ground of legitimate interest (until we check whether our legitimate interest prevails over the reasons provided by you).

Right to data portability. If your Personal Data are collected automatically or under a mutual legal relationship, you may request that we provide your Personal Data in a structured, commonly used and machine-readable format. You have the right to request to transmit those data to another controller, however, this is only possible subject to a technical feasibility.

Right to object to data processing. In cases prescribed by the law you have the right to object to the processing of your Personal Data including e. g. processing for marketing purposes.

Right to withdraw your consent. If the data processing is performed on the ground of your consent, you have the right to withdraw your consent to such data processing at any time.

Right to object to the processing for direct marketing purposes. You may refuse, at any time, from notices sent by us in which we inform you about our events or provide any other information which, in our opinion, may be of interest to you. You can express your objection at any time by contacting us.

YOUR OBLIGATIONS TO US

You are responsible for ensuring that the data provided by you are accurate, correct and complete. You must inform us without delay about any change in the Personal Data provided to us.

If you disclose to us any Personal Data related to a third party (e. g. your employee, board member, colleague, counterparty etc.), you must ensure that they familiarise themselves with this Privacy Policy and that you obtain their consent prior to presenting their data to us.

We do not assume liability for any damage suffered by you due to the fact that you had provided incorrect or incomplete Personal Data or had failed to inform us about changes therein.

INFORMATION SOURCES

You have the right to approach us in order to put queries, withdraw consents, submit applications for the exercise of the data subject‘s rights and complaints concerning processing of the Personal Data.

Our contact details are published on www.expertlab.lt; you can also write us an email to labas@expertlab.lt.

If you are concerned about a potential breach of privacy or another offence, please write us to labas@expertlab.lt or using any other contact details provided on the Website. The person in charge will consider your complaint and provide information about further steps.

If you are dissatisfied with the outcome of consideration of your complaint, you have the right to file a complaint to the State Data Protection Inspectorate and to apply to a competent court.

Details of the institution responsible for compliance with legal acts on the protection of personal data:

State Data Protection Inspectorate

L. Sapiegos g. 17, Vilnius

Tel. + 370 5 279 14 45

Email: ada@ada.lt

AMENDMENTS TO THE PRIVACY POLICY

We can update or amend this Privacy Policy at any time. The updated/amended Privacy Policy will enter into effect on the day of its publication on the Website.

The updated Privacy Policy will be visible on the Website immediately.

The date of the last update specified below shows when the Privacy Policy was last updated.

Last update: 27 September 2023.