Privacy Policy

PRIVACY POLICY OF THE PARTNERSHIP OF LAWYERS JANKAUSKAS AND PARTNERS

PRIVACY POLICY

The Privacy Policy (hereinafter – Policy) governs the principles of collection, use and storage of personal data of the visitor of website of the Partnership of Lawyers Jankauskas and Partners (hereinafter – Partnership), www.jankauskas.eu, and other data subjects, and establishes its processing objective and tools.

The Policy was prepared in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) hereinafter – Regulation), Law on Legal Protection of Personal Data of the Republic of Lithuania, Law on Electronic Communications of the Republic of Lithuania, and instructions of the State Data Protection Inspectorate.

This Policy informs the website’ visitors and other data subjects about their personal data processing.

USED CONCEPTS

Personal data shall mean any information relating to a natural person (data subject); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

Data subject shall mean a natural person – a Partnership’s client or website’s visitor, whose data are processed by the Partnership.

Consent of data subject means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.

Rights of data subject mean the data subject’s capacity to participate and control activities of the data controller and/or processor, when his/her personal data are processed – to know and be informed about his/her personal data processing; to have access to processed personal data and processing modes; to demand to rectify, to erase personal data or to suspend personal data processing actions, except for storing, when the data are processed in violation of legal acts; to object to processing of personal data; to demand to erase his/her personal data; to receive the data related to the data subject that have been provided to the data controller; to lodge a complaint with the supervisory authority (State Data Protection Inspectorate).

Data controller means Partnership of Lawyers Jankauskas and Partners, a legal entity incorporated under the laws of the Republic of Lithuania, code 302630495, registered address at 91, Kestucio str., LT-44299 Kaunas.

Data processor shall mean a legal or a natural person, authority, agency or other institution processing personal data on behalf of the data controller.

Data recipient means a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients.

Data processing means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

Automated data processing means data processing actions that are performed by automated means completely or partially. These are any information and communication technologies that provide a possibility to track the actions of personal data processing down, for example, computers, communication networks, etc.

Cookie means a small text file that the website saves in the visitor’s computer or mobile connection device.

Personal data breach means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed.

Direct marketing means an activity intended for offering goods or services to individuals by post, telephone or any other direct means and/or for obtaining their opinion about the offered goods or services.

Other concepts used in the Policy correspond to the concepts defined in the Regulation and other legal acts governing personal data processing.

SECTION I

PRINCIPLES RELATING TO PROCESSING OF PERSONAL DATA

1. While processing your personal data, the Partnership shall follow the following principles:

• The Partnership shall process the personal data only for legitimate purposes specified in this Policy and shall not further process them in a manner that is incompatible with those purposes (principle of purpose limitation);
• Personal data are processed lawfully, fairly and in a transparent manner in relation to the data subject (principle of lawfulness, fairness and transparency);
• The Partnership shall process the personal data in such a way so that they were accurate and, where necessary, kept up to date (principle of accuracy);
• The personal data processing shall be limited to what is necessary in relation to the purposes for which they are processed (principle of data minimisation);
• Personal data shall be kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed (principle of storage limitation);
• Personal data shall be processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures (principle of integrity and confidentiality);
• The Partnership shall be responsible for, and be able to demonstrate compliance with, the principles specified in this Policy (principle of accountability).

SECTION II

PURPOSES OF PERSONAL DATA PROCESSING

2. The Partnership shall process your personal data for the following purposes:

• To fulfil contractual obligations;
• To perform the functions specified in the Law on the Bar of the Republic of Lithuania and other legal acts;
• To achieve the Partnership’s legitimate interests, in order to manage and administer properly the website, to monitor its attendance, to ensure its security, to improve its functioning, and to facilitate the search for the information you need. Besides, in order to adjust the content in social networks for your needs, and to memorize the information relevant for you;
• For direct marketing purposes, on the basis of your consent, so that you were informed about the services that we may provide.

3. The Partnership shall collect and process the following data for the purposes specified in Clause 2 herein:

• Personal data: name, surname, year of birth;
• Contact data: e-mail address, place of residence, telephone number
• Other data that you provide at the time of conclusion and in the course of execution of the contract for legal services;
• Personal data that we have to process because of provided legal services;
• Other personal data collected from legal sources, while providing legal services;
• Logging-in IP addresses, time, data about network and location collected with the help of cookies, upon receipt of your consent.

SECTION III

COLLECTION AND PROCESSING OF PERSONAL DATA

4. We receive personal data from you when you have to provide them under legal acts or when you provide the data voluntarily. Besides, the personal data may be received from third persons on their initiative or in response to the Partnership’s inquiry about the data necessary to perform the function specified in the Law on the Bar of the Republic of Lithuania and in other legal acts.
5. The Partnership shall also process your personal data when you contact it by general e-mail, when you make inquiries, ask questions or send information using the contact data provided on the Partnership’s website or social networks. In such cases, the Partnership shall process your personal data in order to administer the inquiries, to ensure quality of the provided legal services, to protect and defend its legitimate interests.
6. Regardless of the collection mode, the data shall be stored within the scope and for the period necessary to achieve the set goals, however, not longer than for the terms set in the Index of General Storage Terms of the Document (current edition) approved by Order No. V-100 of the Chief Archivist of Lithuania of 09 March 2011, or in other act governing internal procedure of the Partnership.

SECTION IV

RIGHTS OF THE DATA SUBJECT

7. As a data subject, you have the right:

• to know (be informed) about the processing of your personal data;
• to have an access to your personal data and its processing. You have the right to ask the Partnership to provide you the information what your personal data they are processing and for what purpose;
• to demand to rectify your personal data if it is determined that the Partnership is processing inaccurate or incomplete your personal data. In such a case, you may demand to rectify or supplement your personal data;
• to request erasure of your personal data (“right to be forgotten”). This right is valid where one of the following grounds applies:

• the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
• you have withdrawn consent on which the processing is based, and where there is no other legal ground for the processing;
• you object to personal data processing and there are no overriding legitimate grounds for the processing;
• the personal data have been unlawfully processed.

• to demand to restrict your personal data processing. You shall have the right to obtain from the Partnership restriction of processing where one of the following applies:
  • you contest the accuracy of the personal data for a period enabling the Partnership to verify the accuracy of the personal data;
  • the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead;
  • the Partnership no longer needs the personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defence of legal claims;
  • you have objected to processing pending the verification whether the legitimate grounds of the Partnership override those of the data subject.
• to object to your personal data processing. You shall have the right to object to processing of your personal data, the processing of which is not compulsory. Such disagreement may be expressed by leaving empty certain boxes of the documents, or by submitting an application to stop processing optional personal data. Upon your request, the Partnership shall provide you the information, the processing of which data is optional. Upon receipt of the request to stop processing of optional personal data, the Partnership shall stop the processing immediately, unless this would contradict to the legal acts. You shall be notified thereof.
• right to data portability; you shall have the right to receive the personal data concerning you, which you have provided to the Partnership, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from the Partnership.
• to lodge a complaint with a supervisory authority. You shall have the right to lodge a complaint with the State Data Protection Inspectorate regarding the Partnership’s action related to your personal data processing.

SECTION V

SAFEGUARDS RELATING TO PERSONAL DATA

8. In order to protect personal data, the Partnership is using and ensuring appropriate technical or organisational measures intended to protect the personal data against accidental or unlawful destruction, modification, disclosure or any unlawful processing
9. Only the persons, who have the right of access to certain documents, shall have the right to access your personal data collected and processed by the Partnership. This right may be used only when it is necessary for achievement of the purposes specified in this Policy.
10. The Partnership shall ensure appropriate management of the network, maintenance of information systems and implementation of other technical measures that are necessary to safeguard your personal data protection.

SECTION VI

TRANSFER OF PERSONAL DATA TO THIRD PARTIES

11. Your personal data may be disclosed to third parties that are providing services to the Partnership that ensure appropriate provision of legal services. In such cases, your personal data shall be disclosed to the third parties in the scope necessary to provide the services appropriately.
12. Your personal data may be disclosed to the law enforcement authorities in accordance with the legal acts of the Republic of Lithuania.
13. In all other cases, your personal data may be disclosed to third parties only if you give a consent.

SECTION VII

PERSONAL DATA OF APPLICANTS TO JOB VACANCIES

14. The Partnership shall process the personal data of applicants to job vacancies only for the purpose of their selection and employment. It shall have the legitimate interest to assess the applicant’s suitability for a job vacancy.
15. The Partnership shall get the personal data of applicants to job vacancies directly from the applicants, who send their curriculum vitae (CV) to the Partnership or when the applicants announce the CV publicly.
16. The personal data of the applicants shall be stored until the selection process to free vacancy is finished. If the consent for further storage of the applicant’s personal data is not received, all the personal data of the applicant, who has not passed the selection procedure, shall be destroyed after the selection procedure is over.

SECTION VIII

USE OF COOKIES

17. The information collected with the help of cookies allows the Partnership to improve functioning of its website, securing the opportunity to you to search for information conveniently and efficiently, and providing you with the variety of services.
18. The cookies used on the Partnership’ website are the following:

Cookie’s name	Purpose of data processing	Creation moment	Validity term
cookie_notice_accepted	Saved information or the notice about the cookies is clicked	Upon clicking on the notice.	1 month
pll_language	Used to save the language of the website’s visitor.	Upon entrance to the website.	1 year
_ga	Used to collect statistical information about the visits to the website.	Upon entrance to the website.	2 years
_gat	Used to determine frequency of inquiries.	Upon entrance to the website.	10 minutes
_gid	Used to identify the website’s visitor.	Upon entrance to the website.	24 hours

19. The consent to save the cookies is expressed by pressing the button “I AGREE”, when the following notice appears on the website: “We inform that the cookies are used in this website to safeguard its functioning and to collect the statistical information. If you agree, press the button “I agree” or keep browsing. You may withdraw your consent at any time, by changing your browser’s settings and by deleting the saved cookies.”
20. The consent may be withdrawn at any time, by changing the browser’s settings and by deleting the saved cookies. The way how to do this depends on the operating system and the browser you are using.
21. When the saved cookies are deleted, some functions of the Partnership’s website may not operate as foreseen.

SECTION IX

SOCIAL NETWORKS

22. The information that you provide to the Partnership using the social media is controlled by the social network’s controller. At present the Partnership has an account on Facebook, the privacy policy of which is available at https://www.facebook.com/privacy/explanation.
23. As the Partnership cannot control content of websites of third parties and the cookies that they use, it is recommended to read their privacy policies and to contact them directly if any questions about your personal data use arise.

SECTION X

AMENDMENTS OF THE PRIVACY POLICY

24. This Policy shall be regularly reviewed and updated. Its amendments shall be announced on the website jankauskas.eu.

SECTION XI

CONTACT INFORMATION

25. If you have any questions, comments or complaints relating to your personal data collected, used and stored by the Partnership, you are welcome to send them to the following e-mail address: info@jankauskas.eu.