1. General provisions
1.1. JSC "GeoNovus" (hereinafter referred to as the "Organizer") respects the right to privacy of all Baltic International Student SketchUp Competition (hereinafter referred to as the "Competition") participants, including visitors to the Competition website www.sketchupbaltic.eu (hereinafter referred to as the "Participants") and undertakes to ensure the protection of their personal data and the enforcement of their rights as data subjects.
1.4. When processing your personal data, we adhere to the 2016 April 27 Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46 / EC (hereinafter referred to as the Regulation) - "GDPR"), the provisions of the Law on Electronic Communications of the Republic of Lithuania (hereinafter - "ECL") and other directly applicable legal acts regulating the protection of personal data, as well as instructions of data protection supervisory authorities (in Lithuania - the State Data Protection Inspectorate).
2. What terms are used?
2.1. Personal data means any information relating to an identified or identifiable natural person (data subject); an identifiable natural person is one who can be identified, directly or indirectly, in particular by an identifier such as a name, a personal identification number, a location and internet identifier, or by one or more physical identifiers of that natural person, characteristics of physiological, genetic, mental, economic, cultural or social identity.
2.2. Data subject - a natural person - a participants of the Competition (including visitors to the Website) whose personal data is collected by the Organizer.
2.3. The consent of the data subject shall be any freely given specific and unambiguous expression of the will of the data subject, duly informed, in a statement or in an unambiguous manner in which he or she consents to the processing of personal data concerning him or her.
2.4. "Processing of data" means any operation or sequence of operations on personal data or sets of personal data carried out by automated or non-automated means, such as collecting, recording, sorting, organizing, adapting or modifying, extracting, accessing, using, disclosing, transmitting, distributing or otherwise making them available, as well as collating or merging them with other data, restricting, deleting or destroying them.
2.5. "Processor" means a natural or legal person, public authority, agency or any other body which processes personal data on behalf of the controller.
2.6. Data controller - JSC GeoNovus, a Organizer established in accordance with the laws of the Republic of Lithuania, code 301695814, registered office S. Žukausko str. 17, 08234 Vilnius, Republic of Lithuania, data about which is collected and stored in the Register of Legal Entities.
2.7. A cookie is a small piece of textual information that is automatically generated when you browse the Website and is stored on your computer or other terminal device.
2.8. Direct marketing is the activity of offering goods and services to individuals and / or seeking their opinion on the goods or services offered by post, telephone or other means.
3. What personal data do we collect?
3.1. The Organizer collects and further processes the following personal data of you, which you provide when registering and / or ordering services on the Website or ordering services or goods in any other way: name, surname, e-mail, telephone number, details of the provision of the service, information on consent and non-consent to the processing of personal data for direct marketing purposes, passwords, any other data that you provide in addition to your own initiative when registering and / or ordering and managing services.
3.2. 3.1. Your personal data referred to in point 1 is stored during the period of cooperation between the Organizer and you (during the provision of services) and for at least 10 (ten) years from the end of this period.
3.3. The Organizer collects and further processes this personal data of you, which you indirectly provide when registering and / or ordering services or goods, i.e. this data is automatically collected from the computers and / or mobile devices you use when you log in to the Website: the IP addresses and times of the logins, the browser used by the user and its version, the website you visited before accessing our Website, such as data collected using cookies and similar technologies related to web browsing, and so on.
4. For what purposes do we process your personal data?
4.1. The Organizer processes the above-mentioned personal data for the following data processing purposes: processing and administration of Competition process, identification of the Competition Participants in the Organizer's information systems, registering on the Website, handling documents related to the Competition, enforcement, direct marketing purposes.
5. How do we process your personal data?
5.1. We ensure that your personal data is: processed lawfully, fairly and transparently, collected for specified, explicit and legitimate purposes and not further processed in a way incompatible with those purposes, adequate, relevant and only necessary for the purposes for which it is processed , accurate and, where necessary, kept up to date shall be processed in such a way as to ensure adequate security of personal data through appropriate technical and organizational measures, including protection against unauthorized or unlawful processing of data and against unintentional loss, destruction or damage.
6. What rights do data subjects have?
6.1. You have the following rights of the data subjects, which we will exercise upon receipt of your request (by e-mail firstname.lastname@example.org; by sending it to S. Žukausko St. 17, 08234 Vilnius) and after you have duly confirmed your identity: your personal data and how they are processed, to demand the correction of inaccurate personal data related to you, as well as to demand that your personal data be incomplete, to demand that the Organizer delete personal data related to you, if: a. they are no longer necessary for the purposes for which they were collected or otherwise processed, b. You withdraw your consent and there is no other legal basis for processing your personal data, c. personal data has been processed unlawfully, d. on other grounds set out in the Regulation; require the Organizer to restrict the processing of your personal data, to receive personal data relating to you that you have provided to the Organizer in a structured, commonly used and computer-readable format (you also have the right to request the Organizer to transfer your personal data to another data controller); Personal data relating to you would be processed (eg for direct marketing or otherwise).
6.2. We inform you that you may file a complaint with the State Data Protection Inspectorate if you believe that your rights as a data subject have been violated. More information about the State Data Protection Inspectorate and the handling of complaints can be found here: www.ada.lt.
7. How do we process personal data for direct marketing purposes?
7.1. Only with your prior consent and in accordance with the provisions of the ECL, GDPR and the Regulations, we will send you the Organizer's e-mail newsletters, mail and / or inquire about the quality of existing services.
7.2. We process the following personal data for the purpose of direct marketing: name, surname, e-mail address.
7.3. Your personal data will be stored for direct marketing purposes until you opt out of receiving direct marketing communications.
8. Who do we provide your personal data to?
8.1. Access to your personal data by the Organizer's employees is granted only if it is necessary for the performance of their duties and only if the employee undertakes to observe the requirement of confidentiality.
8.2. The Organizer may provide your personal data to: data controllers who provide services to the Organizer and process your personal data on behalf of and for the benefit of the Organizer, law enforcement authorities, where there is a legal basis, to other third parties with your consent.
8.3. We only use data controllers who ensure that the appropriate technical and organizational measures are implemented in such a way that the processing complies with the requirements of the Regulation and that your rights as data subjects are protected.
8.4. We note that the above processors have the right to process your personal data only in accordance with our instructions.
8.5. The data processor may not use another data processor without the prior specific or general written permission of the Organizer (data controller).
8.6. Your personal data may also be provided in response to official requests from public authorities and the court, but only if the lawfulness of these requests is verified.