Privacy policy - Gynybos paramos fondas

Privacy Policy

Data Controller Details:

Organization: Gynybos Paramos Fondas/National Defence Foundation
Address: Rinktinė 38 – 15, Vilnius, Lithuania
Telephone: +370 61 85 8234
Legal Entity Code: 304050085

Compliance with Legal Frameworks: The Institution processes your personal data in compliance with the General Data Protection Regulation (GDPR, Regulation No. 2016/679), and other pertinent legal frameworks established by the Republic of Lithuania and the European Union.
Data Protection Officer (DPO):

Name: Vaidotas Malinionis
Contact: Email: info@fondas.eu | Tel: +370 61 82 8234
Role: The DPO oversees data protection strategy and implementation to ensure compliance with GDPR requirements.

Lawful Basis for Data Processing: The Institution processes personal data based on:

Consent: Explicit consent received from you for one or more specific purposes.
Contractual Necessity: Data needed for the performance of contracts.
Legal Obligations: Data processing required to fulfill legal responsibilities.

Data Processing Practices:

Lawfulness and Transparency: Data is processed lawfully, transparently, and fairly.
Purpose Limitation: Data is collected for specific, explicit, and legitimate purposes.
Data Minimization: Only the necessary amount of data is collected.
Accuracy: Data is kept accurate and up-to-date.
Security and Confidentiality: Measures are in place to ensure data security and its storage only for the duration necessary to fulfill its intended purposes

What personal data and for what purposes does the Institution process? *

*No.*	*Purpose of data collection*	*Legal basis for data collection*	*Description of categories of personal data*	*Data retention deadlines ^[1]*
1.	Customer service	Consent	Name, telephone number and/or e-mail address of the natural person or natural person representing the legal person, the legal person represented and his details (business name, contact details of the legal person).	5 years after the service was provided
2.	Conclusion and execution of contracts	Contract	Name, e-mail address, telephone number, individual (where customer/supplier – natural person) – business certificate/certificate and settlement account number.	10 years after the end of the contract
3.	Conduct of public procurement	Contract.Legal obligation: Law on public procurement	Name, e-mail, contact phone number of the vendor representative or the contact person responsible for submitting the proposal.In individual cases where the supplier’s qualifications are checked, information on the specialists, staff, experts offered by the supplier shall be available: CV (name, date of birth, telephone, address of residence), proof of education or marriage certificates/divorce certificates include the personal identification number, name. Criminal record.	Up to 5 years (purchase documents after the end of purchase);10 years (contracts after their expiry)
4.	Provision of advice	Legal obligation: Order No. 4-372 of the Minister of Economy of the Republic of Lithuania of 22^th June, 2018, the Articles of Association of Enterprise Lithuania were approved.	Name, contact details (telephone number, e-mail address, municipality) of the person consulted.	5 years after the consultation was given (for impact assessment purposes).
5.	Administration of a network of business consultants	Contract.Legal obligation: Order No. 4-659 of the Minister of Economy of the Republic of Lithuania of 16^th November, 2017 on the approved description of the Institution and administration of the business consultants’ network.	Business consultants – name, surname, personal number, settlement account number, contact information (telephone number, e-mail address), information on income (if the consultant applying is a natural person), information on education, professional and Institutional competencies.Persons recommending customers – name, contact details (telephone number, e-mail address) of the person. Entities receiving consultant services and their staff – name, surname, personal number, contact details (telephone number, e-mail address), settlement account number.	10 years after the end of the contract with the consultant
6.	Administration of the competency voucher	Contract. Legal obligation: Order No. 4-663 of the Minister of Economy of the United States of 27/10-2016 on the approval of the conditions and procedures and description of the inclusion of training providers and training programs in the list of training providers and training programs.	Customers and their employees (representatives of training providers) – name, contact details (telephone number, e-mail address).Customers and their employees (providers of training programs) – name, contact details (telephone number, e-mail address). Customers and their employees (accountants of training providers) – name, criminal record information. Subjects who have received training services and their staff – name, gender, age, date of birth, education.	10 years after the end of the contract with the training provider
7.	Institution of events	Legal obligation: Order No. 4-372 of the Minister of Economy of the Republic of Lithuania, the statutes of the Public Institution Enterprise Lithuania were approved. Description of the ongoing project.	Name, contact details (telephone number, e-mail address, city), name of legal person represented, individual activity.	5 years after the service is provided – for impact assessment purposes
8.	Startup Visa Application Administration	Order of the Minister of Economy of the Republic of Lithuania of 26^th January, 2017 “Regarding the assessment procedure, which determines whether the activities of the company to be established are related to the introduction of new technologies or other innovations significant for the economic and social development of the Republic of Lithuania and whether the foreigner has the necessary qualifications, financing and business plan”.	Applicant’s name, nationality, personal contact details (telephone number, e-mail address, address of residence), professional experience, startup product, name, business model, audio and video recording of the interview with the applicant.	10 years from the date of conclusion of the contract.The personal data of unapproved applicants shall be stored for 1 year
9.	Administration of exporters’ database (EDB/CRM)	Legal obligation: Order No. 4-372 of the Minister of Economy of the Republic of Lithuania of 22^th June, 2018, the Articles of Association of Enterprise Lithuania were approved. Description of the implemented project.	Lithuanian customers and their employees – name, contact details (telephone number, e-mail address), data of the representative of the customer registered in the database (name, code, address, number of employees, turnover, export share from turnover, year of establishment, sectors in which the company works, descriptions of the company’s export market, products and services, information about the certificates held by the company, information about what events organized by The Business Company in Lithuania participated in, what services we provided to it.Foreign clients and their employees – name, contact details (telephone number, e-mail address, country) of the consulting person, represented by the name of the legal person represented.	5 years after registration of EDB (CRM)
10.	Start-up database administration	Legal obligation: Order No. 4-372 of the Minister of Economy of the Republic of Lithuania of 22^th June, 2018, the Articles of Association of Enterprise Lithuania were approved.	Names, contact details (telephone number, e-mail address), data of the legal person represented (name, code, address, number of employees, turnover, year of establishment, descriptions of products and services, etc.) of the representatives of the customer registered in the database.	5 years after registration of EDB
11.	Administration of membership of the co-operation centers “Spiečius”	Contract	Name, contact details (e-mail address, telephone number) of the natural person representing the Party to the contract. Where a Party to the contract, a natural person, is additionally requested to provide information on the personal identification number and settlement account number.	10 years after the end of the contract
12.	Sending newsletters	Consent	Name, e-mail address.	5 years after registration or such until the customer refuses to receive the newsletter
13.	Impact assessment of the services provided	Legal obligation: Order No. 4-372 of the Minister of Economy of the Republic of Lithuania of 22^th June, 2018, the Articles of Association of Enterprise Lithuania were approved.	Customer name, e-mail address, telephone number, legal person represented, company code, place of establishment (city), other legal entity data.	5 years after the service was provided
14.	Use and protection of existing material assets (video surveillance)	Legitimate interest	Indoor footage. Institution shall carry out the filming of the premises only if necessary to monitor and protect the property (premises, equipment) under management.	1 month
15.	Securing the quality of business advice number 1824(chat audio)	Consent	Audio of a conversation with a customer. The Institution shall record an audio conversation with the client for the purpose of quality assurance.	1 yearafter the service was provided
16.	Personnel selection	Consent	Applicant’s name, personal contact details (telephone number, e-mail address, address of residence), professional experience, information in support of qualifications and competences (language understanding, computer skills, Institutional and social skills) and other personal information provided by the applicant.	3 months, assessing the risks arising from the chosen applicant during the trial period
17.	Publicity of the Institution’s activities	Consent	Name, photo.	1 year after the date of acceptance
18.	Online pre-acceleration program services	Consent Legal obligation: Order No. 4-372 of the Minister of Economy of the Republic of Lithuania of 22^th June, 2018, the Articles of Association of Enterprise Lithuania were approved.	Name and e-mail address of the natural person applying to Institution.	5 years after the service was provided
19.	Development and administration of the database of the social business platform, services of using the electronic social business learning program	Consent Legal obligation: Order No. 4-372 of the Minister of Economy of the Republic of Lithuania of 22^th June, 2018, the Articles of Association of Enterprise Lithuania were approved.	Names, contact details (telephone number, e-mail address) of the representatives of the customer registered in the database.	5 years after the service was provided

¹The Institution shall store your data for no longer than is necessary to achieve the purpose for which it was collected or for the period provided for by the legislation.

*Not mentioned here are the purposes of internal administration (personnel management, management and use of available material and financial resources (including public procurements and bookkeeping), and clerical management) staff, suppliers of goods and services and their employees’, and customers’ and their employees’ personal data.

Special Categories of Personal Data: Non-governmental organization Gynybos Paramos Fondas does not collect or process special categories of personal data, such as those related to racial or ethnic origin, political, religious, philosophical beliefs, trade union membership, health, sex life, or criminal record, except for personnel data processed for internal administration purposes.

Sources of Personal Data and Usage:

Direct Collection: We collect personal data directly from you when you apply for and use our services, fill in registration forms for events, or register in databases managed by the Institution.
From Legal Entities: We receive data from legal entities when you are a representative, employee, owner, or otherwise associated with these entities.
From Third Parties: Data may also be obtained from third parties, such as the Republic of Lithuania Statistics Department and UAB Credit info Lietuva, for purposes related to the legal entity you represent, primarily for impact assessment.

Third-Party Data Transfer:

Written Agreement: Data may be transferred to third parties based on a written agreement.
Informed Consent: Transfers occur only after you have been informed in advance and have given express consent to such transfers.
Advance Notice: You will be notified in advance of any actions the Institution takes regarding the transfer of your personal data.

Cookie Policy:

Definition: Cookies are small data files transferred from a website to your computer’s hard disk, used to store and retrieve information about your browsing habits.
Purpose: Cookies enhance user experience by remembering login details, maintaining shopping cart contents, and displaying content tailored to your interests.
Usage: Cookies are employed by most websites to tailor and improve the services provided to users.

Cookie List

Cookie	Retention time limit	Description	Source
Required cookies		These cookies allow the website to memorize things you choose (such as your city, language, or region) and offer enhanced features that are personalized to you. The information collected by these cookies can be made anonymous and cannot monitor your browsing activity on other websites.
_ga	2 years	The cookie collects information about user behavior on the site and is used to store statistical information.	Google Analytics
Optional cookies
_gid	24 hours	The cookie collects information about user behavior on the site and is used to store statistical information.	Google Analytics
FB_PIXEL_ID	180 days	The cookie collects information about user behavior on the site and is used for remarketing.	Facebook
_hjid	365 days	The cookie collects information about user behavior on the site and is used to store statistical information.	Running through hotjar.com

Data Security: Non-governmental organization Gynybos Paramos Fondas takes robust institutional and technical measures to protect your personal data from accidental or unlawful destruction, alteration, disclosure, and any other unauthorized processing. Our staff are committed to confidentiality and are legally bound to protect the information they access during their duties.

Your Rights: As a data subject, you are entitled to several rights regarding your personal data:

Right to be Informed: You have the right to be informed about the processing of your data.
Right of Access: You can request access to your personal data and how it is processed.
Right to Rectification: You may ask to correct or update your personal data.
Right to Erasure: Also known as the ‘right to be forgotten’, allowing you to request the deletion of your data.
Right to Data Portability: You can request a transfer of your data to another entity.
Right to Restrict Processing: You may request that the processing of your data be limited.
Right to Object: You have the right to object to the processing of your personal data.

Enforcing Your Rights: To exercise these rights, please contact us via email at info@fondas.eu or by phone at +370 61858234. You can also file complaints or send notices to our organization. We will respond to your request within 30 calendar days of receipt.

Privacy Policy Validity and Updates: This Privacy Policy is effective from 25th May 2018. Any updates to our privacy practices will be posted on our website at www.fondas.eu. We encourage you to regularly review our policy to stay informed of how we are protecting your information.