PRIVACY POLICY OF THE PRODUCERS AND IMPORTERS ASSOCIATION “GAMTOS ATEITIS”
1. Purpose and scope of this Privacy Policy
1.1. This Privacy Policy of the Producers and Importers Association “GAMTOS ATEITIS” has been prepared in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (the General Data Protection Regulation, hereinafter referred to as the “GDPR”).
1.2. The purpose of this Privacy Policy is to explain the principles we follow when processing personal data in connection with the services provided by the Producers and Importers Association “GAMTOS ATEITIS”, as well as to explain your rights as a data subject and our responsibilities as the data controller.
1.3. If you do not agree with this Privacy Policy or any part of it, unfortunately, we may not be able to provide you with some or all of our services.
1.4. This Privacy Policy explains what personal data we collect and process, why we use it, how long we keep it, and other relevant information. This information is important, so we encourage you to read it carefully.
1.5. Please note that this Privacy Policy may be amended, supplemented or updated from time to time. The latest version of the Privacy Policy will always be published on our website together with the date of the current version.
2. Information about the data controller and its activities
2.1. The Producers and Importers Association “GAMTOS ATEITIS” is a licensed packaging waste management organisation responsible for organising the management of commercial packaging waste.
2.2. Legal entity code of the Producers and Importers Association “GAMTOS ATEITIS”: 305991579.
2.3. Registered office address of the Producers and Importers Association “GAMTOS ATEITIS”:
Švitrigailos St. 11B, LT-03228 Vilnius, Lithuania.
3. Personal data we collect and process
3.1. We collect and process your personal data when you wish to use the services provided by the Producers and Importers Association “GAMTOS ATEITIS” or participate in educational campaigns, competitions or other events organised by us where personal data is collected.
Information about the personal data collected and processed, the categories of such data and the purposes for which it is processed will be provided in the description of the relevant service, educational campaign, competition or event on our website www.gamtosateitis.lt, or next to the relevant online or paper registration or data collection form.
4. Legal grounds for processing personal data
4.1. The Producers and Importers Association “GAMTOS ATEITIS” collects and processes the personal data described in Section 3 of this Privacy Policy on the following legal grounds:
4.1.1. Your consent, given under the conditions described in this Privacy Policy (Article 6(1)(a) of the GDPR).
4.1.2. Processing is necessary for the performance of a contract (Article 6(1)(b) of the GDPR), in accordance with the terms described for the relevant service.
4.2. One or more of the legal grounds listed above may apply to the processing of the same personal data.
5. How long we keep your personal data
5.1. The Producers and Importers Association “GAMTOS ATEITIS” processes the personal data described in Section 3 of this Privacy Policy until you withdraw your consent.
If you do not withdraw your consent, we will keep your personal data for no longer than one year after the relevant service has been provided or after the educational campaign, competition or other event during which the personal data was collected has ended.
Once you withdraw your consent or the retention period stated above expires, the personal data described in Section 3 of this Privacy Policy will be securely deleted or destroyed.
5.2. The Producers and Importers Association “GAMTOS ATEITIS” keeps records of your consent to the processing of your personal data, whether provided in writing or through a registration form, as well as any withdrawal of consent, for one year after the relevant service has been provided or after the educational campaign, competition or other event during which the personal data was collected has ended.
6. When we may share your personal data with third parties
6.1. We may share your personal data with third parties that help us provide our services or organise educational campaigns, competitions or other events.
6.2. The data processors we use may process your personal data only according to our instructions. They may not use your personal data for other purposes or disclose it to other parties without our permission.
They must also protect your personal data in accordance with applicable laws and the written agreements they have entered into with us.
6.3. Your personal data may also be disclosed to competent public authorities or law enforcement authorities, such as environmental protection authorities or law enforcement agencies, but only when they request such information and when disclosure is required or permitted by applicable law.
6.4. When organising individual educational campaigns, competitions or other events, the Producers and Importers Association “GAMTOS ATEITIS” may share your personal data with data recipients – third parties that receive personal data for their own purposes, for example, a company providing a competition prize.
In such cases, we will obtain your separate consent before sharing your personal data, and the relevant data recipients will be identified in the rules or terms of the specific project.
7. Your rights and how to exercise them
7.1.The GDPR gives you a number of rights regarding your personal data. You may exercise these rights freely, and we are responsible for ensuring that you are able to do so.
Your rights and the ways in which you can exercise them are described below.
7.1.1. Right of access to your personal data
You have the right to ask us whether we process your personal data.
You also have the right to access the personal data we process about you and to receive information about:
- the purposes for which your data is processed;
- the categories of personal data we process;
- how long your data is kept;
- the sources from which your data was obtained.
Most of this information is already provided in this Privacy Policy.
If you need additional information, please contact us by email at info@gamtosateitis.lt.
7.1.2. Right to correct your personal data
If the information you have provided to us changes, or if you believe that the information we hold about you is inaccurate or incorrect, you have the right to ask us to update, correct or complete it.
To exercise this right, please contact us by email at info@gamtosateitis.lt.
7.1.3. Right to withdraw your consent
Where we process your personal data based on your consent, you have the right to withdraw your consent at any time.
Once you withdraw your consent, we will stop processing your personal data where that processing was based on your consent.
In some cases, withdrawing your consent may mean that we can no longer provide certain services to you.
You may withdraw or provide your consent again by submitting a written request or contacting us by email at info@gamtosateitis.lt.
Once your consent expires, is withdrawn or is otherwise no longer valid, we will delete or destroy the personal data that was processed on the basis of your consent.
However, we will keep a record of your consent for one year from the date on which the consent was given or withdrawn so that we can protect our legitimate interests in the event of any claims, complaints or legal proceedings.
7.1.4. Right to lodge a complaint
If you believe that we process your personal data in breach of the GDPR, we encourage you to contact us first.
We will make every reasonable effort to address your concerns, respond to your requests and correct any mistakes that may have occurred.
If you are not satisfied with our response or believe that we have not taken the necessary action in response to your request, you have the right to lodge a complaint with the relevant supervisory authority.
In Lithuania, the supervisory authority is the State Data Protection Inspectorate.
7.1.5. Right to erasure (“right to be forgotten”)
In certain situations specified in the GDPR, for example, where personal data is processed unlawfully or there is no longer a legal basis for processing it, you have the right to ask us to delete your personal data.
To exercise this right, please send your request by email to info@gamtosateitis.lt.
Please note that the personal data you have provided will also be deleted without a separate request from you if you withdraw your consent or once the data retention period specified in this Privacy Policy expires.
7.1.6. Right to restrict processing
In certain situations specified in the GDPR, for example, where personal data is processed unlawfully or you dispute the accuracy of the data, you have the right to ask us to restrict the processing of your personal data.
Please note that if the processing of your personal data is restricted, we may not be able to provide certain services to you during the restriction period.
To exercise this right, please send your request by email to info@gamtosateitis.lt.
7.1.7. Right to data portability
Where we process your personal data based on your consent and the processing is carried out by automated means, you have the right to receive your personal data and transfer it to another data controller.
We will provide the requested data in a commonly used, machine-readable format.
If you request it and it is technically possible, we may also transfer your personal data directly to another data controller specified by you.
To exercise your right to data portability, please send your request by email to info@gamtosateitis.lt.
7.2. To protect your personal data from unauthorised disclosure, we may need to verify your identity before providing your personal data or allowing you to exercise your other rights.
For this purpose, we may ask you to provide information that you previously entered in a registration or order form, such as your name, email address or telephone number. We will compare this information with the information provided during your registration or order.
As part of this verification process, we may also send a verification message by SMS or email to the contact details you previously provided and ask you to complete an authentication step.
If the verification is unsuccessful, for example, if the information you provide does not match the information in our records or you do not complete the required authentication step, we may conclude that we cannot confirm that you are the person to whom the requested personal data relates. In such cases, we will have to reject your request.
Once we receive a request relating to any of your rights and successfully verify your identity, we will provide you with information about the action we have taken without undue delay and, in any case, no later than one month after receiving your request.
If you submit your request electronically, we will normally respond electronically as well, unless this is not possible, for example, because of the very large amount of information involved, or unless you ask us to respond in another way.
Where applicable law allows us to refuse your request, we will provide you with a reasoned written response explaining the reasons for our decision.
8. Organisational and technical security measures
8.1. We use various security technologies and procedures to protect your personal information against unauthorised access, use or disclosure.
8.2. The data processors we use to help provide our services are carefully selected. We require them to use appropriate measures to protect the confidentiality and security of your personal data.
8.3. However, the security of information transmitted over the internet or mobile networks cannot be fully guaranteed and is not entirely within our control. Therefore, any information you send to us using these methods is transmitted at your own risk.
9. Validity and changes to this Privacy Policy
This Privacy Policy is effective from 2 January 2023.
If we make changes to this Privacy Policy, we will publish the updated version on this page and indicate the date on which it was updated.