Privacy Policy

The Data Controller processes personal data for the following purposes:

Purpose: Provision of the media monitoring and analysis services provided by the Data Controller

• When providing services to clients, the Data Controller processes the following personal data of clients or their representatives: first name, last name, address, phone number, email address, other contact information, and other data contained in the contract. When providing media monitoring and analysis services, the Data Controller also processes personal data contained in the media or other publicly available content being analyzed.
• Legal basis: the Data Controller’s legitimate interest in conducting its activities under Article 6(1)(f) of the EU General Data Protection Regulation (hereinafter GDPR) (when processing the personal data of a client who is a representative of a legal entity) or a contract under Article 6(1)(b) of the GDPR (when processing the data of a client who is a natural person). Personal data contained in the content being analyzed is processed on the basis of the legitimate interest in conducting activities under Article 6(1)(f) of the GDPR, and if the content contains special categories of personal data that the data subject has manifestly made public, they are also processed on the basis of Article 9(2)(e) of the GDPR.
• Retention period: Data in the contract with the client are retained for 10 (ten) years after the contract expires. Personal data collected from social media are retained for 2 (two) years from the date of collection, while personal data collected from other publicly available information sources are retained for 20 (twenty) years from the date of collection, unless a different period is specified in the contract between the Data Controller and the data source. These data may be retained longer for archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes, subject to appropriate technical and organizational measures. If media analysis services are provided by examining information in systems belonging to third parties, personal data contained in such information are not retained, except where (and to the extent that) the personal data are included in a short content excerpt or headline and/or a service report prepared during the service provision and transferred to the Data Controller’s client. Data contained in the short content excerpt or headline and/or service report are retained for 20 (twenty) years after the services are provided.
• The Data Controller may transfer the personal data contained in the content being analysed to its client on whose behalf it carries out media monitoring, if such data are included in a short content excerpt or headline and/or a service report transferred to the client.

Purpose: Conclusion and performance of contracts

• When the Data Controller enters into contracts with service providers or other persons, it processes the following personal data of contractors or their representatives: first name, surname, address, telephone number, email address, other contact information, and other data contained in the contract.
• Legal basis: Legitimate interest in carrying out activities under Article 6(1)(f) of the GDPR (when processing the personal data of a representative of a legal entity with which a contract is concluded) or a contract under Article 6(1)(b) of the GDPR (when processing the personal data of a natural person with whom a contract is concluded).
• Retention period: 10 (ten) years after the end of the contract term.

Purpose: Communication with website visitors and other persons who contact the Data Controller

• When you submit an inquiry using the contact details provided on the website or otherwise contact the Data Controller, the Data Controller processes your personal data: first name, surname, telephone number, email address, and other data you may provide when contacting the Data Controller.
• Legal basis: Steps taken at the request of the data subject prior to entering into a contract under Article 6(1)(b) of the GDPR (when a natural person contacts us) or legitimate interest in carrying out activities and/or ensuring quality under Article 6(1)(f) of the GDPR (when a representative of a legal entity contacts us).
• Retention period: 12 (twelve) months after the date on which the inquiry is resolved.

Purpose: Direct marketing (newsletters, event invitations, offering similar services)

• In order to provide you with offers, invitations, or other direct marketing, the Data Controller processes the following personal data: first name, surname, email address, phone number.
• Legal basis: Consent under Article 6(1)(a) of the GDPR or legitimate interest in offering similar services to clients under Article 6(1)(f) of the GDPR, or legitimate interest in offering services to legal entities under Article 6(1)(f) of the GDPR and Article 81(1) and (2) of the Law of the Republic of Lithuania on Electronic Communications.
• Retention period: for the duration of the contract and 36 (thirty-six) months thereafter, or 36 (thirty-six) months after consent is obtained if it is not related to an existing contract. The email address or telephone number of a legal entity is stored for this purpose until the legal entity objects to receiving news.
• We may transfer personal data to the newsletter sending solution.

Purpose: Administration of social media accounts

• When managing its business accounts on social networks, the Data Controller processes the following personal data: unique ID, IP address, device information.
• Legal basis: Consent under Article 6(1)(a) of the GDPR or legitimate interest in communicating with clients under Article 6(1)(f) of the GDPR.
• Retention period: As long as the visitor to the social network is following the accounts.
• The information you provide to us through social media while visiting our accounts (including messages, use of the “Like” function, and other communication) is controlled jointly with the social network operators, as joint controllers of personal data.
• At present, we have the following accounts on social media:
• “Facebook” – https://www.facebook.com/Mediaskopas, whose privacy notice is available at https://www.facebook.com/privacy/explanation
• “LinkedIn” – https://www.linkedin.com/company/mediaskopas-uab/, whose privacy notice is available at https://www.linkedin.com/legal/privacy-policy

We recommend that you read the privacy notices of third parties and contact the service providers directly if you have any questions about how they use your personal data.

Purpose: Candidate selection

• When conducting recruitment, the Data Controller processes personal data: first name, last name, workplace, previous workplaces, education details, other data provided in the CV, email address, phone number.
• Legal basis: Legitimate interest in selecting suitable candidates pursuant to Article 6(1)(f) of the GDPR or consent pursuant to Article 6(1)(a) of the GDPR.
• Retention period: 6 (six) months after the end of the recruitment process, or 5 (five) years if consent has been obtained.
• We may transfer personal data to a recruitment service provider.

• The websites https://www.mediaskopas.lt/ and https://station.lt use cookies.
• A cookie is information sent by a web server to your web browser and stored in the browser. This information is sent back to the web server each time the browser requests a website to be opened from the server, and it is used to distinguish your computer or other device from other devices. Cookies therefore ensure more convenient use of the website and allow us to improve it.
• Necessary cookies are used automatically, without your separate consent, when you perform certain actions on the website. Other cookies (for example, analytical and advertising cookies) are used only with your consent.
• Through the use of cookies, your IP address and browsing information, such as the pages of the website you visit and the time spent there, are processed. You can find the list of cookies used on the relevant website of the Data Controller, as well as more detailed information about them, in the cookie management tool installed on the website by selecting “Settings.”
• You can change your cookie settings in your browser at any time. All browsers provide the option to delete cookies, and you can find more detailed information in your browser settings. If you delete necessary cookies and do not allow their use in your web browser, some website functions will not work properly and this may prevent you from using the website.

• In addition to what is stated in Section 2 of this Privacy Policy, we may disclose information about you to our employees, intermediaries, service providers, such as companies that handle debt administration or debt recovery, companies that provide archiving services, and persons or subcontractors providing legal, marketing, or IT services, if this is reasonably necessary for those purposes, as set out in this Privacy Policy.

We may also disclose information about you if we are required to do so by law or in order to defend our rights or interests (including disclosing your personal data to third parties in order to recover your debts to us), as well as when intending to transfer part of the company’s business or assets or to reorganize the company, or while carrying out such processes, by disclosing

Your personal data will be processed in accordance with the GDPR, the Law on Legal Protection of Personal Data of the Republic of Lithuania, and other legal requirements. The Data Controller, both when determining the measures for processing personal data and during the processing itself, implements appropriate technical and organizational data protection measures established by law to protect the personal data being processed against accidental or unlawful destruction, damage, alteration, loss, disclosure, as well as against any other unlawful processing. The relevant measures are determined taking into account the risks arising from the processing of personal data.

Below we provide information about your rights related to the processing of your personal data by the Data Controller and the situations in which you may exercise these rights. If you would like more information about your rights or wish to exercise them, please contact us at the email address указан in this Privacy Policy.

• You may contact us at any time to inquire whether we process any of your personal data. If we store or otherwise use your personal data, you have the right to access it. To do so, please submit a written request to the email address provided in this Privacy Policy. For the purpose of fulfilling your request, we may ask you to confirm your identity. When submitting such a request, please follow the principles of fairness and reasonableness.
• If you have given us your consent for the processing of your data, you may withdraw it at any time by using the email address specified in this Privacy Policy.
• You have the right to request that we correct any inaccuracies in the data we hold. In such a case, we may ask you to confirm the corrected information.
• You have the right to request that we delete your personal data. This right applies in the cases provided for in Article 17 of the GDPR.
• You have the right to request that we restrict the processing of your personal data or stop processing it.
• You have the right to data portability for data processed by automated means and that we have received from you with your consent or for the purpose of concluding a contract. If you exercise this right, at your request we will transfer a copy of the data you provided.
• You have the right, in accordance with Article 21 of the GDPR, to object to our use of your personal data.

• To exercise your rights, please submit requests, complaints, or claims to us in writing using the contact details provided in this Privacy Policy.
• We will respond to any requests, complaints, or claims in writing in accordance with the procedures and time limits established by law. We strive to provide you with information as quickly as possible, but no later than within 30 days of receiving your request.
• If, upon receiving a request, complaint, or claim, we have doubts about the identity of the person making the request, we have the right to ask for an identity document from that person.
• If you have any questions regarding the processing of your personal data, please contact the person appointed by the Data Controller to be responsible for personal data processing: bdar@mediaskopas.lt.

If you believe that your rights as a data subject are and/or may be violated, please contact us immediately by email at bdar@mediaskopas.lt. We ensure that, upon receipt of your complaint, we will contact you within a reasonable period and inform you about the progress of the complaint investigation and later about the outcome. If you are not satisfied with the results of the investigation, you may submit a complaint to the supervisory authority: in Lithuania — the State Data Protection Inspectorate (https://vdai.lrv.lt/), and the list of supervisory authorities of other EU Member States can be found on the website of the European Data Protection Board: https://www.edpb.europa.eu/about-edpb/about-edpb/members_lt.

You are responsible for ensuring that the data you provide to us is accurate, correct, and complete. If the data you have provided changes, you must inform us immediately by email. In no event shall we be liable for any damage caused to you as a result of you providing incorrect or incomplete personal data or failing to inform us of any changes thereto.