Privacy Policy

The Data Controller processes personal data for the following purposes:

Purpose: Providing the media monitoring and analysis services offered by the Data Controller

• When providing services to clients, the Data Controller processes the following personal data of clients or their representatives: first name, surname, address, phone number, email address, other contact information, and other data contained in the contract. When providing media monitoring and analysis services, the Data Controller also processes personal data contained in the media or other publicly available content being analyzed.
• Legal basis: the Data Controller’s legitimate interest in carrying out its activities under Article 6(1)(f) of the EU General Data Protection Regulation (hereinafter — GDPR) (when processing the personal data of a client who is a representative of a legal entity) or a contract under Article 6(1)(b) of the GDPR (when processing the data of a client who is a natural person). Personal data contained in the analyzed content are processed on the basis of the legitimate interest to carry out activities under Article 6(1)(f) of the GDPR, and if the content contains special categories of personal data that the data subject has clearly made public, they are also processed on the basis of Article 9(2)(e) of the GDPR.
• Retention period: Data contained in the contract with the client are retained for 10 (ten) years after the end of the contract term. Personal data collected from social media are retained for 2 (two) years from the date of collection, and personal data collected from other publicly available information sources are retained for 20 (twenty) years from the date of collection, unless a different period is specified by the contract between the Data Controller and the data source. These data may be retained longer for archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes, subject to appropriate technical and organizational measures. If media analysis services are provided by analyzing information contained in systems belonging to third parties, personal data contained in such information are not stored, except in cases where, and to the extent that, personal data are included in a short content excerpt or headline and/or service report prepared during the provision of the services and transferred to the Data Controller’s client. Data contained in the short content excerpt or headline and/or service report are retained for 20 (twenty) years after the services are provided.
• The Data Controller may transfer personal data contained in the analyzed content to its client, on whose behalf it carries out media monitoring, if such data are included in a short content excerpt or headline and/or service report transferred to the Data Controller’s client.

Purpose: Conclusion and performance of contracts

• When the Data Controller concludes contracts with service providers or other persons, it processes the following personal data of counterparties or their representatives: first name, last name, address, phone number, email address, other contact information, and other data contained in the contract.
• Legal basis: Legitimate interest in carrying out activities under Article 6(1)(f) of the GDPR (when processing the personal data of a representative of a legal entity with whom a contract is concluded) or a contract under Article 6(1)(b) of the GDPR (when processing the personal data of a natural person with whom a contract is concluded).
• Retention period: 10 (ten) years after the end of the contract term.

Purpose: Communication with website visitors and other persons contacting the Data Controller

• When you submit an inquiry using the contact details provided on the website or otherwise contact the Data Controller, the Data Controller processes your personal data: first name, last name, phone number, email address, and other data you may provide when contacting the Data Controller.
• Legal basis: Taking steps at the request of the data subject prior to entering into a contract under Article 6(1)(b) of the GDPR (when the request is made by a natural person) or legitimate interest in carrying out activities and/or ensuring quality under Article 6(1)(f) of the GDPR (when the request is made by a representative of a legal entity).
• Retention period: 12 (twelve) months after the date the inquiry is resolved.

Purpose: Direct marketing (newsletters, event invitations, offering similar services)

• To provide you with offers, invitations, or other direct marketing, the Data Controller processes the following personal data: first name, last name, email address, phone number.
• Legal basis: Consent under Article 6(1)(a) of the GDPR or legitimate interest in offering similar services to customers under Article 6(1)(f) of the GDPR, or legitimate interest in offering services to legal entities under Article 6(1)(f) of the GDPR and Article 81(1) and (2) of the Law on Electronic Communications of the Republic of Lithuania.
• Retention period: the duration of the contract and 36 (thirty-six) months thereafter, or 36 (thirty-six) months after consent is obtained when it is not related to a concluded contract.
• We may transfer personal data to a newsletter sending solution.

Purpose: Administration of social media accounts

• When managing its business accounts on social networks, the Data Controller processes the following personal data: unique ID, IP address, device information.
• Legal basis: Consent under Article 6(1)(a) of the GDPR or legitimate interest in communicating with customers under Article 6(1)(f) of the GDPR.
• Retention period: as long as the social network visitor follows the accounts.
• The information you provide to us through social media while visiting our accounts (including messages, using the “Like” button, and other communication) is jointly controlled by us and the social network operators, as joint data controllers.
• We currently have the following social media accounts:
• “Facebook” — https://www.facebook.com/Mediaskopas, whose privacy notice is available at https://www.facebook.com/privacy/explanation
• “LinkedIn” — https://www.linkedin.com/company/mediaskopas-uab/, whose privacy notice is available at https://www.linkedin.com/legal/privacy-policy

We recommend reading the privacy notices of third parties and contacting the service providers directly if you have any questions about how they use your personal data.

Purpose: Candidate selection

• When conducting employee recruitment, the Data Controller processes personal data: first name, last name, place of work, previous places of work, education details, other information provided in the CV, email address, and phone number.
• Legal basis: Legitimate interest in selecting suitable candidates pursuant to Article 6(1)(f) of the GDPR or consent pursuant to Article 6(1)(a) of the GDPR.
• Retention period: 6 (six) months after the end of the recruitment process or 5 (five) years if consent has been obtained.
• We may transfer personal data to the provider of employee recruitment services.

• Cookies are used on the websites https://www.mediaskopas.lt/ and https://station.lt.
• A cookie is information that a web server sends to your web browser and that is stored in the browser. This information is sent to the web server each time the browser requests to open a website from the server, and it is used to distinguish your computer or other device from other devices. Therefore, cookies ensure a more convenient website experience and allow us to improve it.
• Necessary cookies are used automatically, without your separate consent, when you perform certain actions on the website. Other cookies (for example, analytical or advertising cookies) are used only with your consent.
• Through cookies, your IP address and browsing information, such as the website pages visited, time spent, and so on, are processed. You can find the list of cookies used on the respective website of the Data Controller, as well as more detailed information about them, in the cookie management tool installed on the website by selecting "Settings".
• You can change your cookie settings at any time in your browser. All browsers allow you to delete cookies, and you can find more detailed information in your browser settings. If you delete essential cookies and do not allow them to be used in your web browser, some website functions will not work properly and this may interfere with your use of the website.

• In addition to what is stated in Section 2 of this Privacy Policy, we may transfer information about you to our employees, intermediaries, service providers, such as companies that handle debt administration or recovery, companies providing archiving services, persons or subcontractors providing legal, marketing, or IT services, if this is reasonably necessary for those purposes, as set out in this Privacy Policy.

We may also disclose information about you if we are required to do so by law or in order to defend our rights or interests (including disclosing your personal data to third parties in order to recover your debts to us), as well as in the event of an intended transfer of part of the company’s business or assets, or the reorganization of the company, or in the course of these processes, by disclosing

Your personal data will be processed in accordance with the GDPR, the Law on Legal Protection of Personal Data of the Republic of Lithuania, and the requirements established by other legal acts. The Data Controller, both when determining the means of processing personal data and during the actual processing of data, implements appropriate technical and organizational data protection measures established by law to protect the personal data being processed from accidental or unlawful destruction, damage, alteration, loss, disclosure, as well as from any other unlawful processing. The appropriate measures are determined taking into account the risks arising from the processing of personal data.

Below we provide information about your rights relating to the Data Controller’s processing of your personal data and the cases in which you may exercise these rights. If you would like more information about your rights or wish to exercise them, please contact us at the email address provided in this Privacy Policy.

• You may contact us at any time to ask whether we process any of your personal data. If we store or otherwise use your personal data, you have the right to access it. To do so, please submit a written request to the email address specified in this Privacy Policy. For the purpose of fulfilling your request, we may ask you to confirm your identity. When submitting such a request, please follow the principles of fairness and reasonableness.
• If you have given us consent to process your data, you may withdraw it at any time by using the email address specified in this Privacy Policy.
• You have the right to request that we correct any inaccuracies in the data we hold. In such a case, we may ask you to confirm the corrected information.
• You have the right to request that we delete your personal data. This right applies in the cases provided for in Article 17 of the GDPR.
• You have the right to request that we restrict the processing of your personal data or stop processing it.
• You have the right to data portability for data processed by automated means and that we received from you with your consent or for the purposes of concluding a contract. If you exercise this right, we will transfer a copy of the data you provided at your request.
• You have the right, in accordance with Article 21 of the GDPR, to object to our use of your personal data.

• To exercise your rights, submit requests, complaints, or claims to us in writing using the contact details provided in this Privacy Policy.
• We will respond to received requests, complaints, or claims in writing in accordance with the procedure and time limits established by law. We strive to provide you with information as quickly as possible, but no later than within 30 days of receiving your request.
• If, upon receiving a request, complaint, or claim, we have doubts about the identity of the person making the request, we have the right to request an identity document from that person.
• If you have questions regarding the processing of your personal data, please contact the person appointed by the Data Controller and responsible for personal data processing: bdar@mediaskopas.lt.

If you believe that your rights as a data subject are or may be violated, please contact us immediately by email at bdar@mediaskopas.lt. We ensure that, upon receipt of your complaint, we will contact you within a reasonable period and inform you about the progress of the complaint investigation and later about the outcome. If you are not satisfied with the results of the investigation, you may submit a complaint to the supervisory authority: in Lithuania — the State Data Protection Inspectorate (https://vdai.lrv.lt/), and the list of supervisory authorities of other EU Member States can be found on the website of the European Data Protection Board: https://www.edpb.europa.eu/about-edpb/about-edpb/members_lt.

You are responsible for ensuring that the data you provide to us is accurate, correct, and complete. If the data you have provided changes, you must inform us immediately by email. In no event shall we be liable for any damage arising to you as a result of providing incorrect or incomplete personal data or failing to notify us of changes to it.

The Data Controller processes personal data for the following purposes:

Purpose: Providing the media monitoring and analysis services offered by the Data Controller

• When providing services to clients, the Data Controller processes the following personal data of clients or their representatives: first name, surname, address, phone number, email address, other contact information, and other data contained in the contract. When providing media monitoring and analysis services, the Data Controller also processes personal data contained in the media or other publicly available content being analyzed.
• Legal basis: the Data Controller’s legitimate interest in carrying out its activities under Article 6(1)(f) of the EU General Data Protection Regulation (hereinafter — GDPR) (when processing the personal data of a client who is a representative of a legal entity) or a contract under Article 6(1)(b) of the GDPR (when processing the data of a client who is a natural person). Personal data contained in the analyzed content are processed on the basis of the legitimate interest to carry out activities under Article 6(1)(f) of the GDPR, and if the content contains special categories of personal data that the data subject has clearly made public, they are also processed on the basis of Article 9(2)(e) of the GDPR.
• Retention period: Data contained in the contract with the client are retained for 10 (ten) years after the end of the contract term. Personal data collected from social media are retained for 2 (two) years from the date of collection, and personal data collected from other publicly available information sources are retained for 20 (twenty) years from the date of collection, unless a different period is specified by the contract between the Data Controller and the data source. These data may be retained longer for archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes, subject to appropriate technical and organizational measures. If media analysis services are provided by analyzing information contained in systems belonging to third parties, personal data contained in such information are not stored, except in cases where, and to the extent that, personal data are included in a short content excerpt or headline and/or service report prepared during the provision of the services and transferred to the Data Controller’s client. Data contained in the short content excerpt or headline and/or service report are retained for 20 (twenty) years after the services are provided.
• The Data Controller may transfer personal data contained in the analyzed content to its client, on whose behalf it carries out media monitoring, if such data are included in a short content excerpt or headline and/or service report transferred to the Data Controller’s client.

Purpose: Conclusion and performance of contracts

• When the Data Controller concludes contracts with service providers or other persons, it processes the following personal data of counterparties or their representatives: first name, last name, address, phone number, email address, other contact information, and other data contained in the contract.
• Legal basis: Legitimate interest in carrying out activities under Article 6(1)(f) of the GDPR (when processing the personal data of a representative of a legal entity with whom a contract is concluded) or a contract under Article 6(1)(b) of the GDPR (when processing the personal data of a natural person with whom a contract is concluded).
• Retention period: 10 (ten) years after the end of the contract term.

Purpose: Communication with website visitors and other persons contacting the Data Controller

• When you submit an inquiry using the contact details provided on the website or otherwise contact the Data Controller, the Data Controller processes your personal data: first name, last name, phone number, email address, and other data you may provide when contacting the Data Controller.
• Legal basis: Taking steps at the request of the data subject prior to entering into a contract under Article 6(1)(b) of the GDPR (when the request is made by a natural person) or legitimate interest in carrying out activities and/or ensuring quality under Article 6(1)(f) of the GDPR (when the request is made by a representative of a legal entity).
• Retention period: 12 (twelve) months after the date the inquiry is resolved.

Purpose: Direct marketing (newsletters, event invitations, offering similar services)

• To provide you with offers, invitations, or other direct marketing, the Data Controller processes the following personal data: first name, last name, email address, phone number.
• Legal basis: Consent under Article 6(1)(a) of the GDPR or legitimate interest in offering similar services to customers under Article 6(1)(f) of the GDPR, or legitimate interest in offering services to legal entities under Article 6(1)(f) of the GDPR and Article 81(1) and (2) of the Law on Electronic Communications of the Republic of Lithuania.
• Retention period: the duration of the contract and 36 (thirty-six) months thereafter, or 36 (thirty-six) months after consent is obtained when it is not related to an concluded contract. The legal entity’s email address or phone number are stored for this purpose until the legal entity objects to receiving news.
• We may transfer personal data to a newsletter sending solution.

Purpose: Administration of social media accounts

• When managing its business accounts on social networks, the Data Controller processes the following personal data: unique ID, IP address, device information.
• Legal basis: Consent under Article 6(1)(a) of the GDPR or legitimate interest in communicating with customers under Article 6(1)(f) of the GDPR.
• Retention period: as long as the social network visitor follows the accounts.
• The information you provide to us through social media while visiting our accounts (including messages, using the “Like” button, and other communication) is jointly controlled by us and the social network operators, as joint data controllers.
• We currently have the following social media accounts:
• “Facebook” — https://www.facebook.com/Mediaskopas, whose privacy notice is available at https://www.facebook.com/privacy/explanation
• “LinkedIn” — https://www.linkedin.com/company/mediaskopas-uab/, whose privacy notice is available at https://www.linkedin.com/legal/privacy-policy

Purpose: Candidate selection

• When conducting employee recruitment, the Data Controller processes personal data: first name, last name, place of work, previous places of work, education details, other information provided in the CV, email address, and phone number.
• Legal basis: Legitimate interest in selecting suitable candidates pursuant to Article 6(1)(f) of the GDPR or consent pursuant to Article 6(1)(a) of the GDPR.
• Retention period: 6 (six) months after the end of the recruitment process or 5 (five) years if consent has been obtained.
• We may transfer personal data to the provider of employee recruitment services.

We recommend reading the privacy notices of third parties and contacting the service providers directly if you have any questions about how they use your personal data.

• Cookies are used on the websites https://www.mediaskopas.lt/ and https://station.lt.
• A cookie is information that a web server sends to your web browser and that is stored in the browser. This information is sent to the web server each time the browser requests to open a website from the server, and it is used to distinguish your computer or other device from other devices. Therefore, cookies ensure a more convenient website experience and allow us to improve it.
• Necessary cookies are used automatically, without your separate consent, when you perform certain actions on the website. Other cookies (for example, analytical or advertising cookies) are used only with your consent.
• Through cookies, your IP address and browsing information, such as the website pages visited, time spent, and so on, are processed. You can find the list of cookies used on the respective website of the Data Controller, as well as more detailed information about them, in the cookie management tool installed on the website by selecting "Settings".
• You can change your cookie settings at any time in your browser. All browsers allow you to delete cookies, and you can find more detailed information in your browser settings. If you delete essential cookies and do not allow them to be used in your web browser, some website functions will not work properly and this may interfere with your use of the website.

• In addition to what is stated in Section 2 of this Privacy Policy, we may transfer information about you to our employees, intermediaries, service providers, such as companies that handle debt administration or recovery, companies providing archiving services, persons or subcontractors providing legal, marketing, or IT services, if this is reasonably necessary for those purposes, as set out in this Privacy Policy.

We may also disclose information about you if we are required to do so by law or in order to defend our rights or interests (including disclosing your personal data to third parties in order to recover your debts to us), as well as in the event of an intended transfer of part of the company’s business or assets, or the reorganization of the company, or in the course of these processes, by disclosing

Your personal data will be processed in accordance with the GDPR, the Law on Legal Protection of Personal Data of the Republic of Lithuania, and the requirements established by other legal acts. The Data Controller, both when determining the means of processing personal data and during the actual processing of data, implements appropriate technical and organizational data protection measures established by law to protect the personal data being processed from accidental or unlawful destruction, damage, alteration, loss, disclosure, as well as from any other unlawful processing. The appropriate measures are determined taking into account the risks arising from the processing of personal data.

Below we provide information about your rights relating to the Data Controller’s processing of your personal data and the cases in which you may exercise these rights. If you would like more information about your rights or wish to exercise them, please contact us at the email address provided in this Privacy Policy.

• You may contact us at any time to ask whether we process any of your personal data. If we store or otherwise use your personal data, you have the right to access it. To do so, please submit a written request to the email address specified in this Privacy Policy. For the purpose of fulfilling your request, we may ask you to confirm your identity. When submitting such a request, please follow the principles of fairness and reasonableness.
• If you have given us consent to process your data, you may withdraw it at any time by using the email address specified in this Privacy Policy.
• You have the right to request that we correct any inaccuracies in the data we hold. In such a case, we may ask you to confirm the corrected information.
• You have the right to request that we delete your personal data. This right applies in the cases provided for in Article 17 of the GDPR.
• You have the right to request that we restrict the processing of your personal data or stop processing it.
• You have the right to data portability for data processed by automated means and that we received from you with your consent or for the purposes of concluding a contract. If you exercise this right, we will transfer a copy of the data you provided at your request.
• You have the right, in accordance with Article 21 of the GDPR, to object to our use of your personal data.

• To exercise your rights, submit requests, complaints, or claims to us in writing using the contact details provided in this Privacy Policy.
• We will respond to received requests, complaints, or claims in writing in accordance with the procedure and time limits established by law. We strive to provide you with information as quickly as possible, but no later than within 30 days of receiving your request.
• If, upon receiving a request, complaint, or claim, we have doubts about the identity of the person making the request, we have the right to request an identity document from that person.
• If you have questions regarding the processing of your personal data, please contact the person appointed by the Data Controller and responsible for personal data processing: bdar@mediaskopas.lt.

If you believe that your rights as a data subject are or may be violated, please contact us immediately by email at bdar@mediaskopas.lt. We ensure that, upon receipt of your complaint, we will contact you within a reasonable period and inform you about the progress of the complaint investigation and later about the outcome. If you are not satisfied with the results of the investigation, you may submit a complaint to the supervisory authority: in Lithuania — the State Data Protection Inspectorate (https://vdai.lrv.lt/), and the list of supervisory authorities of other EU Member States can be found on the website of the European Data Protection Board: https://www.edpb.europa.eu/about-edpb/about-edpb/members_lt.

You are responsible for ensuring that the data you provide to us is accurate, correct, and complete. If the data you have provided changes, you must inform us immediately by email. In no event shall we be liable for any damage arising to you as a result of providing incorrect or incomplete personal data or failing to notify us of changes to it.

The Data Controller processes personal data for the following purposes:

Purpose: Providing the media monitoring and analysis services offered by the Data Controller

• When providing services to clients, the Data Controller processes the following personal data of clients or their representatives: first name, surname, address, phone number, email address, other contact information, and other data contained in the contract. When providing media monitoring and analysis services, the Data Controller also processes personal data contained in the media or other publicly available content being analyzed.
• Legal basis: the Data Controller’s legitimate interest in carrying out its activities under Article 6(1)(f) of the EU General Data Protection Regulation (hereinafter — GDPR) (when processing the personal data of a client who is a representative of a legal entity) or a contract under Article 6(1)(b) of the GDPR (when processing the data of a client who is a natural person). Personal data contained in the analyzed content are processed on the basis of the legitimate interest to carry out activities under Article 6(1)(f) of the GDPR, and if the content contains special categories of personal data that the data subject has clearly made public, they are also processed on the basis of Article 9(2)(e) of the GDPR.
• Retention period: Data contained in the contract with the client are retained for 10 (ten) years after the end of the contract term. Personal data collected from social media are retained for 2 (two) years from the date of collection, and personal data collected from other publicly available information sources are retained for 20 (twenty) years from the date of collection, unless a different period is specified by the contract between the Data Controller and the data source. These data may be retained longer for archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes, subject to appropriate technical and organizational measures. If media analysis services are provided by analyzing information contained in systems belonging to third parties, personal data contained in such information are not stored, except in cases where, and to the extent that, personal data are included in a short content excerpt or headline and/or service report prepared during the provision of the services and transferred to the Data Controller’s client. Data contained in the short content excerpt or headline and/or service report are retained for 20 (twenty) years after the services are provided.
• The Data Controller may transfer personal data contained in the analyzed content to its client, on whose behalf it carries out media monitoring, if such data are included in a short content excerpt or headline and/or service report transferred to the Data Controller’s client.

Purpose: Conclusion and performance of contracts

• When the Data Controller concludes contracts with service providers or other persons, it processes the following personal data of counterparties or their representatives: first name, last name, address, phone number, email address, other contact information, and other data contained in the contract.
• Legal basis: Legitimate interest in carrying out activities under Article 6(1)(f) of the GDPR (when processing the personal data of a representative of a legal entity with whom a contract is concluded) or a contract under Article 6(1)(b) of the GDPR (when processing the personal data of a natural person with whom a contract is concluded).
• Retention period: 10 (ten) years after the end of the contract term.

Purpose: Communication with website visitors and other persons contacting the Data Controller

• When you submit an inquiry using the contact details provided on the website or otherwise contact the Data Controller, the Data Controller processes your personal data: first name, last name, phone number, email address, and other data you may provide when contacting the Data Controller.
• Legal basis: Taking steps at the request of the data subject prior to entering into a contract under Article 6(1)(b) of the GDPR (when the request is made by a natural person) or legitimate interest in carrying out activities and/or ensuring quality under Article 6(1)(f) of the GDPR (when the request is made by a representative of a legal entity).
• Retention period: 12 (twelve) months after the date the inquiry is resolved.

Purpose: Direct marketing (newsletters, event invitations, offering similar services)

• To provide you with offers, invitations, or other direct marketing, the Data Controller processes the following personal data: first name, last name, email address, phone number.
• Legal basis: Consent under Article 6(1)(a) of the GDPR or legitimate interest in offering similar services to customers under Article 6(1)(f) of the GDPR, or legitimate interest in offering services to legal entities under Article 6(1)(f) of the GDPR and Article 81(1) and (2) of the Law on Electronic Communications of the Republic of Lithuania.
• Retention period: the duration of the contract and 36 (thirty-six) months thereafter, or 36 (thirty-six) months after consent is obtained when it is not related to an concluded contract. The legal entity’s email address or phone number are stored for this purpose until the legal entity objects to receiving news.
• We may transfer personal data to a newsletter sending solution.

Purpose: Administration of social media accounts

• When managing its business accounts on social networks, the Data Controller processes the following personal data: unique ID, IP address, device information.
• Legal basis: Consent under Article 6(1)(a) of the GDPR or legitimate interest in communicating with customers under Article 6(1)(f) of the GDPR.
• Retention period: as long as the social network visitor follows the accounts.
• The information you provide to us through social media while visiting our accounts (including messages, using the “Like” button, and other communication) is jointly controlled by us and the social network operators, as joint data controllers.
• We currently have the following social media accounts:
• “Facebook” — https://www.facebook.com/Mediaskopas, whose privacy notice is available at https://www.facebook.com/privacy/explanation
• “LinkedIn” — https://www.linkedin.com/company/mediaskopas-uab/, whose privacy notice is available at https://www.linkedin.com/legal/privacy-policy

Purpose: Candidate selection

• When conducting employee recruitment, the Data Controller processes personal data: first name, last name, place of work, previous places of work, education details, other information provided in the CV, email address, and phone number.
• Legal basis: Legitimate interest in selecting suitable candidates pursuant to Article 6(1)(f) of the GDPR or consent pursuant to Article 6(1)(a) of the GDPR.
• Retention period: 6 (six) months after the end of the recruitment process or 5 (five) years if consent has been obtained.
• We may transfer personal data to the provider of employee recruitment services.

We recommend reading the privacy notices of third parties and contacting the service providers directly if you have any questions about how they use your personal data.

• Cookies are used on the websites https://www.mediaskopas.lt/ and https://station.lt.
• A cookie is information that a web server sends to your web browser and that is stored in the browser. This information is sent to the web server each time the browser requests to open a website from the server, and it is used to distinguish your computer or other device from other devices. Therefore, cookies ensure a more convenient website experience and allow us to improve it.
• Necessary cookies are used automatically, without your separate consent, when you perform certain actions on the website. Other cookies (for example, analytical or advertising cookies) are used only with your consent.
• Through cookies, your IP address and browsing information, such as the website pages visited, time spent, and so on, are processed. You can find the list of cookies used on the respective website of the Data Controller, as well as more detailed information about them, in the cookie management tool installed on the website by selecting "Settings".
• You can change your cookie settings at any time in your browser. All browsers allow you to delete cookies, and you can find more detailed information in your browser settings. If you delete essential cookies and do not allow them to be used in your web browser, some website functions will not work properly and this may interfere with your use of the website.

• In addition to what is stated in Section 2 of this Privacy Policy, we may transfer information about you to our employees, intermediaries, service providers, such as companies that handle debt administration or recovery, companies providing archiving services, persons or subcontractors providing legal, marketing, or IT services, if this is reasonably necessary for those purposes, as set out in this Privacy Policy.

We may also disclose information about you if we are required to do so by law or in order to defend our rights or interests (including disclosing your personal data to third parties in order to recover your debts to us), as well as in the event of an intended transfer of part of the company’s business or assets, or the reorganization of the company, or in the course of these processes, by disclosing

Your personal data will be processed in accordance with the GDPR, the Law on Legal Protection of Personal Data of the Republic of Lithuania, and the requirements established by other legal acts. The Data Controller, both when determining the means of processing personal data and during the actual processing of data, implements appropriate technical and organizational data protection measures established by law to protect the personal data being processed from accidental or unlawful destruction, damage, alteration, loss, disclosure, as well as from any other unlawful processing. The appropriate measures are determined taking into account the risks arising from the processing of personal data.

Below we provide information about your rights relating to the Data Controller’s processing of your personal data and the cases in which you may exercise these rights. If you would like more information about your rights or wish to exercise them, please contact us at the email address provided in this Privacy Policy.

• You may contact us at any time to ask whether we process any of your personal data. If we store or otherwise use your personal data, you have the right to access it. To do so, please submit a written request to the email address specified in this Privacy Policy. For the purpose of fulfilling your request, we may ask you to confirm your identity. When submitting such a request, please follow the principles of fairness and reasonableness.
• If you have given us consent to process your data, you may withdraw it at any time by using the email address specified in this Privacy Policy.
• You have the right to request that we correct any inaccuracies in the data we hold. In such a case, we may ask you to confirm the corrected information.
• You have the right to request that we delete your personal data. This right applies in the cases provided for in Article 17 of the GDPR.
• You have the right to request that we restrict the processing of your personal data or stop processing it.
• You have the right to data portability for data processed by automated means and that we received from you with your consent or for the purposes of concluding a contract. If you exercise this right, we will transfer a copy of the data you provided at your request.
• You have the right, in accordance with Article 21 of the GDPR, to object to our use of your personal data.

• To exercise your rights, submit requests, complaints, or claims to us in writing using the contact details provided in this Privacy Policy.
• We will respond to received requests, complaints, or claims in writing in accordance with the procedure and time limits established by law. We strive to provide you with information as quickly as possible, but no later than within 30 days of receiving your request.
• If, upon receiving a request, complaint, or claim, we have doubts about the identity of the person making the request, we have the right to request an identity document from that person.
• If you have questions regarding the processing of your personal data, please contact the person appointed by the Data Controller and responsible for personal data processing: bdar@mediaskopas.lt.

If you believe that your rights as a data subject are or may be violated, please contact us immediately by email at bdar@mediaskopas.lt. We ensure that, upon receipt of your complaint, we will contact you within a reasonable period and inform you about the progress of the complaint investigation and later about the outcome. If you are not satisfied with the results of the investigation, you may submit a complaint to the supervisory authority: in Lithuania — the State Data Protection Inspectorate (https://vdai.lrv.lt/), and the list of supervisory authorities of other EU Member States can be found on the website of the European Data Protection Board: https://www.edpb.europa.eu/about-edpb/about-edpb/members_lt.

You are responsible for ensuring that the data you provide to us is accurate, correct, and complete. If the data you have provided changes, you must inform us immediately by email. In no event shall we be liable for any damage arising to you as a result of providing incorrect or incomplete personal data or failing to notify us of changes to it.