Privacy Policy

The Data Controller processes personal data for the following purposes:

Purpose: Provision of media monitoring and analysis services provided by the Data Controller

• When providing services to clients, the Data Controller processes the following personal data of clients or their representatives: first name, surname, address, phone number, email address, other contact information, and other data contained in the contract. When providing media monitoring and analysis services, the Data Controller also processes personal data contained in the media or other publicly available content being analyzed.
• Legal basis: the Data Controller’s legitimate interest in carrying out its activities under Article 6(1)(f) of the EU General Data Protection Regulation (hereinafter GDPR) (when processing the personal data of a client who is a representative of a legal entity) or a contract under Article 6(1)(b) of the GDPR (when processing the personal data of a client who is a natural person). Personal data contained in the content being analyzed are processed on the basis of the legitimate interest in carrying out activities under Article 6(1)(f) of the GDPR, and if the content contains special categories of personal data that the data subject has manifestly made public, they are also processed on the basis of Article 9(2)(e) of the GDPR.
• Retention period: Data contained in the agreement with the client are stored for 10 (ten) years after the end of the agreement’s validity. Personal data collected from social media are stored for 2 (two) years from the date of collection, and personal data collected from other publicly available information sources are stored for 20 (twenty) years from the date of collection, unless a different period is stipulated by the contract concluded between the Data Controller and the data source. These data may be stored for longer for archiving purposes, or for scientific or historical research or statistical purposes, subject to appropriate technical and organizational measures. If media analysis services are provided by examining information contained in systems belonging to third parties, personal data contained in such information are not stored, except in cases (and to the extent) where personal data are included in a short content excerpt or headline and/or service report prepared during the provision of the services and transferred to the Data Controller’s client. Data contained in the short content excerpt or headline and/or service report are stored for 20 (twenty) years after the provision of the services.
• The Data Controller may transfer personal data contained in the analyzed content to its client on whose behalf it carries out media monitoring, if such data are included in a short content excerpt or headline and/or service report transferred to the Data Controller’s client.

Purpose: Conclusion and performance of contracts

• When the Data Controller enters into contracts with service providers or other persons, it processes the following personal data of contractors or their representatives: first name, surname, address, telephone number, email address, other contact information, and other data contained in the contract.
• Legal basis: Legitimate interest in carrying out activities under Article 6(1)(f) of the GDPR (when processing the personal data of a representative of a legal entity with which a contract is concluded) or contract under Article 6(1)(b) of the GDPR (when processing the personal data of a natural person with whom a contract is concluded).
• Retention period: 10 (ten) years after the end of the agreement’s validity.

Purpose: Communication with visitors to the website and other persons contacting the Data Controller

• When you submit an inquiry through the contact details provided on the website or otherwise contact the Data Controller, the Data Controller processes your personal data: first name, surname, telephone number, email address, and other data you may provide when contacting the Data Controller.
• Legal basis: Steps taken at the request of the data subject prior to entering into a contract under Article 6(1)(b) of the GDPR (when the request is made by a natural person) or legitimate interest in carrying out activities and/or ensuring quality under Article 6(1)(f) of the GDPR (when the request is made by a representative of a legal entity).
• Retention period: 12 (twelve) months after the date the inquiry is resolved.

Purpose: Direct marketing (newsletters, event invitations, offering similar services)

• In order to provide you with offers, invitations, or other direct marketing, the Data Controller processes the following personal data: first name, surname, email, phone number.
• Legal basis: Consent under Article 6(1)(a) of the GDPR or legitimate interest in offering similar services to customers under Article 6(1)(f) of the GDPR or legitimate interest in offering services to legal entities under Article 6(1)(f) of the GDPR and Articles 81(1) and 81(2) of the Law of the Republic of Lithuania on Electronic Communications.
• Retention period: the duration of the agreement and 36 (thirty-six) months thereafter, or 36 (thirty-six) months after consent is obtained when it is not related to a concluded agreement. The email address or telephone number of a legal entity are stored for this purpose until the legal entity objects to receiving news.
• We may transfer personal data to a newsletter distribution solution.

Purpose: Administration of social media accounts

• When managing its business accounts on social networks, the Data Controller processes the following personal data: unique ID, IP address, device information.
• Legal basis: Consent under Article 6(1)(a) of the GDPR or legitimate interest in communicating with customers under Article 6(1)(f) of the GDPR.
• Retention period: As long as the social network visitor is a follower of the accounts.
• We control the information you provide to us through social media when visiting our accounts (including messages, use of the “Like” buttons, and other communication) jointly with the social network operators, as joint controllers of personal data.
• We currently have the following social media accounts:
• “Facebook” – https://www.facebook.com/Mediaskopas, whose privacy notice is available at https://www.facebook.com/privacy/explanation
• “LinkedIn” – https://www.linkedin.com/company/mediaskopas-uab/, whose privacy notice is available at https://www.linkedin.com/legal/privacy-policy

We recommend that you read the privacy notices of third parties and contact the service providers directly if you have any questions about how they use your personal data.

Purpose: Candidate selection

• When carrying out employee recruitment, the Data Controller processes personal data: first name, last name, workplace, previous workplaces, education details, other data provided in the CV, email address, phone number.
• Legal basis: Legitimate interest in selecting suitable candidates under Article 6(1)(f) of the GDPR or consent under Article 6(1)(a) of the GDPR.
• Retention period: 6 (six) months after the end of the selection process, or 5 (five) years if consent has been obtained.
• We may transfer personal data to an employee recruitment service provider.

• Cookies are used on the websites https://www.mediaskopas.lt/ and https://station.lt.
• A cookie is information that a web server sends to your web browser and that is stored in the browser. This information is sent to the web server each time the browser requests to open a website from the server; based on it, your computer or other device is distinguished from other devices. Therefore, cookies ensure more convenient use of the website and allow us to improve it.
• Necessary cookies are used automatically, without your separate consent, when you perform certain actions on the website. Other cookies (for example, analytical and advertising cookies) are used only with your consent.
• Through cookies, your IP address and browsing information are processed, such as the web pages you visit, time spent, and so on. The list of cookies used on the respective website of the Data Controller, as well as more detailed information about them, can be found in the cookie management tool installed on the website by selecting “Settings.”
• You can change your cookie settings in your browser at any time. All browsers provide the option to delete cookies, and more detailed information can be found in your browser settings. If you delete necessary cookies and do not allow their use in your web browser, some website functions will not work properly and this may make it difficult for you to use the website.

• In addition to what is stated in Section 2 of this Privacy Policy, we may transfer information about you to our employees, intermediaries, service providers, such as companies engaged in debt administration or recovery, companies providing archiving services, persons or subcontractors providing legal, marketing, or IT services, where reasonably necessary for those purposes, as set out in this Privacy Policy.

We may also disclose information about you if we are required to do so by law or in order to defend our rights or interests (including providing your personal data to third parties in order to recover your debts to us), as well as when intending to transfer part of the company’s business or assets or to reorganize the company, or while carrying out these processes, by disclosing

Your personal data will be processed in accordance with the GDPR, the Law on Legal Protection of Personal Data of the Republic of Lithuania, and the requirements established by other legal acts. The Data Controller, both when determining the measures for processing personal data and during the processing itself, implements appropriate technical and organizational data protection measures established by law, designed to protect the personal data being processed against accidental or unlawful destruction, damage, alteration, loss, disclosure, as well as against any other unlawful processing. The appropriate measures are determined taking into account the risks arising from the processing of personal data.

Below we provide information about your rights in relation to the processing of your personal data by the Data Controller and the circumstances in which you may exercise these rights. If you would like more information about your rights or wish to exercise them, please contact us at the email address indicated in this Privacy Policy.

• You may contact us at any time to ask whether we process any of your personal data. If we store or otherwise use your personal data, you have the right to access it. To do so, submit a written request to the email address указан in this Privacy Policy. For the purpose of fulfilling your request, we may ask you to confirm your identity. When submitting such a request, observe the principles of fairness and reasonableness.
• If you have given us your consent to process your data, you may withdraw it at any time by using the email address specified in this Privacy Policy.
• You have the right to request that we correct any inaccuracies in the data we hold. In such a case, we may ask you to confirm the corrected information.
• You have the right to request that we delete your personal data. This right is exercised in the cases provided for in Article 17 of the GDPR.
• You have the right to request that we restrict the processing of your personal data or stop processing it.
• You have the right to data portability for data processed by automated means and that we received from you with your consent or for the purpose of entering into a contract. If you exercise this right, we will transfer a copy of the data you provided at your request.
• You have the right, in accordance with Article 21 of the GDPR, to object to our use of your personal data.

• To exercise your rights, submit requests, complaints, or claims to us in writing using the contact details specified in this Privacy Policy.
• We will respond to any requests, complaints, or claims received in writing in accordance with the procedures and deadlines established by law. We strive to provide you with information as quickly as possible, but no later than 30 days from receipt of your request.
• If, upon receiving a request, complaint, or claim, we have doubts about the identity of the person making the request, we have the right to ask for an identity document from that person.
• If you have any questions regarding the processing of your personal data, please contact the person appointed by the Data Controller and responsible for personal data processing: bdar@mediaskopas.lt.

If you believe that your rights as a data subject have been and/or may be violated, please contact us immediately by email at bdar@mediaskopas.lt. We ensure that, upon receiving your complaint, we will contact you within a reasonable period and inform you about the progress of the complaint investigation and later about the outcome. If you are not satisfied with the results of the investigation, you may submit a complaint to the supervisory authority: in Lithuania – the State Data Protection Inspectorate (https://vdai.lrv.lt/), and the list of supervisory authorities of other EU Member States can be found on the website of the European Data Protection Board: https://www.edpb.europa.eu/about-edpb/about-edpb/members_lt.

You are responsible for ensuring that the data you provide to us is accurate, correct, and complete. If the data you have provided changes, you must inform us immediately by email. Under no circumstances will we be liable for any damage suffered by you as a result of providing incorrect or incomplete personal data or failing to inform us of any changes to it.