This privacy policy (hereinafter also referred to as the Policy) contains information about the processing of personal data in the Law Office of Advokatė L. Bierontienė (hereinafter also referred to as the Firm).

I. WHAT PERSONAL DATA IS PROCESSED, FOR WHAT PURPOSE AND ON WHAT BASIS?

The following personal data may be processed at the Firm:

• Personal details (name, surname, company represented, position held, etc.);

• Contact data (e-mail, residential and other addresses, telephone numbers, etc.);

• Other data that you provide in the context of conclusion and performance of legal services contract (e.g., information on your contracts and their content, relations with third parties, correspondence, etc.);

• Personal data that the Firm is required to process for the performance of its obligations under the law and under contracts (e.g., details of your current account);

• Other data collected from lawful sources (e.g., public registers) in the course of providing legal services.

Special categories of personal data (e.g., data concerning health) may only be processed in the Firm with your explicit consent and/or for the establishment, exercise or defense of your legal claims and/or where you have manifestly made such data public.

The main purposes for which personal data are processed in the Firm are the provision of legal services and the exercise of professional activities of an advocate as provided for by the Law on the Bar Association of the Republic of Lithuania and other legal acts regulating the activities of advocates. It should be noted that personal data may also be processed for the purpose of taking action at your request prior to the conclusion of a legal services contract. In addition, the provision of legal services often involves the processing of data not only of the client but also of third parties.

Personal data are also processed for administrative purposes, for the proper performance of obligations (e.g., billing and other payment processing, bookkeeping) set out in legislation and contracts (including contracts not related to the provision of legal services), on the basis of the Civil Code of the Republic of Lithuania and other legal acts.

II. PROCESSING OF PERSONAL DATA ON THE WEBSITE AND FOR DIRECT MARKETING PURPOSES

You may visit the Firm's website www.bierontiene.lt without revealing who you are. No cookies are used on the Firm’s website and no personal data (including IP address, network and location data) is collected. The website is operated for informational purposes to provide you with information about the Firm's activities and services.

Personal data is not processed for direct marketing purposes.

III. WAYS OF OBTAINING PERSONAL DATA

Personal data in the Firm is obtained from you (the data subject) when you are required to provide such data by law or when you provide such data voluntarily/by your own active actions (e.g., during a face-to-face meeting with a lawyer, by email or telephone, and in the course of the performance of the Law Firm's contracts with its partners or clients (legal entities), if you are an employee or representative of such partner or client). Personal data is also obtained from third parties on their own initiative or on the basis of a request from the Firm for data which is necessary for the performance of the lawyer's functions as set out in the Law on the Bar Association of the Republic of Lithuania and other legal acts.

Irrespective of the manner in which the data are collected, they shall be processed only to the extent necessary to ensure the proper provision of legal services, other related purposes, as well as the fulfilment of the obligations binding on the Firm.

Please note that failure to provide certain personal data may, in individual cases, prevent us from being able to provide you with legal services in full.

IV. TO WHOM MAY YOUR PERSONAL DATA BE DISCLOSED?

Personal data obtained in the course of the provision of legal services may be transferred for the purpose of the provision of legal services:

- to the courts;

- to bailiffs;

- to notaries;

- to state or local authorities, bodies and organizations;

- to legal partners or specialized professionals (such as auditors, engineers, property appraisers, bankers, translators, etc.) as provided for in the contract for the provision of legal services;

- to third parties before whom the client is represented.

Personal data may also be transferred to entities providing services to the Firm (e.g. IT or accounting service providers, couriers), but only to the extent necessary for the proper performance of their services.

V. DATA RETENTION PERIOD

Your personal data collected for the purposes of providing and administering legal services shall be retained for a maximum period of 10 (ten) years after the end of your last assignment with the Firm, unless a different retention period is set by applicable laws and/or regulations.

VI. PROTECTION OF PERSONAL DATA AT THE FIRM

Your personal data shall be processed in accordance with the Law on Legal Protection of Personal Data of the Republic of Lithuania, Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC, and any other applicable legislation.

The Firm implements technical and organizational data protection measures (including, but not limited to, data access control, anti-virus programs, network and communication security, backups, shredding of paper and portable data media) to protect the personal data processed against accidental or unlawful destruction, damage, alteration, loss, disclosure, as well as against any other unauthorized processing.

VII. RIGHTS OF DATA SUBJECTS

You have the following rights in relation to your personal data:

• To have access to your personal data;

• To request rectification of untrue, inaccurate or incomplete data, erasure of your personal data or restriction of processing of your personal data, where personal data are processed in breach of legal requirements or there is any other legal basis for such request;

• To request transfer of your personal data to another controller;

• The right to object to the processing of your personal data where the processing is based on legitimate interest, except where there are legitimate grounds for such processing or for the establishment, exercise or defense of legal claims;

• Where your personal data is processed on the basis of individual consent, you have the right to withdraw your consent to the processing of your personal data at any time.

In cases where you believe that your personal data is being processed unlawfully or that your rights in relation to the processing are being infringed, you have the right to contact the State Data Protection Inspectorate (www.ada.lt) and lodge a complaint.

The Firm recommends that you contact advokate@bierontiene.lt before submitting a formal complaint so that we can work together to find a solution to the problem in a timely manner.

VIII. CHANGES TO THE PRIVACY POLICY AND CONTACT INFORMATION

The provisions of legislation governing the protection of personal data shall apply to all matters not directly addressed in this Privacy Policy.

This Privacy Policy may be updated and amended, and the most recent version of this Privacy Policy, together with the dates of any amendments, is available on the Firm's website www.bierontiene.lt.

If you have any questions regarding the processing of your personal data or in order to exercise your rights as a data subject, you may contact us by telephone at +370 686 97487 or by e-mail at advokate@bierontiene.lt.

Last date of revision of the Privacy Policy - 30 June 2021