Privatumo pranešimas

We respect your privacy and protect your personal information that you provide to us and that we collect for the purposes set out in this Privacy Notice (the “Privacy Notice”). In the privacy statement, we explain what data we collect about you, how we use this personal data, and under what conditions the data may be disclosed to third parties. We also explain how we store and protect your personal data from misuse and what rights you have with respect to your personal data.

1. Who is your data controller?

Hermitage Solutions, UAB, legal entity code 300572207, address Žirmūnų g. 139A, 09120 Vilnius (hereinafter – “Hermitage Solutions” or “we”) is the controller of your personal data.

2. Whom should you contact if you have questions about personal data protection?

If you have any questions about the protection of personal data, please contact:

• Hermitage Solutions, UAB
• Address: Žirmūnų g. 139A, LT-09120 Vilnius
• Email: info@hermitage.lt

3. How do we process your personal data and why?

In the course of our business activities, we collect personal data from our customers, potential customers, business partners (service providers, manufacturers, resellers, etc.), visitors to our website, and attendees of events organized by us, and we are therefore considered to be a data controller.  As the data controller, in this Privacy Notice we inform you (the data subject) of the purposes for which we collect and process your personal data and indicate the legal basis for such data collection.

We may collect and process your personal data for the following purposes and on the following legal basis: 

Personal	Purpose	Legal	Storage period
data		basis
Selling goods or providing services, cooperation with business partners
Name, surname, represented legal entity, position, e-mail address, phone number, address, IP address	Entering into contracts, selling and acquiring goods, providing and receiving services	Contract preparation and performance	For as long as is necessary to carry out the specific task and to ensure the exercise of our rights, but no longer than 10 years in the case of a contract, which is calculated after the end of the contract)
	Bookkeeping, including invoicing and submission
		Compliance with legal requirements
Communication with us
Name, surname, e-mail address, phone number, content of the message, date and time, content of the correspondence	Resolving your request, enquiry, or complaint	Consent	To the extent necessary to carry out a specific task and to ensure the exercise of our rights, but for no longer than 10 years from the end of the last communication
Direct marketing
Name, surname, e-mail address, phone number, represented legal entity	Inform you about our goods, services, events, and other news, as well as offers from business partners	Consent or legitimate interest if you are our customer who has purchased services from us within 5 years	Until consent is withdrawn, or your objection is received regarding the application of direct marketing. We ask for your consent regularly, but no less often than every 5 years after receiving your consent

4. From where do we get personal data?

We receive your personal data when you provide personal data, for example, by calling, writing to us, visiting us, browsing our website, submitting your documents, registering, and attending our events, and so on.

We also collect your personal information from third parties, for example credit rating agencies, contact information service providers, publicly available sources such as newspapers and other news sources, public registers, professional social media networks, government agencies and corporate websites.

5. To whom we disclose or transfer data. Do we transfer data outside the EU or the EEA?

 Your personal data will not be disclosed to any person other than our business partners (service providers, manufacturers, resellers, etc.), without whom our website would not be able to function, our services would not be able to be provided, our goods would not be able to be sold, etc.

Your personal data may also be disclosed to government or law enforcement agencies, but only when required to do so by applicable law or to protect our rights and legitimate interests, as well as the rights and interests of our employees, customers and/or business partners.

Our business partners process personal data to the extent necessary to fulfil the relevant contract. We are responsible for the actions of our partners with regard to your personal data, as well as for our own.

Pursuant to the partnership agreement between Hermitage Solutions and Mokomieji filmai, UAB (Talentator) concluded on 2023-09-29 for the development of Responsu, Mokomieji filmai, UAB (Talentator) acts as your data processor when providing services. The terms of personal data processing are regulated by the relevant personal data processing agreement, which is signed separately. With your consent, Mokomieji filmai, UAB (Talentator) may provide you with access to Responsu testing environment prior to providing services.

When you purchase the services through our partner, where applicable, you agree to the rights and obligations relating to the processing of personal data directly with our partner.  

Your personal data may also be used for direct marketing purposes, e.g., after you subscribe to our newsletter, as well as after our events, with your consent, your personal data may be transferred to our business partners (e.g., manufacturers) so that they can provide you with their offers and so on.

In some cases, we may transfer your personal data outside the EU or the EEA. However, in cases where we transfer personal data outside the EU, the EEA, we will ensure that the conditions set out in Chapter V of the General Data Protection Regulation are complied with.

6. How long do we keep data?

We process and store your personal data for no longer than is necessary for the purposes set out in this Privacy Notice. We regularly review the need to protect personal data in line with legal requirements. More detailed information on the terms of storage of your personal data is provided in Section 3 of this Privacy Notice.

7. How do we protect data?

We take the necessary technical and organizational measures to ensure the protection of the personal data we process.

8. What are your rights as a data subject?

As a data subject, you have the following rights:

• the right to have access to your personal data that we process about you;
• the right to have personal data rectified;
• the right to have personal data deleted (“right to be forgotten”);
• the right to restrict the processing of personal data;
• the right to receive personal data in a structured, commonly used, computer-readable format and the right to transfer them without interruption to another controller (the right to portability of personal data);
• the right to object to the processing of personal data;
• the right to withdraw your consent to the processing of personal data;
• the right to require that you are not subject to a decision based solely on automated processing of personal data, including profiling;
• the right to lodge a complaint with the State Data Protection Inspectorate

All requests, enquiries and requests regarding the rights referred to in this text and their exercise shall be made in writing by e-mail info@hermitage.lt or registered mail correspondence to Žirmūnų g. 139A, LT-09120 Vilnius.

9. Use of Cookies

Cookies are used on this website. Cookies are text files that are stored on your device’s browser when you browse the website and also collect information about your browsing. More information about the use of cookies can be found here

10. Changes to the Privacy Notice

If we change this privacy notice, we will note the dates of the changes in the new version of the privacy notice.  In the event that the changes are significant, we may provide additional notice in other ways, such as by email or by posting a notice on our website.

We encourage you to visit our website regularly and be aware of any changes to this Privacy Notice.