10.1. When processing your personal data, we ensure your rights under the GDPR and the Republic of Lithuania's Law on Personal Data Protection. As a data subject, you have the following rights:
- To know (be informed) about the processing of your personal data;
- To access your personal data that we process;
- To request correction, supplementation, or clarification of inaccurate or incomplete personal data;
- To request deletion of personal data when they are no longer necessary for the purposes for which they were collected;
- To request deletion of personal data if they are processed unlawfully or if you withdraw your consent for data processing and there is no other legal basis for processing;
- To object to the processing of personal data or to withdraw consent previously given;
- To request the restriction (except for storage) of the processing of your personal data in case of disputes or to verify the lawfulness of data processing, data accuracy, or in cases where we no longer need your personal data but you do not want us to delete it;
- To request the transfer, if technically feasible, of your personal data collected with your consent or for the performance of a contract, in a readable format or to request its transmission to another data controller.
10.2. We will endeavor to ensure the exercise of your rights as a data subject and create all conditions for the effective implementation of these rights. However, we reserve the right not to comply with your requests when it is necessary to ensure:
- Compliance with legal obligations imposed on us;
- State security or defense;
- Public order, prevention, investigation, detection, or prosecution of criminal offenses;
- Important state economic or financial interests;
- Prevention, investigation, and detection of official or professional ethics violations, or
- Protection of your or others' rights and freedoms.
10.3. You can submit requests related to the exercise of your rights in person, by post, or electronically. Upon receiving your request, we may ask you to provide identity documents and any other necessary information related to your request.
10.4. We will respond to your request no later than 30 calendar days from the date of receipt of your request and the submission of all necessary documents for the response.
10.5. If deemed necessary, we will suspend the processing of your data, except for storage, until your request is resolved. Upon lawful withdrawal of consent, we will immediately, but no later than 30 calendar days, cease processing your personal data, except as provided in section 12.2 of this Privacy Policy and as required by applicable laws, legal obligations, court decisions, or mandatory instructions from authorities.
10.6. If we refuse to comply with your request, we will clearly state the reasons for such refusal.
10.7. If you disagree with our actions or response to your request, you have the right to lodge a complaint with the competent state authority.