In this Privacy Policy (hereinafter referred to as the Privacy Policy), we provide information on how the Environmental Projects Management Agency (APVA) under the Ministry of Environment of the Republic of Lithuania, legal entity code 288779560, with its registered address at Labdarių g. 3-102, Vilnius, 01120, Lithuania (hereinafter referred to as the Company), processes your personal data that you may provide on the website www.apva.lt (hereinafter referred to as the Website), by contacting us via email, post, telephone, or by visiting the Company’s registered office.

What personal data do we collect?

When you visit the Company’s website or contact us by email, post, or telephone, we may collect the following information:

• information collected through the use of cookies (see “What cookies are used on this website?”);
• information you provide when submitting requests, enquiries or complaints (such as your name, surname, email address and the content of your enquiry). These data will be stored for 2 (two) years from the date the enquiry is received;
• any other personal data that you may provide to us at any time when using our Website or communicating with us. These data will be stored for 2 (two) years from the date they are provided.

What cookies are used on this website?

A cookie is information that a web server sends to a web browser and that is stored in the browser. This information is sent back to the web server each time the browser requests a page from the server. This allows the web server to identify and track the web browser.

More information about the cookies used on the Website is provided below:

Where may we disclose your personal data?

We may disclose your personal data to personal data processors who provide services or perform work for us (such as information technology services, software maintenance and administration services, security services, document archiving service providers, etc.) and who process your data on behalf of the Company as the data controller. Data processors are entitled to process personal data only in accordance with our instructions and only to the extent necessary. When engaging data processors, we take all necessary measures to ensure that they also implement appropriate organisational and technical measures to protect personal data and maintain the confidentiality of personal data.

Please be informed that your personal data will not be transferred to any third country and/or international organisation.

How are your personal data processed?

Your personal data will be processed in accordance with the requirements of the Law on the Legal Protection of Personal Data of the Republic of Lithuania and other applicable legal acts.

We process your personal data only on lawful grounds defined in personal data protection legislation — on the basis of your consent and in cases where personal data must be processed for the legitimate interests of the Company.

When processing your personal data, we implement organisational and technical measures to ensure the protection of personal data against accidental or unlawful destruction, alteration, disclosure, and any other unlawful processing.

How long do we retain your data?

We will retain your personal data in accordance with the terms set out in this Privacy Policy. Upon expiry of the retention period, the data will be deleted or destroyed.

In cases where your personal data form part of official documents (such as contracts, orders, requests, etc.), such data will be archived and retained for the periods established in the General Document Retention Schedule approved by the Chief Archivist of Lithuania.

We undertake to retain your personal data in all cases for no longer than is necessary to achieve the purposes of data processing or for a longer period where required by law.

What are your rights?

You have the right to:

• submit a written request to us to obtain information as to whether personal data relating to you are being processed and, if so, to access your personal data and the following information: the purposes of the processing; the categories of personal data concerned; the recipients or categories of recipients to whom your personal data have been or will be disclosed; where possible, the envisaged period for which the personal data will be stored or, if not possible, the criteria used to determine that period;
• request the rectification of inaccurate personal data relating to you or the completion of incomplete personal data;
• request the erasure of your personal data. However, this right is not absolute and may be justified only where at least one of the following grounds applies: the personal data are no longer necessary for the purposes for which they were collected or otherwise processed; you withdraw your consent on which the processing is based and there is no other legal ground for the processing; the personal data have been unlawfully processed; the personal data must be erased to comply with a legal obligation to which we are subject;
• request the restriction of the processing of your personal data in one of the following cases: you contest the accuracy of the data, for a period enabling us to verify the accuracy of the personal data; the processing of your personal data is unlawful and you oppose the erasure of the data and request the restriction of their use instead; we no longer need the personal data for the purposes of the processing, but they are required for the establishment, exercise or defence of legal claims. Where processing has been restricted, such personal data shall, with the exception of storage, be processed only with your consent or for the establishment, exercise or defence of legal claims and/or for the protection of the rights of another natural or legal person or for reasons of important public interest;
• request the transfer of your personal data to another data controller, where technically feasible;
• lodge a complaint with us if you believe that your rights as a data subject have been and/or may be infringed.

How can you exercise your rights?

You may exercise your rights by:
contacting us by email at [email protected];
sending a request by post to Labdarių g. 3-102, Vilnius, 01120, Lithuania;
visiting the APVA registered office at Labdarių g. 3-102, Vilnius, 01120, Lithuania.
We will respond to written requests, complaints or claims in accordance with the procedures and time limits established by applicable law and will endeavour to provide you with the requested information as soon as possible, but no later than 30 days from the date of receipt of your request.

If, upon receipt of a request, complaint or claim, we have reasonable doubts regarding the identity of the applicant, we have the right to request the submission of an identity document for verification purposes.

If we do not provide you with the required information and/or you have complaints regarding the processing of your personal data, you have the right to lodge a complaint with the State Data Protection Inspectorate.

How do we notify you of changes to the Privacy Policy?

We may update or amend this Privacy Policy at any time. Any updated or amended Privacy Policy shall enter into force from the date of its publication on our Website. You should review it periodically to ensure that you are satisfied with the current version of the Privacy Policy.

When we update our Privacy Policy, we will inform you of any material changes by publishing them on the Website. To find out when the Privacy Policy was last updated, please refer to the “Update date” indicated at the bottom of the document.

How can you contact us?

If you have any questions regarding the terms of this Privacy Policy, please do not hesitate to contact us using the details provided below, by calling the telephone number указан below or by sending an enquiry by post or registered mail:

Environmental Projects Management Agency (APVA) under the Ministry of Environment of the Republic of Lithuania
Legal entity code: 288779560
Address: Labdarių g. 3-102, Vilnius, 01120, Lithuania
Tel.: +370 646 02285
Email: [email protected]

This Privacy Policy shall be governed by the laws of the Republic of Lithuania. Any disputes arising from these privacy provisions shall be resolved through negotiations and, if no agreement is reached, shall be settled in the courts of the Republic of Lithuania in Vilnius.