This is a translation for convenience. The Lithuanian version is the binding one.
1. General provisions
1.1. This personal data protection and privacy policy (the Policy) governs the principles and procedure for the management and processing of personal data carried out by MB Profinanca, legal entity code 304723101, address Ukmergės g. 219-519, LT-07152 Vilnius (the Data Controller). In this case the Data Controller is also the data processor.
1.2. For the purposes of this Policy, the data subject is the Client or any other natural person whose personal data is processed by the Data Controller.
1.3. For the purposes of this Policy, a Client is a person who has concluded an agreement with the Data Controller for the provision of accounting services.
1.4. The Data Controller follows the basic principles of personal data processing set out in the GDPR, including lawfulness, purpose limitation, data minimisation, accuracy, storage limitation, integrity and confidentiality, and accountability.
1.5. When third-party services are used (for example, when visiting the Data Controller's social media accounts), the terms of those third parties may apply. We recommend reading them.
1.6. This Policy has been drawn up in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR), the Law on Legal Protection of Personal Data of the Republic of Lithuania and other applicable legislation.
2. Collection, processing and storage of personal data
2.1. By providing personal data, the data subject agrees that the Data Controller may manage and process it for the purposes set out in the Policy and in legislation.
2.2. Anyone who does not agree with the Policy should not use the Data Controller's website or services.
2.3. The data subject grants the right to collect, organise, use and otherwise process the data they provide when using the website or services.
2.4. The data subject is responsible for the accuracy of the data provided and undertakes to update it when it changes. Any damage arising from incorrect data is the responsibility of the data subject.
3. Data processing for the purpose of client service
3.1. Data processed: first name, surname, email address, phone number, company details, information in agreements and documents.
3.2. Legal basis: performance of a contract, legitimate interests, consent.
4. Direct marketing
4.1. Data processed: first name, surname, email address.
4.2. Legal basis: consent.
5. Data retention periods
5.1. Client data – 10 years from the date of the last transaction.
5.2. Marketing data – 3 years from the last consent or activity.
6. Rights of data subjects
6.1. The data subject has the right:
- to access the data processed about them;
- to request that it be corrected;
- to request that it be erased or that its processing be restricted;
- to withdraw consent;
- to lodge a complaint with the State Data Protection Inspectorate.
7. Contact
Requests concerning the processing of personal data can be sent by email to info@profinanca.lt or in writing to Ukmergės g. 219-519, LT-07152 Vilnius.
8. Final provisions
8.1. The Policy may be updated. Changes take effect when they are published on the website.
8.2. Continued use of the website after an update is taken as agreement to the changes.
9. Cookies and visitor statistics
9.1. The website profinanca.lt uses no cookies and stores no data in the visitor's browser. There is therefore no cookie consent banner.
9.2. Visits are measured with Cloudflare Web Analytics, which counts page views without cookies, without visitor identifiers and without passing data to advertising networks.
9.3. If cookies are ever added to the website, this Policy will be updated and, where the law requires it, consent will be asked for before they are set.
10. Enquiries through the website
10.1. The data entered in the enquiry form – name, email address, company, phone number and message – is sent to info@profinanca.lt and used only to answer the enquiry and arrange a conversation.
10.2. The form is protected from automated submissions by a Cloudflare Turnstile check; it sets no cookies and builds no visitor profile.
10.3. If an enquiry does not lead to a working relationship, its data is kept for no longer than 12 months.