Privacy policy

When necessary, Prevence may transfer and/or otherwise disclose the processed personal data to the Bank of Lithuania, the Lithuanian Bar Association, the Competition Council of the Republic of Lithuania, courts, and/or other state, law enforcement, or municipal authorities.

Additionally, to the extent necessary to ensure the proper provision of services, Prevence may transfer personal data to third parties – partners and service providers (including software providers, IT infrastructure maintenance, cloud service providers, server rental and maintenance, electronic communications, parcel delivery, website administration, archiving, marketing service providers, and others). We will only provide these service providers with the data necessary to perform a specific service.

When communicating with us through social networks or other platforms, you should review the data protection terms and privacy policies applicable to the particular social network/platform. All personal data you share with us via social networks/platforms is controlled by the respective social network/platform operator (e.g., Facebook, LinkedIn).

In cases where it is necessary to provide specific legal services, personal data may be transferred to a third country (a country outside the European Union and the European Economic Area (EEA)). In such cases, we apply safeguards ensuring adequate protection (transfer to a country recognized by the European Commission as providing an adequate level of data protection, reliance on the European Commission’s approved Standard Contractual Clauses (SCC), or the EU-U.S. Data Privacy Framework certified by the U.S. Department of Commerce, and, where necessary, other legitimate grounds). The list below may be incomplete, subject to changes, or outdated; therefore, data subjects should regularly review the privacy policies of third parties.

Outside the EEA:

Meta Platforms, Inc. (Facebook, Instagram) (USA) relies on the European Commission’s Standard Contractual Clauses (SCC), the EU-U.S. Data Privacy Framework certified by the U.S. Department of Commerce, and adequacy decisions by the European Commission for data transfers outside the EEA.You can review the privacy policy of Meta Platforms, Inc. (Facebook, Instagram) (USA) here

You can review the privacy policy of LinkedIn Corporation (USA) here. LinkedIn Corporation (USA) relies on the European Commission’s Standard Contractual Clauses (SCC) for data transfers outside the EEA.

You can review the privacy policy of SoundCloud Inc. (USA) here. SoundCloud Inc. (USA) relies on the European Commission’s Standard Contractual Clauses (SCC) for data transfers outside the EEA.

You can review the privacy policy of Apple, Inc. (Apple Podcasts) (USA) here. Apple, Inc. (Apple Podcasts) (USA) relies on the European Commission’s Standard Contractual Clauses (SCC) for data transfers outside the EEA.

You can review the privacy policy of TikTok Technology Limited and TikTok Information Technologies UK Limited (TikTok) here. TikTok Technology Limited and TikTok Information Technologies UK Limited (TikTok) rely on the European Commission’s Standard Contractual Clauses (SCC) and adequacy decisions under Article 45 of the GDPR (or equivalent decisions under other legal acts) for data transfers outside the EEA.

We encourage data subjects to regularly review the privacy policies and terms of these third-party platforms and/or contact the service providers directly. Before submitting any information about yourself on another website, you should review the terms, privacy policy, and other information provided on the respective website. Please note that personal data in non-EEA countries may be subject to a lower level of protection than in EEA countries. However, we will carefully assess the conditions under which your data will be processed and stored after the transfer to the entities mentioned above.

4. Data Subject Rights

Every data subject whose personal data is processed by Prevence has the following rights:

• Right to be informed about the processing of their personal data (Articles 12–14 of the GDPR);
• Right of access to their processed personal data (Article 15 of the GDPR);
• Right to rectification of inaccurate personal data concerning them (Article 16 of the GDPR);
• Right to erasure of personal data (“right to be forgotten”) (Article 17 of the GDPR):

Note: You may exercise the right to be forgotten only if one of the following grounds applies:

• The personal data is no longer necessary in relation to the purposes for which it was collected or otherwise processed;

• You withdraw your consent on which the processing is based, and there is no other legal ground for the processing;

• You object to the processing pursuant to Article 21(1) of the GDPR, and there are no overriding legitimate grounds for the processing.

• Right to restriction of processing (Article 18 of the GDPR):

Note: You may exercise the right to restrict processing only if:

• The personal data is inaccurate;

• The processing is unlawful, and you oppose the erasure of the personal data;

• The data controller no longer needs the personal data for its purposes, but you require it to establish, exercise, or defend legal claims;

• You have objected to processing pursuant to Article 21(1) of the GDPR, pending verification whether the controller’s legitimate grounds override yours.

• Right to data portability when data processing is based on consent or a contract and is carried out by automated means (Article 20 of the GDPR);

• Right to object to the processing of personal data on grounds relating to your particular situation when data is processed based on the legitimate interests of the data controller or a third party, except where the controller demonstrates compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or for the establishment, exercise, or defense of legal claims (Article 21 of the GDPR).

If you believe that Prevence is unlawfully processing your personal data or is not fulfilling your rights, you have the right to lodge a complaint with the State Data Protection Inspectorate (L. Sapiegos g. 17, 10312 Vilnius, tel. +370 5 271 2804, +370 5 279 1445, email: ada@ada.lt).

You may exercise your rights by submitting a written request via email to info@prevence.legal, by post to our address S. Žukausko g. 49, LT-09131 Vilnius, or by visiting the Prevence office in person.