PRIVACY POLICY
1. WHAT CAN I FIND IN THIS PRIVACY POLICY?
This Privacy Policy (hereinafter referred to as the Policy) contains information on how Kauno stadionas UAB (hereinafter referred to as Kauno stadionas the Company or We), collects, uses and stores your personal data and what your legal rights are in accordance with the applicable personal data protection laws.
We follow the requirements of the General Data protection Regulation of the European Union (hereinafter referred to as the GDPR) and other legal norms regulating personal data protection to ensure the privacy and security of your personal data. This policy may be amended; therefore, we recommend that you regularly consult the most up-to-date version of this policy.
2. WHO IS RESPONSIBLE FOR THE PROTECTION OF MY PERSONAL DATA?
We operate as Kauno stadionas, UAB.
Enterprise No: 306677670.
Address: Perkuno al. 5, Kaunas.
E-mails: info@kaunostadionas.lt
3. HOW DO YOU USE MY PERSONAL DATA AND WHY?
3.1. For the purposes of the sales of goods and/or provision of services
When you purchase our goods and/or services, we will process your Data as described below.
<table><thead>
<tr>
<th><br>Categories of Relevant Data<br> <br> </th>
<th><br>Legal basis for Data processing </th>
<th><br>Data retention period or criteria set for it<br> <br> </th>
</tr></thead>
<tbody>
<tr>
<td><br>Your first name, family name, e-mail, phone number, account number, amount paid, product/service, purchase history, health data (when purchasing tickets to the seats for people with disabilities and/or staff assistance is requested) </td>
<td><br>Agreement <br></br><br></br>(Clause (b) of Paragraph 1 of Article 6 of the GDPR) </td>
<td><br>3 years following the last purchase </td>
</tr>
</tbody>
</table>
3.2. For the purpose of ensuring your and our safety
When you visit the filmed premises or areas of the Darius and Girenas Stadium or the Kaunas Sports Hall, as well as when you enter the Darius and Girenas Stadium or the Kaunas Sports Hall according to a preliminary visitor list, we will process your Data as described below.
<table><thead>
<tr>
<th><br>Categories of Relevant Data<br> <br> </th>
<th><br>Legal basis for Data processing </th>
<th><br>Data retention period or criteria set for it<br> <br> </th>
</tr></thead>
<tbody>
<tr>
<td><br>Visitor List Data: First name, family name, represented organization, event, event date, signature<br></br><br></br>Camera Data: Image, visit/ stay location, behavior, personal belongings, time and date</td>
<td><br>Legal interest to ensure your and our safety <br></br><br></br>(Clause (f) of Paragraph 1 of Article 6 of the GDPR)</td>
<td><br>Visitor List Data: 30 days from visiting Darius and Girenas Stadium or Kaunas Sports Hall.<br></br><br></br>Camera Data: up to 6 weeks from being filmed, except in cases of a reason to believe that a transgression or other illegal action has occurred (until the end of the respective investigation and/or closing of the case)</td>
</tr>
</tbody></table>
3.3. For the purpose of provision of information pertaining to our products and/or services
When you have used our services or purchased goods, consent to receive marketing communications from us, or where we have a legitimate interest in informing you about our services and/or goods, we will process your Data as described below.
<table><thead>
<tr>
<th><br>Categories of Relevant Data </th>
<th><br>Legal basis for Data processing </th>
<th><br>Data retention period or criteria set for it </th>
</tr></thead>
<tbody>
<tr>
<td><br>Your first name, family name, e-mail, phone number, address, inquiry, request or complaint and any other related information, information on whether the e-mail was opened, the active links you clicked and other statistical data </td>
<td><br>Your consent<br></br><br></br>(Clause (a) of Paragraph 1 of Article 6 of the GDPR)<br></br><br></br>Legal interest to inform you about our products and/or services<br></br><br></br>(Clause (f) of Paragraph 1 of Article 6 of the GDPR)<br></br><br></br>Paragraph 2 of Article 81 of the Law on Electronic Communications of the Republic of Lithuania</td>
<td><br>3 years from provision of information, unless you have revoked your consent to receive information about our products and/or services earlier than this term</td>
</tr>
</tbody></table>
3.4. For the purpose of website administration
We need to keep our website running safely and smoothly. For that purpose, when you visit the www.stadionas.lt website, we will automatically collect certain technical data about your device and the use of our website.
<table><thead>
<tr>
<th><br>Categories of Relevant Data </th>
<th><br>Legal basis for Data processing </th>
<th><br>Data retention period or criteria set for it </th>
</tr></thead>
<tbody>
<tr>
<td><br>Device information (ID), IP address, sign-in time, location data </td>
<td><br>Legal interest to manage our websites and mobile app (Clause (f) of Paragraph 1 of Article 6 of the GDPR) </td>
<td><br>1 year from browsing our websites </td>
</tr>
</tbody>
</table>
3.5. For the purpose of publishing photos and/or video recordings from our events
When you participated in competitions or events organized by us and were photographed and/or filmed, we may publish your photo or video on our social networks or other media. For this purpose, we will process your Data as described below.
<table><thead>
<tr>
<th><br>Categories of Relevant Data </th>
<th><br>Legal basis for Data processing </th>
<th><br>Data retention period or criteria set for it </th>
</tr></thead>
<tbody>
<tr>
<td><br>Image on the photo, image and/or sound recording in the video, event, event date</td>
<td><br>Legal interest to record and use images and/or video recordings from our events for representational purposes<br></br><br></br>GDPR 6 str. 1 d. f p.<br></br><br></br>Your consent when posing for photos<br></br><br></br>(Clause (a) of Paragraph 1 of Article 6 of the GDPR)</td>
<td><br>5 years from publishing the photo and/or video recording</td>
</tr>
</tbody></table>
3.6. For the purpose of managing our social network accounts
When you perform active actions on our social network accounts (e.g. sent a message, followed our profile, shared our posts, etc.), we, as administrators of these profiles, will process Data about your actions.
<table><thead>
<tr>
<th><br>Categories of Relevant Data </th>
<th><br>Legal basis for Data processing </th>
<th><br>Data retention period or criteria set for it </th>
</tr></thead>
<tbody>
<tr>
<td><br>User name, comments under a post, sharing posts, information on “like” and “follow” clicks on our social network account, information about reactions to posts, photos, messages, time, content, attachments, message replies, time of replying to the messages, information about participation in events, information about the given rating and any other similar information that you may provide </td>
<td><br>Your consent<br></br><br></br>(Clause (a) of Paragraph 1 of Article 6 of the GDPR) </td>
<td><br>10 years after taking any active steps on our social networks </td>
</tr>
</tbody></table>
3.7. For the purpose of analyzing your purchase history, habits and interests
When you have purchased our goods and/or services, we will analyze your purchasing habits and your use of our services in order to provide more personalized content and services.
<table><thead>
<tr>
<th><br>Categories of Relevant Data </th>
<th><br>Legal basis for Data processing </th>
<th><br>Data retention period or criteria set for it </th>
</tr></thead>
<tbody>
<tr>
<td><br>Device information (ID), IP address, sign-in time, location data, purchase history </td>
<td><br>Legal interest to organize the data processed by us<br></br><br></br>(Clause (f) of Paragraph 1 of Article 6 of he GDPR) </td>
<td><br>3 years </td>
</tr>
</tbody>
</table>
3.8. For the purpose of analyzing your inquiries, requests and complaints
When email you submit a request to us by mail or phone, we process your Data related to your request.
<table><thead>
<tr>
<th><br>Categories of Relevant Data </th>
<th><br>Legal basis for Data processing </th>
<th><br>Data retention period or criteria set for it </th>
</tr></thead>
<tbody>
<tr>
<td><br>First name and family name, e-mail, phone number, address, inquiry, request or complaint, information related to the submitted inquiry, request or complaint </td>
<td><br>Your consent<br></br><br></br>(Clause (a) of Paragraph 1 of Article 6 of the GDPR) </td>
<td><br>1 year from the submitted inquiry, request or complaint </td>
</tr>
</tbody>
</table>
3.9. For the purpose of employee recruitment and selection
When you apply for a vacant position in our workplace or we contact you about job opportunities, we process your Data related to the employee selection process.
<table><thead>
<tr>
<th><br>Categories of Relevant Data </th>
<th><br>Legal basis for Data processing </th>
<th><br>Data retention period or criteria set for it </th>
</tr></thead>
<tbody>
<tr>
<td><br>First name and family name, date of birth, address, phone number, e-mail, workplace, education, desired position, date of receiving your CV, personal qualities, work experience, last workplace, professional experience in years, position in the last workplace, other work experience, language, foreign language skills, reading, writing and speaking skill levels, computer skills, other information, motivation to work with us, desired salary) and/or other information submitted by you during the selection process, and information from your social networks </td>
<td><br>Your consent<br></br><br></br>(Clause (a) of Paragraph 1 of Article 6 of the GDPR)<br></br><br></br>Agreement<br></br><br></br>(Clause (b) of Paragraph 1 of Article 6 of the GDPR)<br></br><br></br>Legal interest to contact you when you upload information on your professional social network platforms<br></br><br></br>(Clause (f) of Paragraph 1 of Article 6 of the GDPR) </td>
<td><br>3 years after the end of the employment process<br></br><br></br>5 years after your consent or after we collect information from professional social network platforms </td>
</tr>
</tbody></table>
3.10. For the purpose of accounting as set forth in the laws and for the purpose of protecting our rights and legal interests
If you have entered into a contract with us, we will retain the Data within the statutory limitation periods in order to defend our rights and legal interests, if necessary. We need to store some Data in order to fulfill legal requirements in accounting, archiving and other areas. In the event that you become involved in a legal process to which we are a party, we will use this Data for the purposes of that legal process.
<table><thead>
<tr>
<th><br>Categories of Relevant Data </th>
<th><br>Legal basis for Data processing </th>
<th><br>Data retention period or criteria set for it </th>
</tr></thead>
<tbody>
<tr>
<td><br>All of the above-mentioned information related to other purposes, documents and annexes sent to you, documents and annexes submitted by you, procedural documents, court decisions, decrees, information about crimes and convictions </td>
<td><br>Legal obligation to collect data (Clause (c) of Paragraph 1 of Article 6 of the GDPR)<br></br><br></br>Legal interest to defend our rights in legal proceedings (Clause (f) of Paragraph 1 of Article 6 of the GDPR) </td>
<td><br>10 years after the end of the contractual relationship with you<br></br><br></br>3 (three) years from the day the court orinstitution decision came into force or the legally binding decision was implemented </td>
</tr>
</tbody></table>
4. WHICH INFORMATION SHOULD I SUBMIT TO YOU AND WHY?
You must submit your personal data to us when we are legally obligated to collect, use and store your personal data or when such data collection, use and storage is necessary to execute or conclude an agreement with you (as described in Section 3 hereof). If you cannot provide the said data, we will be unable to render services and/or sell products to you or fulfill other obligations.
5. WHERE DO YOU GET INFORMATION ABOUT ME?
The majority of information is collected from you. Furthermore, we can also receive information from other sources as indicated below.
<table><thead>
<tr>
<th><br>Information source </th>
<th><br>Goal of information collection</th>
</tr></thead>
<tbody>
<tr>
<td><br>Other members of Žalgiris Group</td>
<td><br>Provision of information about our products and/or services</td>
</tr>
<tr>
<td><br>Providers of social network services</td>
<td><br>Administration of our social network accounts</td>
</tr>
<tr>
<td><br>Providers of HR recruitment services </td>
<td><br>Looking for potential new employees</td>
</tr>
<tr>
<td><br>Providers of photography and filming services</td>
<td><br>Publishing photos / videos from our events</td>
</tr>
<tr>
<td><br>Courts, law enforcement and other state institution</td>
<td><br>Fulfilling legal obligations and/or protecting our legal interests</td>
</tr>
</tbody></table>
6. WHO DO YOU RELAY MY PERSONAL DATA TO?
Where necessary for the purposes described above and permitted by applicable law, we share your data with data recipients both within and outside the European Economic Area (EEA).
<table><thead>
<tr>
<th><br>No.</th>
<th><br>Recipients or categories of personal data recipients </th>
<th><br>State of recipient of personal data</th>
<th><br>Legal basis for transferring my personal& data beyond the EEA</th>
</tr></thead>
<tbody>
<tr>
<td><br>6.1. </td>
<td><br>Interneto Vizija UAB (provider of website administration services) </td>
<td><br>Lithuania </td>
<td><br>Not applicable </td>
</tr>
<tr>
<td><br>6.2. </td>
<td><br>Other members of Žalgiris Group, including Žalgiris Ventures UAB (provider of data optimization services) </td>
<td><br>Lithuania </td>
<td><br>Not applicable </td>
</tr>
<tr>
<td><br>6.3. </td>
<td><br>UAB "Grifs AG" (provider of security services) </td>
<td><br>Lithuania </td>
<td><br>Not applicable </td>
</tr>
<tr>
<td><br>6.4. </td>
<td><br>Asistentai.lt (provider of visitor access administration services) </td>
<td><br>Lithuania </td>
<td><br>Not applicable </td>
</tr>
<tr>
<td><br>6.5. </td>
<td><br>Lithuanian Football Clubs Association A league </td>
<td><br>Lithuania </td>
<td><br>Not applicable </td>
</tr>
<tr>
<td><br>6.6. </td>
<td><br>Typeform SL (provider of survey and quiz services) </td>
<td><br>Spain </td>
<td><br>Not applicable </td>
</tr>
<tr>
<td><br>6.7. </td>
<td><br>Parties and representatives in legal proceedings, other participants of legal proceedings </td>
<td><br>EEA </td>
<td><br>Not applicable </td>
</tr>
<tr>
<td><br>6.8. </td>
<td><br>Lawyers, notaries, bailiffs </td>
<td><br>EEA </td>
<td><br>Not applicable </td>
</tr>
<tr>
<td><br>6.9. </td>
<td><br>Law enforcemen institutions and courts of the Republic of Lithuania and the European Union </td>
<td><br>EEA </td>
<td><br>Not applicable </td>
</tr>
<tr>
<td><br>6.10. </td>
<td><br>Facebook Inc., Facebook Ltd. (provider of social network services) </td>
<td><br>USA </td>
<td><br><a href="https://www.facebook.com/legal/Workplace_GDPR_Addendum?paipv=0&eav=Afa_yzF9DFGkDN5RWlmDigvB9rwdDqTm5LGT_ISdUqcmkXZUCekXV3yiHOG2JdGvdnU&_rdr">Standard contractual clauses</a> </td>
</tr>
<tr>
<td><br>6.11. </td>
<td><br>Webflow Inc. (website administration service provider) </td>
<td><br>USA </td>
<td><br><a href="https://webflow.com/legal/dpa">Standard contractual clauses</a></td>
</tr>
<tr>
<td><br>6.12. </td>
<td><br>Service providers (e.g., providers of such services as event and activity planning, social networks, photography, mobile app administration tools, technological measures, accounting, insurance services) </td>
<td><br>Various countries </td>
<td><br>In cases of transferring personal data outside the EEA, we follow:<a href="https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en">European Commission decisions concerning adequacy </a>(Article 45 of the GDPR) and <a href="https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc/standard-contractual-clauses-international-transfers_en">Standard contractual clauses</a> (Clause (c) of Paragraph 2 of Article 46 of the GDPR) </td>
</tr>
</tbody></table>
7. WHAT ARE MY RIGHTS?
In compliance with the conditions, limitations and exceptions set forth in data protection laws, you have the following rights:
<table><thead>
<tr>
<th><br>My right </th>
<th><br>When does this right apply to me? </th>
</tr></thead>
<tbody>
<tr>
<td><br>The right of access </td>
<td><br>when you seek to obtain confirmation as to whether we are processing data relating to you and, if so, access to the data and information about the processing of the data. </td>
</tr>
<tr>
<td><br>Right to have personal data rectified </td>
<td><br>when you seek from us rectification of inaccurate data relating to you. </td>
</tr>
<tr>
<td><br>Right to erasure (“right to be forgotten”) </td>
<td><br>1) when the data is no longer necessary to achieve the purposes for which it was collected or otherwise processed, 2) when you revoke your consent on the basis of which the data processing was carried out and there is no other legal basis for processing the data, 3) when you object to data processing and there are no overriding legal grounds for the processing, or you object to data processing for direct marketing purposes, 4) when the data was processed illegally, 5) when the data must be erased in compliance with the legal obligation imposed on the Company, 6) when the data was collected in the context of offering an information society service directly to a child and after receiving a consent from the child. </td>
</tr>
<tr>
<td><br>Right to restrict processing </td>
<td><br>1) when you dispute the accuracy of the data, 2) when the processing is illegal and you object to the erasure of the data and request to limit its use instead, 3) when we no longer need the data for processing purposes, but you require the data to assert, exercise or defend legal claims, 4) when you object to data processing. </td>
</tr>
<tr>
<td><br>Right to data portability </td>
<td><br>when you seek to receive the data you have provided to us in a structured, commonly used and computer-readable format and to forward that data to another data controller where the data processing is based on consent or contract and is carried out automatically. </td>
</tr>
<tr>
<td><br>Right to disagree </td>
<td><br>when the data processing is based on a task carried out in the public interest or in the performance of public authority functions, or the legitimate interest of the data controller, including profiling, or if you object to the processing of your data for direct marketing purposes. </td>
</tr>
<tr>
<td><br>Right to withdraw consent </td>
<td><br>when processing is based on consent and you seek to withdraw your consent at any time. </td>
</tr>
<tr>
<td><br>Right to lodge a complaint </td>
<td><br>when you want to lodge a complaint with a supervisory authority, in particular in the Member State where you have your permanent residence, place of work or violation of the GDPR is suspected. </td>
</tr>
</tbody></table>
8. DO YOU PROFILE ME AND MAKE AUTOMATED DECISIONS?
We do not make decisions that are based solely on automated data processing, that could have legal consequences for you or that could have any other significant impact on you.
9. DO USE COOKIES OR OTHER SIMILAR TECHNOLOGIES?
When you visit websites, we use cookies and other similar technologies to ensure high quality content and functionality of the website. Cookies are small text files containing information and stored in your browser or computer. Cookies allow us to recognize you as a website visitor, to save your browsing history and to adapt personal content for you to ensure a faster and more convenient use of our website, to analyze your behavior patterns and to improve the services rendered to you. The list of cookies used by us is available at https://www.stadionas.lt/en/slapuku-politika
10. HOW CAN I MANAGE COOKIES?
When visiting our website, you can select the desired cookies in the agreement form that shows up at the bottom of the page once the website is opened (we only ask to fill it once). Žalgiris will apply the cookies in line with the filled agreement form.
You can edit the agreement form to change and/or cancel your selections in relation to the cookies at any time. Please be aware that if you block certain cookies, the website may be modified, previously selected parameters may be deleted and some parts of the website might not be functional.
For more information about cookies and handling of cookies please visit www.allaboutcookies.org or www.google.com/privacy_ads.html and web browser help pages:
Google Chrome: https://support.google.com/chrome/answer/95647?hl=en
Firefox: https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences
Opera: https://help.opera.com/en/latest/web-preferences/#cookies
Internet Explorer: https://support.microsoft.com/en-us/help/17442/windows-internet-explorer-delete-manage-cookies
Safari: https://support.apple.com/guide/safari/manage-cookies-and-website-data-sfri11471/mac
11. HOW CAN I USE MY RIGHTS AND CONTACT YOUR DATA PROTECTION OFFICERS?
If you have any questions in relation to data protection, please contact our data protection officers by e-mail at dap@zalgiris.lt.
