Select your region

JSC “Invertus” (Data Controller), company code 300117946, with registered address at K. Donelaičio g. 62-522, LT-44248 Kaunas, informs you about your rights as a data subject under Regulation (EU) 2016/679 (General Data Protection Regulation - GDPR) and applicable national laws regarding the collection, processing, and storage of your personal data.

Your personal data are collected and processed by the Company for the following lawful purposes:

1. To perform contractual obligations and services, or take actions prior to entering into a contract;
2. To comply with legal obligations incumbent upon the Company;
3. To pursue the legitimate interests of the Company or third parties, where not overridden by your rights;
4. To protect your vital interests or those of another natural person;
5. To fulfill tasks carried out in the public interest or in the exercise of official authority vested in the Company.

We process and store your personal data in accordance with GDPR, Lithuanian Personal Data Protection laws, and other applicable regulations. We implement appropriate technical and organizational measures to safeguard your data against unauthorized access, alteration, disclosure, or destruction.

1. RIGHT TO ACCESS YOUR PERSONAL DATA (ARTICLE 15 GDPR)
   You have the right to obtain from the Company confirmation as to whether your personal data are being processed, and, where that is the case, access to your personal data and the following information: the purposes of processing; the categories of personal data concerned; recipients or categories of recipients to whom the data have been or will be disclosed; the envisaged period for which the data will be stored; the existence of your rights to request correction, erasure, or restriction; the right to complain with a supervisory authority; the source of the data if not collected directly from you; and information about automated decision-making including profiling. If personal data are transferred to a third country or international organization, you will be informed about the safeguards in place.

You are entitled to receive a copy of your personal data undergoing processing, free of charge, once per calendar year. Additional copies may be subject to a reasonable administrative fee. Requests can be made electronically or in writing.

2. RIGHT TO RECTIFICATION (ARTICLE 16 GDPR)
   You have the right to obtain from the Company the correction of inaccurate personal data concerning you without undue delay. You also have the right to have incomplete personal data completed, including by providing a supplementary statement.
   
3. RIGHT TO ERASURE (“RIGHT TO BE FORGOTTEN”) (ARTICLE 17 GDPR)
   You have the right to request the deletion of your personal data without undue delay if one of the following grounds applies:
4. 1. The data are no longer necessary for the purposes for which they were collected;
   2. You withdraw consent where processing is based on consent, and there is no other legal ground for processing;
   3. You object to the processing pursuant to Article 21 and there are no overriding legitimate grounds;
   4. The data have been unlawfully processed;
      The data must be erased to comply with a legal obligation;
   5. The data were collected in relation to the offer of information society services to a child under 16 years of age without parental consent.

This right does not apply where processing is necessary for exercising the right of freedom of expression, compliance with legal obligations, public interest in public health, archiving purposes, scientific or historical research, or for the establishment, exercise, or defence of legal claims.

4. RIGHT TO RESTRICTION OF PROCESSING (ARTICLE 18 GDPR)
   You have the right to obtain restriction of processing where one of the following applies:
5. 1. You contest the accuracy of the data for a period allowing the Company to verify accuracy;
   2. Processing is unlawful but you oppose erasure and request restriction instead;
   3. The Company no longer needs the data but you require them to establish, exercise, or defend legal claims;
   4. You have objected to processing pending verification whether the Company’s legitimate grounds override yours.
      
5. RIGHT TO DATA PORTABILITY (ARTICLE 20 GDPR)

You have the right to receive the personal data you provided to the Company in a structured, commonly used, and machine-readable format and to transmit those data to another data controller without hindrance, where processing is based on consent or contract and carried out by automated means. This right does not adversely affect others' rights or freedoms.

6. RIGHT TO OBJECT TO PROCESSING (ARTICLE 21 GDPR)
   You have the right to object at any time to the processing of your personal data based on legitimate interests or performance of a task in the public interest, including profiling. The Company will no longer process your data unless it demonstrates compelling legitimate grounds overriding your interests or for legal claims.

You also have the right to object to processing for direct marketing purposes. If you object, your personal data will no longer be processed for such purposes.

If your personal data are processed for scientific or historical research or statistical purposes, you may object unless processing is necessary for the public interest.

Note: Exercising some rights may restrict or prevent the Company from providing certain services.

7. RIGHT TO LODGE A COMPLAINT WITH A SUPERVISORY AUTHORITY
   If you consider that your data protection rights have been infringed by the Company’s processing of your personal data, you have the right to lodge a complaint with the State Data Protection Inspectorate in Lithuania (VDAI) or other competent supervisory authority.

8. EXERCISING YOUR RIGHTS
   To exercise any of these rights, please contact our Data Protection Officer or designated representative:
   Phone: +370 650 59071
   Email: info@invertus.pro
   Address: K. Donelaičio g. 62-522, LT-44248 Kaunas, Lithuania

We will respond to your request without undue delay and in any event within one (1) month of receipt, extendable by two (2) additional months when necessary due to complexity.

If you need further information about your rights or about how your personal data is processed, please contact us using the details above.