We understand the importance of protection of your personal data, therefore we collect and process only the data that is necessary for our activities. We process your personal data lawfully, transparently, and fairly, for the pre-determined purposes and only to the extent necessary to achieve those purposes. When we process your personal data, we make every effort to ensure that they are accurate, secure, confidential, properly stored and protected.
When processing your personal data, we comply with the requirements of the Regulation (EU) 2016/679 (General Data Protection Regulation) (the “GDPR”) and the requirements for the processing of personal data established by the Law on the Legal Protection of Personal Data of the Republic of Lithuania, as well as other legal acts.
By reading this Privacy Policy (the “Privacy Policy”) you will learn how and for what purposes we process your personal data when you use our website www.noor.lt (the “Website”) and our accounts on social networks (NOOR law firm > Facebook, NOOR law firm > Linkedin), from where we obtain it, to whom we provide it and how we store it, and what your rights are as a data subject. Please read this Privacy Policy carefully and familiarize yourself with the information contained therein.
The term “personal data” as used in this Privacy Policy means any information which could be used to identify you directly or indirectly.
The Website is managed and administered by law firm NOOR, company code 304032386, registered office at Lvivo 5, Vilnius, Lithuania, e-mail info@noor.lt, phone number +370 5 219 1818.
We are a controller of and we are responsible for the legal processing of your personal data.
While processing your personal data we:
We will process your personal data for clearly defined purposes:
(a) For the purpose of providing legal services:
Data Categories | Client’s or potential client’s name, surname, position, company name, telephone number, address, e-mail address, bank account number, time and duration of legal services provided, scope of legal services provided, taxpayer information, invoices issued and the information contained therein, other payment information, electronic correspondence history, any other information received/provided to us in the course of providing legal services |
Lawful basis for data processing | Conclusion and execution of the contract (Article 6 (1) (b) of the GDPR) Our legitimate interest (Article 6 (1)(f) of the GDPR) Performance of legal obligations (Article 6 (1)(c) of the GDPR) |
Data processing term | 10 years from the moment of the last provision of legal services to you |
We receive the personal data from | Directly from you |
We provide or transfer the personal data to | Depending on the nature of the legal services provided, we may provide personal data to: public registries, courts, arbitrators, lawyers or advocates (representatives of another party), law enforcement authorities, financial institutions and other authorities, other law firms, service providers who provide us with marketing, accounting, IT, translation and other services, to other natural and legal persons, to the extent that such provision of data is necessary for the proper provision of legal services |
(b) For recruiting purposes:
Data Categories | Candidate’s name, surname, phone number, e-mail address, information about work, professional experience and other information provided in the CV and learned during interviews (correspondence) with the candidate |
Lawful basis for data processing | Consent of the candidate (Article 6 (1) (a) of the GDPR) Our legitimate interest (Article 6 (1)(f) of the GDPR) |
Data processing term | Personal data is processed for as long as the selection to the specific position is taking place, unless the candidate withdraws consent earlier; if the candidate gives separate consent, personal data can be stored for 1 year from the end of the recruiting process |
We receive the personal data from | Directly from you |
We provide or transfer the personal data to | For service providers (e.g. service providers providing data storage services, recruitment services, etc.) |
(c) For the purpose of direct marketing (including, newsletters):
Data Categories | Name, last name, e-mail, telephone number |
Lawful basis for data processing | Consent (Article 6 (1) (a) of the GDPR) |
Data processing term | 2 years from the receipt of your consent, unless you withdraw your consent earlier |
We receive the personal data from | Directly from you |
We provide or transfer the personal data to | For service providers (e.g. service providers providing data storage services, direct marketing services, etc.) |
(d) For the purpose of managing and administering our social network (Facebook, Linkedin) accounts:
Data Categories | Your social network account name, profile picture, comments, likes, content of your requests (inquiry) |
Lawful basis for data processing | Consent (Article 6 (1) (a) of the GDPR) Our legitimate interest (Article 6 (1)(f) of the GDPR) |
Data processing term | Personal data is stored as long as our or your social network account is valid, unless you express a wish to delete your data in our social network accounts earlier |
We receive the personal data from | Directly from you; third parties |
We provide or transfer the personal data to | For service providers (e.g. service providers providing data storage services, etc.) |
(e) For the purpose of organizing and conducting our events (conferences, seminars, etc.):
Data Categories | Name, position, name of the organization, phone number, e-mail address, image (if recorded during the event), your wishes (requests) |
Lawful basis for data processing | Depending on the nature of the specific event, personal data may be processed on the following grounds: Conclusion and execution of the contract (Article 6 (1) (b) of the GDPR) Consent (Article 6 (1) (a) of the GDPR) Our legitimate interest (Article 6 (1)(f) of the GDPR) |
Data processing term | Personal data is processed for 2 years from the end of the specific event. If your personal data is processed on the Lawful basis of your consent, personal data will be stored for 2 years from the end of the specific event, unless you withdraw your consent earlier |
We receive the personal data from | Directly from you; third parties |
We provide or transfer the personal data to | For service providers (e.g. service providers providing data storage services, marketing services, event organization services, etc.) |
(f) For the purpose of ensuring the functionality of the website, improving the website:
Data Categories | IP address, type of Internet browser used, number of visits, pages viewed on the Website, time spent on the Website, demographic data, unique ID and other data |
Lawful basis for data processing | Consent (Article 6 (1) (a) of the GDPR) |
Data processing term | Personal data is stored as long as a specific cookie is valid, unless you withdraw your consent to the recording of cookies earlier. More information about cookies can be found in Section VII of this Privacy Policy |
We receive the personal data from | Directly from you; third parties |
We provide or transfer the personal data to | For service providers (e.g. data storage services, service providers providing marketing services, etc.) |
(g) For the purpose of administering your inquiries and requests:
Data Categories | Name, position, company name, email address, telephone number, content of the inquiry or request |
Lawful basis for data processing | Consent (Article 6 (1) (a) of the GDPR) |
Data processing term | Personal data is processed for 1 year from the date of receipt of your request (inquiry) |
We receive the personal data from | Directly from you |
We provide or transfer the personal data to | For service providers (e.g. service providers providing data storage services, etc.) |
We store your personal data for no longer than is necessary for the purposes for which the personal data are processed.
We seek not to store unrelated personal data, therefore only relevant information is kept when it is updated (e.g. after clarification, change of information, etc.). Historical information is stored if it is necessary according to the relevant legal acts or to carry out our activities.
We process your personal data obtained in the following ways:
We may combine personal data received from you with data lawfully collected by us from other sources. For example, we may combine the personal data you provide with data obtained through cookies on the Website, data collected in the course of providing you with services, or with data lawfully obtained from third parties. While exercising your rights, you will always be able to request the correction of incorrect or inaccurate personal data.
Yes, we may use your personal data for direct marketing purposes to provide you with offers and information about the goods and/or services of ours and our partners that we believe may be of interest to you. However, we will only use your personal data for this purpose with your additional consent.
How and what kind of your personal data is processed for this purpose is specified in Section IV of this Privacy Policy.
We may combine available information about you with information lawfully held by third parties in order to make offers to you.
If you consent to the use of your personal data for direct marketing purposes, we may use your personal data to analyse and improve the effectiveness of the Website, advertising and market research, and for other marketing and sales purposes.
Even if you have given your consent for the processing of your personal data for direct marketing purposes, you can easily revoke this consent at any time for all or part of the processing of personal data. To do this, you can:
If you revoke your consent, we will stop processing your personal data for direct marketing purposes as soon as possible.
We collect information about you using cookies and similar technologies. Cookies are small files that are temporarily stored on your device’s hard drive and allow to identify you during other visits to the Website and social media network acoounts, save your browsing history, options, customize content, speed up searches on the Website, create a convenient and friendly Website environment, make it more efficient and reliable. Cookies are common web browsing practices that make it easier to use the website.
By using cookies we may collect the following information: IP address, type of web browser used, number of visits to the Website, pages viewed on the Website, time spent on the Website, demographic data and, if you have accessed the Website from a third party website, information about the subscribers retargeted through social networks, unique ID.
We use the information we receive from cookies for the following purposes:
We may combine information obtained through cookies with information obtained about you by other means (e.g., information about the use of the Website may be combined with personal data provided by you).
The following cookies may be used on the Website:
All information about the cookies used on the Website, their purpose, validity and data used is provided in the table below:
Cookie name | Purpose | Validity period |
---|---|---|
hideCookieBar | Privacy policy system cookie | 1 year |
hideIntroPopup | Information message system cookie | 1 year |
pll_language | User language tag | Until the browser window is closed |
You can give your consent to the use of cookies by clicking on the “I accept all cookies” button in the cookie link (bar) provided on the Website. If you do not give your consent to use cookies, the cookies that are not of a technical nature will not be saved to your device.
You may revoke your consent to use advertising cookies at any time. You can do this by changing your web browser settings so that it does not accept cookies or (and) deleting cookies already in the browser. How you do this depends on your operating system and web browser. You can find detailed information about cookies and their use at http://AllAboutCookies.org or http://google.com/privacy_ads.html .
In some cases, especially disabling, disagreeing with or deleting technical and functional cookies may slow down the speed of Internet browsing, restrict the operation of certain functions of the Website, block access to the Website.
We guarantee that your personal data will not be disclosed or otherwise transferred to third parties without a legitimate basis, as well as used for purposes other than those for which they were collected. We will not transfer your personal data in any way other than in accordance with this Privacy Policy or applicable law. However, we reserve the right to provide information about you if we were required to do so by law or if required to do so by law enforcement authorities or prosecuting authorities.
We may transfer your personal data to companies that help us operate (e.g. for companies providing direct marketing, IT services, etc.). From such partners, we require that your data be processed only in accordance with the instructions given by us and the applicable data protection legislation. We enter into agreements with these partners that oblige the parties to adhere strictly to the personal data protection requirements.
We may disclose the personal data we collect about you to the following third parties:
The use of your personal data by the above-mentioned service providers is limited – they may not use this data for the purposes other than providing services to us.
The personal data we collect from you will be located within the European Union (EU) but may be transferred or stored outside the EU (e.g. personal data may be handled by our own or our suppliers’ staff working outside the EU). When transferring your personal data outside the EU, we will take all necessary steps to ensure that your personal data is processed securely and in accordance with this Privacy Policy and relevant legal acts.
Unfortunately, the transmission of information over the Internet is not completely secure. Although we make every effort to protect your personal data we cannot guarantee the security of your data when you transfer data to the Website – you assume the risks associated with the transfer of data to the Website. Once we receive your data, we will apply strict procedures and security measures to protect our personal data from unauthorized access.
Should unlikely circumstances arise and we become aware of a personal data breach that could seriously jeopardize your rights or freedoms, we will notify you immediately as soon as we become aware of it and determine what information has been accessed.
The Website may contain links to external websites – websites of our business partners or websites that promote our services. By following such links to any of the Website, please note that these Website and the services accessed through them have their own separate privacy policies and we do not accept any responsibility or liability for these policies or for personal data collected on these Sites or services, such as contact or location details. Please review these policies before submitting personal information on these sites or using any services.
When processing the personal data, we ensure your rights in accordance with the GDPR. As a personal data subject, you have the following rights:
We will endeavor to guarantee the exercise of your rights as a personal data subject and to create all conditions for the effective exercise of these rights, but we reserve the right not to comply with your requirements when it is necessary to ensure:
You can submit requests related to the exercise of your rights to us in person, by post or by electronic means. Upon receipt of your request, we may ask you to provide proof of identity, as well as any additional information we require regarding your request.
Upon receipt of your request, we will respond to you no later than within 30 calendar days from the receipt of your request and the date of submission of all documents required for the response.
Upon receipt of your request, we will respond to you no later than within 30 calendar days from the receipt of your request. This period can be extended by another two months if necessary, depending on the complexity of the request. Within one month from the date of receipt of your request, we will inform you of such an extension, together with the reasons for the delay.
If we deem it necessary, we will suspend the processing of your data, other than storage, until your request has been resolved. If you lawfully withdraw your consent, we will immediately terminate the processing of your personal data, except when we are required to continue to process your data due to our obligations, court decisions or binding instructions given to us by the authorities.
If we refuse to comply with your request, we will clearly state the grounds and the reasons for such refusal.
If you do not agree with our actions or the response to your request, you may appeal against our actions and decisions to the competent public authority.
If you wish to make a complaint about our processing of your personal data, please provide it in writing, providing as much information as possible, using the contact details indicated at the end of this Privacy Policy. We will immediately try to resolve any issues.
If you think that your rights have been violated, you can file a complaint with our supervisory authority – the State Data Protection Inspectorate, contact details: L. Sapiegos str. 17, LT-10312 Vilnius, email ada@ada.lt.
We aim to promptly and peacefully resolve all disputes together with you, therefore, we would be grateful if you contact us before lodging a complaint to the State Data Protection Inspectorate.
We have the right to change the provisions of this Privacy Policy in whole or in part. Any changes to our Privacy Policy will be posted on the Website and will be effective upon posting. We recommend that you regularly review our Privacy Policy and familiarize yourself with changes to the Privacy Policy.
All questions related to this Privacy Policy and our processing of personal data can be sent to our contacts below:
Law Firm NOOR legal
Legal entity code 304032386
Contact address Lvivo 5, LT-09307 Vilnius
Email info@noor.lt