Privacy policy

We understand the importance of protection of your personal data, therefore we collect and process only the data that is necessary for our activities.  We process your personal data lawfully, transparently, and fairly, for the pre-determined purposes and only to the extent necessary to achieve those purposes. When we process your personal data, we make every effort to ensure that they are accurate, secure, confidential, properly stored and protected.

When processing your personal data, we comply with the requirements of the Regulation (EU) 2016/679 (General Data Protection Regulation) (the “GDPR”) and the requirements for the processing of personal data established by the Law on the Legal Protection of Personal Data of the Republic of Lithuania, as well as other legal acts.

I. What is this document?

By reading this Privacy Policy (the “Privacy Policy”) you will learn how and for what purposes we process your personal data when you use our website www.noor.lt (the “Website”) and our accounts on social networks (NOOR law firm > Facebook, NOOR law firm > Linkedin), from where we obtain it, to whom we provide it and how we store it, and what your rights are as a data subject. Please read this Privacy Policy carefully and familiarize yourself with the information contained therein.

The term “personal data” as used in this Privacy Policy means any information which could be used to identify you directly or indirectly.

II. Who are we?

The Website is managed and administered by law firm NOOR, company code 304032386, registered office at Lvivo 5, Vilnius, Lithuania, e-mail info@noor.lt, phone number +370 5 219 1818.

We are a controller of and we are responsible for the legal processing of your personal data.

III. What principles do we comply with while processing your personal data?

While processing your personal data we:

  • will comply with the requirements of the applicable legislation, including GDPR;
  • will process your personal data lawfully, fairly and in a transparent manner;
  • will collect your personal data for specified, explicit and legitimate purposes and will not further process them in a manner that is incompatible with those purposes, except to the extent permitted by law;
  • will take all reasonable steps to ensure that personal data which is inaccurate or incomplete in regard to the purposes for which it is processed, are rectified, supplemented, suspended or destroyed without delay;
  • will keep it in a form which permits identification of you for no longer than is necessary for the purposes for which the personal data are processed;
  • will not disclose your personal data to third parties except as provided in this Privacy Policy or applicable law;
  • will ensure that your personal data are processed in a manner that ensures appropriate security of it, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage, using appropriate technical or organizational measures.

IV. Why we process your personal data?

We will process your personal data for clearly defined purposes:

(a) For the purpose of providing legal services:

Data Categories Client’s or potential client’s name, surname, position, company name, telephone number, address, e-mail address, bank account number, time and duration of legal services provided, scope of legal services provided, taxpayer information, invoices issued and the information contained therein, other payment information, electronic correspondence history, any other information received/provided to us in the course of providing legal services
Lawful basis for data processingConclusion and execution of the contract (Article 6 (1) (b) of the GDPR)

Our legitimate interest (Article 6 (1)(f) of the GDPR)

Performance of legal obligations (Article 6 (1)(c) of the GDPR)

Data processing term10 years from the moment of the last provision of legal services to you
We receive the personal data fromDirectly from you
We provide or transfer the personal data toDepending on the nature of the legal services provided, we may provide personal data to: public registries, courts, arbitrators, lawyers or advocates (representatives of another party), law enforcement authorities, financial institutions and other authorities, other law firms, service providers who provide us with marketing, accounting, IT, translation and other services, to other natural and legal persons, to the extent that such provision of data is necessary for the proper provision of legal services

 

(b) For recruiting purposes:

Data Categories Candidate’s name, surname, phone number, e-mail address, information about work, professional experience and other information provided in the CV and learned during interviews (correspondence) with the candidate
Lawful basis for data processingConsent of the candidate (Article 6 (1) (a) of the GDPR)

Our legitimate interest (Article 6 (1)(f) of the GDPR)

Data processing termPersonal data is processed for as long as the selection to the specific position is taking place, unless the candidate withdraws consent earlier; if the candidate gives separate consent, personal data can be stored for 1 year from the end of the recruiting process
We receive the personal data fromDirectly from you
We provide or transfer the personal data toFor service providers (e.g. service providers providing data storage services, recruitment services, etc.)

 

(c) For the purpose of direct marketing (including, newsletters):

Data Categories Name, last name, e-mail, telephone number
Lawful basis for data processingConsent (Article 6 (1) (a) of the GDPR)
Data processing term2 years from the receipt of your consent, unless you withdraw your consent earlier
We receive the personal data fromDirectly from you
We provide or transfer the personal data toFor service providers (e.g. service providers providing data storage services, direct marketing services, etc.)

 

(d) For the purpose of managing and administering our social network (Facebook, Linkedin) accounts:

Data Categories Your social network account name, profile picture, comments, likes, content of your requests (inquiry)
Lawful basis  for data processingConsent (Article 6 (1) (a) of the GDPR)

Our legitimate interest (Article 6 (1)(f) of the GDPR)

Data processing termPersonal data is stored as long as our or your social network account is valid, unless you express a wish to delete your data in our social network accounts earlier
We receive the personal data fromDirectly from you; third parties
We provide or transfer the personal data toFor service providers (e.g. service providers providing data storage services, etc.)

 

(e) For the purpose of organizing and conducting our events (conferences, seminars, etc.):

Data Categories Name, position, name of the organization, phone number, e-mail address, image (if recorded during the event), your wishes (requests)
Lawful basis  for data processingDepending on the nature of the specific event, personal data may be processed on the following grounds:

Conclusion and execution of the contract (Article 6 (1) (b) of the GDPR)

Consent (Article 6 (1) (a) of the GDPR)

Our legitimate interest (Article 6 (1)(f) of the GDPR)

Data processing termPersonal data is processed for 2 years from the end of the specific event. If your personal data is processed on the Lawful basis  of your consent, personal data will be stored for 2 years from the end of the specific event, unless you withdraw your consent earlier
We receive the personal data fromDirectly from you; third parties
We provide or transfer the personal data toFor service providers (e.g. service providers providing data storage services, marketing services, event organization services, etc.)

 

(f) For the purpose of ensuring the functionality of the website, improving the website:

Data Categories IP address, type of Internet browser used, number of visits, pages viewed on the Website, time spent on the Website, demographic data, unique ID and other data
Lawful basis  for data processingConsent (Article 6 (1) (a) of the GDPR)
Data processing termPersonal data is stored as long as a specific cookie is valid, unless you withdraw your consent to the recording of cookies earlier. More information about cookies can be found in Section VII of this Privacy Policy
We receive the personal data fromDirectly from you; third parties
We provide or transfer the personal data toFor service providers (e.g. data storage services, service providers providing marketing services, etc.)

 

(g) For the purpose of administering your inquiries and requests:

Data Categories Name, position, company name, email address, telephone number, content of the inquiry or request
Lawful basis  for data processingConsent (Article 6 (1) (a) of the GDPR)
Data processing termPersonal data is processed for 1 year from the date of receipt of your request (inquiry)
We receive the personal data fromDirectly from you
We provide or transfer the personal data toFor service providers (e.g. service providers providing data storage services, etc.)

 

We store your personal data for no longer than is necessary for the purposes for which the personal data are processed.

We seek not to store unrelated personal data, therefore only relevant information is kept when it is updated (e.g. after clarification, change of information, etc.). Historical information is stored if it is necessary according to the relevant legal acts or to carry out our activities.

V. How do we collect and process your personal data?

We process your personal data obtained in the following ways:

  • when you provide them to us (for example, by writing to us or communicating with our lawyers, attorneys or other members of our team, making complaints about our services or otherwise);
  • when you use the Website and / or our social network accounts (for example, we receive your IP address, the type of browser you use, etc.);
  • when we receive your personal data from others in accordance with the procedures established by law (e.g. from state institutions).

We may combine personal data received from you with data lawfully collected by us from other sources. For example, we may combine the personal data you provide with data obtained through cookies on the Website, data collected in the course of providing you with services, or with data lawfully obtained from third parties. While exercising your rights, you will always be able to request the correction of incorrect or inaccurate personal data.

VI. Do we use your personal data for direct marketing and what are the subscription rules?

Yes, we may use your personal data for direct marketing purposes to provide you with offers and information about the goods and/or services of ours and our partners that we believe may be of interest to you. However, we will only use your personal data for this purpose with your additional consent.

How and what kind of your personal data is processed for this purpose is specified in Section IV of this Privacy Policy.

We may combine available information about you with information lawfully held by third parties in order to make offers to you.

If you consent to the use of your personal data for direct marketing purposes, we may use your personal data to analyse and improve the effectiveness of the Website, advertising and market research, and for other marketing and sales purposes.

Even if you have given your consent for the processing of your personal data for direct marketing purposes, you can easily revoke this consent at any time for all or part of the processing of personal data. To do this, you can:

  • change the settings on the Website to indicate that you no longer want your personal data to be used for direct marketing, or
  • notify us as indicated in the newsletters and/or offers received by e-mail (for example, in newsletters and/or offers by clicking on the link “unsubscribe from newsletters, offers”, etc.), or
    • by visiting us (address Lvivo 5, Vilnius) and submitting the relevant request. In the application you must clearly indicate your first and last name. If you wish to withdraw your consent this way, we may ask you to provide the proof of your identity;
    • send us a request by email info@noor.lt. The application must clearly state your name and other registration details (if any). If you wish to withdraw your consent this way, we may ask you to provide the proof of your identity.

If you revoke your consent, we will stop processing your personal data for direct marketing purposes as soon as possible.

VII. How we use cookies?

We collect information about you using cookies and similar technologies. Cookies are small files that are temporarily stored on your device’s hard drive and allow to identify you during other visits to the Website and social media network acoounts, save your browsing history, options, customize content, speed up searches on the Website, create a convenient and friendly Website environment, make it more efficient and reliable. Cookies are common web browsing practices that make it easier to use the website.

By using cookies we may collect the following information: IP address, type of web browser used, number of visits to the Website, pages viewed on the Website, time spent on the Website, demographic data and, if you have accessed the Website from a third party website, information about the subscribers retargeted through social networks, unique ID.

We use the information we receive from cookies for the following purposes:

  • to ensure the functionality of the Websites (e.g. so that you can use the personalization of the Website);
  • to improve and develop the Website to better meet your needs;
  • to develop our services and analyze the use of the Website;
  • for targeted marketing guidance.

We may combine information obtained through cookies with information obtained about you by other means (e.g., information about the use of the Website may be combined with personal data provided by you).

The following cookies may be used on the Website:

  • Technical cookies – are cookies that are necessary for the operation of the website or social network.
  • Functional cookies – cookies that are not necessary for the functioning of the Website or social network but significantly improve the performance, quality and user experience.
  • Analytical cookies – cookies which are used to for statistical analysis of the navigation methods of the Website or social network visitors; the data collected by these cookies is used anonymously.
  • Advertising cookies – cookies used to display offers or other information that may be of interest to you.
  • Social network cookies – cookies that are necessary for the use of the Website information in your social profile account.

All information about the cookies used on the Website, their purpose, validity and data used is provided in the table below:

Cookie namePurposeValidity period
hideCookieBarPrivacy policy system cookie1 year
hideIntroPopupInformation message system cookie1 year
pll_languageUser language tagUntil the browser window is closed

 

You can give your consent to the use of cookies by clicking on the “I accept all cookies” button in the cookie link (bar) provided on the Website. If you do not give your consent to use cookies, the cookies that are not of a technical nature will not be saved to your device.

You may revoke your consent to use advertising cookies at any time. You can do this by changing your web browser settings so that it does not accept cookies or (and) deleting cookies already in the browser. How you do this depends on your operating system and web browser. You can find detailed information about cookies and their use at http://AllAboutCookies.org or http://google.com/privacy_ads.html .

In some cases, especially disabling, disagreeing with or deleting technical and functional cookies may slow down the speed of Internet browsing, restrict the operation of certain functions of the Website, block access to the Website.

VIII. Who do we provide your personal data to?

We guarantee that your personal data will not be disclosed or otherwise transferred to third parties without a legitimate basis, as well as used for purposes other than those for which they were collected. We will not transfer your personal data in any way other than in accordance with this Privacy Policy or applicable law. However, we reserve the right to provide information about you if we were required to do so by law or if required to do so by law enforcement authorities or prosecuting authorities.

We may transfer your personal data to companies that help us operate (e.g. for companies providing direct marketing, IT services, etc.). From such partners, we require that your data be processed only in accordance with the instructions given by us and the applicable data protection legislation. We enter into agreements with these partners that oblige the parties to adhere strictly to the personal data protection requirements.

We may disclose the personal data we collect about you to the following third parties:

  • third party service providers (e.g. technical service providers in the performance of our contracts with these service providers, including the performance of services for the purpose of sending newsletters or performing other marketing activities);
  • third party service providers whose services we normally use for data storage, telecommunications, and website hosting purposes;
  • to government and law enforcement agencies,  if the provision of personal data is mandatory according to law or (and) it is necessary to provide personal data in order to defend our legitimate interest (e.g. to defend our rights, etc.).

The use of your personal data by the above-mentioned service providers is limited – they may not use this data for the purposes other than providing services to us.

IX. How do we store your personal data?

The personal data we collect from you will be located within the European Union (EU) but may be transferred or stored outside the EU (e.g. personal data may be handled by our own or our suppliers’ staff working outside the EU). When transferring your personal data outside the EU, we will take all necessary steps to ensure that your personal data is processed securely and in accordance with this Privacy Policy and relevant legal acts.

Unfortunately, the transmission of information over the Internet is not completely secure. Although we make every effort to protect your personal data we cannot guarantee the security of your data when you transfer data to the Website – you assume the risks associated with the transfer of data to the Website. Once we receive your data, we will apply strict procedures and security measures to protect our personal data from unauthorized access.

Should unlikely circumstances arise and we become aware of a personal data breach that could seriously jeopardize your rights or freedoms, we will notify you immediately as soon as we become aware of it and determine what information has been accessed.

X. External websites

The Website may contain links to external websites – websites of our business partners or websites that promote our services. By following such links to any of the Website, please note that these Website and the services accessed through them have their own separate privacy policies and we do not accept any responsibility or liability for these policies or for personal data collected on these Sites or services, such as contact or location details. Please review these policies before submitting personal information on these sites or using any services.

XI. What rights do you have?

When processing the personal data, we ensure your rights in accordance with the GDPR. As a personal data subject, you have the following rights:

  • to know (be informed) about the processing of your personal data;
  • to access your personal data that we process;
  • to request the correction or supplementation of incorrect, inaccurate, incomplete personal data;
  • to require the destruction of your personal data when they are no longer needed for the purposes for which they were collected;
  • to demand the destruction of personal data if they are processed unlawfully or if you withdraw your consent to the processing of personal data or do not give such consent, which is necessary;
  • to object to the processing of personal data or to withdraw prior consent;
  • to demand the suspension (other than storage) of your personal data processing in the event of a dispute or verification of the lawfulness of the processing, the accuracy of the data, as well as in cases when we no longer need your personal data but you do not want us to destroy them;
  • to require the submission, if technically possible, of your personal data collected with your consent or for the purposes of the performance of the agreement in an easy-to-read format or request their transfer to another controller.

We will endeavor to guarantee the exercise of your rights as a personal data subject and to create all conditions for the effective exercise of these rights, but we reserve the right not to comply with your requirements when it is necessary to ensure:

  • the performance of the legal obligations imposed on us;
  • national security or defense;
  • public policy, the prevention, investigation, detection or prosecution of criminal offenses;
  • important economic or financial interests of the State;
  • the prevention, investigation and detection of breaches of official or professional ethics;
  • Protecting the rights and freedoms of you or others.

You can submit requests related to the exercise of your rights to us in person, by post or by electronic means. Upon receipt of your request, we may ask you to provide proof of identity, as well as any additional information we require regarding your request.

Upon receipt of your request, we will respond to you no later than within 30 calendar days from the receipt of your request and the date of submission of all documents required for the response.

Upon receipt of your request, we will respond to you no later than within 30 calendar days from the receipt of your request. This period can be extended by another two months if necessary, depending on the complexity of the request. Within one month from the date of receipt of your request, we will inform you of such an extension, together with the reasons for the delay.

If we deem it necessary, we will suspend the processing of your data, other than storage, until your request has been resolved. If you lawfully withdraw your consent, we will immediately terminate the processing of your personal data, except when we are required to continue to process your data due to our obligations, court decisions or binding instructions given to us by the authorities.

If we refuse to comply with your request, we will clearly state the grounds and the reasons for such refusal.

If you do not agree with our actions or the response to your request, you may appeal against our actions and decisions to the competent public authority.

XII. To whom can you make a complaint?

If you wish to make a complaint about our processing of your personal data, please provide it in writing, providing as much information as possible, using the contact details indicated at the end of this Privacy Policy. We will immediately try to resolve any issues.

If you think that your rights have been violated, you can file a complaint with our supervisory authority – the State Data Protection Inspectorate, contact details: L. Sapiegos str. 17, LT-10312 Vilnius, email ada@ada.lt.

We aim to promptly and peacefully resolve all disputes together with you, therefore, we would be grateful if you contact us before lodging a complaint to the State Data Protection Inspectorate.

XIII. How will we change this privacy policy?

We have the right to change the provisions of this Privacy Policy in whole or in part. Any changes to our Privacy Policy will be posted on the Website and will be effective upon posting. We recommend that you regularly review our Privacy Policy and familiarize yourself with changes to the Privacy Policy.

XIV. How to contact us?

All questions related to this Privacy Policy and our processing of personal data can be sent to our contacts below:

Law Firm NOOR legal

Legal entity code 304032386

Contact address Lvivo 5, LT-09307 Vilnius

Email info@noor.lt