Privacy Policy

• Accounting of waste received

  Whose personal data do we process?	What personal data do we process?	What is the legal basis?	How long do we keep personal data?	Other comments
  Objective – waste reception at bulky waste reception sites and green waste reception sites (accounting of waste received)
  Natural person who delivered the waste	Name, surname, identity document number, territory (municipality) from which the waste was delivered, quantity and type of waste delivered, signature of the individual	Article 6(1)(c) of the GDPR (legal obligation laid down in Order No D1-367 of the Minister of the Environment of the Republic of Lithuania of 3 May 2011)	3 years for non-hazardous waste and 5 years from the end of the reporting year for hazardous waste	Personal data is transferred to UAB Technologinių služby sprendimai (supplier of the ASMLIS waste accounting software)
  Representative of the legal person who delivered the waste on behalf of the legal person	Name, surname, signature, details of the document proving the basis of representation	Article 6(1)(c) GDPR (legal obligation)	For non-hazardous waste, for 3 years for non-hazardous waste and for hazardous waste, for 5 years from the end of the reporting year
  Natural person delivering waste, representative of legal person delivering waste on behalf of legal person	Vehicle registration number	Article 6(1)(f) of the GDPR (legitimate interest in the proper identification of the person who delivered the waste)	For non-hazardous waste, for 3 years for non-hazardous waste and for hazardous waste, for 5 years from the end of the accounting year
  Objective – waste acceptance at landfill sites (waste accounting)
  Natural person delivering the waste	Name, surname, identity document number, territory (municipality) from which the waste was delivered, quantity and type of waste delivered, signature of the individual	Article 6(1)(c) of the GDPR (legal obligation laid down in Order No D1-367 of the Minister of the Environment of the Republic of Lithuania of 3 May 2011)	3 years for non-hazardous waste and 5 years from the end of the reporting year for hazardous waste	Personal data required for invoicing are transferred to UAB Būtenta (supplier of the Būtent accounting system) Personal data are transferred to UAB Technologinių služby sprendimai (supplier of the ASMLIS waste accounting software)
  Natural person delivering the waste	Residential address, date of birth, if they wish to be invoiced	Article 6(1)(c) GDPR (legal obligation)	10 years
  Representative of the legal person who delivered the waste on behalf of the legal person	Vehicle registration number	Article 6(1)(f) of the GDPR (legitimate interest in the proper identification of the person who delivered the waste)	For non-hazardous waste, for 3 years for non-hazardous waste and for hazardous waste, for 5 years from the end of the accounting year
  Aim: to accept asbestos-containing waste free of charge under contracts with municipal administrations
  Residents of municipalities who have submitted certificates issued by their municipalities	A copy of the certificate issued by the municipality for the delivery of asbestos products and the following personal data: name, surname, address, year of birth, date of issue of the certificate and other details of the certificate, the amount of asbestos waste accepted and treated in tonnes, date	Article 6(1)(f) of the GDPR (legitimate interest in the performance of the contract with the municipal administration)	1 year after the end of the contract	Personal data shall be transferred to the administration of the relevant municipality (Kaunas city or Kaunas district, depending on the place of residence of the resident). Personal data shall also be transferred to UAB Technologinių služby sprendimai (supplier of the ASMLIS waste accounting software).
  Objective – waste acceptance for sorting at Kaunas MBA and Zabieliškis MAR (waste accounting)
  Representative of the legal person who delivered the waste on behalf of the legal person	Name, surname and signature of the person who delivered the waste	Article 6(1)(c) GDPR (legal obligation)	For non-hazardous waste, for 3 years for non-hazardous waste and for hazardous waste, for 5 years from the end of the reporting year	Personal data shall be transferred to UAB Technologinių služby sprendimai (supplier of the ASMLIS waste accounting software).
  	Car registration number	Article 6(1)(f) of the GDPR (legitimate interest in the proper identification of the person who delivered the waste)

• Organization of Auctions

  Whose personal data do we process?	What personal data do we process?	What is the legal basis?	How long do we keep personal data?	Other comments
  Aim: auctioning of secondary raw materials
  Auction participants natural persons	Name, surname, date of birth, contact details (email, phone number), proposal submitted	Article 6(1)(b) GDPR (contract where the participant is a natural person)	Until the end of the auction (thereafter kept for 5 years for archiving, rights and legitimate interests)	Personal data is transferred to data processors that provide server rental and information system maintenance services. Where personal data is processed for archiving purposes, it may be transferred to a processor providing archiving services, and where it is processed for the purpose of upholding rights and legitimate interests, it may be transferred to courts, public authorities settling disputes, litigants, lawyers and other legal service providers.
  Representatives of the legal entities of the auction participants	Name, surname, contact details (e-mail, telephone number)	Article 6(1)(f) GDPR (legitimate interest where the bidder is a legal person)	Until the end of the auction (thereafter retained for archiving, rights and legitimate interests)
  Auction winner natural person	Name, surname, date of birth, contact details (email, phone number), raw materials purchased, price, payment information, date of contract and other terms and conditions	Article 6(1)(b) GDPR (contract where the contractor is a natural person)	Until termination/performance of the contract (thereafter kept for 5 years for archiving, rights and legitimate interest purposes)
  Representatives of the legal entity of the winning bidder	Name, surname, contact details (e-mail, telephone number)	Article 6(1)(f) GDPR (legitimate interest where the counterparty is a legal person)	Until termination/performance of the contract (thereafter kept for 5 years for archiving, rights and legitimate interest purposes)
  Objective – auctioning of unusable/unwanted assets
  Auction participants natural persons	Name, surname, personal identification number, address, email address, copy of identity document, personal data contained in the payment order confirming payment of the entry fee	Article 6(1)(b) GDPR (contract where the participant is a natural person)	Until the end of the auction (thereafter kept for 5 years for archiving, rights and legitimate interests)	Personal data is transferred to data processors that provide server rental and information system maintenance services. Where personal data is processed for archiving purposes, it may be transferred to a processor providing archiving services, and where it is processed for the purpose of upholding rights and legitimate interests, it may be transferred to courts, public authorities settling disputes, litigants, lawyers and other legal service providers.
  Representatives of the legal entities of the auction participants	Name, surname, signature of the representative, in the case of a representative under a power of attorney – the data contained in the power of attorney, the data of the identity document	GDPR 1(f) (legitimate interest where the bidder is a legal person)	Until the end of the auction (thereafter retained for archiving, rights and legitimate interests)
  Auction winner natural person	Name, surname, personal identification number, address, email address, property purchased, price, payment information, date of conclusion of the contract and other terms of the contract	Article 6(1)(b) GDPR (contract where the counterparty is a natural person)	Until termination/performance of the contract (thereafter kept for 5 years for archiving, rights and legitimate interest purposes)
  Representatives of the legal entity of the winning bidder	Name, surname, signature and contact details of the representative	Article 6(1)(f) GDPR (legitimate interest where the contractor is a legal person)	Until termination/performance of the contract (thereafter kept for 5 years for archiving, rights and legitimate interest purposes)

• Processing of personal data, contracting and performance by suppliers, partners, etc. is not covered separately

  Personal data	Legal basis	Storage period	Other remarks
  Purpose: to conclude and execute contracts with suppliers, partners and other natural persons
  Name, surname, personal identification number, address, business license/individual activity certificate number (for service providers), bank account number of the client, supplier, partner, etc.	Article 6(1)(b) GDPR (contract)	During the term of the Agreement	Personal data is transferred to data processors.
  Purpose: to conclude and execute contracts with suppliers, partners and other legal entities
  Name, title, position, basis of representation, email address, telephone number, content of correspondence, name of employee of the customer, supplier, partner, etc. (legal entity)	Article 6(1)(f) GDPR (legitimate interest)	During the term of the Agreement	Personal data is transferred to data processors.
  Objective – protecting rights and legitimate interests
  Any and all personal data collected in the performance of contracts that are necessary to resolve a dispute	Article 6(1)(f) GDPR (legitimate interest – defence of legal claims)	10 m.	Data shall be communicated to courts, public dispute resolution bodies, parties to a dispute, lawyers and other entities providing legal services.

• Ensuring the quality of the service provided to the public by the Agency's general telephone number

  In order to ensure the quality of the service provided by the general telephone number of the Institution (tel. +370 37 311267) and the objectivity of the handling of complaints about the quality of service, we record the conversations. The following data is recorded during a telephone conversation: your telephone number, the time and duration of the conversation and an audio recording of the conversation. The audio recording of the call records the data that you and the employee provide in a single conversation. A telephone conversation is recorded on the basis of your consent (Article 6(1)(a) GDPR). Please note that you have the right to object to the recording of the telephone conversation and to stop the conversation. During the call, you will be informed about the recording of the telephone conversation before the call starts and, after listening to the information message, you have the option to agree to the recording of the conversation and continue the conversation or you can refuse to continue the conversation, i.e. to end the call and contact the Authority by other means. If you continue the call after the informative message, this recording of the telephone conversation will be stored for 14 days in the information system (servers) of the communication operator (data processor) on the basis of legitimate interest (Article 6(1)(f) GDPR).

• Ensuring safety requirements during excursions and education

  We must make sure that the participants of our tours and educational activities are aware of the safety requirements in our establishment. In order to ensure safety requirements during excursions, we collect the following personal data of adult excursion/education participants and of the representatives of minor excursion/education participants (accompanying persons): name, surname, date, time of arrival and departure, acknowledgement of knowledge of safety requirements, signature, number of minors accompanying the participants. Personal data will be kept until the completion of the logbook and then for 10 years for archiving purposes.

• Selection of candidates

  We collect and process your personal data: your workplace, email address, date of birth, address, education, surname, telephone number, first name, preferred job, date of receipt of your CV, information about your personal qualities, your work experience (last workplace, length of service with the workplace, your last job title, other work experience), information on your knowledge of foreign languages (language, reading, writing, speaking levels), your ability to work with computer programmes, and any other information contained in your CV, letter of recommendation and/or cover letter; the salary you wish to receive at the time of your participation in the selection process, for the purpose of the selection process, on the basis of your consent, which you express to the Institution by sending your CV and/or cover letter. If you do not submit your CV and/or cover letter, we will not be able to assess your suitability for the position offered.

  With your consent, we will contact your current employer, and we may contact your former employer on the basis of our legitimate interest (to select a suitable candidate) and on the basis of Article 5(2) of the Law on the Legal Protection of Personal Data of the Republic of Lithuania, in order to verify information about your qualifications, professional abilities and business qualities (such as your work performance, relations with clients and/or colleagues, your performance evaluation, etc.). You may withdraw your consent or, as the case may be, object to us contacting your former employer at any time by notifying us at the email address set out in paragraph 2 of the Policy.

  In the event that you do not express your individual consent to the processing of your personal data for a longer period of time after the end of the specific job selection, we undertake to delete and/or destroy your personal data within 3 working days after the signing of the contract with the successful candidate or the decision to close the selection. If you are not selected but have given your consent to the processing of your personal data for the purpose of offering you a job in the future, we will keep your data for 1 year after the end of the selection on the basis of your consent.

  On the basis of our legitimate interest, we will process data about the person (name, surname, email, telephone number, information provided by the person) indicated by the candidate – a former or current employer or a person providing a reference, and the information provided by the person – for the purpose of selecting the candidate. In this case, our legitimate interest is to select the right candidate for the position we are seeking. We will delete this data within 3 days after the contract with the selected candidate has been signed or the decision to close the selection has been taken.

• Protection of confidential information and business continuity of the Agency

  In its legitimate interest to ensure the protection of the confidential information of the Institution and the continuity of the Institution’s business, the Institution may review the correspondence of its employees with contractors. For these purposes, the Institution shall process the following personal data of its employees and of persons who send or receive emails from its employees: email address, name of the sender or recipient, date, content of the information contained in the electronic work tools. Such data shall be kept for 4 years.

• Protecting legitimate interests

  The institution shall, on the basis of its legitimate interest to defend its rights, including in the event of civil disputes, process the names, surnames, personal identification numbers of the persons involved in the case or their employees, the circumstances of the case, other information relating to the case, and information in the public domain. The data may be communicated to law enforcement authorities, lawyers or bailiffs for the purpose of recovery. The data shall be destroyed 1 year after the final settlement of the case and the full satisfaction of the claims of the Institution (if satisfied).

• Archiving

  We continue to store contracts for goods, works, services, and acts of acceptance of goods, works and services for archiving purposes (10 years after the end of the contract), when they are no longer needed for the original purpose (in the general sense of concluding and performing the contract). We process personal data for this purpose in order to comply with a legal obligation (Article 6(1)(c) GDPR), as set out in point 10.37 of the General Index of Document Retention Periods approved by Order No V-100 of the Archivist of the Republic of Lithuania dated 9 March 2011. The time limits for the retention of other personal data for archiving purposes are indicated under the specific purpose of the processing of personal data.

• Contact Us

  There are several ways in which you can contact the Agency: by phone, by email, through social media accounts, through the contact form on the website or by sending a letter to the address of the Agency’s registered office. All communications are received, reviewed and responded to by us. If you contact us, we may process the data you provide to us, i.e. email address, name (if provided), username (if the request is sent via a social networking account), workplace (if provided), date, time, recipient, sender (where the message is addressed to you), content of the messages sent and received.

  Such data will be processed in order to answer your questions and process your suggestions. If you do not provide your contact details, it will not be possible to contact you.

  Correspondence is stored for 1 year from the date of receipt of the message, except for information for which other time limits are specified in the Privacy Policy or in legal acts.

  Any personal data you provide when you interact with us is only used for the purposes set out above and to view messages and administer and manage communication flows. We undertake not to use your personal data in any publications in a way that could identify you without your explicit consent.

  Please note that we may need to contact you by post, email or telephone. Please notify us of any changes to your personal data.

• Cookies and other tracking technologies

  Our website uses cookies and other tracking technologies. A cookie is a small file made up of letters and numbers that we place on your browser or on the hard drive of your computer with your consent. We use different cookies for different purposes. Cookies also help us to distinguish you from other users of the Website, thus ensuring a more pleasant experience and enabling us to improve the Website.

  Most browsers allow you to reject all cookies, and some browsers only allow you to reject third party cookies. You can therefore take advantage of these options. However, please note that blocking all cookies will have a negative impact on the use of the Website and without cookies you will not be able to use all the services provided on the Website. Further information is available at AllAboutCookies.org or www.google.com/privacy_ads.html.

  We may use the types of cookies described below, but for a detailed and up-to-date list of cookies used on this website, please see (HERE)

• Absolutely essential cookies

  These cookies are essential for our website to work. The basis for the use of such cookies is Article 73(4) of the Law on Electronic Communications of the Republic of Lithuania. These cookies are necessary for the operation of the website and cannot be disabled on our systems. They are usually used in response to what you do on the website, such as starting to browse or selecting your privacy settings. These cookies do not store any personally identifiable information about you and are deleted as soon as you turn off the website.

• Analytical and/or performance cookies

  These cookies allow us to count the number of visits to the website and to monitor the flow of visitors so that we can improve the website. They allow us to know which pages of the website are the most or least visited and to monitor how visitors navigate through the website. The data collected is not accessible to any other party. The information collected by cookies is anonymous and is not intended to identify you or to influence your browsing experience while you are on the site. If you do not consent to the use of these cookies, you will not be recorded in the visit statistics. The processing of data collected by these cookies is based on your consent.

• Commercial cookies

  These cookies, used by us and third parties, are designed to show you offers or other promotional information that may be of interest to you. We use cookies that collect data about your browsing history and identify your areas of interest so that we can show you relevant marketing information. The processing of data collected by these cookies is based on your consent.

• Managing your social media accounts

  The information you provide to us via social media (including messages, the use of the “Like” and “Follow” fields, and other communications) is controlled by the operator of the social network. We currently have an account on Kaunas Waste Management Centre on Facebook. We process the information contained in the social account for the purpose of account administration on the basis of your consent. We do not separately store the information contained in the social account (where the data is processed for the purpose of administering the social account, however, the data may be stored if it needs to be processed for another purpose, for example, for the purpose of enforcing rights).

  When you visit a social account, the administrator of the social network places cookies on your device that collect personal data. Cookies are stored both if you are a registered Facebook user and if you do not have a Facebook account. We add to the collected. We do not have access to your personal data and can only receive statistical information from the social network administrator about the traffic to your social account.

  We recommend that you read Facebook’s privacy notice and contact them directly if you have any questions about how they use your personal data.

• Receipt and disclosure of data

  We receive your data from you, your employers, your contractors or generate it from software.

  Certain of your personal data may be transferred to our authorised data processors, such as IT or cloud service providers (e.g. if you rent servers from an IT company, your personal data will be physically hosted (stored) with that IT company), archiving service providers, etc. We require our data processors to ensure adequate protection of your data and to ensure that they process your personal data only to the extent that we instruct them to do so and only for the purposes specified.

  Personal data may also be transferred to recipients who act as data controllers (separately or jointly with us). For example, to lawyers, social network managers, banks, etc. Most categories of recipients are listed under the information on the specific purposes of processing.

  If you have any questions about our service providers, please contact us at the email address listed in our Privacy Policy.

  In addition to the specific categories of data recipients identified in this Privacy Policy, we may also disclose information about you:

  • if we are required to do so by law (e.g. following a court or law enforcement order to provide data);
  • when intending to sell the activities or part of the assets of the Institution by disclosing your personal data to a potential buyer of the activities or part of the assets;
  • the sale of the activities of the Institution, or a substantial part of its assets, to a third party.
  • Where necessary to protect our rights and legitimate interests.

  Except as provided in this Privacy Policy, we do not provide your personal data to any third parties.

• Security of your personal data

  Your personal data will be processed in accordance with the General Data Protection Regulation, the Law on Legal Protection of Personal Data of the Republic of Lithuania and other legal requirements. When processing your personal data, we implement organisational and technical measures to ensure the protection of personal data against accidental or unlawful destruction, alteration, disclosure, as well as against any other unlawful processing.

• Your Rights

  In this section, we provide information about your rights in relation to our processing of your personal data and when you can exercise these rights. If you would like more information about your rights or to exercise them, please contact us at the email address set out in this Privacy Policy.

  The institution will provide you with information on the action taken following your request for the exercise of your rights without undue delay, but no later than 1 (one) month after receipt of the request. Depending on the complexity of the request and the number of requests received, the above deadline may be extended for a further 2 (two) months. In this case, we will inform you within 1 (one) month of receipt of the request of such extension and the reasons for it. The Agency will refuse to exercise your rights only in cases provided for by law.

• Right of access to your personal data

  We want you to fully understand how we use your personal data so that you do not experience any inconvenience. You can contact us at any time to enquire whether we are processing any of your personal data. If we store or use your personal data in any way, you have the right to access it. To do so, please submit a written request to us at the email address set out in this Privacy Policy, confirm your identity; and observe the principles of fairness and reasonableness when making such a request.

  Right to withdraw consent

  If you have given us your explicit consent to the processing of your data, you can withdraw it at any time. Withdrawal of consent does not affect the lawfulness of consent-based processing carried out before the withdrawal of consent.

• Right to request more information

  We hope that you will understand that it is very difficult to discuss all possible ways of collecting and using personal data. We endeavour to provide as clear and complete information as possible and we undertake to update this Privacy Notice if the process of using personal data changes. However, if you have any questions about our use of your personal data, we will be happy to answer them or provide you with any additional information we may disclose. If you have any specific questions or do not understand the information provided, please contact us.

• Complaints

  If you believe that your rights as a data subject have been and/or may be violated, please contact us immediately at the email address provided in this Privacy Policy. We ensure that only after we receive your complaint, we will contact you within a reasonable period of time and inform you about the progress of the investigation of the complaint and the subsequent outcome.

  If you are not satisfied with the results of the investigation, you can lodge a complaint with the supervisory authority, the State Data Protection Inspectorate: https://vdai.lrv.lt/.

• Changes to the Privacy Policy

  We may update or change this Privacy Policy at any time. If you would like to receive an updated Privacy Policy, please notify us at the email address listed in Section 2.