LITBAN WEBSITE PRIVACY POLICY
Purpose of this privacy policy
This privacy policy (hereinafter – Policy) explains how your personal data, provided via the website www.litban.lt (hereinafter – Website) or through other means of contact, is collected and processed.
In accordance with the General Data Protection Regulation (EU 2016/679) (hereinafter – GDPR), personal data refers to any information relating to an identified or identifiable natural person, whose identity can be determined from the processed personal data (hereinafter – Data). In this regard, this Policy is aimed to inform you about the collection and processing of your personal data, in compliance with the GDPR and other relevant data protection laws of the Republic of Lithuania.
Data controller
The data controller of the personal data referred to in this Policy is association “LitBAN”, legal entity code: 304811409, registered address: L. Stuokos-Gucevičiaus g. 9-10, Vilnius (hereinafter – LitBAN or Controller).
Contact details
Should you have any questions regarding the processing of your personal data or this privacy policy, including any requests to exercise your legal rights, please do not hesitate to contact us via the Website or info@litban.lt
1. Collection and Use of Personal Data
The following table outlines the purposes for which your personal data is processed, the categories of personal data we process, the legal basis for processing, and the retention periods. Your personal data shall not be used for purposes other than those specified during Data collection unless we have another lawful basis for processing your personal data.
By providing your personal data, you confirm that the Data is accurate and correct, and that you are at least 18 years old. You are obligated to notify us of any changes to your Data so that we can correct any inaccuracies.
We place great importance on safeguarding your privacy and, consequently, do not intentionally seek to collect unnecessary Data or infringe upon your rights in any manner.
| Purpose | Legal basis | Personal data categories | Data retention period |
| Review of an application for association membership | LitBAN’s legitimate interest (Article 6(1)(f) of the GDPR) | Name, surname, contact information, birth date (or personal code), residence address, other provided personal information | 3 months from the date of the decision regarding the application for association membership |
| Conclusion of an association membership agreement | Contractual necessity (Article 6(1)(b) of the GDPR) | Name, surname, contact information, personal code, residence address, other provided personal information | 3 years from the date of the termination of membership |
| Administration of association members’ membership fees | Contractual necessity (Article 6(1)(b) of the GDPR) | Name, surname, payment information | 10 years from the date of payment execution |
| Promotion of members on our Website and through other social media channels. | Consent (Article 6(1)(a) of the GDPR) | Name, surname, contact information, photos. | The membership, event or campaign duration and an additional 2 years thereafter, or until you withdraw your consent, whichever occurs first. |
| Organization and execution of events | Contractual necessity (Article 6(1)(b) of the GDPR) | Name, contact information, other identification information | 3 years following the conclusion of the calendar year in which the event occurred. |
| Correspondence | LitBAN’s legitimate interest (Article 6(1)(f) of the GDPR) | Name, contact information, communication content | 6 months following the end of the communication |
| Documents confirming consent for Data processing | LitBAN’s legitimate interest (Article 6(1)(f) of the GDPR) | Name, contact information, birth date (or personal code), residence address | 2 months from the date of the withdrawal of consent. |
| Newsletter subscription | Consent (Article 6(1)(a) of the GDPR) | Contact data | The subscription duration and an additional 2 years thereafter, or until you withdraw your consent, whichever occurs first. |
Data processed on the basis of consent will continue to be processed for as long as your consent remains valid or until it is withdrawn. Upon withdrawal of consent, the Data will no longer be processed or retained for the specified purposes, unless a legal obligation requires its retention for a longer period. Furthermore, the withdrawal of consent does not affect the lawfulness of processing conducted prior to its withdrawal.
You may access the Website without providing personal data, as a significant portion of the information is available to individuals who are not members of LitBAN. However, certain services require personal information to authenticate you or perform specific actions.
2. Use of Cookies
We use automated data collection tools, such as cookies, on the Website to enhance your browsing experience, ensure security, and maintain the Website’s functionality. A cookie is a small text file with a unique identifier that is transmitted from the Website to a visitor’s computer hard drive or mobile device. The next time you visit the Website, your browser will read the cookie and transmit the information back to the Website or the entity that originally set the cookie.
Our website uses these types of cookies:
| Cookie name | cmplz_banner-status, cmplz_policy_id, cmplz_consented_services, cmplz_functional, cmplz_preferences, cmplz_statistics, cmplz_marketing |
| Functions performed by the cookie | Setting the user’s choice of cookies. |
| Purpose of data management | To determine whether the user has approved cookies, what level of cookies they have approved. Necessary cookies. |
| Creation moment | When the user confirms the notification about cookies, or when the user saves cookies preferences. |
| Validity | 1 year. |
| Cookie name | _ga, _ga_id |
| Functions performed by the cookie | Google analytics |
| Purpose of data management | To generate statistical data about the visitor’s use of the website. Statistics cookies. |
| Creation moment | When the user confirms the Statistics cookies. |
| Validity | 1 year. |
| Cookie name | __Secure-YEC |
| Functions performed by the cookie | Youtube preferences. |
| Purpose of data management | To store the user’s video player preferences while using embedded YouTube video. Marketing cookies. |
| Creation moment | When the user confirms the Marketing cookies. |
| Validity | 13 months. |
Data collected through cookies is processed either on the basis of LitBAN’s legitimate interest for essential cookies, as outlined in Article 6(1)(f) of the GDPR, or on the basis of your consent for other cookies, as specified in Article 6(1)(a) of the GDPR. Cookies, except for those that are strictly necessary, are only implemented with your consent. You may withdraw your consent at any time by reopening the cookie banner. Upon withdrawal of consent, the respective cookies will no longer be installed.
3. Sharing Your Data with Third Parties
In certain instances, such as to facilitate the performance of our operations, ensure the continuity of our activities, safeguard our legitimate interests, or fulfill legal obligations, we may disclose information pertaining to you to third parties. Specifically, such disclosures may be made to:
- lawyers;
- auditors;
- banks or companies that facilitate settlement operations, perform risk and credit assessment;
- companies that help organise competitions or events;
- public authorities such as the courts, police, the IRS, but only upon their request and only when required to do so by applicable law or to protect our rights or the safety of our members, employees and resources;
- social networks (where you choose to provide your personal data to them);
- other companies that provide services at our request, including data center, cloud, website management, and other related services providers; companies developing, providing, supporting, and maintaining software; IT infrastructure service providers; and telecommunications companies;
- responsibly selected business partners and other investment platforms, such as “Dealum OÜ”;
- To other parties where required to do so by law or as necessary to protect our legitimate interests.
This list of example recipients and recipient categories may be amended as necessary. In all instances, we ensure that Data is transferred in strict accordance with personal data processing and security requirements, and only to the extent necessary for the provision of services by these third parties.
4. Data Transfer to Third Countries
In specific instances, your Data may be transferred to third countries outside the European Economic Area (hereinafter – EEA). We guarantee that, in such cases, the transfer of Data will be conducted in strict accordance with the applicable legal requirements.
The following measures are currently in effect:
- We will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data by the European Commission
- Where we use certain service providers, we may use specific model contracts approved by the European Commission which give personal data the same protection it has in Europe.
5. Your Rights
Right to Access Your Personal Data: You have the right to access your personal data and learn how it is being processed.
Right to Rectify Data: You have the right to request the correction or supplementation of any incorrect, inaccurate, or incomplete personal data.
Right to Erasure (“Right to be Forgotten”): In certain cases, where not prohibited by law or where there is no obligation for the Controller to retain the relevant Data, you have the right to request the deletion of personal data related to you.
Right to Restrict Data Processing: Under certain circumstances, you have the right to request the Controller to limit the processing of your personal data.
Right to Data Portability: Under specific conditions, you have the right to receive the personal data related to you, which you have provided to the Controller, and the right to transfer this Data to another data controller.
Right to Object: You have the right to object to certain types of data processing and may withdraw any previously given consent regarding the processing of your personal data at any time.
Right Not to be Subject to Automated Decisions, Including Profiling: You have the right to request that decisions based solely on automated data processing, including profiling, which may have legal effects on you or significantly affect you, are not applied to you.
Right to Lodge a Complaint: If you believe that our actions or omissions infringe upon your rights or legal obligations, you have the right to lodge a complaint with data protection supervisory authorities. Residents of Lithuania may submit a complaint to the State Data Protection Inspectorate, more information is available at https://vdai.lrv.lt/lt/. If your habitual residence or place of work is in another country, you may file a complaint with the relevant supervisory authority in that country. For more information on data protection authorities in European Union/European Economic Area member states, please visit https://edpb.europa.eu/about-edpb/about-edpb/members_en. However, in all cases, we recommend contacting us first to seek a swift and effective resolution to any issue before submitting an official complaint to the supervisory authority.
To exercise your rights, you may contact us by email at info@litban.lt. We will provide you with information regarding the actions taken in response to your request without undue delay, and in any case, no later than one month from the date of receipt of your request. Depending on the complexity and number of requests, we reserve the right to extend the one-month period by an additional two months, notifying you of such an extension before the end of the first month and providing the reasons for the delay. In cases of clearly unfounded or excessive requests, we reserve the right to refuse to fulfill them or to charge an appropriate administrative fee.
6. Changes to the Privacy Policy
We acknowledge that the protection of personal data is a continuous responsibility. As such, we are committed to regularly reviewing and updating this privacy policy to ensure it reflects any changes in our data practices or the implementation of new privacy measures.
Policy last updated on: 2025.11.06
7. Minors
In accordance with applicable laws, only individuals who have reached the age of majority are eligible to be members of the association. Therefore, the Website is not intended for individuals under the age of 18. If you are under 18, you are kindly requested not to use our services.