Privacy policy
Last updated on January 29, 2024.
- The privacy policy (hereinafter – Privacy Policy) of the law office “Solidus Lex” of Advocate E. Bakanauskas (hereinafter – Office) is intended to provide you with information about the processing of your personal data, i.e., who processes your personal data, where your personal data is obtained from, for what purposes and on what grounds your personal data is processed, what personal data is processed, how long your personal data is stored, whether your personal data is transferred to other persons, and what your rights are as a data subject.
- The Privacy Policy has been prepared in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter – GDPR), the Law on Legal Protection of Personal Data of the Republic of Lithuania (hereinafter – ADTAĮ), and other legal acts regulating the processing of personal data.
- Personal Data – any information relating to an identified or identifiable natural person (you), the data subject.
- Data Processing – any operation or set of operations performed on personal data or sets of personal data, whether by automated or non-automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination with other data, restriction, erasure, or destruction.
- Data Recipient – a natural or legal person, public authority, agency, or other body to which personal data is disclosed, whether a third party or not.
- Data Subject (You) – a natural person who is an existing or potential client of the Office, an authorized representative of a client, a third party (such as a client’s debtor, spouse, etc.), a visitor to this website, or any other natural person whose personal data is processed by the Office.
- Third Party – a natural or legal person, public authority, agency, or other body, other than the data subject, data controller, data processor, or persons authorized to process personal data under the direct authority of the data controller or data processor.
- The controller of your personal data is Advocate E. Bakanauskas (tel. +37064545809, email address edvinas.bakanauskas@soliduslex.com, hereinafter – Data Controller).
- Directly from you (e.g., when you send us an inquiry or email containing personal data).
- Indirectly from you:
- when a client provides your personal data to enable us to provide legal services (e.g., when a client seeks to recover a debt from you, we need to know your relevant personal data);
- from third parties (state and municipal institutions, as well as registers, state information systems, providing information, data (including special categories of personal data), documents, or their copies necessary for the provision of legal services).
- For the purpose of providing legal services, concluding, and performing a legal services contract. We process the following personal data of potential and existing clients or their authorized representatives: name, surname, personal identity code, declared residential address, email address, signature, bank account number. Legal basis for processing – to perform a contract (GDPR Article 6(1)(b)), as well as to comply with a legal obligation applicable to the data controller (GDPR Article 6(1)(c)). Retention period – during the period of legal service provision and 10 (ten) years after the transaction is completed.
- For the purpose of obtaining information necessary for providing legal services. We process personal data of clients or third parties (e.g., a client’s debtor, spouse, etc.). The personal data processed depends on the specific case (specific legal consultation, preparation of legally significant documents, or representation in legal matters). Legal basis for processing – depending on the specific case, personal data may be processed based on: GDPR Article 6(1)(a), i.e., the data subject’s consent; GDPR Article 6(1)(b), i.e., a contract to which the data subject is a party; GDPR Article 6(1)(c), i.e., a legal obligation applicable to the data controller; GDPR Article 6(1)(f), i.e., the legitimate interests of the data controller or a third party. Retention period – depending on the specific case (specific legal consultation, preparation of legally significant documents, or representation in legal matters) and in accordance with the Law on Documents and Archives of the Republic of Lithuania, the General Document Retention Schedule approved by Order No. V-100 of the Chief Archivist of Lithuania dated March 9, 2011, “On the Approval of the General Document Retention Schedule.” In any case, personal data is retained no longer than necessary for the purposes for which it was collected (principle of storage limitation).
- For the purpose of ensuring the smooth operation of the website. We process the following data of website visitors: device IP address, access date and time, visit duration, browser name. Legal basis for processing – the legitimate interest of the data controller (GDPR Article 6(1)(f)), i.e., ensuring the smooth operation of the website. Retention period – 8 weeks from the time of access.
- For the purpose of preventing money laundering and terrorist financing. We process the following personal data of a client or potential client, if they are a natural person: name, surname, personal identity code (for foreigners – date of birth), citizenship, residential address, identity document (document name, number, issue date, expiry date, issuing state), phone number, email address, whether the client (or their spouse) or close family members have been politically exposed persons in the past twelve months, whether the client is a resident of high-risk third countries listed by the European Commission and the Financial Action Task Force on Money Laundering and Terrorist Financing, whether the client has entered into transactions with persons residing in high-risk third countries listed by the European Commission and the Financial Action Task Force, and the client’s primary source of income. For clients who are legal entities, we process the following personal data: representative’s name, surname, personal identity code (for foreigners – date of birth), citizenship; manager’s name, surname, personal identity code (for foreigners – date of birth), citizenship; data on natural persons who own or directly control the client by holding or controlling 25% or more of shares or voting rights (name, surname, personal identity code, address, citizenship, percentage of shares or voting rights controlled), and whether any of the aforementioned natural persons (or their spouse or close family members) is or has been a politically exposed person in the past twelve months. Legal basis for processing – compliance with a legal obligation (GDPR Article 6(1)(c)). Retention period – documents and other data obtained for the prevention of money laundering and terrorist financing are retained in accordance with the terms specified in Article 19 of the Law on the Prevention of Money Laundering and Terrorist Financing of the Republic of Lithuania.
- For the purpose of communication with potential and existing clients (when an inquiry is submitted or a remote meeting (consultation) is registered). Processed personal data: name, phone number, email address, other information provided by the potential or existing client. Legal basis for processing – processing is necessary for the legitimate interests of the data controller (GDPR Article 6(1)(f)), i.e., to respond to inquiries from potential or existing clients. Retention period – 1 year from the receipt of the inquiry or the date of the remote meeting.
- Clients’ personal data is (or may be) disclosed to:
- state and municipal institutions, agencies, bailiffs, debt collection agencies, notaries, courts, and other dispute resolution bodies, private legal entities when performing tasks under a legal services contract;
- competent state and municipal authorities and other persons performing functions assigned to them by laws and other legal acts (e.g., when there is a reasonable suspicion that a criminal act, administrative, or other legal violation is being prepared, committed, or has been committed).
- Website visitors’ personal data is disclosed to:
- UAB Hostinger – for website hosting and to ensure the stable and reliable operation of the website.
- The right to request access to your processed personal data.
- The right to request correction of inaccurate, incomplete, or incorrect personal data.
- The right to request the destruction of your personal data in cases and in accordance with the procedure provided by law.
- The right to request restriction of the processing of your personal data in cases and in accordance with the procedure provided by law.
- The right to object to the processing of your personal data.
- The right to withdraw your consent.
- The right to lodge a complaint with the State Data Protection Inspectorate if you believe that your personal data is being processed unlawfully (ada.lt).
- To exercise the aforementioned rights, you must submit a free-form request to us. The request must be sent by email to info@soliduslex.com. The request must be prepared in a way that allows us to recognize the electronic document format and the content of the request, verify the electronic signature, and identify the person submitting the request. If the request is submitted on your behalf by a representative, the request must include the representative’s name, surname, contact details, and a document confirming the representation.
- The request must clearly state what is being requested: first, whether we (the data controller) confirm that we process/do not process your personal data; second, what information about the personal data you wish to know (e.g., purposes and duration of processing); third, whether you wish to receive copies of all or only part of your processed personal data.
- No later than one month from the receipt of the request, we will provide you with information about the actions taken in response to your request. This period may be extended by an additional two months if necessary, depending on the complexity and number of requests. We will inform you of such an extension within one month of receiving the request, along with the reasons for the delay.
- If your requests are manifestly unfounded or disproportionate, particularly due to their repetitive nature, we may either charge a reasonable fee, taking into account the administrative costs of providing the information or communications or performing the requested actions, or refuse to act on the request.
- For all questions related to the processing of your personal data and the exercise of your rights, you may contact us directly by email: info@soliduslex.com.
