Privacy Policy
Data Controller
The personal data you provide is processed by the data controller – VŠĮ Diversity Development Group, legal entity code 302877111, Didžioji g. 5-404, LT-01128 Vilnius, Lithuania, email: info@diversitygroup.lt.
Purpose of Processing Personal Data
When VŠĮ Diversity Development Group organises events (projects, training sessions, conferences, discussions, forums, surveys, etc.), your personal data may be processed for the following purposes:
- registration for and administration of events;
- communication related to events;
- organisation and administration of remote events;
- informing the public about the activities of VŠĮ Diversity Development Group.
When you make a donation through the VŠĮ Diversity Development Group website, your personal data may also be processed for the purposes of:
- processing and administering your donation;
- processing and confirming your payment;
- communicating with you regarding your donation or payment;
- fulfilling applicable legal, accounting and financial obligations.
Origin of Personal Data
We receive your personal data directly from you or, in relation to events, from another person who registers you for an event or provides the relevant consent for the processing of personal data.
When making a donation, personal data is provided by you during the donation and payment process and may also be received from the payment service provider to the extent necessary to confirm and administer the transaction.
Volume of Personal Data Processed
Participation in events is voluntary. However, if you decide to participate, certain personal data must be provided, as without it VŠĮ Diversity Development Group may not be able to register you for the event or provide the necessary conditions for participation.
For the purpose of event registration, VŠĮ Diversity Development Group may process your name, surname, email address and/or other contact details and information necessary for the proper organisation of the event.
For correspondence related to the organisation of an event, VŠĮ Diversity Development Group processes personal data provided during registration or received directly from the person, including name, surname, email address and/or other contact details and information contained in correspondence.
During events, participants may be filmed and/or photographed. VŠĮ Diversity Development Group may process personal data contained in photographs, video and/or audio recordings, including a person’s image and voice, for the purpose of informing the public about its activities.
Photographs and video and/or audio recordings of events may be published on the VŠĮ Diversity Development Group website, its social media accounts and through other communication channels.
When events are organised remotely, video and audio data, login information and comments may be processed. If a participant turns on their camera during an event, their image may be visible to other participants or viewers and may, where applicable, be used for communication about the event.
When making a donation through the website, VŠĮ Diversity Development Group may process personal data necessary to administer and identify the donation, such as the Donor’s name, contact details, donation amount, date, payment information and transaction-related information.
Payment Processing and Transfer of Personal Data
Donations made through the VŠĮ Diversity Development Group website are processed using the MakeCommerce payment platform, operated by Maksekeskus AS Lithuania branch, legal entity code 307639352, Konstitucijos pr. 21A, LT-08105 Vilnius, Lithuania.
Therefore, personal data necessary to initiate, process and confirm the payment is transferred to Maksekeskus AS.
The information transferred may include personal and transaction data necessary for payment processing, depending on the payment method selected by the Donor.
VŠĮ Diversity Development Group does not store your online banking login credentials or full payment card details where these are processed directly by the payment service provider.
Legal Basis for Processing Personal Data
When organising events and informing the public about them, VŠĮ Diversity Development Group processes personal data on the basis of the data subject’s consent in accordance with Article 6(1)(a) of the General Data Protection Regulation (GDPR), where consent is the applicable legal basis.
When children are filmed and/or photographed during an event and their personal data is processed and published on the basis of consent, the consent of the child and/or their parent or other legal representative is obtained where required by applicable law.
Where an event participant is filmed or photographed in close-up in a way that clearly distinguishes that person from other participants, the processing and publication of such personal data is based on consent, except where another lawful basis for processing applies.
During remote events, a participant’s image and comments may be processed on the basis of consent expressed through the participant’s actions, such as voluntarily turning on their camera or submitting a comment, where consent constitutes the appropriate legal basis.
Personal data necessary for processing and administering donations and related payments may be processed where necessary for the administration of the donation and compliance with the Organisation’s legal obligations, including applicable accounting and financial requirements, in accordance with Article 6(1)(c) GDPR, and, where applicable, on the basis of the Organisation’s legitimate interests in properly administering donations and related communications in accordance with Article 6(1)(f) GDPR.
The Procedure for Storing and Destroying Personal Data
VŠĮ Diversity Development Group stores personal data only for as long as necessary to achieve the purposes for which the personal data was collected or for the period required by applicable legislation.
Personal data processed for the purposes of event registration and correspondence concerning event organisation is stored until the event report has been prepared and/or for no longer than 30 working days after the end of the event, unless a longer retention period is required by law or justified by another lawful purpose.
Personal data relating to donations and payments is stored for the period necessary to administer the donation and comply with applicable accounting, financial, tax and other legal obligations.
Personal data published on the VŠĮ Diversity Development Group website is retained for as long as its publication serves the relevant communication or public information purpose.
Personal data published on social media platforms is also subject to the retention rules and policies of the respective social media platform operators.
At the end of the applicable retention period, personal data is securely deleted or otherwise disposed of in accordance with applicable requirements.
Rights of Data Subjects
As a data subject, you have the following rights, subject to the conditions and limitations established by the GDPR:
- to receive information about the processing of your personal data;
- to access your personal data processed by VŠĮ Diversity Development Group;
- to request the correction of inaccurate or incomplete personal data;
- to request the restriction of the processing of your personal data;
- to request the deletion of your personal data where the applicable legal requirements are met;
- to withdraw your consent at any time where processing is based on consent. Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal;
- to object to the processing of your personal data where the processing is based on legitimate interests;
- where applicable, to exercise your right to data portability;
- to lodge a complaint with the State Data Protection Inspectorate of the Republic of Lithuania.
To exercise your rights as a data subject or if you have any questions regarding the processing of your personal data, please contact VŠĮ Diversity Development Group at info@diversitygroup.lt.