PRIVACY NOTICE ON THE PROCESSING OF PERSONAL DATA
Data Controller
The personal data you provide are processed by the data controller – Diversity Development Group, Public Institution (VšĮ), company code 302877111, Didžioji St. 5-404, LT-01128 Vilnius, Lithuania, email: info@diversitygroup.lt.
Purpose of Personal Data Processing
When organising events (projects, training sessions, conferences, discussions, forums, surveys, etc.), Diversity Development Group processes your personal data for the following purposes:
- registration for events and communication regarding organisational matters;
- remote event management;
- providing information about the activities of Diversity Development Group.
Source of Personal Data
We receive your personal data directly from you or from another person who registers you for an event or signs a consent form regarding the processing of personal data.
Scope of Personal Data Processed
Participation in events is voluntary. However, if you decide to participate, providing personal data is mandatory, as without such data Diversity Development Group cannot register you for an event or enable your participation.
For the purpose of event registration, Diversity Development Group processes the following data: first name, surname, email address and/or other contact details necessary for communication and/or the proper organisation of the event.
For the purpose of communication regarding event organisation, Diversity Development Group processes personal data provided during event registration or obtained directly from the individual (first name, surname, email address and/or other contact details, as well as information contained in correspondence concerning the organisation of the event).
During an event, participants may be filmed and/or photographed. Diversity Development Group may process personal data contained in event photographs, video and/or audio recordings (including images and voices), as well as data obtained during event registration, for the purpose of providing information about its activities.
Event photographs, video and/or audio recordings may be made publicly available online, on the Diversity Development Group website, on Diversity Development Group social media accounts, and through other communication channels.
When events are organised remotely, video and audio data, login data, and comments may be processed. If a participant turns on their camera during an event, the participant’s image will be processed and may be visible to persons watching the broadcast or may be used for communications about the event after it has taken place.
Legal Basis for the Processing of Personal Data
When organising events and providing information about them, Diversity Development Group processes personal data on the basis of Article 6(1)(a) of the General Data Protection Regulation (GDPR).
When children are filmed and/or photographed during an event and their personal data are subsequently processed and published, such processing is based on the consent of the child and at least one of their parents or another legal representative, in accordance with Article 6(1)(a) of the GDPR.
Personal data processing is also based on consent and Article 6(1)(a) of the GDPR where an event participant’s personal data are processed or published by filming and/or photographing the participant in close-up in a manner that clearly distinguishes the individual from other event participants, except where the event participant is a public figure.
An event participant’s image and comments in the chat window of a remote event are processed on the basis of the participant’s consent, expressed by turning on their video camera or posting a comment, in accordance with Article 6(1)(a) of the GDPR.
Retention and Deletion of Personal Data
Diversity Development Group retains personal data only for as long as necessary to achieve the purposes for which the data are processed.
Personal data processed for event registration and communication regarding event organisation are retained until the event report has been prepared and/or for no longer than 30 working days after the end of the event.
Personal data are published on the Diversity Development Group website for as long as there is a public interest in having access to such information. Personal data published on social media are published and retained in accordance with the procedures and retention periods established by the respective social media platform operators.
Once the applicable retention period has expired, Diversity Development Group deletes the personal data.
Rights of Data Subjects
As a data subject, under the conditions and to the extent provided for by the GDPR, you have the right to:
- receive information about the processing of your personal data;
- access your personal data processed by Diversity Development Group;
- request the correction of inaccurate personal data and the completion of incomplete personal data;
- request the restriction of the processing of your personal data;
- request the deletion of your personal data;
- withdraw your consent at any time and request that any further processing of personal data based on your consent be discontinued. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal;
- lodge a complaint with the State Data Protection Inspectorate.
To exercise your rights as a data subject, you may contact Diversity Development Group at info@diversitygroup.lt.