PRIVACY POLICY

This Privacy Policy outlines how we process your personal data (e.g., how we collect, use, disclose, store and protect your personal data). It also provides information about your rights as a data subject. businesstage.com Gcert Baltic, UAB is a data controller and is responsible for collecting, using, disclosing, storing and protecting your personal information in accordance with the General Data Protection Regulation, internal policies and regulations, as well as applicable national legislation.

businesstage.com Gcert Baltic, UAB, Kauno g. 16, Vilnius. 
You can contact us via: 
e-mail: info@businesstage.com
Phone: +370 655 655 15

• Identification data – forename, surname, address, etc.
• Contact data – e-mail, telephone number, address, etc.
• Digital data – cookies, IP address, usage of websites and social networks, and other data publicly available on the Internet.

We have the right and statutory duty to store all data submitted by you to us. We store information collected about you for up to 2 years after you stopped actively using the system. When we keep your data for another specific purpose, the data storage period will be specified under the purpose in the section on how we use your data. Given your consent, another data storage period may be agreed upon.

We only disclose your data to the extent necessary and in the form that is required to achieve the purpose described in this Privacy Policy. Data are disclosed only to the partners with whom we have signed agreements protecting your rights and freedoms in relation to the protection of your personal data. In certain cases, we have the right and duty to disclose your data to authorities (e.g., investigative bodies, tax administrators, the State Data Protection Inspectorate, and the Bank of Lithuania), but only within the scope of the established legal obligations.

In order to be able to carry out our activities, we must process your personal data in accordance with the terms and conditions set forth in this Privacy Policy. We process your personal data in the EU and in other countries. If our service providers handle your personal data in the countries where protection of your rights is not adequately assured, we will take due care to evaluate all the circumstances and to take appropriate measures to ensure that your rights to the proper processing of personal data are not infringed. We will ensure the conditions for you to exercise your rights and effective remedies.

• We process your personal data in accordance with the requirements established by legislation, as defined by the Law on the Protection of Personal Data, the Law on the Prevention of Money Laundering and Terrorist Financing, as well as other applicable legislation.
• We process your personal data based on our legitimate interests. Legitimate interests are our company's carefully-weighed interests that are necessary for the performance of our activities and for ensuring the security of information and systems (software protecting against the loss of data, malware protection, network security). In order to ensure that our interests are aligned with your interests, we conduct an assessment on the necessity of each processing operation that is based on our legitimate interest.
• We process your personal data based on our legitimate interest for the following purposes: to present offerings of our products and services that best match your needs.
• If you wish to opt out of our direct-marketing communications, please notify us using the indicated contact details at any time, stating that you do not wish your contact information to be used for direct-marketing purposes.
• In all cases, when processing your personal data based on our legitimate interest, we take into account your interests and rights granted to you by legislation governing data protection. Your privacy rights are always secured with safeguards and are in line with your rights and freedoms. You have the right to object to the processing of your personal data for the purpose of our legitimate interest. In order to file your objection, please contact us using the above contact details. Please note that we may continue the processing where, following the assessment of our legitimate interest, such interest is found to be in line with your freedoms and rights. If your objection is motivated, we may suspend the processing of your personal data with reference to your stated reasons.
• From time to time, we may collect and process your data with your consent. Your consent is voluntary and is required to carry out the related processing operations for these purposes.

• You have the right to submit an inquiry/request with regard to the processing of your data to: businesstage.com Gcert Baltic, UAB, Kauno g. 16, Vilnius. 
  You can contact us via: 
  E-mail: info@businesstage.com
  Phone: +370 655 655 15
• Your inquiries/requests are to be processed within one month.
• You have the right at all times to get familiarised with your personal data, data processing purposes, categories, sources, recipients, storage period and rights, including the right to receive a copy of your personal data that we process.
• You have the right to the portability of your data that we handle with your consent and that is processed automatically. We will provide you with a copy of your data in a machine-readable Excel file to enable you to store or to disclose such data to other service providers. You can also contact us with a request to provide your personal data to another data controller; however, we can fulfil your request only if such data transfer is technically feasible.
• We update your personal data, asking you to review such data from time to time and when required by law. However, if you notice that some data that we have about you are incorrect, you may submit a request for rectification of inaccurate or incomplete data. You may correct or supplement your personal data on the self-service portal or by contacting and providing us with correct or complementary data. If the accuracy of your personal data is disputable, the processing of your data may be restricted upon your request for a period enabling us to verify the accuracy of your data.
• You have the right to restrict the processing of your data, which means that we will store, but not use, your data. You also have the right to apply with a request to erase your personal data, but only in any of the following cases prescribed by legislation:
• Your data is no longer needed to achieve the purposes for which such data were collected or otherwise processed, and you have withdrawn your consent, where your data is processed with your consent and there is no other legal basis for processing the data.
• You are opposed to the data processing based on our legitimate interest. We will restrict the processing of data until your interests are approved. If the primacy of your rights is determined, we will erase your data at your request.
• Personal data must be erased in order to comply with statutory requirements. Where data processing is illegal, you can request that the processing be restricted or the data be erased. In the absence of a valid reason, we will not erase or restrict the processing of your data.

You have the right to not accept the decision based solely on the automated processing of your personal data, including profiling.
You have the right to contact us at any time if you believe that we have infringed your rights established by the Law on the Protection of Personal Data.