Privacy Policy

Lextra privacy policy pastable · TXT

Valid from: 31 August 2026

1. GENERAL PROVISIONS

1.1. The Controller – Law Firm of Attorney Martynas Kalvelis "LEXTRA", address at Vilniaus str. 37-4, LT-01109 Vilnius, Republic of Lithuania, respects the privacy of Website's visitors, Firm's clients, partners/suppliers and/or their representatives, also candidates for job vacancies and other persons who provide Personal data to the Firm, or whose Personal data the Firm, having a legitimate ground for receiving and processing them, receives, including from third parties (hereinafter, you or yours).

1.2. On this basis, the Firm collects, stores and discloses or otherwise processes your Personal data only as described in this Privacy Policy and (or) applicable legal acts, including GDPR and LLPPD, and in other information provided to you. We draw your attention to the fact that additional and (or) more detailed information about how we process your Personal data may be provided in the contracts and other communication and documents provided by the Firm (e.g., consents, etc.).

1.3. This Privacy Policy describes the principles of collection, use or other processing of information we use on the Website, as well as other information about the Personal data processed in the Firm's activity, and the policies and principles applied in order to ensure the protection of Personal data.

1.4. By using the Website and (or) by providing Personal data to us (unless we have to receive your explicit consent under applicable legal acts), you agree that the Personal data you provide to the Firm will be processed in accordance with this Privacy Policy.

1.5. Provision of your Personal data in the cases described on the Website or otherwise requested by the Firm is usually voluntary, but is necessary in order, for example, to respond to your inquiries, to execute the agreement concluded by the Firm with you or the person you represent, to consider your candidacy for a job vacancy, etc.

1.6. We kindly ask you to familiarise your existing or future representatives (individuals who represent you in relations with us, if you are, for example, our client or supplier), as well as other persons to whom this information may be relevant because you submit their Personal data to us, with the information contained in this Privacy Policy.

2. DEFINITIONS

2.1. In this Privacy Policy, definitions and expressions written with a capital letter have the meaning defined below:

a) LLPPD – the Law on Legal Protection of Personal Data of the Republic of Lithuania;

b) Personal data – any information about you as a natural person whose identity has been identified or can be identified (the Data subject); a natural person whose identity can be identified is a person whose identity can be identified directly (using an identifier such as name and surname, internet identifier) or indirectly (according to one or more physical, physiological, genetic, psychological, economic, cultural or social identity features);

c) GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC;

d) Controller or Firm, or we, or us, or our – Law Firm of Attorney Martynas Kalvelis "LEXTRA", address at [ADDRESS], Vilnius, Republic of Lithuania;

e) You or your – any person who visits the Website and uses its functionalities (e.g., submits an inquiry) or is the Firm's client, partner/supplier and (or) their representative, a candidate for the Firm's job vacancy, and provides Personal data to the Firm, or whose Personal data the Firm, having a legitimate ground for receiving and processing them, receives, including from third parties;

f) Privacy Policy – the principles, rules and requirements provided by the Firm that establish the procedure of collection, storage, use and any other processing of information, including Personal data, related to the use of the Website and its functionalities, as well as processed in the Firm's activity, and other relevant provisions;

g) Direct marketing – the activity of offering services to individuals and (or) asking for the opinion of individuals on offered services by post, telephone or other direct means;

h) Website – the website available at www.lextra.legal, the administrator of which is the Firm.

3. CONNECTION TO THE WEBSITE

3.1. Each time you visit the Website, the servers of the Website temporarily store information about the connecting device in a log file. In this procedure, regardless of your actions, the following data is automatically collected and stored for as long as it is automatically and (or) manually deleted: the IP address of the connecting device, date and time of connection, information about the browser you are using and its version, type of device, and other technical details. This information is collected and processed so that you can use our Website, to guarantee the continued security and stability of the system, for technical administration of the network infrastructure, and for internal statistical purposes. In addition, the IP address may be investigated and used in case of violations of the Privacy Policy, attacks against the Website's infrastructure and in other cases, if provided for in this Privacy Policy or applicable legal acts.

4. PURPOSES OF THE PROCESSING OF PERSONAL DATA, SOURCES OF DATA, CATEGORIES OF DATA SUBJECTS, OTHER INFORMATION RELATED TO THE PROCESSING OF YOUR PERSONAL DATA

In order to ensure transparency and responsible processing of Personal data, we inform you that the Firm may process your Personal data for the following purposes and under the following conditions:

4.1. Conclusion and performance of contracts. In order to conclude and properly perform contracts with our clients and partners/suppliers, including recording concluded transactions, controlling their execution and payment, and recovering debts, we may process the Personal data of clients or partners/suppliers and their representatives/employees.

Processed Personal data: client's or supplier's/partner's name, surname, address (including delivery address), telephone number, e-mail address, amounts, date and basis of occurrence of debts/partial payments, personal code, other information related to contractual obligations and, when the Personal data of a client's or supplier's/partner's representative/employee are processed – his/her name, surname, telephone number, e-mail address, position, address of division.

Legal basis for the processing of Personal data: Personal data of the client or supplier/partner are processed in order to perform the contract to which the Data subject is party and, when the Personal data of a representative/employee of a client or supplier/partner are processed – on the basis of the Firm's legitimate interest to identify the representative and fulfil the Firm's contractual obligations with the client or supplier/partner.

Period of storage of Personal data: 10 (ten) years from proper execution of the contract and, when the Personal data of a representative/employee of the Firm's client or supplier/partner are processed – 5 (five) years from the last contact with the person (as the client's or partner's/supplier's representative/employee).

Source of Personal data: Personal data of the supplier/partner are obtained from the Data subject and, when Personal data of their representative/employee are processed – they may be obtained from the employer of the representative or another representative (client, partner/supplier of the Firm).

4.2. Management of available material and financial resources. In order to ensure our independent functioning and manage our available financial and material resources, including the Firm's bookkeeping, invoicing clients and keeping accounts of incoming invoices, we may process the Personal data of our clients or partners/suppliers and their representatives/employees.

Processed Personal data: client's or supplier's/partner's name, surname, e-mail address, address, telephone number, copy of individual activity certificate, information about payable/receivable amounts of money, and when the client/supplier/partner (natural or legal person) is represented by their own representative/employee – his/her name, surname, telephone number, e-mail address, position.

Legal basis for the processing of Personal data: Personal data of the client or supplier/partner are processed in order to perform the contract to which the Data subject is party, and to fulfil the legal obligation applicable to the Firm to properly maintain accounting; when the Personal data of a client's or supplier's/partner's representative/employee are processed – on the basis of the Firm's legitimate interest to fulfil its contractual obligations with the client or supplier/partner and contact the representative/employee for accounting purposes.

Period of storage of Personal data: 10 (ten) years from the relevant accounting operation and, when the Personal data of a client's or supplier's/partner's representative/employee are processed – 5 (five) years from the last contact with the person (as the client's or partner's/supplier's representative/employee).

Source of Personal data: Personal data of the client or supplier/partner are obtained from the Data subject and, when the Personal data of their representative/employee are processed – they may be obtained from the employer of the representative or another person being represented (client, partner/supplier of the Firm).

4.3. Selection of personnel. In order to ensure our independent functioning and to select the most suitable candidates for job vacancies at the Firm, we may process the Personal data of persons who apply for job vacancies at the Firm and submit (including by e-mail or other channels) to the Firm the Personal data necessary for this purpose. When you apply for a job vacancy at the Firm, you are informed that we have the right to contact your specified former employer in order to obtain information about your qualifications, professional skills and business features. When you submit the contact details of your former employer, you should inform him/her about the submission of such data to the Firm and that he/she may be contacted by the Firm for the purposes of your recruitment.

Processed Personal data: CV, name, surname, date of birth, telephone number, e-mail address, information about education, information about work experience, other information provided by the candidate (including during the interview) or received during an evaluation (test results), including recommendations, and information related to qualification, professional skills and business features received from the candidate's former employer.

Legal basis for the processing of Personal data: Personal data are processed on the basis of the Data subject's consent, which may be expressed by submitting a CV to the Firm or otherwise applying for a job vacancy. Data from the former employer are obtained on the basis of the Firm's legitimate interest to receive information about the candidate from their former employer.

Period of storage of Personal data: until the end of the relevant selection of personnel for the specific position (if and when it is possible to identify the particular position to which the candidate applies) and 1 (one) month thereafter (as much as necessary to technically delete the data), in any case no more than 6 months from the date of submission of the candidate's CV or other data necessary for this purpose.

Source of Personal data: Personal data of the potential candidate are obtained from the Data subject, from third parties – the representative of the candidate's former employer – and may also be obtained from third parties providing the Firm with personnel selection services, which should inform you about the provision of your Personal data to us.

4.4. Administration of inquiries or complaints received via the Firm's contacts (including e-mail) or other functionalities available on the Website, including submission of responses. In order to ensure that you can submit inquiries or complaints to us by using the means available on the Website (for example, an inquiry form, if available on the Website) or by using the Firm's contacts (for example, the e-mail specified on the Website or in this Privacy Policy), as well as to provide you with answers to your inquiries or complaints, we may process your Personal data (as the person who submitted the inquiry/complaint).

Processed Personal data: name, surname, e-mail address, telephone number, content of the message, as well as any other Personal data submitted in the inquiry or complaint.

Legal basis for the processing of Personal data: Personal data are processed on the basis of the Data subject's consent, which may be expressed by submitting an appropriate inquiry or complaint to the Firm.

Period of storage of Personal data: 1 (one) year from the date of submission of the relevant inquiry or complaint.

Source of Personal data: Personal data are obtained from the Data subject.

4.5. Communication and publicity of the Firm's activities (photography and filming). In cases where you participate in events, seminars or conferences organised by the Firm and are informed about photographing or filming, or we obtain your consent in another way, we may process your image data captured in photos or filmed material for the purposes of communication and publicity of the Firm's activities. The material obtained in this manner may also be made public, including on social network accounts administered by the Firm (Facebook, Instagram, LinkedIn, etc.), on the Website or other websites administered by the Firm, in the media and through other channels. Please note that if you are participating in a particular event and do not want to be filmed or photographed, you should contact the person who is filming or photographing during the event and avoid cameras or other filming and shooting equipment.

Processed Personal data: photos, videos.

Legal basis for the processing of Personal data: Personal data are processed on the basis of the Data subject's consent.

Period of storage of Personal data: 2 (two) years or another term specified in the Data subject's consent.

Source of Personal data: Personal data are obtained from the Data subject when photographing or filming.

4.6. Direct marketing. In cases where we receive your separate consent for Direct marketing, we may process your Personal data in order to offer you the Firm's services and/or ask your opinion about the services offered. Your Personal data will only be processed for the purpose and scope specified in the specific consent; for example, if you have agreed to receive Direct marketing messages by e-mail, we will not send you such messages by SMS. You may at any time object to the processing of Personal data for Direct marketing purposes and withdraw your consent to the processing of Personal data for this purpose. Additional information related to the processing of Personal data for this purpose is provided in the section "Direct marketing" of this Privacy Policy.

Processed Personal data: name, surname, telephone number, e-mail address, position, address of division, date of birth (in specific cases).

Legal basis for the processing of Personal data: Personal data are processed on the basis of the Data subject's consent.

Period of storage of Personal data: 2 (two) years from receipt of consent or another term specified in the Data subject's consent.

Source of Personal data: Personal data are obtained from the Data subject.

5. STORAGE OF PERSONAL DATA

5.1. Your Personal data will be processed by the Firm for the periods established in this Privacy Policy above.

5.2. Please note that in some cases a longer period for the storage of Personal data, or our right to store Personal data for a longer period, may be established in applicable legal acts, e.g. in cases where the processing of Personal data is necessary for compliance with a legal obligation to which the Firm is subject, or where the processing of Personal data is necessary for the establishment, exercise or defence of legal claims.

5.3. In such cases we may process your Personal data for a longer period, but only to the extent necessary for these purposes. Such Personal data will be erased as soon as they are no longer necessary in relation to the purposes for which they are processed.

6. DIRECT MARKETING

6.1. Your consent to the processing of Personal data for Direct marketing purposes is obtained in advance, i.e. prior to the processing of Personal data for Direct marketing purposes.

6.2. Consent may be obtained in various ways, for example, at the time of signing a contract with the Data subject and at the same time requesting the Data subject's consent, at the time of participating in events organised by the Firm, by filling in questionnaires, and so on.

6.3. The Firm will use Personal data for Direct marketing purposes in order to provide information and/or promotional material about the Firm, the Firm's offers and news (including, but not limited to, newsletters), information about events organised by the Firm (presentations, seminars, conferences, etc.) and invitations to participate in such events, to organise such events, to send greetings, etc.

6.4. Direct marketing may be carried out in the following ways: by phone (during voice calls and/or via SMS), by e-mail or by any other direct means.

6.5. Information on the exact Personal data processed for Direct marketing purposes, data retention periods, the legal basis for processing and the source of Personal data is provided in section 4 of this Privacy Policy.

6.6. Right to object. You have the right to object at any time to the processing of Personal data for Direct marketing purposes and to withdraw the consent given to the processing of Personal data for this purpose (the withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal). Your withdrawal or objection will not affect your use of the Firm's services, but the Firm will no longer be able to provide you with offers, information, news, etc.

6.7. You may revoke your consent by using the unsubscribe functionality in the e-mails sent, by replying to an SMS sent by the Firm and expressing your objection, or by contacting the Firm at the e-mail address indicated in this Privacy Policy below.

7. DISCLOSURE OF PERSONAL DATA

7.1. We may disclose your Personal data only on a legitimate basis (for example, when required by legal acts, by an agreement concluded with you, or when we have your consent) and in accordance with the requirements of applicable legal acts.

7.2. In addition to the cases already mentioned in this Privacy Policy, you are informed that we may transfer your Personal data to the following entities:

a) service providers who act as processors of Personal data and provide services to the Firm related to IT, Website support and maintenance, maintenance of applications used by the Firm, provision and maintenance of servers, provision of a platform for sending newsletters, etc.;

b) in the cases specified in legal acts, to law enforcement and supervisory authorities, as well as other state and municipal authorities, in order to comply with legal requirements, including the State Tax Inspectorate;

c) persons providing services related to the performance of contracts concluded with you or your principal, including postal and courier service providers;

d) bailiffs, courts, arbitral tribunals and other bodies dealing with disputes;

e) other third parties, when you submit a relevant request to provide your Personal data, or third parties about which you are clearly informed in another way and/or whose receipt of your data you have consented to while using a specific service;

f) companies providing the Firm with audit and related services, and providers of legal and financial advisory services;

g) other business entities, in the event of the Firm's merger with another legal entity or acquisition, including entities carrying out legal due diligence.

8. YOUR RIGHTS AS THE DATA SUBJECT AND THEIR IMPLEMENTATION

8.1. You, as the Data subject, have all the rights specified in the applicable legal acts, including those indicated below.

a) Right to revoke consent. If you have given us your consent to process your Personal data, you may revoke it at any time (withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal) by contacting us using the contact details specified in this Privacy Policy or by using other functionalities provided by the Firm (e.g., by clicking the unsubscribe link in a newsletter).

b) Right of access to your Personal data. You may access the Personal data processed by the Firm about you. You may obtain information on how the data are collected, the period for which they are stored, and who receives them and to what extent. Your right of access may be limited by legal acts.

c) Right to rectification. You may require the Firm to rectify Personal data relating to you that are incorrect, inaccurate or incomplete.

d) Right to object. In certain circumstances, you have the right to object to the processing of your Personal data, including where your Personal data are processed on the basis of legitimate interest. You also have the right to object to the use of your Personal data for Direct marketing purposes (if and when we process data for these purposes).

e) Right to restriction of processing. If you think that Personal data processed by the Firm are incorrect or you disagree with their use, you may require the Firm to limit the use of these data solely to storage. The use will be limited to storage until the accuracy of the data has been verified or until it has been verified whether the Firm's legitimate grounds override those of the Data subject.

f) Right to erasure. If your Personal data are processed unlawfully, you object to such processing, or there are other legal grounds, you have the right to obtain from the Firm the erasure of your Personal data, subject to the restrictions specified in legal acts.

g) Right to data portability. You have the right to receive the Personal data relating to you that you have submitted to the Firm in a structured, commonly used and machine-readable format, and to transmit those data to another controller in accordance with the procedure established by legal acts.

h) Right to lodge a complaint. You have the right to lodge a complaint with the State Data Protection Inspectorate of the Republic of Lithuania if you consider that the processing of Personal data relating to you infringes the requirements of legal acts. However, we kindly ask you to contact us first using the contacts indicated in this Privacy Policy.

i) Procedure for implementing the Data subject's rights. If you have additional questions or wish to exercise the rights indicated in this Privacy Policy, you should contact us using the contacts indicated in this Privacy Policy (by e-mail, by post to the indicated address, or in person at the Firm's registered office). When submitting requests concerning rights related to the processing of Personal data, you will be asked to confirm your identity (e.g., if you submit a request by electronic means, you must sign it with an electronic signature; if you apply in person or by post, you must provide an identity document or a copy certified in the manner prescribed by legal acts). We will only accept requests on the implementation of Data subject's rights that are submitted in a coherent and understandable form in the state language (Lithuanian), in readable characters, do not contain offensive or disrespectful expressions, and clearly and specifically indicate the right(s) to be exercised and the related circumstances. We will consider a request as unjustified and may not execute it if it does not specify the right(s) to be exercised or any other information required by this Privacy Policy or the GDPR. We may also decline to execute your request if we do not process your Personal data, if documents identifying you (or your representative) are not provided together with the request, if the person submitting the request is not duly authorised or has no right to make the request (no power of attorney or other document granting the right of representation is submitted), or if legal acts do not provide for the possibility of satisfying your request. Please note that where you abuse your right to submit requests, we have the right to charge a fee for executing the request. We will respond to all your requests related to the implementation of your rights as the Data subject without undue delay and no later than within 1 (one) month of receiving the request. That period may be extended by 2 (two) further months, of which you will be informed in advance.

9. INFORMATION SECURITY

9.1. We use reasonable technical and organisational measures in order to protect our information (including Personal data) from accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, Personal data.

10. THIRD PARTIES

10.1. The Firm does not control the privacy policies and (or) other rules applied to you by third parties. Therefore, you, at your own discretion and risk, are responsible for complying with them in cases where they apply to you (e.g., where links to websites not managed by the Firm are provided on the Website).

10.2. The Firm is not liable for the privacy policies or any other content of other websites where references to other websites are given on the Website, or where a reference to the Website is given on other websites.

10.3. When you click a reference, logo or any other element of the Website, or when using the services available on the Website, we draw your attention to the fact that you may leave the Website at that moment.

10.4. The Firm does not collect any information about you from third parties, except in the cases specified in this Privacy Policy, or where the requirements of legal acts or the rights of third parties are infringed.

11. AMENDMENTS TO THE PRIVACY POLICY

11.1. The Firm has the right, at its own discretion, to adjust (including change, edit, supplement, cancel or annul) this Privacy Policy or any part thereof and any related information.

11.2. The updated Privacy Policy will be posted on the Website and will take effect from the date of its publication (the "Valid from" date at the top of the Privacy Policy indicates when it was last updated).

11.3. When visiting the Website or its functionalities, we recommend that you check the Privacy Policy and its updates and make sure that you are satisfied with the current version. If you use the Website or any of its functionalities after an updated Privacy Policy has been published, you agree to the updated Privacy Policy.

12. FINAL PROVISIONS

12.1. This Privacy Policy is governed by the laws of the Republic of Lithuania. Any disagreement over the implementation of this Privacy Policy shall be resolved by negotiation. If the parties are unable to agree, disagreements shall be resolved in the manner prescribed by the laws of the Republic of Lithuania.

12.2. If you have any questions or claims, need our help with the interpretation or application of this Privacy Policy, or wish to exercise your rights as the Data subject, please contact the Firm at info@lextra.legal or by phone at +370 650 67644.

12.3. We will try to respond to all written requests regarding this Privacy Policy promptly (we shall respond to all requests related to the implementation of your rights as the Data subject no later than within 1 (one) month of receipt of the request, except for the exceptions specified in legal acts or this Privacy Policy).