PRIVACY POLICY AND COOKIES - Põhjamaine advokaadibüroo

PRIVACY POLICY AND COOKIES

Please take the time to read this policy and, if you have any questions regarding the matters discussed in this policy, please do not hesitate to contact us.

Data Controller and Contact Information

The controller of personal data processed under this Policy is NJORD Lithuania. You can contact us using the following details:

Professional Law Partnership NJORD Lithuania, company code 302598834

Konstitucijos pr. 7, LT-09308, Lithuania

Phone: +370 525 061 55

vilnius@njord.lt

Categories of personal data processed, purpose of processing, and legal basis

NJORD processes the personal data of the Client (if the Client is a natural person), persons representing the Client (if the Client is a legal entity), other Client representatives, and other persons related to the provision and content of legal services (e.g., spouse, other party, their representatives, etc.) for the following purposes and on the following legal bases:

	Purpose	GDPR Article	Data Processed (may be processed to a lesser extent if sufficient for the specific purpose)
1	To conclude (including taking actions prior to concluding a legal services agreement) and perform a legal services agreement with the Client, based on the necessity and legal obligation to properly, fairly, and efficiently perform the legal services agreement and/or Client assignments, or the necessity for NJORD to exercise rights arising from such agreement (e.g., debt collection, etc.).	GDPR Art. 6(1)(b) If special categories of data are processed (health, trade union membership, etc.) – GDPR Art. 9(2)(f) or GDPR Art. 9(2)(a)	name, surname, date of birth, personal code, VAT payer code, including copies of identity documents, bank details; contact details (phone number, email, address); position held, employer, employer’s contact details;information about authorizations (representation), including representatives’ personal codes, addresses, document copies;solvency data and history;data about the person’s property and restrictions applied to it; data about employees, their representatives, positions held, corporate structure, ultimate beneficial owners;if necessary (e.g., to assert, exercise, or defend legal claims), special categories of data (health, trade union membership, etc.);other data collected directly from the Client or from other sources, depending on the nature of the legal services provided (document signing, inquiries, state registry data, publicly available data, etc.).
2	NJORD processes personal data to help its Client identify persons who may have infringed the Client’s rights, as well as to initiate and conduct legal proceedings on behalf of the Client.	GDPR Art. 6(1)(b) and/or GDPR Art. 6(1)(f) (Client’s legitimate interests related to the protection of their rights, conducting legal proceedings, legal consultations)	name, surname, date of birth, personal code, VAT payer code, including copies of identity documents, bank details; contact details (phone number, email, address); other data collected directly from the Client or from other sources, depending on the nature of the legal services provided (document signing, inquiries, state registry data, publicly available data, etc.).
3	NJORD’s fulfillment of legal obligations (e.g., tax declaration, avoidance of conflicts of interest, fulfillment of tax, accounting, anti-money laundering obligations, Client legal checks, verification of restrictions applicable to the Client, etc.).	GDPR Art. 6(1)(c)	name, surname, date of birth, personal code, VAT payer code, including copies of identity documents, bank details; contact details (phone number, email, address); data provided in AML/KYC questionnaires; information about authorizations (representation), including representatives’ personal codes, addresses, document copies; data about transactions and financial operations; other data required by law or by competent authorities.
4	Direct marketing and communication on social networks, on the website (LinkedIn, Facebook, Instagram, etc.) based on NJORD’s legitimate interests to develop its activities and publicize information about the nature of its services and legal news. The data subject has the right to object to the processing of personal data for this purpose if their legitimate interests override the aforementioned legitimate interests of NJORD.	GDPR Art. 6(1)(f)	Name, surname; contact details (phone number, email, address); social account details, including photos and/or videos; list of topics of interest and language; the fact of providing legal services to the Client.
5	Preparation and analysis of statistical data based on data collected electronically, based on NJORD’s legitimate interests to monitor and improve its activities.	GDPR Art. 6(1)(f)	IP address, browser information;demographic data;list of topics of interest and language.

Failure to provide personal data for the purposes specified in points 1 – 3 of the table will prevent NJORD from providing legal services to you in accordance with legal requirements, fulfilling NJORD’s legal obligations, and/or continuing further cooperation.

The provision of personal data for the purposes specified in points 4 and 5 of the table is not mandatory and does not affect the provision of legal services to the Client by NJORD.

NJORD may obtain personal data for the purposes and on the legal bases specified in this policy from publicly available sources, state, government, municipal institutions, public registers and databases, courts, arbitration institutions, pre-trial institutions, pre-trial investigation bodies, notaries, bailiffs, other lawyers and law firms, Clients, and other persons.

Data Retention Period

Personal data processed for the purposes of providing legal services and fulfilling legal obligations are processed for the entire duration of the Legal Services Agreement and retained for ten years after the termination of the Legal Services Agreement or ten years after the last Client assignment (whichever occurs later), or longer if a longer retention period is established by law and/or other legal acts.

Personal data processed for direct marketing purposes is processed until the data subject exercises their right to object to such processing.

Personal data processed for the preparation and analysis of statistical data is processed for no longer than 2 years from its collection.

After the expiration of the personal data processing period, personal data are irreversibly destroyed or anonymized.

Data Subject Rights

You have the right to request that NJORD allow you to access your personal data and to correct, supplement, or delete them (when they are processed without a legal basis), or to restrict data processing, as well as the right to object to the processing of data (withdraw your consent or object to data processing on the basis of NJORD’s legitimate interests if your interests or fundamental rights and freedoms requiring the protection of personal data override the interests of NJORD or its Clients), and, if applicable, to request that NJORD enable the exercise of the right to data portability and the right to lodge a complaint with the State Data Protection Inspectorate (contact details are provided on the website https://vdai.lrv.lt/lt/).

Recipients of Processed Personal Data

Access to the data processed by NJORD may be granted to NJORD representatives, i.e., practicing lawyers, lawyer assistants and/or legal professionals, administration, and other employees, to the minimum extent necessary.

Your personal data processed may be transferred to third parties acting as data processors under NJORD’s instructions and/or legal requirements or acting as separate data controllers, including, but not limited to, institutions supervising and controlling NJORD’s activities, the Lithuanian Bar Association, courts, arbitration institutions, mediators, pre-trial institutions, pre-trial investigation bodies, state, government and/or municipal institutions, agencies, organizations, institutions responsible for the prevention of money laundering and terrorist financing, the State Tax Inspectorate, notaries, debt collection agencies/bailiffs, public register managers, property appraisers, your counterparties and their representatives, IT specialists, database software providers, database administration service providers, data centers, hosting (server) and cloud service providers, lawyers, auditors, tax consultants, advertising service providers, postal/courier service providers, translators, creditworthiness assessment companies, assignees of claims (when NJORD assigns claims to the Client), and all other third legal and natural persons if necessary to achieve the purposes of personal data processing specified in this policy.

Cookies

To ensure that you receive the necessary information and the best possible services on our website njordlaw.lt, we use cookies. Cookies are small text files stored on your computer or device using an internet connection when you visit our website.

You can disable cookies, but in this case, you may lose the ability to use certain services and functions offered on our website. The use of cookies on the internet is common.

WHAT COOKIES DO WE USE?

When visiting the NJORD website, we collect and process information related to the use of cookies for marketing and statistical purposes (e.g., to improve experience, target advertising).

Data processed: IP address, interests, location, browser and device information.

Legal basis – GDPR Art. 6(1)(f) (legitimate interest to perform statistics and analyze usage to improve website experience).

We also use the web analytics service “Google Analytics,” which helps to study and analyze how our website is used. For this purpose, we use various cookies:

1) strictly necessary;

2) functional;

3) statistical;

4) advertising.

HOW LONG ARE COOKIES STORED ON YOUR COMPUTER?

The storage period of cookies may vary – it depends on the type of cookie. There are two main types of cookies by storage duration: session cookies (stored until the browser window is closed) and persistent cookies (valid from a few minutes up to no longer than 2 years from the last visit). After the expiration date, the cookie is automatically deleted.

HOW TO DELETE COOKIES

You can always delete cookies stored on your device using an internet connection, as well as disable cookies in Your internet browser.

You can disable cookies by changing your browser settings. If you are using a computer, you can open the menu by pressing CTRL+SHIFT+DELETE at the same time. After opening the menu, You can delete cookies stored on Your computer and change cookie usage settings. Below are links where You can find information on how to change cookie usage settings in each browser.

Please note that if You disable cookies, You may lose the ability to use all the services and functions offered on our website. If You disable cookies in your internet browser, they will not be used on all websites You visit. Remember that You can change Your browser settings at any time, and You can always withdraw Your consent if You change your mind.

To learn more about disabling cookies in your browser, visit the following websites:

This Policy may be unilaterally updated as needed. Policy changes take effect from the day they are posted on the NJORD website https://www.njordlaw.lt.