Personal data security

Your personal data is processed by Oro Navigacija in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) – hereinafter referred to as the Regulation, Law on Legal Protection of the Personal Data of the Republic of Lithuania and other legal acts. Oro Navigacija is entitled to invoke data controllers for processing the data. In such cases we undertake the liability to take all the measures necessary for ensuring that the process is executed following the above indicated regulations and suitable organisational as well as technical data safety means are ensured.

Data protection officer

Data protection officer assists in ensuring the compliance with the Regulation (EU) 2016/679, participates in all the matters, pertaining to the protection of personal data, also provides consultations in the field of personal data protection. In case you have questions or problems regarding ensuring the protection of personal data at Oro Navigacija, do not hesitate to contact us by e-mail: duomenuapsauga@ans.lt

The rights of personal data subject

To know (be notified), who manages your data and why (Articles 12–14 of the Regulation).

To access your personal data (Article 15 of the Regulation).

To request rectification of personal data (Article 16 of the Regulation).

To request erasure and to be forgotten (Article 17 of the Regulation), provided that is grounded on one of the following grounds:

• Personal data is no longer necessary in relation to the purposes for which they were collected or otherwise processed;
• You revoke the consent to process personal data, which provided grounds for data processing, and there are no other grounds for processing the data;
• You do not give consent to data processing in accordance with Paragraph 1 of Article 21 of the Regulation and there are no superseding lawful grounds for processing the data.

To restrict the data processing (Article 18 of the Regulation), in case:

• the personal data is inaccurate;
• the processing of personal data is unlawful, but you oppose the erasure of the personal data;
• the data controller no longer needs the personal data for the purposes of the processing, but the data is needed by you for the establishment, exercise and defence of legal claims.

You may object data processing in accordance with Paragraph 1 of Article 21, provided that data controller rights do not supersede your grounds for objection.

To transmit personal data, when data processing is based on consent or contract and the data is processed by automated means (Article 20 of the Regulation).

Not to give consent for personal data processing on grounds relating to your particular situation, when the data is processed executing the public authority functions assigned to the data controller, except for the cases, when the data controller proves that the data is processed for compelling lawful reasons which take precedence over your interests, rights and freedoms, or to assert, enforce or defend legal claims (Article 21 of the Regulation).

The data subject also has the right to submit a complaint to State Data Protection Inspectorate concerning unlawful actions of processing personal data (inaction).

Ways to exercise your rights:

• by sending us a free form request to the e-mail address duomenuapsauga@ans.lt. The request must be signed using an electronic signature or the request must be supplemented with a copy of the personal identification document, ratified in accordance with the procedure ratified under the legal acts;
• by sending a request using registered mail to the address Balio Karvelio St. 25, LT-02184, Vilnius, Lithuania, the request must be signed. A copy of the personal identification document, ratified in accordance with the procedure ratified under the legal acts, must be enclosed to the document;
• you can also exercise your rights by invoking a representative. In such a case your representative must indicate the name, surname, contact details, a copy of an identity document, ratified in accordance with the procedure established under the legal acts, information about you, namely: name, surname, other data on the basis of which we could identify you as a data subject, as well as provide a copy of the document authorising your representation, ratified in accordance with the procedure established under the legal acts.

The request must be legible and signed, it must contain the name, surname, address and other details of the data subject for maintaining the communication in the preferred form, information on which of the rights of the data subject and to what extent the data subject wishes to exercise. Detailed information about personal data subject requests and management of their inquiries can be found under Rules on Personal Data Protection and Management.