INFORMATION REGARDING PROCESSING PERSONAL DATA OF THE UNION REGISTRY

INFORMATION REGARDING PROCESSING PERSONAL DATA OF THE UNION REGISTRY

Since the General Data Protection Regulation* (hereinafter – ‘GDPR’) came into force on May 25, 2018, the Environmental Project Management Agency under the Ministry of Environment of the Republic of Lithuania (hereinafter – ‘Agency’ or ‘we’) is obliged to ensure better protection of the personal information of individuals having access to the Lithuanian part of the Union Registry.
Should you wish to be informed of how the Agency collects, processes and stores Your personal data, please read carefully this notification.

* Regulation (EU) No 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).

1. Controller of Your personal data
The Environmental Project Management Agency under the Ministry of Environment of the Republic of Lithuania (legal entity code 288779560); address: Labdarių street 3, 01120, Vilnius; tel. nr.: +370 646 02 285; e-mail: apva@apva.lt.
Contact information of a data protection officer: e-mail: dap@apva.lt; address: Labdarių street 3,
01120, Vilnius.

2. Legal basis and objectives of processing personal data
The Agency processes Your personal data in accordance with the functions of the national administrator of the Union Greenhouse Gas Registry (hereinafter – ‘the Registry’) delegated by the legislation and ensures the proper administration of accounts opened in the Lithuanian part of the Registry.

3. Processing of personal data
Performing the functions delegated by the legislation, the Agency can process personal data for the purpose of opening a new account and updating the account information:
3.1. Identification data (name, surname, personal ID number);
3.2. A copy of an identity card or a passport;
3.3. A document issued by a bank that proofs that the person requesting the account opening has an open bank account;

3.4. An account ID and number given by the Registry;

3.5. Contact details (address, e-mail, telephone number);
3.6. Documents stating the address of the permanent residence and a criminal record of the natural person;
3.7. A statement signed by a prospective account holder confirming the authorization of a natural person.

4. Recipients of personal data
In compliance with the European Union legislation** and national legislation, personal data can be provided to the law enforcement and tax authorities as well as to the European Commission and national administrators of other Member States.

** Commission Delegated Regulation (EU) 2019/1122 of 12 March 2019 supplementing Directive 2003/87/EC of the European Parliament and of the Council as regards the functioning of the Union Registry.

5. Personal data sources
In compliance to the legislation, the Agency processes personal data which is directly obtained from the data subject and information about the account representatives that is provided by natural and legal entities or any other publicly accessible sources, such as state-owned registries.

6. The storage period of personal data
The period for which personal data will be stored is determined in the Order No V-100 of the Chief Archivist of Lithuania of 9 March 2011, in the annual Documentation Plan of the Agency and other legislation governing the storage of documents.

7. The rights of data subjects

7.1. The right to obtain access to Your personal data from the Agency in accordance with Article 15 of the GDPR;
7.2. The right to obtain from the Agency the rectification of Your inaccurate/ incomplete personal data in accordance with Article 16 of GDPR;
7.3. The right to obtain from the Agency the erasure of Your personal data in accordance with Article 17 of the GDPR;

7.4. The right to obtain from the Agency the restriction of processing Your personal data in accordance with Article 18 of the GDPR;
7.5. The right to object the processing of Your personal data in accordance with Article 21 of the GDPR.

 

Should You wish to exercise the rights related to processing Your personal data in the Agency, You need to submit a written request to us personally, via mail (confirming Your identity) or by electronic means (signed with an electronic signature).
The request should be legible, signed and it must contain Your contact details (name, surname). In addition, it should specify what right and to what extent You wish to exercise, and how You would like to receive the answer.
If You believe that Your personal data is being processed in violation of the GDPR, You have the right to submit a complaint to the supervisory authority – the State Data Protection Inspectorate (address: A. Juozapavičiaus street 6, 09310 Vilnius; e-mail: ada@ada.lt).