GelvoraSergel UAB (hereinafter referred to as the “Company”) cares about your privacy and protects your personal data. This Privacy and Data Processing Policy (hereinafter referred to as the “Policy”) applies to your personal data processed by the Company, company code 125164834, address: A. Juozapavičiaus g. 7, LT-09311 Vilnius.

This Policy has been prepared in accordance with the General Data Protection Regulation (hereinafter referred to as the “Regulation”), which entered into force on 25 May 2018, as well as other laws of the Republic of Lithuania or the European Union that define the processing of personal data.

By reading this Policy, you will learn how the Company processes, protects and uses personal data. If you use the website www.sergelfinance.lt, you have read and understood the provisions of this Policy.

Key terms used in the Policy

Personal data – any information relating to an identified or identifiable natural person (data subject); an identifiable natural person is a person who can be identified, directly or indirectly, primarily by reference to an identifier such as a name, a personal identification number, location data and an online identifier, telephone number(s), or by reference to one or more factors specific to that natural person’s physical, physiological, genetic, mental, economic, cultural or social identity.

Data Subject – a natural person whose personal data is processed by the Company.

Data Controller – a legal or natural person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

Data recipient – the legal or natural person to whom the personal data are disclosed.

Third country – a natural or legal person, public authority, agency or other body other than the data subject, the controller, the processor, or persons authorised to process personal data under the direct authority of the controller or processor.

Data processing – any operation or sequence of operations which is performed upon personal data or sets of personal data, whether or not by automated means, such as collection, recording, sorting, organisation, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination with other data, restriction, erasure or destruction.

Personal data may be processed for the following purposes:

·      Identification of the data subject.

·      the conclusion, performance, provision of services and performance of obligations (in accordance with Article 6(1)(b) of the Regulation “Lawfulness of processing”: “the processing is necessary for the performance of a contract to which the data subject is a party”; and (f): “the processing is necessary for the purposes of the legitimate interests of the controller or of a third party”).

·      The protection of the rights and legitimate interests of the Data Controller and/or the Company, the defence of a possible legal dispute relating to a debt in which data on the fulfilment of an obligation are necessary (Article 1.125 of the Civil Code); Possible pre-trial and/or criminal proceedings related to the debt, which require information on the fulfilment of the obligation (Article 95(1)(b) of the Penal Code).

·      Credit scoring, debt management.

·      Enforcing a court or other authority’s order, decision, judgement, verdict or ruling.

·      Burden of proof (call details (date, duration, number, agent-employee).

·      For other legitimate purposes as set out in law.

Where is your personal data collected from?

Duomenys gali būti renkami juos gaunant tiesiogiai iš duomenų subjekto, iš duomenų valdytojo ar oficialiai užklausiant reikalingą informaciją tvarkančių ir turinčių teisę ją teikti subjektų, ar sutarčių bei teisės aktų pagrindu prisijungiant prie atskirus duomenis kaupiančių duomenų bazių, registrų ir informacinių sistemų.

 What personal data may be collected about you?

·      Identity data of the data subject: name, surname, personal identification number, date of birth.

·      Contact details: address, telephone number, email address.

·      Financial data: data on assets, income, liabilities; data on overdue, outstanding financial liabilities to other legal or natural persons (creditors), credit history (name of the creditor, code, amount of the debt, date of origination and settlement of the debt), and the types of debt.

·      Professional data: details of education and professional activities and positions held.

·      Data obtained in compliance with legal requirements from notaries, courts, bailiffs or other third parties.

·      Data collected by technical means of communication, such as data collected by telephone, e-mail, including the recording of conversations.

·      Statistics on behavioural patterns, quality of services, preferences: data on activity in using services, services provided, feedback on services.

Who can we provide your personal data to?

Personal data may be provided to such recipients:

·      State bodies and institutions, other persons carrying out functions entrusted to them by law (e.g. courts, law enforcement authorities, bailiffs, notaries, financial crime investigators, auditors, the State Enterprise Centre of Registers, the State Enterprise Regitra).

·      Data processors authorised by the Company: providers of legal, financial, archiving, mailing, SMS, telephony and information technology services.

·      Other third parties with a legitimate interest, such as:

if you are more than 30 days late in fulfilling your obligations, the Company has the right to provide information about your identity, contact details and credit history, i.e. financial and property obligations and their fulfilment, debts and their payment, to the credit bureau Creditinfo Lietuva UAB (company code: 111689163, address: A. Goštauto g. 40A, LT 01112 Vilnius, www.manocreditinfo.lt, tel.: (8 5) 239 4131). The credit bureau processes and provides third parties (financial institutions, telecommunication companies, insurance, electricity and utility providers, trading companies, etc.) with information relating to you in order to pursue its legitimate interests and purposes of assessing your creditworthiness and managing your debts. The creditworthiness assessment includes an automated assessment of your personal characteristics (profiling), which may affect your ability to transact in the future. Automated assessment helps you to lend responsibly by assessing information provided by the individual, credit history, public information, etc. Automated scoring methods are regularly reviewed to ensure their fairness, efficiency and impartiality. Credit history data is kept for 10 years after the fulfilment of obligations. You can access your credit history by contacting the credit bureau directly or using the Finpass mobile app.

Rights of the data subject

You may exercise your rights by contacting the Company at info@sergelfinance.lt or at any other contact details provided by the Company. Your written request should be accompanied by proof of identity or, in accordance with the procedure established by law, by means of electronic communications which allow for proper identification of the person concerned, after verification of his or her identity. The Company shall process such a request from a data subject within a maximum of 30 (thirty) calendar days from the date of receipt.

The data subject shall have the right to request the controller and/or the processor and/or the third party to :

·      access to personal data and information on the sources and nature of the personal data collected, the purposes for which they are processed and to whom they are provided;

·      request rectification, erasure or restriction of processing, or object to the processing of data;

·      require human intervention in automated processing of personal data (profiling) and decision-making, express your views and contest a decision. You can find out more about the exercise and limitations of this right and about automated characterisation (profiling) at www.manocreditinfo.lt;

·      the right to data portability (please note that this right only applies when the controller processes personal data on the basis of a contract or on the basis of the consent of the data subject (you));

·      teisę atšaukti sutikimą arba nesutikti, kad būtų tvarkomi duomenys (ši teisė taikytina, kai duomenų valdytojas tvarko asmens duomenis pagal teisėtą duomenų subjekto sutikimą, kaip nurodyta Reglamento 6 straipsnio 1 dalies a punkte, arba tvarkyti duomenis būtina siekiant teisėtų interesų, kaip nurodyta Reglamento 6 straipsnio 1 dalies f punkte, remiantis duomenų valdytojo apibrėžtu teisiniu pagrindu ir duomenų tvarkymo tikslu);

·      lodge a complaint with the National Data Protection Inspectorate or with a court.

Storage period for personal data

The processing of personal data shall be limited to the time necessary. The period of retention of personal data shall be determined in accordance with the legal grounds for obtaining the data, the nature of the contracts concluded with the controller, or the requirements of the law (e.g. accounting, anti-money laundering, limitation period for legal action, etc.).

Contact information

If you have any questions, requests or comments regarding the Policy or the processing of personal data, please contact the Company in any way that is convenient for you:

·      writing – info@sergelfinance.lt 

·      writing to Švitrigailos g. 11B, LT-03228 Vilnius

· orally by phone 8 5 210 4547