GENERAL INFORMATION
This privacy policy ("Privacy Policy") defines the main rules and conditions for the processing of personal data applicable to: visitors of the website ownleasing.lt ("Website"); clients and (or) potential clients of Own Leasing, UAB (hereinafter – "Own Leasing"), Own 1, UAB and Own 2, UAB (hereinafter together with Own Leasing – "Own companies", each separately – "Own company"); persons who have taken active actions on Own Leasing's social media accounts; persons who have agreed to receive marketing material from Own companies; candidates participating in Own companies' job selection processes.
Data Controller Details:
Own Company | Personal Data Processing Goals |
---|---|
Own Leasing, UAB
| Employment, inquiry administration, contractual relationships, creditworthiness and obligation fulfillment risk assessment, money laundering and terrorist financing prevention, direct marketing, profiling and automated decision-making, telephone call recording, video surveillance, social media account administration. |
Own 1, UAB
| Employment, inquiry administration, contractual relationships, creditworthiness and obligation fulfillment risk assessment, money laundering and terrorist financing prevention, direct marketing, profiling and automated decision-making. |
Own 2, UAB
| Employment, inquiry administration, contractual relationships, creditworthiness and obligation fulfillment risk assessment, money laundering and terrorist financing prevention, direct marketing, profiling and automated decision-making. |
CATEGORIES OF DATA SUBJECTS AND SOURCES OF PERSONAL DATA
Own companies collect personal data about:
- persons who intend to use or are using the services of Own companies;
- persons whose data is provided to us by clients and (or) potential clients of Own companies;
- employees of service providers;
- persons who contacted Own companies by email and (or) phone;
- social media users who contact Own Leasing through Own Leasing accounts on social media or participate in them with active actions;
- job candidates.
Own companies obtain personal data in two ways, when:
- you provide information about yourself;
- data is obtained from third parties (from other financial institutions; from the Bank of Lithuania, Ministry of Finance, Lithuanian Agricultural Advisory Service, Statistics Department, State Social Insurance Fund Board, State Health Insurance Fund, National Payment Agency, State Enterprise Center of Registers, State Enterprise "Regitra", law enforcement institutions, other registers and state institutions; from UAB "Creditinfo Lietuva"; from insurance companies; from healthcare institutions if you use insurance services; from individuals when they provide data of spouses, children, other relatives or in-laws, co-borrowers, guarantors, collateral providers, insurance benefit recipients, etc.; from individuals or legal entities (property appraisers, notaries, etc.) when they provide them in compliance with contractual or legal requirements (information in insurance contracts, property valuation reports, certificates, etc.); from legal entities when you are a representative, employee, contractor, founder, shareholder, participant, owner, etc. of these legal entities; from partners or other legal entities that engage us to provide services to you; from other Own companies when you or your represented entity seeks to conclude or has concluded contracts with them, and Own Leasing provides related services to them, etc.).
HOW DO WE PROCESS YOUR PERSONAL DATA?
In this section, you will find the following information:
- categories of data we process;
- purposes for which we process your data;
- and data retention periods.
Employment
For employment purposes, Own companies collect and process your resume and (or) cover letter and (or) other information you provide during the selection process for the purpose of conducting the job selection based on your consent, which you express to the respective Own company or the employment service provider by sending your resume. If you do not provide your resume and (or) cover letter, the respective Own company will not be able to assess your suitability for the offered position.
After the employee selection process is completed, we commit to delete and (or) destroy your personal data within 5 working days after the employment contract is signed with the selected candidate. If you express your consent for further storage of your personal data, the Own company will store your personal data for 3 years from the date of consent.
Inquiry Administration
If you contact us by email or on the Website, we will process the following data: your name, surname, email address, and the text of the correspondence. If you contact the Own company by phone, we will additionally process your phone number.
Such data will be processed based on your consent to answer your questions. If you do not provide your contact details, we will not be able to respond to your inquiry.
Correspondence is stored for 5 years from the end of transactions or business relationships with the client in paper form or electronic media.
Contractual Relationships
If you use the services of Own companies, for the purpose of providing services, concluding and executing the contract, the respective Own company processes the following personal data: name and surname, personal code, registered residential address, email address, phone number, bank account number, employer's name, personal identification document data, information about the contract concluded with the respective Own company, its number, date of conclusion, application data, signature. Depending on the type of contract, driver's license data may also be collected.
When contractual relationships are concluded with a legal entity, the Own company processes the contact details of the employee of that legal entity (name, surname, position, phone number, email address) and a copy of the personal document (only when it is mandatory for the transaction). This data processing operation is carried out based on our legitimate interest to conclude and execute the contract with the respective person.
If you use certain services of Own companies (e.g., leasing for business clients), Own Leasing may administer your application process and collect the above-mentioned personal data to transfer it to the respective Own company with which you or your represented entity will conclude a contract. Please note that once these personal data are transferred to the respective Own company, it will become your personal data controller.
Personal data for this purpose will be processed for 10 years after the end of the transaction. If there are multiple transactions, 10 years after the last transaction.
Creditworthiness and Obligation Fulfillment Risk Assessment
Own companies, in order to assess your creditworthiness and obligation fulfillment risk, process the following personal data: name and surname, personal code, registered residential address, email address, phone number, type of personal identification document, number, validity period, control line (passports, identity cards, residence permits in the Republic of Lithuania), type of personal document, number, validity period (including State Social Insurance and driver's licenses, residence permits in the Republic of Lithuania), citizenship, bank account number, your income, non-employment income and assets (amounts, declaration periods, types of economic activities), employer, workplace, work experience, start and end dates of employment, engagement in individual or other economic activities, income from it, other received income, received, assigned one-time or periodic social benefits, types, amounts, nature, sources, periods of received income or other benefits, social insurance insurer, start and end of social insurance period, income tax declaration data, owned real estate and movable property, property rights and their encumbrances; names, surnames, personal codes, residential addresses of the debtor's heirs, date of inheritance acceptance, data on existing and former financial obligations and their fulfillment: counterparty, type of transaction, credit rating, amount of obligations (limit), amount of other mandatory payments and expenses, debt repayment procedure and terms, amount of overdue payment and delay period, payment history, paid debts, inquiries about the person submitted to the joint debtor file, information, marital status, spouse's name, surname, personal code, number of minor children and dependents, date of death, heirs (and other related persons), family financial situation (obligations, income).
This data processing operation is carried out to conclude a contract with you and to fulfill our legal obligations. Personal data for this purpose will be processed for 10 years if a contract is concluded with you. If the contract is not concluded, this information is stored for 2 years from the date of information submission.
If you use certain services of Own companies (e.g., leasing for business clients), Own Leasing may collect the above-mentioned personal data to transfer it to the respective Own company with which you or your represented entity will conclude a contract. Please note that once these personal data are transferred to the respective Own company, it will become your personal data controller.
Money Laundering and Terrorist Financing Prevention
To prevent money laundering and terrorist financing, Own companies process the following personal data of clients and related persons: copy of personal document, name and surname, email address, personal code, date of birth, taxpayer code, address, citizenship, personal document information, risk category assigned to the client, product, service risk and (or) transaction, risk category assigned to the client, product, service risk and (or) transaction, risk category assigned to the client, country and (or) geographical region risk category assigned to the client, information about the client's use of banking services, direct video transmission (live video broadcast) recording, other data obtained during client identification, account and (or) contract documentation, correspondence with the client, documents and data confirming the monetary transaction or deal, or other legally binding documents and data related to the performance of monetary transactions or deals. Information about the client's participation in political activities is also collected.
When contractual relationships are concluded with a legal entity, Own companies may process data about the client's manager, accountant, shareholders, participants, and beneficiaries, as well as other related persons (e.g., close family members or close associates): name and surname, personal code, date of birth, citizenship, position, contact details, ownership share in the client and other companies, information about participation in political activities.
Data for this purpose is processed based on a legitimate interest to prevent money laundering and terrorist financing and in accordance with the provisions of the Lithuanian Law on the Prevention of Money Laundering and Terrorist Financing. Personal data for this purpose will be processed for the periods specified in the Lithuanian Law on the Prevention of Money Laundering and Terrorist Financing.
If you use certain services of Own companies (e.g., leasing for business clients), Own Leasing may collect the above-mentioned personal data to transfer it to the respective Own company with which you or your represented entity will conclude a contract. Please note that once these personal data are transferred to the respective Own company, it will become your personal data controller.
Direct Marketing
Own companies send direct marketing messages only to those individuals who have given consent to receive direct marketing and promotional offers from Own companies. Such individuals receive newsletters and direct marketing messages through selected communication channels. Own companies may also advertise their services to existing clients based on legitimate interest.
You can give consent to receive promotional and direct marketing messages by signing the direct marketing consent form or by not objecting to receive direct marketing messages according to the contracts concluded with Own companies.
You have the right to object to the processing of your personal data for direct marketing purposes at any time free of charge. To exercise this right, you can unsubscribe from newsletters and all other promotional and marketing messages by clicking the link provided in the email or following other instructions provided in such direct marketing messages and (or) contacting Own companies using the contact details provided below.
Profiling and Automated Decision-Making
Profiling is the processing of personal data by automated means to evaluate certain personal characteristics of the Client and to analyze or predict, for example, the economic situation, personal preferences, interests, or location. Profiling is used to perform analysis necessary to provide you with advice, for marketing purposes, to improve information systems, and to make automated decisions, such as creditworthiness assessment, risk management, insurance risk assessment, and transaction monitoring to prevent fraud. Depending on the assigned risk category, the intensity of your use of Own companies' services and the frequency of updating information about you may vary.
We may make automated decisions to provide advice on insurance services and improve the quality of insurance service processes. We may perform automated analysis (profiling) of your personal data, which you voluntarily provide during the consultation or product offering process, including health data, data about your age, gender, finances, if necessary for a specific purpose. We may make an automated decision based on the information collected from you.
Telephone Call Recording
To ensure proper customer service quality and internal administration, Own Leasing processes the following personal data based on your consent: phone number, date and time of the phone call, and the recording of the phone call. The phone call recording is stored for 3 months from the date of the call.
Video Surveillance
To ensure the safety of individuals and property, Own Leasing conducts video surveillance of specified premises and (or) areas where video surveillance is conducted based on legitimate interests. Video data is recorded and stored for 30 calendar days.
SOCIAL MEDIA
All information you provide to Own Leasing through social media (including messages, use of the "Like" and "Follow" buttons, and other communication) is controlled by the social network operator.
The Website provides links to Own Leasing's social media accounts. Currently, we have the following account on social media: "LinkedIn": Own Leasing; the LinkedIn privacy notice is available at https://www.linkedin.com/legal/privacy-policy.
We recommend reading the privacy notices of third parties and contacting the service providers directly if you have any questions about how they use your personal data.
TO WHOM DO WE DISCLOSE YOUR INFORMATION?
The personal data processing activities carried out by Own companies also include the disclosure of personal data to recipients such as government authorities, group companies, suppliers, payment service providers, and business partners. Own companies do not disclose more personal data than is necessary to achieve the purpose for which the personal data is provided, and only in compliance with applicable data protection laws. Data recipients may process personal data as data processors and (or) data controllers. When the data recipient processes personal data as a data controller, it is responsible for informing data subjects about such processing.
Own companies provide personal data to the following data recipients:
- state authorities and institutions, other persons performing functions assigned to them by law (e.g., law enforcement authorities, tax administration, Own companies' supervision, financial crime investigation institutions);
- companies belonging to the "Own" group of companies, for example, when companies belonging to the "Own" group of companies provide services to Own companies or when it is necessary for the proper administration of the "Own" group of companies;
- credit and financial institutions, correspondent banks, securities custodians, insurance service providers, and financial service intermediaries, third parties involved in the execution, settlement, and reporting cycle of trading in investment instruments;
- persons providing financial and legal advice, conducting audits of Own companies, or providing other services to Own companies;
- third parties managing registers (including financial obligation databases, Population Register, Register of Legal Entities, securities registers, joint debtor files, or other registers where personal data is processed) or intermediating in providing personal data from such registers, persons and companies engaged in debt collection, insolvency process administration, bailiffs, notaries;
- persons ensuring the proper fulfillment of the client's obligations to Own companies, such as guarantors, sureties, collateral providers;
- other persons when it is related to the obligations of Own companies under the relevant contracts concluded with these persons, for example, Own companies' financiers;
- other persons related to the provision of services, such as video surveillance, information technology, telecommunications, hosting, archiving, postal service providers, sellers, and other authorized parties related to asset leasing services, and companies administering taxes and fines related to such assets.
YOUR RIGHTS
In this section of the notice, we provide you with an overview of the rights granted to you by the General Data Protection Regulation:
- right to access data;
- right to request data correction;
- right to request data deletion;
- right to restrict data processing;
- right to object to data processing;
- right to data portability;
- right to lodge a complaint with a supervisory authority;
- right to withdraw consent.
You have the right to access your personal data processed by Own companies. To exercise this right, you must submit a written request to Own companies. Upon receiving your request, we will provide you with information about the personal data we process, the purposes of processing, the categories of personal data, the recipients of personal data, and other information required by law.
If you believe that the personal data we process is inaccurate or incomplete, you have the right to request correction of your personal data. To exercise this right, you must submit a written request to Own companies, specifying the data to be corrected and providing supporting documentation.
You have the right to request the deletion of your personal data if it is no longer necessary for the purposes for which it was collected, if you withdraw your consent, if you object to the processing, if the data is processed unlawfully, or if the data must be deleted to comply with a legal obligation. To exercise this right, you must submit a written request to Own companies.
You have the right to request the restriction of processing of your personal data if you contest the accuracy of the data, if the processing is unlawful and you oppose the deletion of the data, if we no longer need the data but you require it for the establishment, exercise, or defense of legal claims, or if you have objected to the processing. To exercise this right, you must submit a written request to Own companies.
You have the right to object to the processing of your personal data for direct marketing purposes or for reasons related to your particular situation. To exercise this right, you must submit a written request to Own companies.
You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit the data to another data controller. To exercise this right, you must submit a written request to Own companies.
If you believe that the processing of your personal data violates your rights, you have the right to lodge a complaint with a supervisory authority. In Lithuania, the supervisory authority is the State Data Protection Inspectorate.
If the processing of your personal data is based on your consent, you have the right to withdraw your consent at any time. To exercise this right, you must submit a written request to Own companies.
THIRD-PARTY WEBSITES, SERVICES, AND PRODUCTS ON OUR WEBSITES
The Website may contain third-party advertisements, links to their websites, and services that are not controlled by Own companies. Own companies are not responsible for the security and privacy of information collected by third parties. You should read the privacy policies applicable to third-party websites and services you use.
PROCESSING OF MINORS' PERSONAL DATA
Own companies do not provide any services to individuals under the age of 18.
DATA UPDATES
Please inform us if your personal information that we process needs to be corrected and (or) updated. You are responsible for ensuring that the data you provide to us is accurate, correct, and complete. If the data you provided changes, you must immediately inform the respective Own company by email or phone. Own companies will not be liable for any damage caused to you due to incorrect or incomplete personal data provided by you or your failure to inform us of changes.
PRIVACY POLICY CHANGES
Any changes to this Privacy Policy will be posted on the Website, and in the case of significant changes, we will inform you by email. The last updates were made on December 4, 2023.
CONTACT US
If you have any questions regarding the information provided in this Privacy Policy, please contact us in any convenient way:
- Gynėjų str. 16, (8th floor) LT-01109 Vilnius
- +370 6 5554 54664
- [email protected]
You can also contact the data protection officer by email: [email protected]