7. User Rights
7.1. Users on the Website of Data controller have the following rights:
7.1.1. know what and for what purpose the Personal data is processed;
7.1.2. require rectification or erasure of Personal Data;
7.1.3. require Data controller to restrict the processing of User’s Personal data for one of the legitimate reasons;
7.1.4. to submit claim to the State Data Protection Inspectorate concerning the illicit processing of Personal data or Data infringement;
7.1.5. to disagree with the processing of Personal Data when this Data is processed or intended to be processed for direct marketing purposes.
7.2. Any requests or orders in relation to processing of User’s data, the User has a right to submit in written to the Data controller using the contact information indicated in this Privacy Policy (e-mail or postal address). Next to the request the User has to submit its identity document or identify itself with permissible electronic measures, unless the written request is submitted directly in the presence of the User when there is a possibility to identify it.
7.3. When the User submits the request to erase its Data, Data controller undertakes without undue delay to erase all Personal data, where one of the following grounds applies:
7.3.1. the Personal data is no longer necessary in relation to the purposes for which they were collected or otherwise processed;
7.3.2. the User withdraws consent on which the processing is based, and where there is no other legal ground for the processing;
7.3.3. the User objects to the processing of its Data and Data controller does not determine overriding legitimate grounds for the further processing;
7.3.4. the Personal data have been unlawfully processed;
7.3.5. the Personal data have to be erased for compliance with a legal obligation in European Union or laws of the Republic of Lithuania.
7.4. The Data controller upon the receipt of a request or order shall respond and perform the steps in the request or refuse to perform stating the reasons for refusal no later than within thirty (30) days from the date of referral. If necessary, the specified period may be extended by another two months depending on the complexity and number of requests. In this case, within 30 (thirty) days from the receipt of the application, the Data controller informs the User of any such extension, together with a reason for the delay.
7.5. The Data controller might not satisfy the User’s requests, in cases it is necessary to ensure:
7.5.1. execution of established legal obligations of the Data controller;
7.5.2. public order and prevention of crimes;
7.5.3. rights and freedoms of Users and others.
7.6. If the User has discovered the unlawfulness of its Data processing or in the event of a dispute with the Data processor, it has the right, at any time, to apply to the out-of-court dispute resolution authority in Lithuania – the State Data Protection Inspectorate, under the rules specified on its website, which can be found here.