[[#ex]]
Right to know
When the Bank of Lithuania collects data about you, you have the right to know that your data are processed, also, which personal data of yours are processed, for what purpose respective data are collected, who they can be submitted to and for what purpose, what the consequences of failing to provide personal data can be, as well as other information relating to the processing of personal data.
Information on the collection of personal data shall be provided:
- on the website of the Bank of Lithuania (www.lb.lt);
- by placing cards with information about video monitoring in the territory (in the premises) of the Bank of Lithuania;
- during communication with you by means you are applying to the Bank of Lithuania or the Bank of Lithuania is applying to you.
The Bank of Lithuania shall have the right to refuse the implementation of the right to know where it has obtained your personal data from you and where the requested information has already been provided to you.
Where the Bank of Lithuania obtains your personal data not from you, it shall have the right to refuse the implementation of the right to know about the data processed where at least one of the following grounds applies:
- information has already been provided to you;
- the provision of such information proves impossible or would involve a disproportionate effort;
- the obtaining of data is expressly laid down in European Union or Republic of Lithuania legislation defining adequate measures to protect data subjects’ legitimate interests;
- personal data must be kept confidential subject to the obligation of professional secrecy laid down in the legislation of the European Union or the Republic of Lithuania, including information comprising the state secrecy, the office and the bank secrecy as laid down in the Law on the Bank of Lithuania.
Right of access
You shall have the right to apply to the Bank of Lithuania at any time to find out whether your personal data are processed by the Bank of Lithuania, to access your personal data processed and the following information:
- the purposes of processing your personal data;
- categories of personal data;
- recipients of personal data or their categories;
- where possible, the period of personal data storage or the criteria used to determine the period for the personal data storage;
- sources of personal data.
While preparing an application for the right to access your personal data processed by the Bank of Lithuania, please indicate that you seek to implement your right to access your personal data processed by the Bank of Lithuania, which information you are asking for, and the desirable method to get a reply.
The template for the application form can be found here (22.6 KB download icon).
Applications for obtaining data about you from the Loan Risk Database shall be considered in accordance with the Rules on the Management of the Loan Risk Database.
Right to rectification
Upon learning that your personal data processed by the Bank of Lithuania are inaccurate or insufficient, you shall have the right to apply for rectifying your personal data and/or supplementing incomplete data.
When preparing an application regarding the right to rectify your data, please indicate that you seek to implement your right to the rectification of data, specify what data should be rectified or revised, and how. In addition, indicate the method for obtaining a reply. If you wish to restrict the processing of your potentially inaccurate data for as long as the Bank of Lithuania verifies your processed data, please include this information in your application.
The application form can be found here (22.6 KB download icon).
Applications for the rectification of data kept in the Loan Risk Database shall be considered in accordance with the Rules on the Management of the Loan Risk Database.
Right to erasure of data (the right to be forgotten)
You shall have the right to apply to the Bank of Lithuania for the erasure of personal data concerning you where at least one of the following grounds applies:
- your personal data are no longer necessary in relation to the purposes which have been defined before the commencement of collecting personal data;
- you withdrew your consent on which the processing of your personal data was based and where there are no other legal grounds for the processing of your personal data;
- you exercised your right to object to the processing of your personal data;
- your personal data are unlawfully processed;
- your personal data have to be erased in compliance with a legal obligation laid down in the legislation of the European Union and/or the Republic of Lithuania.
Your right to the erasure of data (the right to be forgotten) shall not be implemented at the Bank of Lithuania where:
- the processing of your personal data is based on the fulfilment of requirements laid down in the laws of the European Union and the Republic of Lithuania;
- the processing of your personal data is based on archiving purposes, scientific research purposes or statistical purposes in compliance with the measures for the protection of data processing established in legislation, if the right to the erasure of data (the right to be forgotten) is likely to render impossible or seriously impair the achievement of data processing objectives;
- it is aimed to establish, exercise or defend legal claims.
While preparing an application regarding your right to the erasure of data (the right to be forgotten), please elaborate on the reasons for requesting erasure of your personal data and specify on which of the aforementioned grounds this right should be implemented.
Right to restriction
You shall have the right to apply to the Bank of Lithuania for the restriction of processing your personal data where at least one of the following grounds applies:
- you aim to implement your right to rectification of data and at the same time you have the right to restrict the processing of your potentially inaccurate data until the Bank of Lithuania verifies the accuracy of your data;
- it has been established that the processing of your personal data at the Bank of Lithuania was unlawful and you object to the erasure of your personal data;
- the objectives of the processing of your personal data have been achieved and the Bank of Lithuania no longer needs your personal data for the purposes of processing, but you need those data for the establishment, exercise or defence of legal claims;
- you aim to implement your right to object to the processing of your data. In that case you may additionally apply to the Bank of Lithuania for the restriction of the processing of your personal data until the Bank of Lithuania verifies whether your application to object to the processing of your personal data is reasonable;
- where you implement your right to the erasure of data and the Bank of Lithuania establishes that your application is reasonable, but there are no technical possibilities to erase your data immediately.
Right to object
Where your personal data are processed by the Bank of Lithuania for the performance of public functions assigned to it, the lawful interests of the Bank of Lithuania or third parties, scientific research or statistical purposes, you shall have the right, for the reasons in relation to your particular case, to notify the Bank of Lithuania of your objection to the processing of your personal data by the Bank of Lithuania. Upon receipt of your request, the Bank of Lithuania shall assess whether your request is reasonable.
Where the Bank of Lithuania establishes that your request is unreasonable, it shall specify the arguments for failing to execute your request.
Right to data portability
You shall have the right to apply to the Bank of Lithuania with a request to transmit your personal data processed at the Bank of Lithuania to another controller or to personally obtain your data processed at the Bank of Lithuania where all of the following grounds apply:
- the processing of your personal data at the Bank of Lithuania is based on your consent or a contract with the Bank of Lithuania;
- the processing of the data is carried out in an automated manner;
- the data requested for transmission have been provided to the Bank of Lithuania by you or your representative;
- the transmission of the data shall not infringe the rights of other persons;
- the data have been provided to the Bank of Lithuania in a systematised and normally used as well as computer readable format.
Where the Bank of Lithuania establishes that your request for the transmission of data is reasonable and the recipient of the data is technically feasible to receive them, the Bank of Lithuania shall agree with you in writing the means to ensure the safety of the data to be transmitted and shall implement your request.
The Bank of Lithuania shall have the right to refuse the implementation of your right to the portability of your personal data if your personal data are processed at the Bank of Lithuania while carrying out the public functions assigned to it by the legislation of the European Union or the Republic of Lithuania.
The right to withdraw consent
The right to lodge a complaint with State Data Protection Inspectorate
[[#ex]]