2021 10 13
We respect your privacy and protect your personal data that you provide to us and that we collect for the purposes set out in this privacy policy (“Privacy Policy”). The Privacy Policy explains what data we collect about you, how we use this personal data and under what conditions the data may be disclosed to third parties. We also explain how we protect and safeguard your personal data against misuse and what rights you have in relation to your personal data.
MB “Šiaurės kryptimi”, legal entity code 304092465, address P. Žadeikos g. 6, LT-06319 Vilnius (hereinafter referred to as “Šiaurės kryptimi” or “we”) is the controller of your personal data.
If you have any questions about personal data protection, please contact:
MB “Šiaurės kryptimi”
Address: P. Žadeikos g. 6, LT-06319 Vilnius
E. mail: [email protected]
In the course of our business activities, we collect personal data from our customers, potential customers, business partners (service providers and suppliers of goods), and website visitors, and are therefore considered a data controller. As a data controller, this Privacy Policy informs you (data subjects) of the purposes for which we collect your personal data and the legal basis and purpose of such data collection.
We may process your personal data listed below for the purposes and on the legal grounds set out below:
| Personal data | Purpose | Legal basis | Storage period |
| Service delivery, cooperation with business partners | |||
| Providing language learning services | |||
| Name, surname, email address, city, phone number, payment details (bank, bank account) Personal identification number (if the client wishes to sign a service contract) During the provision of the service, we may find out from the client his/her nationality, occupation, workplace and country of origin. | Contracting Provision of services Accounting, including invoicing and billing | Concluding and executing a contract Compliance with legal requirements Consent | For as long as necessary to carry out the specific task and to ensure the exercise of our rights, but no longer than 10 years |
| Providing translation services | |||
| Name, surname, email address Personal data contained in documents submitted to us for translation or in requests for translations (“North” does not specifically collect this data) | Establishing a contract Provision of services | Conclusion and performance of the contract Consent | For as long as necessary to carry out the specific task and to ensure the exercise of our rights, but no longer than 10 years |
| Cooperation with business partners | |||
| Name, surname, e-mail address, telephone number, personal identification number, individual activity certificate number, address, payment details (bank, bank account), legal entity represented, signature | Contracting Service delivery Day-to-day business process management Bookkeeping, including invoicing and billing | Contract drafting and execution Compliance with legal requirements | For as long as necessary to ensure the exercise of our rights, but no longer than 10 years |
| Communication with us | |||
| Communication by email and via our website enquiry form | |||
| Name, surname, email address, telephone number, workplace and profession (if from a work email) content of the message, date and time, content of the correspondence | Resolving your request, query or complaint | Consent | For as long as necessary to carry out the specific task and to ensure the exercise of our rights, but no longer than 10 years |
| Communication on social networks (LinkedIn, Facebook, Instagram, Youtube) | |||
| Name, surname, pseudonym (if used), photograph (if used), telephone number, date, time and content of communication | Resolving your request, query or complaint | Consent | For as long as necessary to carry out the specific task and to ensure the exercise of our rights, but no longer than 10 years |
| Direct marketing | |||
| Name, surname, e-mail address, legal entity represented | To keep you informed about our services, events and other news | Consent or legitimate interest if you are a customer of ours who has purchased services from us within two years | We ask for your consent regularly, but at least every 2 years, until your consent is withdrawn |
| Staff Candidates | |||
| Name, surname, date of birth, e-mail address, telephone number, home address, details of the post concerned, including information on the nature and type of the employment relationship and contact details for the application process, biographical facts relevant to the application process, photograph, studies and other educational and other information on education, employment history, language skills, other special skills, description of personality traits, miscellaneous certificates and evaluations etc. This may include information that you volunteer in your CV or LinkedIn account, as well as information that we collect with your consent. | Staff selection and recruitment | Legitimate interest in assessing the candidate’s suitability for the job you want or consent | 4 months or 1 year with consent |
We receive your personal data when you provide personal data yourself, e.g. when you take part in a recruitment process, when you call us, when you write to us, when you visit us, when you submit your documents, etc.
Data about you is also collected automatically by cookies and other similar technologies when you visit, for example, this website or our social accounts LinkedIn, Facebook.
Cookies are small text files that are stored in the browser of your device (e.g. computer, mobile phone, tablet) when you browse websites. Other technologies, including data we store in your browser or device, identifiers associated with your device and other software, are used for similar purposes. Cookies are widely used to make websites work or work better and more efficiently. For the purposes of this Policy, all such technologies are referred to as “cookies”.
We use cookies:
We use the following cookies:
When you post a comment on this website, you can choose whether you want your name, email address and website to be stored in cookies. This is for your convenience, so that you do not have to re-enter these details each time you comment. These cookies are stored for one year.
If you have an account and log in to our website, we create a temporary cookie to record whether your browser accepts cookies. This cookie does not store any personal information and is deleted when you close your browser.
When you log in, we also create a number of cookies that store your login information and your screen display preferences. Login cookies are valid for 2 days and display preferences cookies are valid for one year. If you tick the “Remember me” option, your login cookie will be valid for 2 weeks. When you log out of your account, your login cookies are deleted.
If you edit or publish a post, an additional cookie is stored in your browser. This cookie does not store personal data, but it does store the ID of the post you have just edited or published. This cookie expires after 1 day.
If you request a password reset, your IP address will be included in the reset email.
If you post a comment, its text and metadata are stored indefinitely. This is so that we can recognise and approve future comments automatically, instead of an administrator approving them.
When you register on the website and become a user, we store all the personal data you provide in your account. Each user can view, edit and delete their personal data at any time (with the exception of their username). Site administrators can also view and edit this data.
If you have an account on this website, or have ever posted a comment here, you can request to receive a data export file containing all the personal data we hold about you, including data that you have provided to us. You can also request that we delete any personal data we hold about you. These two requirements do not apply to data that we are required by law to retain for administrative, legal or security purposes.
Your personal data will not be disclosed to any person other than our business partners (service providers), without whom our website could not function, services could not be provided etc. Our business partners include, for example, lecturers, translators, website administration service providers, cloud service providers, etc.
Your personal data may also be disclosed to government or law enforcement authorities, but only where required by applicable law or to protect our rights and legitimate interests, as well as the rights and interests of our employees, customers, business partners.
Our business partners (service providers) process personal data to the extent necessary for the provision of services. We are responsible for the actions of our business partners in relation to your personal data as if they were our own.
In individual cases, we may transfer your personal data outside the EU or EEA. However, where we transfer personal data outside the EU or EEA, we will ensure that our business partner complies with the standard contractual clauses on the processing of personal data approved by the European Commission.
We process and store your personal data for no longer than is necessary for the purposes set out in this Privacy Policy. We regularly review the need to retain personal data in light of legal requirements. More detailed information about the retention periods for your personal data is set out in section 3 of this Privacy Policy.
We take appropriate technical and organisational measures to ensure the protection of personal data processed.
Digital data is stored in databases protected by firewalls, passwords and other technical measures. Access to our databases is granted to our employees in accordance with their job functions and to service providers in accordance with the nature of the services they provide and only to the extent necessary for the proper provision of the services (e.g. IT services, legal and accounting services, marketing services etc.). We apply access control measures.
Non-digital data are stored in locked vaults, to which only staff whose job functions involve the use of the data concerned have access. We apply access control measures.
As a data subject, you have the right to access the personal data we process about you and to request the rectification or erasure of that data. You also have the right to withdraw your consent when we process your data on the basis of consent.
You have the right to object to the processing of your personal data or to request the restriction of processing, to lodge a complaint with a supervisory authority (the State Data Protection Inspectorate) and the right to data portability.
When making your request, you should describe the specific situation for which you object to the processing. We can only refuse such a request in accordance with the law.
All requests and claims relating to the matters referred to in this paragraph must be made in writing to [email protected].
If we change this privacy policy, we will note the dates of the changes in the new version of the privacy policy. In the event that the changes are significant, we may additionally notify you in other ways, such as by email or by posting a notice on our website.
We recommend that you visit our website regularly and take note of any changes to our privacy policy.