Implementation of Data Subject’s Rights

What rights do you have?

• The right to receive information on the processing of personal data (Articles 13 - 14 of the General Data Protection Regulation).
• The right to eccess processed personal data (Article 15 of the General Data Protection Regulation).
• The right to request correction of personal data (Article 16 of the General Data Protection Regulation).
• The right to request deletion of personal data ("the right to be forgotten") (Article 17 of the General Data Protection Regulation).
• The right to restrict the processing of personal data (Article 18 of the General Data Protection Regulation).
• The right to data portability (Article 20 of the General Data Protection Regulation).
• The right to object to the processing of personal data (Article 21 of the General Data Protection Regulation).
• The right to withdraw consent to the processing of personal data (Article 7(3) of the General Data Protection Regulation).
• The right to request that decisions not be based solely on automated personal data processing (Article 22 of the General Data Protection Regulation).

How to submit a request?

To exercise the rights granted to you under the General Data Protection Regulation, you can submit a written request (application) to the State Data Agency. The request (in free form or using the recommended form) for exercising data subject rights can be submitted via the following methods:

• in person (directly) at the State Data Agency - adress: Gedimino Ave. 29, 01500 Vilnius.
• by post or courier service to the address: Gedimino Ave. 29, 01500 Vilnius (to ensure confidentiality as established in Article 38(5) of the General Data Protection Regulation, please indicate on the envelope that the correspodence is intented for the Data Protection Officer of the State Data Agency).
• by email to: [email protected], provided that the request is signed with a qualified electronic signature or created using electronic means that ensure the integrity and immutability (irreplaceability) of the text.

The procedure for submitting a request to access your personal data or to exercise other rights of a data subject is set out in the Rules for the Implementation of Data Subject’s Rights at the State Data Agency (PDF).

If you wish to withdraw your consent for receiving newsletters from the State Data Agency, such a request can be submitted in any convenient way (when submitting a request via email, there is no need for it to be signed with electronic identification tools).

Examination of the request

The State Data Agency may, no later than within 10 working days after receiving a request to exercise your, as data subjects, rights, may ask you to clarify the subimtted request, to provide additional information to properly identify the desired rights of the data subject to be excercised, and the scope of their implementation.

The request will be reviewed within one month. In exceptional cases, this deadline may be extented by another two months, with the person who submitted the request being informed accordingly.

If you believe that the State Data Agency is violating your data subject rights, actions or inactions of the State Data Agency may be appealed to the State Data Protection Inspectorate (adrdress: L. Sapiegos St. 17, Vilnius) or the Regional Administrative Court (address: Žygimantų St. 2, Vilnius).

Before filing a complaint with the supervisory authority, we recommend first contacting us (e. g., via email at [email protected]) so that we can work together to resolve any issues that arise.