UAB „BGB PROPERTY“ PRIVACY POLICY

This UAB BGB Property legal entity code: 304978899, address P. Vileišio g. 17A, Vilnius (hereinafter referred to as the Company, We) Privacy Policy regulates how the Company processes the personal data of its customers and/or visitors (hereinafter referred to as Users, You) and other persons and ensures the security of personal data.
We care about your privacy and the security of your personal data, and we are fully committed to processing the data of our Users and other persons only in accordance with the established principles and requirements for the processing of personal data. If you have any questions about the processing of personal data or would like to receive more detailed information about the processing of personal data, please contact us by email:
info@bgbproperty.lt

WHEN DO WE PROCESS YOUR PERSONAL DATA?

We collect and process your personal data only when it is necessary to achieve our legitimate purposes and when we have a legal basis to do so. The company may process personal data:

• When you have given your consent to the processing of personal data for the specified purpose or purposes;
• When it is necessary to fulfill a contract concluded with you or to take action at your request prior to the conclusion of a contract;
• When we are required to do so by law;
• When the processing of personal data is necessary for the legitimate interests of the Company.

WHAT PERSONAL DATA DO WE PROCESS?

When you apply for a job advertised by the Company, we process:

• Your first and last name;
• Your phone number;
• Your email address;
• Your address;
• Data proving your education and work experience;
• Other data and information that you provide in your resume (CV) that you send to us.

The purpose of data processing is to select candidates for vacant positions (verification of candidates' suitability for specific positions).
The legal basis for data processing is your consent, which you express by sending your curriculum vitae (CV) when applying for specific positions (GDPR Article 6(1)(a)).
The term of data processing is until the selection process is completed, but no longer than 6 months, or 12 months if you have given your consent to participate in other Company selection processes.

When you visit the Company's premises and/or premises where video surveillance is carried out, we process:

• Your image captured by video surveillance cameras;
• Other physiological characteristics (e.g., movement/gait characteristics).

The purpose of data processing is to protect individuals and the Company's property and to prevent criminal offenses.
The legal basis for data processing is the Company's legitimate interests in ensuring the security of the territory and premises, as well as the persons (Company employees and visitors) and property located therein (GDPR Article 6(1)(f)).
The term of data processing is 2 weeks from the date of recording.

When you enter into a contract with us, we process:

• Legal entity representative: first name, last name, position, email address, telephone number;
• Natural person: first name, last name, position, email address, telephone number, address, bank account number.

The purpose of data processing – conclusion and execution of contracts with partners/suppliers, administration of partners/suppliers.
The legal basis for data processing: performance of a contract (GDPR Article 6(1)(b))..
The term of data processing: 10 years after the end of the contract.

When you contact the Company directly, we process:

• Your image captured by video surveillance cameras;
• Other physiological characteristics (e.g., movement/gait characteristics).

The purpose of data processing is to manage your inquiries submitted to the Company by email or phone, as well as other direct communication.
The legal basis for data processing is the Company's legitimate interest in reviewing your inquiry and providing you with accurate and detailed information about our activities or other issues of interest to you (GDPR Article 6(1)(f)).
The term of data processing is 2 years.

Processing of personal data on the Website using cookies

When you visit the Website, we process your IP address, network and location data when you provide it. This data is collected on the basis of your consent, using cookies and other similar technologies. For more information about the cookies used on the website, please see our Cookie Policy.

TO WHOM MAY WE TRANSFER YOUR PERSONAL DATA?

We may engage third parties – service providers (data processors) – to assist us in providing services to you: companies providing financial and accounting services, companies providing data center services or website hosting services, companies providing information technology infrastructure services, companies developing, providing, maintaining, and developing software, companies providing advertising and marketing services, and other service providers to whom your personal data is disclosed only to the extent necessary for the provision of their services.

Our data processors may only process your personal data in accordance with our clear instructions or guidelines and may not use it for other purposes or transfer it to other persons. In each specific case, only the necessary personal data is provided to the data processor, i.e., only the personal data that is necessary to fulfill the specific processing purpose or provide the service. To ensure the security of your personal data, we only use data processors who undertake and are able to comply with appropriate data security requirements and confidentiality obligations.

WHERE DO WE PROCESS YOUR PERSONAL DATA?

We process your personal data only within the European Union/European Economic Area (EU/EEA). If it is necessary to transfer your personal data to third countries, we will inform you before the transfer and ensure the legality and security of the transfer (application of the necessary transfer mechanisms and security measures).

WHAT ARE YOUR RIGHTS?

As a data subject, you have all the rights set out in the General Data Protection Regulation:

• to know about the processing of your personal data – to obtain information about whether we process your personal data and, if so, to have access to your personal data;
• to request the rectification of your personal data if you find that the personal data being processed is inaccurate;
• request the suspension of personal data processing, except for storage, if, after reviewing your personal data, you find that the data is incorrect, incomplete, or inaccurate, or is being processed unlawfully;
• request the erasure of your personal data ("right to be forgotten"), except where your data must be stored in accordance with the Company's legal obligations or the establishment, exercise, or defense of legal claims;
• object to the processing of personal data when such data is processed or intended to be processed for the legitimate interests pursued by the Company;
• receive personal data relating to you that you have provided to the Company, processed by automated means and based on consent or contract, in a commonly used computer-readable format and to transfer it to another data controller (right to data portability) where technically feasible;
• withdraw your consent to the processing of personal data at any time by notifying the Company.

You may exercise your rights yourself or through representatives. To exercise your rights, you must come to the Company in person and submit a request, or you may submit your request by electronic means via email info@bgbproperty.lt. When processing your request, we have the right and obligation to verify your identity, which we will always try to do in the simplest and most convenient way for you. When submitting your request, you can confirm your identity in one of the following ways:

• if the request is submitted in person at the Company's premises – by presenting a document confirming your identity to our employee;
• if the request is submitted by mail or courier, you must submit a notarized copy of your identity document along with it;
• if the request is submitted by electronic means, it must be signed with an electronic signature.

The request must be clear and must include your name, surname, information about the rights you wish to exercise and the scope of those rights, as well as information about how you would like to receive a response. If you submit your request electronically, the information will also be provided electronically, unless you request otherwise in advance.

We will endeavor to review your requests and provide you with information as soon as possible, but no later than 30 calendar days from the date of receipt of the request. If, due to certain circumstances, such as the complexity of the request (if it is necessary to seek assistance from data processors), or due to the number of requests being processed by the Company, the Company may not be able to review the request in time, the review period may be extended for no more than two months, and you will be informed of this.

If you believe that the Company's actions or inaction violate your rights or legal requirements, you have the right to lodge a complaint with the supervisory authority – the State Data Protection Inspectorate.

VALIDITY OF THE PRIVACY POLICY

This Privacy Policy is approved and valid from January 1st. 2026. We reserve the right to review and update the Privacy Policy regularly as necessary by publishing it on our website.