Privacy Policy

General information

This Privacy policy sets out the terms and conditions for the processing of personal data of visitors to the website https://suninvestmentgroup.com/ and other data subjects, and the procedure of exercising the rights of data subjects regarding the processing of their personal data. Personal data is processed by UAB "Sun Investment Group, legal entity code 302662621, registered office address Gedimino ave. 44A501, Vilnius, e-mail address info@suninvestmentgroup.com (hereinafter - Controller).

The Controller may revise and amend the Privacy policy at any time, so we recommend that you periodically check that you are familiar with the current version of the Privacy policy. The date of publication of the current version of the Privacy policy is indicated at the bottom of this web page.

The personal data of website visitors and other data subjects are processed in accordance with the applicable legislation and with appropriate technical and organizational measures to ensure the security of personal data.

The Controller shall use the personal data provided by you or collected by the Controller only for the purposes set out in this Privacy policy and shall not transfer the personal data to the control of other persons, except as provided in this Privacy policy. In cases provided for by law, your data may also be transferred to the competent authorities. Other cases of transferring your personal data to third parties (the Controller's partners, data processors, etc.) are set out in separate sections of the Privacy policy.

The website contains links to websites outside the Controller's control. The Controller is not responsible for the privacy policies applied by these websites, so we recommend that you be proactive and familiarize yourself with the privacy policies of the websites to which you are directed.

The basis for collecting your personal data

The Controller processes your personal data on the following basis:

• on the basis of your consent, which is expressed by your active actions, i.e. contacting us and submitting personal data, or other active actions;
• for the realization of our legitimate interests (e.g. administering the website and ensuring its proper functioning);
• in order to fulfill the obligations imposed on Controller by legal acts.

The territory of personal data processing

Except for the exceptions listed below, Controller processes your personal data in the territory of the European Union. Currently, Controller does not intend to transfer and does not transfer your personal data to third countries.

Controller informs you that certain data of your visit to the website or data generated by visiting Controllers website (such as IP address, location, cookies, settings and information of the browser or device you use, browsing date, time, duration, other browser and device activity and browsing website-related information) may be processed, transferred or made available to entities operating both within the European Economic Area and outside of it (e.g., our use of Google Analytics) for monitoring, statistics, occupancy, analysis, functionality assurance and related purposes of general navigation on the website, such data processors or recipients are companies operating in the United States of America or other non-EEA countries).

We draw your attention to the fact that personal data in non-EEA countries may be subject to less protection than in EEA countries. We closely monitor the evolving practices and guidelines of the European Court of Justice and data protection supervisory authorities regarding the transfer of data outside the EEA, and carefully evaluate the conditions under which your data is transferred and may be subsequently processed and stored after transfer to the entities mentioned above. In order to ensure the appropriate level of data security and to guarantee the legal transfer of data, we draw up the Standard Terms and Conditions of Contracts approved by the European Commission or follow other bases and conditions established by the GDPR.

Use of cookies

The website uses "cookies", which are small text files that are stored on your device (e.g. computer, mobile phone, tablet computer) when you browse the website.

This website uses different types of cookies. The cookies we use on the website are divided into these groups:

• Strictly necessary cookies — These cookies are essential for you to browse the website and use its features, such as accessing secure areas of the site. These cookies will generally be first-party session cookies.
• Preferences cookies — Also known as “functionality cookies,” these cookies allow a website to remember choices you have made in the past, like what language you prefer.
• Statistics cookies — Also known as “performance cookies,” these cookies collect information about how you use a website, like which pages you visited and which links you clicked on. None of this information can be used to identify you. It is all aggregated and, therefore, anonymized. Their sole purpose is to improve website functions. This includes cookies from third-party analytics services.
• Marketing cookies — These cookies track your online activity to help advertisers deliver more relevant advertising or to limit how many times you see an ad. These cookies can share that information with other organizations or advertisers. These are persistent cookies and almost always of third-party provenance.

You can see the specifications of the cookies used by the Controller in the table below.

By law, we can only store cookies on your device if they are necessary for the operation of this website. All other types of cookies require your consent.

You can change or withdraw your consent anytime in the Cookie Declaration on our website.

Some cookies are placed by third-party services used on our pages. When you visit the website, third-party cookies are recorded. You can find precise information about the functions of the cookies used by third parties and the personal data they collect in the privacy/cookie policies of these third parties (e.g. Google's privacy policy), or by contacting the contact person of the third party that sends cookies.

You can find out what specific cookies have been recorded when you visit a website by checking your browser settings.

Fan pages

The Controller administers the fan pages on the social networks Facebook, Linkedin (hereinafter - Fan pages).

Whenever you visit Fan pages, social network administrators record cookies on your device that collect your personal data. Cookies are stored both if you are a registered user of a social network and if you do not have an account with the relevant social network. The Controller does not have access to the personal data collected about you and only receives statistical information from social network administrators about the traffic of the Fan pages.

In order to receive further information on the processing of your personal data for the purpose of administering the Fan pages, please consult the privacy policies of Facebook, Linkedin or contact the Data Protection Officer of Facebook and LinkedIn (for personal data used by Facebook and Linkedin).

Communication tools

In order to respond to your inquiry and to preserve the evidence of the correspondence (in the legitimate interest of effective communication and to avoid disputes relating to the services provided to a person), the Controller shall process the following information provided by you:

• name, e-mail address, content of the message, date and time of the message as well as the content of the subsequent correspondence with the Controller’s representative, shall be processed when contacting the Controller via contact form on the website;
• the name, surname, email address, telephone number, information about the land plot, date and time of the message, as well as the content of any further correspondence with the representative of the Controller, shall be processed when contacting the Controller regarding the land plot via the contact form on the website;
• the name, surname (only if stated in the signature of the email), email address, date, time and content of the correspondence with the representative of the Controller shall be processed when contacting the email addresses indicated on the website;
• when sending a letter to the address of the Controller's registered office indicated on the website, the sender's name, surname, address, the date of receipt of the letter and the information contained in the letter are processed;
• the name, surname, pseudonym (if used), photo (if used), date and time of the inquiry and the content of the correspondence with the representative of the Controller shall be processed when contacting the Controller through social networking site accounts at Facebook or LinkedIn

The personal data provided with the inquiries and further correspondence between you and the representative of the Controller will be kept for as long as necessary to fulfill the purpose of the enquiry and to ensure the exercise of the Controller's rights.

If you make an inquiry through a Facebook or LinkedIn account, the personal data you provide may be disclosed to the controllers of these social networks and to other persons with whom the controllers of Facebook and LinkedIn share personal data. For more detailed information, please refer to the privacy policies of Facebook and LinkedIn.

Personal data used for marketing purposes

Your personal data that you have provided by filling in the contact form on the website may be processed for the purposes of marketing by the Controller. The personal data processed for marketing processes: name, email address, content, date and time of the message, as well as the content of further correspondence with the representative of the Controller.

Personal data is processed for marketing purposes only if you explicitly consent to it before sending the completed contact form to the Controller.

Personal data collected for marketing purposes are processed for 5 years from the moment of collection or after withdrawing consent to process your personal data for marketing purposes. Your personal data which was collected for marketing purposes are deleted thereafter.

Personal data of candidates to employees

The Controller processes the personal data of candidates to employees only for the purpose of employee selection and employment, implementing legitimate interest to evaluate a candidate’s suitability for the respective position.

In addition to the data provided by a candidate to employees, the Controller may collect and process in other ways other publicly accessible data of a candidate, related to qualifications, professional skills and competences, i.e. look for information on the Internet, check a candidate’s profiles on social media platforms (e.g. LinkedIn, Facebook, Twitter), etc. The Controller may also contact a candidate’s former employers specified in the candidate’s CV and (or) candidate’s public social networks accounts and ask such former employers to provide information about the candidate’s qualifications, professional skills and competencies.

The Controller stores the data about a candidate, who participates in the Controller’s respective selection procedure, for 6 months from the end of the respective selection procedure. The term of storage of the personal data shall only be extended upon receipt of the candidate’s consent to process personal data. If a consent to the further processing of a candidate’s personal data is not obtained, then, on expiry of the said term, all personal data of the respective candidate (both the data provided by the candidate and the data collected by the Controller) are deleted.

Rights implementation procedure

All persons whose personal data are processed by the Controller have the following rights:

• Right to access their personal data processed by the Controller
• The right to request the rectification of incorrect or inaccurate personal data | The right to access and request the rectification of personal data shall be exercised by submitting a written request to the Controller's registered office or to the e-mail address info@suninvestmentgroup.com (if the request is signed with an electronic signature). In the request for access to personal data, please specify which personal data you wish to have access to and which information listed in Article 15 (1) of the GDPR you wish to receive. In a request for rectification of incorrect or inaccurate personal data, please specify which personal data you are requesting to be rectified.
• The right to request the erasure of unlawfully processed data | This right shall be exercised by submitting a written request to the Controller's registered office or to the e-mail address info@suninvestmentgroup.com (if the request is signed with an e-signature). If the request is substantiated, the Controller shall erase the data subject's data no later than 30 days after receiving the request.
• The right to request that the Controller restrict the processing of personal data until the accuracy of the personal data has been verified, until it has been established whether the interests of the data subject who objects to the processing of the personal data are overridden by those of the Controller, and in cases where the processing of the personal data is unlawful, but where the data subject does not consent to the erasure of the data concerned |This right shall be exercised by means of a written request submitted to the Controller's registered office address, or to the e-mail info@suninvestmentgroup.com (if the request is signed with an electronic signature). Whenever a request is made to restrict the processing of only part of the personal data processed by the Controller, the request must specify the categories of personal data whose processing is requested to be restricted. If the request is justified, the processing of personal data shall be restricted within 5 working days of receipt of the request.
• The right to data portability | This right shall be exercised by submitting a written request to the Controller's registered office or to the e-mail address info@suninvestmentgroup.com (if the request is signed with an electronic signature). Whenever the request is made for the portability of only part of the personal data processed by the Controller, the request must specify the categories of personal data in respect of which the right to data portability is exercised. If the request is justified, the Controller shall provide your personal data in a computer-readable format to you or to the controller designated by you (depending on your preference, the structured personal data shall be sent by email or stored on an external medium) within 30 days of receipt of the request at the latest.
• The right to object to the processing of personal data | This right shall be exercised by submitting a written request to the Controller's registered office address or to the e-mail address info@suninvestmentgroup.com (if the request is signed with an electronic signature). If you object to the processing of your personal data, it will be assessed whether your legitimate interest in objecting to the processing of your personal data overrides the legitimate interest of the Controller on which the Controller bases the processing of your personal data.
• The right to lodge a complaint with a supervisory authority | This right may be exercised by lodging a complaint with the State Data Protection Inspectorate against any actions of the Controller in relation to the processing of your personal data that violate data protection legislation.

In cases where you exercise your rights by submitting a written request to the address of the Controller's registered office by post, you must submit a notarized copy of your personal document (passport, ID card) together with the request.

Contacts

If you have any questions about or relating to our privacy policy, please contact us and we will help you:

Sun Investment Group, UAB, address Gedimino ave. 44A-501, Vilnius, Tel. No. +370 602 81 979 E-mail info@suninvestmentgroup.com

Last Privacy policy update: 2023-08-30