GDPR & Your Data Rights

Rūbas is committed to protecting your personal data and respecting the rights granted to you by the EU General Data Protection Regulation (Regulation (EU) 2016/679, the "GDPR"). This page explains the rights you hold as a data subject, how to exercise them, and who to contact with questions or complaints.

Who is the data controller

The data controller decides why and how your personal data is processed. For data collected through this marketplace, the controller is:

• Company name: TODO: registered company name
• Company code: TODO: company code
• VAT ID: TODO: VAT ID
• Registered address: TODO: registered address
• Email: info@rūbas.lt

Data protection contact

We have appointed a point of contact for all data protection and privacy matters. Use this contact for any questions about how your data is processed or to raise a concern.

• Status: A formal Data Protection Officer (DPO) has not yet been designated; this will be confirmed before the page is finalised.
• Contact: info@rūbas.lt

Your rights as a data subject

Under the GDPR you have the following rights in relation to the personal data we hold about you. Some rights apply only in specific circumstances or may be limited by other legal obligations.

• Right of access: You can ask us to confirm whether we process your personal data and receive a copy of that data along with information about how it is used.
• Right to rectification: You can ask us to correct personal data that is inaccurate and to complete data that is incomplete.
• Right to erasure: You can ask us to delete your personal data where there is no overriding legal reason for us to keep it (the "right to be forgotten").
• Right to restriction: You can ask us to limit how we use your personal data while a request or dispute is being resolved.
• Right to data portability: You can ask to receive the personal data you provided to us in a structured, commonly used, machine-readable format, or to have it transferred to another controller where technically feasible.
• Right to object: You can object to processing based on our legitimate interests, and you can object at any time to the use of your data for direct marketing.
• Right to withdraw consent: Where we rely on your consent, you can withdraw it at any time. This does not affect the lawfulness of processing carried out before withdrawal.

How to exercise your rights

To exercise any of the rights above, contact our data protection contact. To protect your data, we may need to verify your identity before acting on a request.

• Email us describing which right you wish to exercise and the data it concerns.
• We may ask for additional information to confirm your identity.
• We will assess your request and respond, explaining any action taken or any legal grounds for declining.

We aim to respond to all requests within one month of receipt. Where a request is complex or numerous, we may extend this by up to two further months and will notify you of any extension.

Exercising your rights is free of charge. We may charge a reasonable fee or refuse to act only where a request is manifestly unfounded, excessive, or repetitive.

Supervisory authority

If you believe your data protection rights have been infringed, you have the right to lodge a complaint with a supervisory authority. The competent authority in Lithuania is:

• Authority: State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija, VDAI)
• Address: L. Sapiegos g. 17, 10312 Vilnius, Lithuania
• Website: vdai.lrv.lt

We would, however, appreciate the chance to address your concerns directly before you approach the authority, so please consider contacting us first.

Contact us

For any questions about this page or about how we handle your personal data, contact us at info@rūbas.lt.