This Privacy Policy (hereinafter referred to as the “Privacy Policy”) explains how UAB Naujienų agentūra ELTA (hereinafter referred to as the “Company” or “we”) collects, uses and otherwise processes your personal data, as well as your rights in relation to such processing and how those rights may be exercised.
The controller of your personal data is UAB Naujienų agentūra ELTA, legal entity code 306091052, with its registered office at Gynėjų g. 16, LT-01109, Vilnius, Lithuania. The contact email address for personal data protection matters is [email protected].
When processing personal data, the Company complies with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (GDPR), the Law on the Legal Protection of Personal Data of the Republic of Lithuania, the Law on Electronic Communications of the Republic of Lithuania, and other legal acts regulating the protection of personal data. Terms used in this Privacy Policy shall have the meanings given to them in the GDPR and other applicable legislation.
Below, you can learn how we process your personal data: what personal data we handle and for what purposes, how long we retain it, and what rights you have. You may navigate directly to the sections most relevant to you by selecting the appropriate topic.
2. Why do we process personal data, what personal data do we process, on what legal basis, and for how long do we retain it?
2.1. Creating and using an account on the elta.lt website
Purpose of the processing
Data subject
Personal data
Legal basis
Retention period
Creating an account
Individual
Email address, password, first name, last name, phone number, date and time of account creation and activation
Article 6(1) (b) of the GDPR (contract)
Once the form is submitted, the data is stored for 7 days; if the account is not verified within that time, the submitted data is deleted. Once an account is created, personal data is stored until the account is deleted. The account is archived within 3 business days of the contract’s expiration and is deleted 2 years after the contract’s expiration.
Representative of a legal entity
Email address, password, first name, last name, name of the legal entity you represent, phone number, date and time of account creation and activation
Article 6(1) (f) of the GDPR (legitimate interests)
Individual, representative of a legal entity
Information provided in the comments field
Article 6(1) (a) of the GDPR (consent)
Management of the free trial period (ensuring that the free trial is used only once)
Individual, representative of a legal entity
Email address, first name, last name, free trial period expiration date
Article 6(1) (f) of the GDPR (legitimate interests)
10 years since the end of the free trial period
Account management / support
Individual
For the purpose of creating an account, we process personal data, login dates and times, and information about actions taken while using the account
Article 6 (1) (b) of the GDPR (contract)
Personal data is retained until the account is deleted. The account is archived within 3 business days of the contract’s expiration and deleted 2 years after the contract’s expiration.
Representative of a legal entity
Article 6(1) (f) of the GDPR (legitimate interests)
Sending news alerts (provision of services)
Individual
Selected method for receiving the news feed; if you have chosen to receive the news feed via email, enter your email address
Article 6 (1) (b) of the GDPR (contract)
Until the account is deleted
Representative of a legal entity
Article 6(1) (f) of the GDPR (legitimate interests)
Until the account is deleted
Providing opportunities to publish press releases
Representative of a legal entity who issued the press release
Data not publicly disclosed but stored in the account: email address, first name, last name, job title, published press release (date, time, content)
Article 6(1) (f) of the GDPR (legitimate interest in performing a contract with a legal entity)
Until the account is deleted
Publicly disclosed information (as specified in the press release): first name, last name, employer, job title, contact information (email address, phone number).
Article 6(1) (a) of the GDPR (consent)
Until the press release is published.
2.2. Entering into and performing contracts with customers, suppliers, partners, and others (to the extent not covered by the creation and use of elta.lt accounts described above)
Purpose of the processing
Personal data
Legal basis
Retention period
Comments
Entering into and performing contracts with suppliers, partners, and others (individuals)
First name, last name, date of birth, address, business license/self-employment certificate number (for service providers), information about the services provided, and bank account number of the natural person who is the service provider or recipient
Article 6 (1) (b) of the GDPR (contract)
For the duration of the contract
Data is transferred to data processors that provide server hosting and other administrative services.
Entering into and performing contracts with customers, suppliers, partners, and others (legal entities)
First name, last name, title, basis for representation, email address, phone number, content of correspondence
Article 6(1) (f) of the GDPR (legitimate interests)
For the duration of the contract
Data is transferred to data processors that provide server hosting and other administrative services.
Accounting and financial record-keeping
First name, last name, information about services received or provided and goods sold, and other personal data specified in invoices and other accounting documents
Article 6(1) (c) of the GDPR (compliance with a legal obligation)
Data is retained for the periods specified in the laws and regulations governing accounting, as well as in accordance with the General Schedule of Records Retention Periods
Data is transferred to data processors that provide server hosting and other administrative services.
Archiving
Data processed for the purposes of entering into and performing contracts with customers, suppliers, partners, and others (both individuals and legal entities)
Article 6(1) (c) of the GDPR (compliance with a legal obligation)
10 years (after the contract expires)
Data is transferred to data processors that provide server hosting and other administrative services.
Defence of legal claims
Data processed for the purposes of entering into and performing contracts with customers, suppliers, partners, and others (both individuals and legal entities)
Article 6(1) (f) of the GDPR (legitimate interests – defence of legal claims)
10 years (after the contract expires)
Data is transferred to courts, government agencies responsible for resolving disputes, the parties to the dispute, lawyers, and other entities providing legal services. Data is also transferred to data processors that provide server hosting and other administrative services.
2.3. Direct marketing
If you are our customer (or a representative of our customer—a legal entity) and have not objected to receiving direct marketing communications relating to services similar to those previously purchased, we may send direct marketing communications to the email address you provided when creating your account (or to the email address provided to us by the legal entity you represent) based on our legitimate interests (to ensure the expansion and availability of our services). In this case, direct marketing communications will be sent to you for the duration of the contract with you or the legal entity you represent, unless you object to the continued processing of your data for direct marketing purposes before that time. In that case, we will immediately stop sending you direct marketing communications.
For direct marketing purposes, we may process the following personal data: the name of the organisation you represent, your email address, and information relating to direct marketing communications sent to you, including their content and dates of transmission.
2.4. Protection of our rights and legitimate interests
We may use your personal data to protect our legitimate interests in the event of disputes, claims, or other demands, as well as to establish and exercise legal claims or defend against them. Such processing is carried out on the basis of the Company’s legitimate interests. Personal data processed for these purposes will be retained for as long as necessary to resolve the relevant dispute or claim.
2.5. Customer service
You may contact the Company by telephone, email, social media or by post using the Company’s registered office address. For the purposes of providing customer support and responding to inquiries, we may process the data you provide to us, i.e., email address, first name, surname (if provided), username (if the inquiry is sent via a social media account), employer (if provided), date, time, recipient and sender (when the communication is addressed to you) of the communications sent and received, and their content.
Such personal data is processed on the basis of the Company’s legitimate interests in handling customer inquiries, ensuring the quality of our services and customer support, and resolving disputes.
Correspondence is retained for 1 year from the date of receipt of the relevant communication, unless a different retention period is specified in this Privacy Policy or required under applicable law. Where you submit news material or other information to us and such material is published, information relating to our communications with you may be retained for as long as the relevant published content remains available.
2.6. Cookies
Our website uses cookies and other tracking technologies. A cookie is a small text file used to ensure the proper functioning of the website and to enhance your user experience.
By law, we may store cookies on your device without your specific consent only if they are necessary for the operation of this website. For all other types of cookies, we must obtain your consent. You may change or withdraw your consent at any time via our website. Further information on how we process your personal data is set out in this Privacy Policy above.
Most web browsers allow you to block all cookies, and some browsers offer the option to block only third-party cookies. You may use these options. Please note, however, that blocking all cookies may adversely affect your experience of the website and may prevent you from accessing certain features or services. More detailed information is available at AllAboutCookies.org or www.google.com/privacy_ads.html.
This website uses different types of cookies, as described below. Some cookies are set by our third-party providers.
Name
Provider
Purpose
Expiry period
Type
Essential cookies
CookieConsent
Elta.lt
Stores the user's cookie consent status on the current domain
1 year
HTTP cookie
laravel_session
Elta.lt
Website owners use this cookie internally when they upload or update the website's content.
1 day
HTTP cookie
XSRF-TOKEN
Elta.lt
Ensures the security of visitors' browsing by preventing cross-site request forgery. This cookie is essential for ensuring the security of the website and its visitors.
For the purpose of managing accounts, we may process the following personal data: your username, information about your activities on the social network (e.g., whether you follow the account, your reactions to posts on our account, comments, and other shares).
We process the information in your social media accounts for the purpose of managing those accounts, based on your consent. We do not store the information in your social media accounts separately, but the data may be saved if it needs to be processed for other purposes, such as legal defence.
Please be advised that when you use the aforementioned social networks, the platforms generate aggregated page insights based on your actions. When personal data is collected to generate page insights, the Company, together with the social network you are visiting, is a joint controller of your personal data. You can learn more about the data processing carried out by these social networks by following the links below:
When providing services and processing your personal data for the purposes listed above, we may transfer your data to third parties in the following cases:
Partners who help ensure the provision of the Company’s services, manage accounts, maintain the IT infrastructure, send marketing information, and so on. Such partners include server hosting providers, IT and software maintenance companies, marketing service providers, social media managers, and other service providers.
In certain cases, your data may be disclosed to government agencies, law enforcement authorities, auditors, insurance companies, or regulatory authorities, but only if such disclosure is required by applicable law or if it is necessary to protect the rights, interests, or safety of the Company, our customers, employees, or third parties.
If we intend to sell part of the Company’s business or assets, by disclosing your personal data to a potential buyer of the business or part thereof.
The Company may disclose personal data to other recipients in accordance with the legal grounds set forth in applicable laws.
The Company normally processes personal data within the European Economic Area (EEA). In cases where data must be transferred outside the EEA, this is done only if at least one of the following conditions is met: (1) The European Commission has recognised that the country to which the data is transferred ensures an adequate level of personal data protection; (2) a data processing agreement has been concluded in accordance with the standard terms approved by the European Commission; (3) codes of conduct are followed and other safeguards are applied in accordance with the GDPR.
You have the right to contact us at any time to request more information about the safeguards in place or to receive a copy of them.
4. What rights do you have, and how can you exercise them?
You have the following rights regarding our processing of your personal data:
The right to access information on your personal data processed by the Company;
The right to withdraw consent if personal data is processed on the basis of consent. Withdrawal of consent does not affect the lawfulness of processing based on consent that took place before the consent was withdrawn;
The right to request the correction of incorrect, incomplete, or inaccurate personal data;
The right to request the deletion of your personal data;
The right to request that the processing of your personal data be restricted;
The right to data portability;
The right to object to the processing of your personal data when it is processed on the basis of a legitimate interest or for direct marketing purpose.
If you believe that your personal data is being processed improperly, we recommend that you contact our team in all cases so that we can work together to find answers to your questions. If you believe that our actions or inaction violate your rights or legal requirements, you have the right to contact the State Data Protection Inspectorate (L. Sapiegos 17, Vilnius, Tel. +370 5 212 7532, Email [email protected]).
5. Changes to the Privacy Policy
This Privacy Policy is effective from 11 June 2026.
We may amend this Privacy Policy from time to time. Any updated version will be published on our website. Where changes to this Privacy Policy materially affect the way in which we process your personal data, we will notify you separately by email or by other appropriate means. We encourage you to review this Privacy Policy periodically to remain informed about how we process and protect your personal data.
To search by multiple words or phrases, separate them with a semicolon (e.g. European Parliament; election)
Search results are limited to two weeks. Please use advanced search for longer period.
