Home > Privacy Policy

PRIVACY POLICY

  1. SCOPE AND DATA CONTROLLER
    • This Privacy Policy (the “Privacy Policy”) applies whenever the law firm partnership NOS LEGAL (“NOS LEGAL”) processes the personal data of natural persons (the “Data Subject”) as a data controller while providing legal services, managing and operating the website noslegal.lt (the “Website”), or otherwise interacting with Data Subjects.
    • This Privacy Policy is effective as of the date indicated below. NOS LEGAL reserves the right to amend this Privacy Policy unilaterally. Any updated version of the Privacy Policy will be published on the Website.
    • The data controller is the law firm partnership NOS LEGAL, email: info@noslegal.lt.
  2. PROCESSING OF PERSONAL DATA
    • We process your personal data on the basis of: your consent; a legal services agreement concluded with you; our legal obligations; and/or our legitimate interests in ensuring the quality of our legal services, protecting our financial interests, sharing information about our services and events, maintaining business relationships with clients and partners, providing high-quality client service, understanding how visitors use our Website, and improving the Website.
    • We process your personal data only for the purposes for which it was collected. Where processing is based on your consent, you have the right to withdraw your consent at any time. However, if the collection and processing of personal data is required by law, withdrawal of consent may limit our ability to provide legal services.
    • Access to your personal data is restricted to employees who need such access to perform their professional duties and obligations toward you as a client. Your personal data will not be retained or processed for longer than necessary to achieve the purposes described above.
    • We have implemented appropriate technical and organizational measures to ensure the secure processing of your personal data. Your data will be processed in a manner that ensures its confidentiality and integrity.
    • Depending on the services provided, NOS LEGAL may process the following categories of personal data:
    • Data Related to the Provision of Legal Services. We collect information provided by you, by a person acting on your behalf, or obtained by us in the course of providing professional legal services. In providing legal services, we collect and process various categories of personal data. Such collection is necessary for the performance of our contractual obligations to clients and for pursuing our legitimate interests as a law firm and legal adviser to current and prospective clients. We may supplement the personal data you provide directly with information obtained from publicly available sources and registers. In providing legal services, we collect and process the following categories of personal data: information identifying individuals, such as name, surname, date of birth, details of identity documents, contact information, and address, information about entities related to the client, such as company name, company registration number, powers of attorney, transaction-related information, and all information contained in a legal matter or case file, such as information relating to the client’s business activities, employees or representatives, the counterparty, and personal data of other individuals where we process such data in providing legal services, which may also include special categories (sensitive) personal data. Purpose: we process this personal data to conduct conflict-of-interest checks, provide legal services, and comply with our legal obligations regarding client due diligence and sanctions screening. Legal basis: (i) the legal services agreement concluded with you; (ii) our legal obligations under applicable laws, including anti-money laundering and sanctions regulations; (iii) our legitimate interests and those of third parties (providing high-quality services to clients and obtaining your feedback).
    • Information about the beneficial owner and politically exposed persons. Purpose: we process this personal data to carry out anti-money laundering / know-your-customer and sanctions screening procedures. Legal basis: (i) our legal obligations under applicable laws, including anti-money laundering and sanctions regulations; (ii) our legitimate interests and those of third parties (protecting our business).
    • Information about the transaction and information needed to issue invoices. Purpose: we process this personal data to issue invoices for legal services provided and to comply with our legal obligations. Legal basis: (i) the legal services agreement concluded with you; (ii) our legal obligations under applicable laws, including accounting and tax requirements; (iii) our legitimate interests and those of third parties in receiving timely payment and collecting outstanding debts.
    • Marketing data. We may send you updates about NOS LEGAL, the scope of services we may provide to you, as well as information about the latest legal developments and upcoming events that may interest you, including educational seminars. Marketing data also includes data from communications on social networks such as LinkedIn and Facebook. We may use your name, surname, email address, and other contact information to contact you and provide you with this information.
    • Data collected through cookies. We use cookies to obtain information about how you use our Website. Cookies allow us to make it easier and more convenient for you to use our Website. We generally do not collect data that would allow us to identify you as a specific natural person. We will process your data through cookies for as long as we have your consent.
    • If, before or during the provision of services, it is determined that the provision of certain personal data is mandatory, then the provision of such personal data is necessary to conclude a contract between us and you or to properly perform the concluded contract. Therefore, in such cases the provision of personal data is mandatory, and failure to provide it makes it impossible to either conclude or perform the relevant contract. If the provision of personal data is not mandatory and you are not required to provide personal data in any other way, the provision of personal data is voluntary, and failure to provide it will not result in any direct adverse consequences for you.
    • We retain personal data in accordance with applicable laws and the rules of the Lithuanian Bar Association.
    • Your personal data will be retained for no longer than necessary to achieve the purposes for which it was collected and processed. The retention period for personal data depends on several criteria, including: the type of personal data; whether a dispute exists between us or involving a third party; and our obligations under applicable laws and regulations to retain your personal data for legitimate purposes.
    • The personal data relating to you mentioned above is retained for the following periods:
    • Data related to the provision of legal services: information about the Client, the person acting on behalf of the Client, and the transaction is retained for no less than 10 years from the end of the legal relationship with the Client, unless a competent authority has established a longer retention period for the information obtained under applicable law;
    • Information about the beneficial owner and politically exposed persons is retained for no longer than 8 years from the end of the legal relationship with the Client, unless a competent authority has established a longer retention period for the information obtained under applicable law;
    • Information about the transaction and information needed to issue invoices is retained for no longer than 10 years from the date the transaction was concluded.
    • Marketing data is retained for no longer than 10 years from the date the personal data was collected.
    • Upon expiry of the specified retention period, we will delete the relevant personal data, except where we are obliged to retain personal data for a longer period to fulfil our obligations under applicable law, or where such data is necessary for resolving legal disputes.
  3. DISCLOSURE OF PERSONAL DATA
    • We do not transfer your personal data to third parties, except in the following cases: to persons providing services to us where this is necessary to fulfil a client’s instructions (e.g., email service providers, server/hosting service providers, translation agencies, experts, insolvency administrators, accountants, and the like); to persons to whom the transfer of personal data is inherently necessary to provide the service (e.g., courts, public authorities, and the like).
    • All third parties authorized to process data, to whom we transfer personal data, ensure the protection of personal data as required by applicable data protection laws.
    • We send personal data to the relevant authority requiring such personal data where we are obliged to disclose or share it in order to fulfil any legal or regulatory obligation or a request arising from law.
  4. WEBSITE COOKIES
    • Cookies are files containing a small amount of data that are stored on your device when you visit the Website.
    • Cookies remember your actions and preferences, allowing us, as the operator and controller of the Website, to provide you with the best possible browsing experience. Without cookies, not all functions of the Website may be available. Generally, the cookies we use do not collect any personal data.
    • In general, we use cookies to make your use of the Website as smooth and convenient as possible and to maintain the functionality of the Website. More specifically, the cookies we use are:
    • Strictly necessary cookies. These cookies are necessary for the Website to be used. Without these cookies, it would not be possible to use the Website. These cookies relate to the core functioning of the Website, for example, to protect us from unauthorized commands from malicious websites. These cookies are stored for 1 year;
    • Functional cookies. These are cookies that allow the Website to function as intended. For example, we use session cookies that allow the Website to remember your choices and recognize you between sessions. Session cookies are stored for 2 weeks;
    • Analytics cookies. To improve the experience of using the Website, assess the performance of its content, and fix technical issues or errors, we use analytics cookies, including third-party cookies such as Google Analytics and Facebook Pixel. These cookies may be used to analyze your activity, such as the number of visits or return visits to the Website, and are used to generate aggregated data. Such cookies may track your online activity through online identifiers. Depending on the type of cookie, it may be stored for several days, months, or years.
    • With regard to cookies, you have the following rights: to refuse the use of cookies by not giving or by withdrawing your consent; to refuse the use of cookies by selecting the appropriate browser settings; to delete cookies already stored on your device.
    • However, strictly necessary cookies are in any case used on the basis of our legitimate interest and without your consent, since the Website cannot function without them. It is possible to use the Website without other cookies, but in such case some functions of the Website may be limited.
  5. DATA SUBJECT RIGHTS
    • You have the right to contact us at info@noslegal.lt to exercise your data subject rights relating to the processing of personal data. Such rights include:
      • the right to request access to personal data;the right to request rectification of personal data;the right to request erasure of personal data;the right to request restriction of the processing of personal data;the right to object to the processing of personal data where the data is processed on the basis of legitimate interest or where processing is necessary for the performance of a task carried out by the data controller in the public interest;the right to request the portability of personal data;the right not to be subject to a decision based solely on automated decision-making, where applicable;the right to withdraw consent where personal data is processed on the basis of consent;
    • the right to lodge a complaint with the State Data Protection Inspectorate of the Republic of Lithuania.

Effective from: 1 February 2026