This privacy policy is intended for individuals who wish to order a certificate stating that they have not received treatment services from the Republican Centre for Addictive Disorders (RCAD) in the last five or ten years (hereinafter referred to as the Certificate) and to pay for it.

Who will be your personal data controller?

The personal data you will submit in order to receive the Certificate will be processed by:

Republican Center for Addiction Disorders

Budgetary institution

Data stored in the Register of Legal Entities code: 190999616

Gerosios Vilties str. 3, Vilnius, LT-03147

Phone: + 370 5 213 7274

Email: rplc@rplc.lt

Data protection officer contacts:

Eglė Krikščiūnienė, ph. +370 615 11211, email: e.kriksciuniene@cortexlegal.lt.

What personal data will RACD process?

RCAD will process the following personal data:

• Data specified in the Certificate order and required for the issuance of the Certificate: first name, last name, email address, and personal identification number.
• Data related to the payment for the Certificate order: first name, last name, bank account number, and amount paid.
• Data related to obtaining your consent: first name, last name, personal identification number, and date of consent.

For what purposes and under what legal basis will your personal data be processed?

RCAD gather your personal data in order to process your request for a Certificate, including (but not limited to) processing payments for the issuance of the Certificate and communicating with you regarding issues related to the order and its fulfillment.

RCAD will process your personal data based on your consent (pursuant to Article 6(1)(a) and Article 9(1)(a) of the General Data Protection Regulation). This implies that you are not required to request the Certificate from RCAD; however, if you do, you will be required to submit your personal information, as RCAD is not able to issue the Certificate without it.

RCAD will also process your personal data regarding your consent for the purpose of protecting our rights and legitimate interests. In this case, RCAD will base such processing of personal data on our legitimate interest (protection of rights and legitimate interests) (Article 6(1)(f) of the General Data Protection Regulation).

Who are the recipients of your data?

Given that RCAD will upload the Certificate to the Electronic Health Services and Cooperation Infrastructure Information System, the recipients of your data are considered to be the data controller of this system – the Ministry of Health of the Republic of Lithuania, legal entity code 188603472, Vilnius str. 33, LT-01402 Vilnius, and the processor of this data – the state enterprise Registrų centras, company code 124110246 , Lvivo str. 25-101, 09320 Vilnius, UAB OPAY Solutions, company code 302664558, M. K. Paco str. 4, LT-10309 Vilnius.

Will RCAD transfer your personal data outside the European Union and the European Economic Area?

RCAD will not transfer your personal data to third countries that are not members of the European Union or the European Economic Area.

How long will RCAD store your personal data?

RCAD will store the personal data you provided when placing your order for up to 5 business days.

RCAD will store your personal data relating to the payment for your Certificate order for up to 30 business days.

RCAD will store the data about your consent to the processing of personal data for the purpose of issuing and paying for the Certificate for 1 year from the end of the specified purpose of personal data processing.

What are your rights as a data subject and how can you exercise them?

1. The right to obtain information about data processing
2. The right to access data
3. The right to request the correction of data
4. The right to request the deletion of data (“right to be forgotten”)
5. The right to restrict data processing
6. The right to transfer personal data
7. The right to withdraw consent at any time.

Please note that you can withdraw your consent by contacting RCAD via general contacts or by contacting RCAD data protection officer provided above.

For information on how to exercise other data subject rights, please visit: https://www.rplc.lt/apie-mus/kita/asmens-duomenys/.

If you have any questions regarding the processing of personal data as described in this Privacy Notice, please contact us using the contact details provided above. If, however, you decide that you are not fully satisfied with how RCAD processes your personal information, you have the right to file a complaint with the State Data Protection Inspectorate, L. Sapiegos str. 17, 10312 Vilnius, tel. (0 5) 271 28 04, 279 1445, e-mail ada@ada.lt or to a court.