Privacy notice

PRIVACY NOTICE

REGARDING THE PROCESSING OF PERSONAL DATA IN THE INFORMATION SYSTEM OF THE REGISTER OF MEMBERS OF POLITICAL ORGANISATIONS

{ For what purposes do we process your personal data in the information system of the Register of Members of Political Organizations (hereinafter – POLONR)?

Personal data are processed for the purpose of registering members of political organizations; collecting, storing, processing, systematizing, safeguarding, and providing comprehensive and accurate data on members of political organizations; as well as performing other POLONR data processing activities.

{ On what legal basis, as provided for in the General Data Protection Regulation, do we process your personal data?

The processing of your personal data is carried out in compliance with a legal obligation (Article 6(1)(c) of the General Data Protection Regulation (hereinafter – GDPR)), as established by:

• Article 8¹ of the Law on Political Organizations of the Republic of Lithuania;
• The Regulations of the Information System of the Register of Members of Political Organizations (hereinafter – the Regulations), approved by Order No. 1R-56 of the Minister of Justice of the Republic of Lithuania of 24 March 2026 “On the Establishment of the Information System of the Register of Members of Political Organizations and the Approval of its Regulations.”

{  Who is the controller of your personal data?

{  Who is the processor of your personal data?

{  How can you contact the Data Protection Officer?

Ministry of Justice of the Republic of Lithuania, address: Gedimino Ave. 30, LT-01104 Vilnius, email: rastine@tm.lt

State Enterprise Centre of Registers, address: Studentų St. 39, LT-08106 Vilnius, email: info@registrucentras.lt

Email: duomenusauga@registrucentras.lt or by post at Studentų St. 39, LT-08106 Vilnius

{  Which persons’ data and what personal data do we process

Member of a political organization:

personal identification number; first name(s); surname(s); nationality(ies); contact email address; declared place of residence address; the area of political activity in which the person has been declared legally incapacitated or has restricted legal capacity by a court; the date of registration of data on the area of political activity in which the person has been declared legally incapacitated or has restricted legal capacity by a court in the Information System of the Register of Legally Incapacitated and Partially Incapacitated Persons; date of death; date and time of registration in POLONOR; date and time of data modification in POLONOR; date and time of deregistration from POLONOR; start date of membership in a political organization; end date of membership in a political organization; grounds for termination of membership in a political organization.

Political organization leader and

The person authorized by the leader of the political organization:

personal identification number; first name(s); surname(s).

Person submitting an application to join a political organization

date and time of application submission in POLONR;

personal identification number; first name(s); surname(s); nationality(ies); declared place of residence address; name of the political organization to which the application is submitted; contact email address; desired start date of membership.

Member of a political organization submitting a request to terminate membership:

date and time of application submission in POLONR;

personal identification number; first name(s); surname(s); name of the political organization to which the request is submitted; desired end date of membership in the political organization.

Person applying to establish a political organization and the leader of the political organization being established:

personal identification number; first name(s); surname(s); contact mobile phone number; email address for correspondence.

Data of the founders of a political organization:

personal identification number; first name(s); surname(s); nationality(ies); email address for correspondence.

Data recipient:

first name(s), surname(s), personal identification number, correspondence address (first name(s), surname(s), personal identification number of the authorized representative of the recipient, and authorization details).

{  Where do we obtain your personal data?

• You provide your data yourself or it is provided by other data providers specified in the Regulations.
• To ensure the functioning of POLONR, as well as to record, verify, and continuously update the data processed within it, data from the information systems specified in paragraph 18 of the Regulations are also used.

{  To whom may we provide your personal data?

• POLONR data are public and are provided to other information systems, to state-authorized persons performing functions established by law, as well as to other legal and natural persons, in accordance with the principles related to the processing of personal data and the conditions for lawful processing of personal data set out in the GDPR, the Law on Legal Protection of Personal Data, the Law on Political Organizations, the Law on the Management of State Information Resources, and other legal acts regulating the provision of personal data to natural and legal persons.
• Personal data may also be provided to data processors engaged by the Centre of Registers that provide POLONR development, maintenance and/or other related services.

{  How long do we store your personal data?

Data of objects deregistered from POLONR are stored in the database for 10 years. After the expiry of this period, the data are transferred to the POLONR database archive and deleted after a further 5 years.

Personal data of data recipients are stored for 3 years from the date of expiry of the data provision agreement or from the date of submission of the request to receive POLONR data. Reports on searches performed by data recipients and other audit data related to search activities are stored for 3 years from the date of the search. Upon expiry of the storage period, the data are deleted.

{  What rights do you have as a data subject and how can you exercise them?

You, as a data subject, have the right to contact the Centre of Registers regarding issues related to the processing of your personal data, i.e., you have the following rights:

• the right of access to data (Article 15 of the GDPR);
• the right to request rectification of data (Article 16 of the GDPR);
• the right to restrict processing (Article 18 of the GDPR). Note: this right may be exercised when at least one of the conditions specified in Article 18(1) of the GDPR is met. Personal data whose processing is restricted may be processed (except for storage) only with the consent of the data subject or for the establishment, exercise or defense of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of important public interest of the European Union or the Republic of Lithuania.

Please note that the following data subject rights do not apply to you:

• the right to data portability under Article 20 of the GDPR does not apply, as POLONR does not process personal data based on your consent under Article 6(1)(a) or Article 9(2)(a) of the GDPR, or on a contract under Article 6(1)(b);
• the right to object to processing under Article 21 of the GDPR does not apply, as POLONR does not process personal data under Article 6(1)(e) or (f), including profiling;
• the right not to be subject to a decision based solely on automated processing, including profiling, under Article 22 does not apply;
• the right to request erasure of personal data (“right to be forgotten”) does not apply, in accordance with the exception set out in Article 17(3)(b) of the GDPR.

More detailed information on how to exercise data subject rights can be found in the Procedure for the Implementation of Data Subject Rights in the Processing of Personal Data in registers and state information systems managed by the Ministry of Justice of the Republic of Lithuania, approved by Order No. 1R-181 of the Minister of Justice of the Republic of Lithuania of 25 June 2020 “On the Approval of the Procedure for the Implementation of Data Subject Rights in the Processing of Personal Data in registers and state information systems managed by the Ministry of Justice of the Republic of Lithuania.”

In the event that you believe your rights as a data subject are being improperly implemented, you have the right to contact the State Data Protection Inspectorate at L. Sapiegos St. 17, Vilnius, by email at ada@ada.lt, or via its website http://vdai.lrv.lt. However, before submitting a complaint to this supervisory authority, we recommend that you first contact us so that we can attempt to resolve the issue together with you.

If you believe that, in processing your personal data, we violate the GDPR or other legal acts regulating data processing and/or if you have questions related to the processing of your personal data and/or the exercise of your rights, you can always contact the Data Protection Officer of the Centre of Registers by email at duomenusauga@registrucentras.lt.