Personal Data Processing
The Law Firm shall process the personal data of you, as our Client, and/or your employees, representatives, and other persons on the following conditions:
Data controller: Law Firm TRINITI, legal entity code 302633203, address of registered office: Vilniaus g. 31, LT-01402 Vilnius, Republic of Lithuania.
Purpose of data processing: The Law Firm, as a data controller, shall collect and process the personal data of you or your employees, representatives, and other persons for the purpose of concluding and implementing the Legal Services Agreement concluded with the Law Firm (hereinafter referred to as the Agreement). Furthermore, upon obtaining the relevant consent, we may process your personal data for direct marketing purposes.
Data processed: The Law Firm shall process the following personal data of you, your employees, representatives, or other persons (hereinafter referred to as the Personal Data):
- Identification data (given name, surname, personal number, VAT Reg. No.);
- Contact information (address of residence or business, phone number, e-mail address, other means of communication (if used));
- Financial data (settlement account No., credit institution, payable/paid amounts);
- Data related to the subject matter of the concluded Agreement and the services provided by the Law Firm;
- Data related to correspondence with the Law Firm and other data generated during the term of implementation of the Agreement (e.g. signature on documents, data provided to the Law Firm in documents in the process of implementing the Agreement or in documents independently obtained by the Law Firm);
- Power of attorney (representation) data, including personal number, addresses of residence or business, position held and scope of authorisations of representatives.
Legal bases for data processing: We only process the Personal Data of you, your employees, representatives, and other persons in the presence of a legal basis for such processing. We process the Personal Data of clients (natural persons (their representatives)) of the Law Firm based on the Agreement concluded (to be concluded) with the Law Firm. We process the Personal Data of employees, representatives of our clients (legal entities) of the Law Firm and other persons based on the Law Firm’s legitimate interest to engage in its activities and provide its services (implement the concluded Agreement). If need be, we may also process your Personal Data for other personal data processing purposes (e. g. to fulfil the legal requirements applicable to our activities). In cases where we send direct marketing communications to you, we ground the processing of Personal Data on your consent regarding such data processing.
Sources of data: The Law Firm receives the Personal Data of you, your employees, representatives and other persons directly from you (when you provide the data personally or through intermediaries at our request or voluntarily) and from third parties (e.g. public registers, courts and law enforcement institutions, opponents), or generates the data itself.
Data recipients: The Personal Data of you, your employees, representatives, and other persons, to the minimum extent necessary in the specific case, may be provided to State and local government institutions, courts, bailiffs, notaries, law and order, and law enforcement institutions, financial institutions, persons providing archive services, providers of information systems that the Law Firm uses to manage its relationship with you, providers of accounting and audit services and other persons to which the Personal Data must be provided in the process of the Law Firm providing its services.
Data storage term: The Personal Data of you, your employees, representatives, and other persons shall be stored during the term of validity of the concluded Agreement and for 10 (ten) years from the expiry of the Agreement; financial and other documents, for which a special storage term is prescribed by legal acts, shall be stored for the applicable prescribed term. We process Personal Data for direct marketing purposes for the term of validity of the consent regarding direct marketing communications, but for no more than 5 (five) years from the date such consent is obtained.
Rights of data subjects: You, your employees, representatives and other persons shall have the right to: 1) contact the Law Firm with the request to familiarise with Personal Data and receive a copy of the Personal Data that is being processed; 2) correct any inaccurate Personal Data; 3) in cases envisaged by legal acts, delete Personal Data or restrict the processing thereof; 4) portability of Personal Data; 5) in instances where the Law Firm processes Personal Data based on legitimate interest, to object to the processing of the data; 6) submit a complaint to the State Data Protection Inspectorate in cases where your Personal Data is processed unlawfully.
You must provide all Personal Data to the Law Firm since, in the absence of the data, it will be impossible to conclude and/or implement the Agreement. We will only use the provided data for direct marketing purposes if you grant your consent to such use.
In order to implement the rights referred to above or discuss any other issues related to the processing of your Personal Data, you may e-mail the Law Firm at info@triniti.lt.
When you receive any Personal Data from the Law Firm in the course of provision of the services or cooperation with the Law Firm, you shall undertake the following obligations:
- To adhere to General Data Protection Regulation No. 2016/679 (hereinafter referred to as the GDPR) and other legal acts regulating the processing of Personal Data and cooperate with the Law Firm to ensure that the Law Firm is able to fulfil its obligations under these legal acts;
- Within no more than 4 hours from an incident, to notify the Law Firm about a Personal Data security violation related to the Personal Data provided to you, with specification of at least the circumstances of the violation and the steps taken to minimise the consequences of the violation.
When you provide Personal Data to the Law Firm during cooperation with the Law Firm, you shall undertake the following obligations:
- To notify all the natural persons whose Personal Data you provide (employees, representatives, members of management bodies, other persons), before the provision of Personal Data and to the extent envisaged by the GDPR, about the possible provision of their Personal Data to the Law Firm and the possible processing of their Personal Data by the Law Firm for the purpose of conclusion and/or implementation of an agreement between you and the Law Firm and, at the Law Firm’s request, immediately provide the Law Firm with evidence that such information has been provided;
- To notify the Law Firm about the duty to update, delete, or restrict the processing of the provided Personal Data;
- To not provide to the Law Firm any Personal Data of any persons who have not been notified about the processing of their Personal Data implemented by the Law Firm.
Version date: October 2026