Privacy notice

1. Who this notice is for

This notice is for representatives and employees of UAB Angema’s subcontractors, service providers, suppliers and other partners. A representative is a person acting on behalf of a partner by virtue of their position, a power of attorney or a contract, or named as a contact person.

2. Data controller

• UAB Angema
• Company code 306283273
• Registered and office address: Panerių g. 51-311, Vilnius
• Email for personal data matters info@angema.lt
• Tel. +370 667 74707

3. Applicable law

We process data in accordance with the General Data Protection Regulation (GDPR), the Law on Legal Protection of Personal Data of the Republic of Lithuania and the guidance of supervisory authorities.

4. Where we get the data

We receive data directly from you or from the company you represent (your employer) when it enters into a contract with us, submits a quote or sends workers to the site.

5. Purposes, data, retention periods and legal bases

5.1. Concluding and performing contracts with subcontractors, suppliers and partners:

• data: name, position, company, email, phone, signature, power of attorney details, meeting and correspondence information;
• retention: term of the contract plus 10 years after it ends;
• basis: legitimate interest in concluding and performing a contract with the company you represent (GDPR Art. 6(1)(f)).

5.2. Organisation, supervision and safety of construction works:

• data: name, company, position or trade, qualification and certificate data, safety induction records, site working time records, site log entries, accident investigation data;
• retention: as required by construction and health and safety law, at least until the building is accepted for use;
• basis: legal obligation under the Law on Construction and the Law on Occupational Safety and Health, legitimate interest in ensuring quality and safety (GDPR Art. 6(1)(c), (f)).

5.3. Finance and taxes:

• data: representative’s name and signature, invoice, payment and debt data;
• retention: as required by accounting and tax law;
• basis: legal obligation, legitimate interest in managing debts (GDPR Art. 6(1)(c), (f)).

5.4. Internal administration:

• data: contact details, correspondence, records in document and task management systems;
• retention: as set by document retention rules, usually the term of the contract plus 10 years;
• basis: legitimate interest in running our business efficiently (GDPR Art. 6(1)(f)).

5.5. Participation in public procurement:

• data: names, qualifications, experience and CVs of specialists named in the tender, and, where required by the contracting authority, criminal record data;
• retention: as required by the Law on Public Procurement and the tender conditions;
• basis: legal obligation, legitimate interest in participating in tenders (GDPR Art. 6(1)(c), (f), Art. 10).

5.6. Handling requests, claims and disputes:

• data: content of the request or claim, correspondence, evidence;
• retention: out of court – 3 years after closure; in court – 10 years after the judgment becomes final;
• basis: legal obligation, legitimate interest in defending our rights (GDPR Art. 6(1)(c), (f)).

6. Recipients of data

Data may be processed by our service providers (IT, email, accounting and legal services) acting on our instructions. Where necessary, we share data with clients and general contractors, technical supervisors, public authorities (e.g. the State Labour Inspectorate), courts, auditors and certification bodies.

7. Data security

We apply organisational and technical measures to protect personal data against accidental or unlawful destruction, alteration, disclosure or access: we limit access to employees who need the data for their work, and use password-protected systems, antivirus software and backups. Our employees are bound by confidentiality.

8. Your rights

• access your personal data and obtain a copy;
• request rectification of inaccurate data or completion of incomplete data;
• request erasure of your data (the “right to be forgotten”) where there is no longer a basis for processing it;
• request restriction of processing;
• object to processing based on legitimate interest;
• receive your data in a structured, machine-readable format and transfer it to another controller;
• object to being subject to decisions based solely on automated processing. We do not use such decisions or profiling;
• withdraw your consent at any time – this does not affect the lawfulness of processing before withdrawal;
• lodge a complaint with the State Data Protection Inspectorate (L. Sapiegos g. 17, LT-10312 Vilnius, vdai.lrv.lt).

Please send requests by email to info@angema.lt. We handle requests free of charge and respond within 1 month. For complex or numerous requests, this period may be extended by a further 2 months – we will let you know if so.

Before acting on a request, we may ask you to confirm your identity. We may refuse manifestly unfounded or excessive requests, stating the reasons.

9. Contacts and changes

More information can be found in our privacy policy. Send any questions to info@angema.lt. We may update this notice – the current version is published on this page.