General Data Protection Regulation, Regulation (EU) 2016/679, GDPR - Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (the "General Data Protection Regulation").
Personal data means any information relating to an identified or identifiable natural person (data subject); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, a personal identification number, location data and an online identifier, or to one or more factors specific to the natural person's physical, physiological, genetic, mental, economic, cultural or social identity.
The data controller is the Museum, legal entity code 190599771, address Muziejaus St. 31, Telšiai, phone number +370 4 447 0282. E-mail: info@muziejusalka.lt
'processing' means any operation or sequence of operations which is performed upon personal data or sets of personal data, whether or not by automated means, such as collection, recording, sorting, organisation, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination with other data, restriction, erasure or destruction;
Processor means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller;
The following principles shall guide the processing of personal data of employees by the Agency:
- process personal data lawfully, fairly, in a transparent manner and for the purposes set out in this Policy;
- the processing of personal data is carried out for specified, explicit and legitimate purposes and is not further processed in a manner incompatible with those purposes;
- personal data shall be processed in such a way as to ensure that they are accurate and, where necessary, kept up-to-date; all reasonable steps shall be taken to ensure that personal data which are not accurate in relation to the purposes for which they are processed are rectified without delay, erased or subject to suspension of processing;
- process personal data only to the extent necessary to achieve the purposes of processing employees' personal data;
- keep personal data in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the data were collected and processed;
- process personal data in such a way as to ensure, by means of appropriate technical or organisational measures, adequate security of personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage.
In order to implement the requirements of the General Data Protection Regulation, the data protection function at the Samogitian Museum "Alka" has been assigned to the Deputy Director Ingrida Vaitiekienė, e-mail: i.vaitiekiene@muziejusalka.lt, phone: +370 698 47 582.
