Kaunas Science and Technology Park, VšĮ and the Lithuanian Riflemen's Union act as joint data controllers for the purposes of organizing the event, in accordance with Article 26 of the GDPR.

The Lithuanian Riflemen's Union and Kaunas Science and Technology Park, VšĮ are responsible for the participant registration process, communication processes, technical maintenance of the website, ensuring security, and administration of information systems.

Individuals may exercise their rights (relating to their data) by contacting either of the controllers at the following addresses:

• LRU: info@sauliusajunga.lt

• Tech Park: info@techpark.lt

3. Purposes and legal basis for data processing

We process your personal data for the following purposes and on the basis of the corresponding legal grounds:

3.1. Organization of events.

We process your data in order to register you, contact you, and ensure the smooth organization of the event, conferences, and competitions. This processing is based on your consent (GDPR Art. 6(1)(a)) or on the performance of a contract (GDPR Art. 6(1)(b)), if participation is paid.

Data processed: first name, last name, date of birth, email address, phone number, organization name, position, payment information (if applicable).

3.2. Provision of information.

Based on your consent, we may send you information about our events and related activities, including direct marketing messages (GDPR Art. 6(1)(a)). Where information is provided on the basis of legitimate interest (GDPR Art. 6(1)(f)), we ensure that this interest is duly substantiated, and you have a clear ability to opt out of receiving such information at any time.

Data processed: first name, last name, email address, phone number.

3.3. Security of website and resource use.

To ensure the security and functionality of the website, we automatically collect certain technical data. This processing is based on legitimate interest (GDPR Art. 6(1)(f)).

Data processed: device ID, IP address, browsing information, etc.

3.4. Administration of social media profiles.

We process your data when you interact with our social media accounts (e.g., commenting, sharing). This processing is based on your consent (GDPR Art. 6(1)(a)).

Data processed: username, comments, shares, photos, etc.

3.5. Handling of inquiries, requests, and complaints.

We process data when you contact us with an inquiry. This processing is based on legitimate interest (GDPR Art. 6(1)(f)), as a person contacting us reasonably expects to receive a response.

Data processed: first name, last name, email, content of the inquiry, etc.

3.6. Compliance with legal requirements.

We retain your data in accordance with legal requirements and for the defense of our legal interests. This processing is based on legitimate interest (GDPR Art. 6(1)(f)).

Data processed: all information provided above.

4. How long do you keep my data?

Personal data is retained for no longer than is necessary to achieve the purposes of processing:

• Event participant registration data – 2 years after the end of the event.

• Financial documents – 10 years from the date of their creation.

• Other communication data (e.g., inquiries) – 3 years after the inquiry has been resolved, unless a longer period is required by law.

5. Where do you collect my data from?

We collect data directly from you. In certain cases, we may obtain data from courts, government institutions, other lawful sources, or publicly available sources (e.g., social media).

6. Who do you transfer my data to?

Your personal data may be transferred to our partners, courts, government institutions, and service providers (e.g., IT, marketing, or event organization services).

Certain data may be transferred outside the European Union / European Economic Area (e.g., to Microsoft, LinkedIn, Meta), where this is necessary for the provision of services. In such cases, appropriate safeguards are applied in accordance with Chapter V of the GDPR (e.g., standard contractual clauses).

More information can be found in the privacy policies of these service providers:

• Microsoft Privacy Statement: https://privacy.microsoft.com

• LinkedIn Privacy Policy: https://www.linkedin.com/legal/privacy-policy

• Meta Privacy Policy: https://www.facebook.com/privacy/policy

• Luma Labs, Inc. Policy: https://luma.com/privacy-policy

7. Your rights

You have the following rights with regard to your personal data:

• The right to access your data.

• The right to request rectification or erasure of your data ("the right to be forgotten").

• The right to restrict the processing of your data.

• The right to object to the processing of your data.

• The right to data portability – to receive your data in a structured, commonly used, and machine-readable format.

• The right to withdraw consent given.

• The right to lodge a complaint with the State Data Protection Inspectorate (L. Sapiegos g. 17, 10312 Vilnius, email: ada@ada.lt).

To exercise these rights, please contact either of the joint data controllers listed above by email.

8. Contact information

Jei turite klausimų dėl šios Politikos arba norite pasinaudoti savo teisėmis, susisiekite su mumis:

If you have any questions about this Policy or wish to exercise your rights, please contact us:

Kaunas Science and Technology Park, VšĮ
Legal entity code: 303562022
Address: K. Petrausko g. 26, Kaunas
Email address: info@techpark.lt

Lithuanian Riflemen's Union
Legal entity code: 191691799
Address: Laisvės alėja 34, Kaunas
Email address: info@sauliusajunga.lt