Notice on personal data processing

NOTICE ON PERSONAL DATA PROCESSING

Last updated: 28-01-2026

Baltisches Haus UAB shall process your, as its client, supplier, any other contracting party, your employees’ (representatives’) and your beneficial owners personal data under the following conditions:

The data controller of your personal data processed for the purposes specified in this privacy notice is Baltisches Haus UAB (hereinafter referred to as the Company), legal entity code 111543781, legal address Bokšto g. 6, Vilnius, tel. +370 5 269 1995, e-mail info@balthaus.eu, the website www.balthaus.eu.

Data Protection Officer e-mail: duomenuapsauga@balthaus.eu.

Purposes, types of personal data we process, legal basis for such processing, and storage period of such data

For the purpose of concluding and performing the contract concluded by you (representative) with the Company:

We process the following personal data of your or your employees’ (representatives’): identification data (name, surname, personal number, VAT number); contact data (address of place of residence or business address, telephone number, e-mail address indicated by you (your representative)); financial data (current account number, credit institution); data related to object of the concluded agreement (e.g., contracts with clients specify information about business activity to be carried out in leased or subleased premises; address, unique number, cadastral number, and area of leased or subleased premises; unique number of a building in which leased property is located; lease or sublease fee, etc.); power of attorney (representation) data, including personal number / dates of birth, address of place of residence or business address, scope of authorisations of representatives; communication with the Company, other data generated during the performance of the agreement (e.g., signature in documents).
Legal basis for the processing of this data. Personal data of the Company’s clients, suppliers, any other contracting parties, who are natural persons, shall be processed on the basis of the agreement concluded (to be concluded) with the Company. Personal data of employees (representatives) of Company’s clients, suppliers, any other contracting parties, who are legal entities shall be processed on the basis of legitimate interest of the Company to carry out commercial activity (to perform concluded agreement).
We will store your data for this purpose: for the entire term of validity of the agreement and 10 years following the expiry thereof; afterwards, personal data shall be destroyed (where the basis for further processing no longer exists).

(Applies only to clients, their employees (representatives)) when you log in to the Company’s client self-service on the Company’s website www.balthaus.eu (“Client Self-Service”), personal data is processed for the purpose of identifying you. By carrying out identification, we identify the client / the client’s representative in order to provide information and services remotely when you use the Client Self-Service (the Client Self-Service allows you to view amounts payable by the client, register and review incidents and requests, view the Company’s notifications, review existing contracts and related information, provide information under contracts about achieved turnover (mandatory), view meter data, etc.).

We process the following personal data of your or your employees’ (representatives’): email address, encrypted password. Also, when you connect to Client Self-Service, data, who is automatically collected from the computers or mobile devices you use: the IP address, the browser you use and its version, the website you visited before visiting the Company’s website.
Legal basis for the processing of this data: contract concluded with the Company.
We will store your data for this purpose: for the entire duration of your (representative’s) contract with the Company and for 24 months after the end of the contract.

For the purpose of enforcing international sanctions:

We process the following personal data of natural persons of the Company’s clients (their representatives) and of beneficial owners of the Company’s clients – legal entities: identification data (name, surname, year and month of birth, nationality); the ways in which the beneficial owners can exercise control over the legal person of which they are beneficial owners (percentage of shares held or, if control is exercised by other means, a description of the means of exercising that control); other data provided in the extract from the Beneficial Owner Subsystem of the Information System for Participants in Legal Entities of the Republic of Lithuania (JANGIS) or data provided by you; information obtained in the course of checking international sanctions lists; other data necessary for the enforcement of international sanctions.
Legal basis for the processing of this data: the fulfilment of a legal obligation.
We will store your data for this purpose: for the duration of the contract and for 10 years after the end of the contract or business relationship, after which (in absence of grounds for further processing) shall be securely destroyed.

(Applies only to clients, their employees (representatives)) for the purpose of conducting surveys. We always look for ways to improve the quality of service. That is why we might invite you to participate in a survey and use your feedback. You can unsubscribe from such surveys at any time by contacting us by e-mail at duomenuapsauga@balthaus.eu or by clicking the unsubscribe link in the e-mail containing the survey.

We process the following personal data of your or your employees’ (representatives’): identification data (name, surname); contact data (e-mail address); responses to our questions.
Legal basis for the processing of this data: legitimate interest of the Company to receive feedback from our clients and use it to improve the quality of service.
We will store your data for this purpose: we will anonymize survey responses no later than within 3 months – this means that the responses will no longer be associated with you

For the purpose of ensuring the safety of people and property, we use video surveillance in the commercial buildings / premises and territories managed by us. Areas where video surveillance is carried out are marked with warning stickers / signs.

We process the following personal data: your video data.
Legal basis for the processing of this data: legitimate interest.
We will store your data for this purpose: for 21 days from the date of the video recording. In exceptional cases where Video Surveillance Recordings are or may be used as evidence in pre-trial and judicial proceedings, the storage period shall be extended for the duration of the investigation or legal proceedings.

More information about the processing of video data can be found in the Rules on Video Data Processing published on the Company’s website www.balthaus.eu.

If necessary, we may process your personal data on different grounds with respect to personal data processing (e.g., to implement the requirements of legislation regulating tax, money laundering prevention, etc.).

Data source. The Company shall obtain personal data directly from you (at request or voluntary), from third parties (e.g., State Enterprise Centre of Registers) or the Company will generate data itself.
Data recipients. Personal data, to the minimum extent necessary in a specific case, may be transferred to entities administering joint files of debtors; financial institutions; State Enterprise Centre of Registers; notaries; State Tax Inspectorate; State Social Insurance Board Fund; insurance companies; debt recovery companies; bailiffs; legal consultants of the Company; auditors; courts; entities providing archiving services; providers of information systems which are used by the Company for the management of relationships with you; survey providers; Financial Crimes Investigation Service under the Ministry of the Interior in the cases prescribed by law; other persons engaged by the Company for the performance of the agreement with you, including companies within the Company’s group.

Your rights as a data subject: 1) to contact the Company and request the access to your personal data and obtain a copy of processed personal data; 2) to request rectification of incorrect personal data; 3) to request erasure of personal data in the cases provided by the law or restrict processing thereof; 4) to request transfer of personal data; 5) on the basis of legitimate interest, when the Company processes personal data, to object the processing of data; 6) to contact the State Data Protection Inspectorate regarding unlawful processing of your personal data.

Information about how to exercise data subject rights can be found in the Privacy Policy published on the Company’s website at www.batlhaus.eu.

When during the collaboration with the Company you transfer personal data, you shall undertake:

to notify all natural persons whose personal data are being transferred (employees, assignees, members of management bodies, employees or representatives of your suppliers, other persons) prior to transfer of personal data in the extent specified in the General Data Protection Regulation No. 2016/679 (GDPR), of the fact that their personal data may be transferred to the Company and may be processed by the Company for the purpose of conclusion and / or performance of the agreement between you and the Company, and, and at the Company’s request, to immediately provide supporting evidence;
to notify the Company about the obligation to update, erase or restrict processing of personal data transferred;
not to transfer to the Company personal data of any persons who have not been notified about data processing carried out by the Company.

You shall be liable for non-performance or improper performance of obligations assumed by this notification and shall compensate the Company any resulting damages, including compensation of sanctions imposed on the Company by the supervisory authorities.