Privacy policy

1. Overview

After opening the virtual library ELVIS website of the Lithuanian Audio Sensory Library, the terminal and our server exchange information to optimize the website. This information may also contain user personal data.

2. Opening of our website

Data processing objectives and legal base

When you visit our website, the browser used on your device automatically and without your intervention sends the following data:

• IP address of the requesting device that can access the Internet;
• date and time of access;
• filename and URL of the opened file;
• details about the website or application from which access was granted (via a URL);
• details of the browser you are using and, if applicable, the name of the operating system and access provider of the computer that can connect to the Internet.

The so-called system record file is temporarily uploaded to our website server for the following purposes:

• to ensure a smooth connection;
• to ensure the convenient use of our website or application;
• to assess the security and stability of the system.

The legal basis for the processing of IP address information is General Data Protection Regulation (GDPR) Article 6 (1) (f). Our legitimate interest derives from the above purposes of data processing.

Recipients and categories of recipients

Data are not passed on to third parties.

Data storage time and criteria for determining the storage time

The data shall be kept for as long as is necessary for the purpose for which the data was processed and shall be deleted automatically. When you finish using our site, your geolocation data will be deleted.

3. Contact form, e-mail address, phone calls, user surveys

Objectives and legal bases for data processing

We ensure the confidentiality of your data provided to us by phone, e-mail, or by completing the contact forms. We only use your data to process your request for the purpose for which it was provided. The legal basis for data processing is GDPR Article 6 (1) (f). Our (and your) legitimate interest in processing this data stems from our desire to respond to your inquiries, and if necessary, to resolve any issues that arise, and thus to ensure and increase your satisfaction as a reader or our website user.

Participation in our surveys is voluntary. In the course of these anonymous surveys, no personally identifiable information about the participants in the surveys shall be retained. Only the date and time of participation is stored. Any personal information you provide in response to the survey will be treated as voluntary and stored in accordance with GDPR’s policies.

If a statement of consent is made during a user survey, the legal basis for processing data, on the basis of this consent, is GDPR Article 6 (1) (a). If you give your consent to participate in the user survey, you will have the opportunity to revoke it at any time (but not retroactively). These cases are regulated in detail in the specific data protection principles of a particular consumer survey.

Recipients and categories of recipients

Data is not passed on to third parties. Only in exceptional cases the data is processed by data controllers on our behalf. They are selected very carefully and we check them and they have a contractual obligation under Article 28 of the GDPR.

Data storage time and criteria for determining the storage time

All personal information you provide through inquiries (suggestions, acknowledgments or complaints) on this website or by e-mail is stored while you are using the ELVIS virtual library service.

4. Newsletter subscription

We offer the possibility to subscribe to the newsletter on our website. If you have agreed to receive our newsletter, we will use your email address and, if necessary, your name and surname to send (if possible, specifically for you) the library’s news and book news, information about new services, and user surveys. We store and process this data for the purpose of sending the newsletter.

Newsletters provide information on library news, new services, and book news.

The legal basis for the processing of data relating to the sending of newsletters is your consent in accordance with Article 6 (1) (a) of the GDPR.

You can withdraw your consent to receive newsletters at any time, but not retroactively, for example by unsubscribing to our newsletter on our website. You will find a link to the checkout page at the end of each newsletter. Upon request to cancel newsletter subscription, the collected user data will be deleted.

Recipients and categories of recipients

If the newsletter is outsourced, they must comply with their contractual obligations under Article 28 of the GDPR.

Data storage time and criteria for determining the storage time

If you withdraw your consent to receive the ELVIS virtual library newsletter, your data will be deleted from the relevant e-mail distribution lists.

5. Websites and website optimization

In accordance with the provisions of Article 6 (1) (f) of the GDPR, we use so-called cookies on our website. With regard to the above provisions, our efforts to optimize our website are considered legitimate. Cookies are small files that are stored on your device (computer, tablet, smartphone, etc.) when you visit our website. Cookies do not harm your device, they do not contain viruses, Trojan horses or similar malicious software. The cookie contains information related to the specific device in use. However, this does not mean that we can directly identify you. The use of cookies helps us to ensure that you use our services more conveniently. We use so-called session cookies to determine which pages of our site you have visited. They are automatically deleted when you close the site. In addition, we use temporary cookies for user’s browsing convenience which are kept in your device for a set period of time. When you visit our site again looking for our services, it will be automatically detected that you are visiting repeatedly, including everything you had entered or set up, so that you do not have to do the same things again.

5. Websites and website optimization

5.1. Use of cookies and similar usage data processing technologies

Data controllers, purposes of data processing and legal bases:

We, budgetary institution the Lithuanian Audio Sensory Library (Skroblų St. 10, Vilnius), are the controller of data that is processed using so-called cookies and other similar usage data processing technologies in all (secondary) domains at elvislab.lt.

Cookies are small text files that are stored on your terminal device (computer, tablet, smartphone, etc.) when you visit our website. Cookies do not harm your terminal device, are not infected with viruses, Trojan horses or other malicious programs. The cookie stores information related to the specific terminal used. However, this does not mean that we can directly identify you.

Cookies and other data processing technologies, depending on the category of cookies and / or other technology, are of the following types:

• Technically necessary cookies – cookies and similar tools without which you cannot use our services (for example, they are designed to ensure that your website is displayed properly).
• Convenience (functional) cookies – cookies which allow us to make browsing our website more convenient. For example, depending on your settings, we may display our websites in a language that suits you. Cookies prevent from showing documents that are not available in your area.
• Statistical cookies – technologies that allow us to anonymously collect statistics about the browsing of our sites in order to tailor our sites to the needs of our visitors. This allows us, for example, to determine how we can better tailor our websites to user habits.

Depending on the purposes, cookies and similar data processing technologies are used to process, in particular, the following types of personal data:

The legal basis for the use of statistical cookies, convenience cookies and similar technologies is your consent in accordance with Article 6 (1) (a) of the GDPR. The legal basis for the use of technically necessary cookies and similar technologies is Article 6 (1) (b) of the GDPR, i.e., for the purposes of providing our services, we process your data in order to take action before concluding the contract or in order to fulfill the contract.

You may revoke and change your consent at any time by notifying all your authorized entities (i. e. us, the Lithuanian Audio Sensory Library, BI) and without affecting the lawfulness of the data processing prior to the revocation of the consent. To do this, <click here> and select the desired option. You can easily and simply revoke your consent to the processing of specific data by removing the appropriate checkboxes.

Recipients and categories of recipients:
In data processing processes, by using cookies and similar data processing technologies, we may use specialized service providers, primarily from the field of online marketing. They process your data on our behalf as data controllers, each of whom has been carefully selected and has entered into contractual obligations under Article 28 of the GDPR.

Data storage time and criteria for determining the storage time:

If the “Expiration” column says “permanent”, the cookie is stored until the consent is revoked.

5.2 Google Analytics

Objectives and legal bases for data processing

In accordance with Article 6 (1) (f) of the GDPR, we use Google Analytics, a web analytics tool provided by Google Inc. (“Google”), to customize and continually improve our websites. Usage profiles are created that are given pseudonyms and cookies are used. The cookie contains the following information about your use of this website:

• browser type and version;
• the operating system used;
• URL (previously visited page);
• computer access name (IP address);
• server request time.

The information is used to evaluate the traffic to our websites, to report on our website activities and to provide other services related to the use of the websites and the Internet for the purposes of market research and the development of these websites as needed. These IP addresses are anonymized to make direct assignment impossible (so-called IP masquerading).

If the browser software is set accordingly, cookies will not be saved; however, please note that in this case you may not be able to use all the features of the website. In addition, data collected by a cookie and associated with your visits to the Website (including your IP address) will not be recorded or processed by Google if you download and install this browser extension. You can use this link to prevent data from being logged by Google Analytics as an alternative to the browser extension, especially when the browser is on mobile devices. An opt-out cookie is stored, which prevents from registering your data later when you visit the site. The opt-out cookie applies only to this browser and to this site and is stored on your device. If you delete cookies in this browser, you must re-enter the opt-out cookie. For more information about data protection related to Google Analytics, visit the Google Analytics website.

Recipients and categories of recipients

The information contained in the cookie is transmitted to and stored by Google on servers in the United States. Your IP address will not be associated with any other data held by Google in any way.

Data storage time and criteria for determining the storage time

After anonymizing an IP address, association with the person is no longer possible. Statistically processed data will be deleted in Google Analytics after 14 months. Reports generated using Google Analytics no longer have a link to the individual.

5.3 Objectives and legal bases for data processing

Recipients and categories of recipients

The recipients of the data are the above-mentioned service providers, who only process your data for a specific purpose in accordance with our instructions.
Data storage time and criteria for determining the storage time

The cookies used here and the data contained in them are stored in accordance with the cookie rules and, if you do not agree to their use, they are deleted immediately.

6. Recipients located outside the EU

We will not transfer your information to recipients outside the European Union or the European Economic Area, except when processing requires the transfer of data to the servers of our authorized tracking vendors. Some of these servers are located in the United States (more information about it is given in a paragraph about specific recipients). The data is transmitted in accordance with the principles of the so-called privacy shield, as well as the so-called standard contract terms of the European Commission.

9. Your rights as a data subject

9.1. Overview

In addition to the right to revoke the consents given to us, you also have the following rights, subject to the relevant conditions provided by law:

• the right to access your personal data held by us in accordance with Article 15 of the GDPR;
• the right to request the correction of incorrect data and input additional data in accordance with Article 16 of the GDPR;
• the right to request the deletion of data held by us in accordance with Article 17 of the GDPR;
• the right to restrict the processing of data in accordance with Article 18 of the GDPR;
• the right to object under Article 21 of the GDPR.

9.2. The right of access under Article 15 of the GDPR

Pursuant to Article 15 (1) of the GDPR, you have the right to request free access to your personal data held by us. This includes in particular:

• the purposes for which the personal data are processed;
• the categories of personal data processed;
• the recipients or categories of recipients to whom your personal data have been or will be disclosed;
• the intended retention period of the data relating to you or, if this is not possible, the criteria for determining the retention period;
• the right to ask the controller to rectify or delete personal data or to restrict or object to the processing of your personal data;
• the right to lodge a complaint;
• The automated decision-making referred to in Article 22 (1) and (4) of the GDPR, including profiling, and, at least in that case, meaningful information on its rationale, as well as the significance of such data processing and the expected consequences for the data subject.

When personal data are transferred to a third country or to an international organization, you have the right to be informed of the appropriate safeguards for the transfer in accordance with Article 46 of the GDPR.

9.3. The right to request rectification of data in accordance with Article 16 GDPR

You have the right to demand that we correct any personal data relating to you immediately. Depending on the purposes for which the data were processed, you have the right to request that the incomplete data be supplemented, including by submitting an additional statement.

9.4. The right to request deletion of data in accordance with GDPR Article 17

You have the right to request the deletion of personal data relating to you based on one of the following reasons:

• personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
• you withdraw your consent on which the processing is based pursuant to Article 6 (1) (a) or Article 9 (2) (a) of the GDPR and there is no other legal basis for the processing;
• you do not consent to the data processing pursuant to Article 21 (1), and there are no other legitimate reasons to process the data or you do not consent to the processing pursuant to Article 21 (2) of the GDPR;
• personal data have been processed illegally;
• personal data must be deleted in accordance with a legal obligation;
• personal data have been collected in the context of the provision of information society services referred to in Article 8 (1) of the GDPR.

In case we disclose your personal data and are required to delete it, depending on the technology available and the cost of implementation, we will take reasonable steps to inform third parties processing your data that they are also required to delete all links to such personal data, their copies or duplicates.

9.5. The right to restrict data processing under GDPR Article 18

You have the right to request that we restrict processing in one of these cases:

• you dispute the accuracy of personal data;
• data processing is unlawful and you do not consent to the deletion of the data and instead request a restriction on their use;the controller no longer needs them for the purposes of processing personal data, but they are needed by the data subject to make, enforce or defend legal claims, or
• you have objected to the processing of the data in accordance with Article 21 (1) of the GDPR, pending verification that the legitimate reasons of the controller outweigh your reasons.

9.6. The right to object under Article 21 of the GDPR

If the conditions set out in Article 21 (1) of the General Data Protection Regulation are met, the processing may be objected to for reasons specific to your case.

This general right of objection applies to all the purposes of the processing of data under Article 6 (1) (f) of the GDPR described in these data protection rules. Unlike special right of objection based on the processing of data for advertising purposes (see sections 5 and 7.6), we are only required by GDPR to enforce such a general objection if you give us reasons of greater importance, such as a potential risk to your health or life. In addition, it is possible to apply to the national supervisory authority responsible for data protection – the State Data Protection Inspectorate, or to the data safety officer of the Lithuanian Audio Sensory Library.

10. Contact persons

10.1. Contact persons to ask questions or exercise data protection rights

If you have any questions about the ELVIS virtual library website or would like to exercise your data processing rights (data protection rights), you can contact us by e-mail info@elvislab.lt.

10.2. Contact persons for data protection questions

If you have more questions regarding the processing of your data, you can contact the data safety officer of the ELVIS virtual library by e-mail sauga@elvislab.lt.

10.3. The right to complain to the data protection supervisory authority

In addition, you have the right to lodge a complaint with the competent data protection supervisory authority at any time. You can contact the national supervisory authority, the State Data Protection Inspectorate, for this purpose.

11. Name and contact details of the controller responsible for data processing and contact details of the data safety officer

These privacy protection rules apply to the data processing performed by the BI Lithuanian Audio Sensory Library (legal entity code: 190758323; registered office address: Skroblų St. 10, Vilnius) and to the website elvislab.lt. You can contact the data safety officer of the BI Lithuanian Audio Sensory Library at the specified address, indicating the safety officer as the recipient, or by e-mail sauga@elvislab.lt.