Privacy Policy
PRIVACY NOTICE
This Privacy Notice (the “Notice”) explains how and why the Norwegian–Lithuanian Chamber of Commerce (the “Chamber”) collects, uses, stores and otherwise processes personal data, the purposes for which we process personal data, the legal grounds for such processing, the circumstances in which we may share personal data with third parties, and the rights available to individuals under applicable data protection legislation, including the General Data Protection Regulation (EU) 2016/679 (“GDPR”).
We are committed to protecting personal data and processing it lawfully, fairly and transparently.
1. About the Norwegian–Lithuanian Chamber of Commerce
The Norwegian–Lithuanian Chamber of Commerce (reg code 302326713) is a non-profit, non-governmental business organisation that promotes and strengthens economic, commercial and professional relations between Norway and Lithuania.
The Chamber brings together companies, organisations and professionals interested in developing business relations, partnerships, investment and knowledge exchange between Norway and Lithuania.
For more information about the Chamber, please visit: www.nlcc.lt
2. Contact Information
The Norwegian–Lithuanian Chamber of Commerce is the data controller for the personal data processed in connection with its activities, unless otherwise stated.
If you have any questions regarding this Notice, the Chamber’s processing of your personal data, or your rights under applicable data protection legislation, please contact us:
Norwegian–Lithuanian Chamber of Commerce
Email: info@nlcc.lt
Address: K. Kalinausko st. 24, Vilnius
Privacy Contact Person
If you have any questions regarding the Chamber’s processing of personal data or your rights under applicable data protection legislation, please contact our Privacy Contact Person:
Martyna Skisaker
Email: info@nlcc.lt
Tel.: +370 610 02690
3. Why Does the Chamber Collect Your Personal Data and on Which Grounds?
Consent where required; legitimate interests where permitted by applicable data protection and electronic communications laws.
a) Consent
You have given your consent to the processing of your personal data for one or more specific purposes.
b) Contract
Processing is necessary to enter into or perform a contract with you or your organisation, including providing membership-related services.
c) Legal obligation
Processing is necessary for the Chamber to comply with a legal or regulatory obligation.
d) Legitimate interests
Processing is necessary for the legitimate interests pursued by the Chamber or a third party, provided that such interests are not overridden by your fundamental rights and freedoms.
Where we rely on legitimate interests, we will consider the nature of the processing, its impact on individuals and whether the processing is reasonably expected in the context of our relationship with you.
Main purposes of processing
NLCC processes personal data for the purpose of providing membership services, including maintaining membership records and managing relationships with members, based on the performance of a contract, legitimate interests, and consent where required. Personal data may also be processed to organise relevant events and activities and to maintain relationships with members, based on legitimate interests and consent where required. NLCC may use personal data to send newsletters and other communications to keep members informed about NLCC news, activities, events and relevant developments, based on consent where required or legitimate interests where permitted. Personal data may also be processed to facilitate relevant business connections and member-to-member introductions, based on the performance of a contract, legitimate interests, and consent where required. In relation to sponsorships and partnerships, personal data may be processed to manage partner and business relationships, based on the performance of a contract and legitimate interests. Finally, NLCC may process and retain personal data for legal, accounting, compliance and administrative purposes where required by law or where necessary to protect its legitimate interests.
4. What Personal Data Does the Chamber Collect?
Depending on your relationship with the Chamber and how you interact with us, we may collect the following categories of personal data:
a) Identification and contact information
• First and last name
• Job title and position
• Company or organisation
• Email address
• Telephone number
• Postal or business address
• Other professional contact details
b) Professional information
• Employer or organisation
• Professional position
• Industry and areas of expertise
• Business interests
• Professional biography or profile information where voluntarily provided
c) Membership information
• Membership category
• Membership status
• Membership history
• Information concerning your relationship with a Chamber member organisation
d) Event and participation information
• Events registered for or attended
• Invitations sent
• Guest lists
• Dietary or accessibility information where necessary for event administration
• Photographs or audiovisual recordings taken at Chamber events, where applicable
e) Communication and preference information
• Correspondence with the Chamber
• Communication preferences
• Newsletter or marketing preferences
• Records of consent or withdrawal of consent
We generally do not seek to collect special categories of personal data. Where such information is necessary for a specific purpose, we will process it only where an appropriate legal basis under the GDPR exists.
5. How Does the Chamber Collect Personal Data?
The Chamber may obtain personal data directly from you, for example when you:
• apply for or maintain Chamber membership;
• register for an event or activity;
• attend a Chamber event;
• contact us by email, telephone, post or other communication channels;
• provide us with your business card or professional contact details;
• subscribe to newsletters or other Chamber communications;
• participate in surveys or other Chamber initiatives;
• request information, services or introductions; or
• otherwise communicate or interact with the Chamber.
We may also receive personal data from your employer or organisation where it is a Chamber member, sponsor, partner or event participant and has provided your details as a contact person.
In addition, we may receive personal data from:
• Chamber members and business partners;
• event co-organisers and sponsors;
• service providers assisting with event registration and communications;
• publicly available professional or business sources; and
• other third parties where this is lawful and appropriate.
Where personal data are obtained from another source, the Chamber will provide the information required under applicable data protection law, subject to any applicable exceptions. The GDPR sets specific transparency requirements where personal data are obtained from sources other than the individual.
6. How Long Does the Chamber Keep Personal Data?
The Chamber retains personal data only for as long as necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by law.
The retention period depends on the type of personal data and the purpose for which it is processed. For example, membership and business contact information may be retained for as long as the individual remains a relevant contact of a Chamber member or partner. Event registration information may be retained for as long as reasonably necessary for event administration and related administrative purposes. Financial and accounting records will be retained for the period required by applicable law. When personal data are no longer required, the Chamber will securely delete or anonymise them.
7. Who Does the Chamber Share Personal Data With?
Where necessary and lawful, the Chamber may share personal data with event co-hosts, partners, members, sponsors, service providers and professional advisers involved in supporting the Chamber’s activities. This may include event registration, venue, catering, photography, communications, IT and other service providers.
The Chamber also uses third-party technology and software providers to manage its activities, including:
• Microsoft 365 – for business email, calendars, document management, communication and file storage;
• SuperOffice – as the Chamber’s CRM and contact management system for managing members, business contacts, partners, sponsors, event participants and communications;
• www.nlcc.lt – the Chamber’s website, where individuals may voluntarily provide personal data when contacting the Chamber, registering for events or subscribing to communications.
The Chamber does not use cookies or similar tracking technologies on its website.
Where service providers process personal data on behalf of the Chamber, the Chamber requires them to process such data only for authorised purposes and in accordance with applicable data protection requirements.
The Chamber does not sell personal data to third parties.
8. International Transfers of Personal Data
Some of the Chamber’s service providers may process personal data outside the European Economic Area (EEA). Where personal data are transferred outside the EEA, the Chamber will ensure that the transfer complies with applicable data protection legislation and that an appropriate transfer mechanism and safeguards are in place where required. Information about the applicable safeguards may be obtained by contacting the Chamber using the contact details in Section 2.
9. How Can You Access and Control Your Personal Data?
Subject to the conditions and limitations established by the GDPR, you may have the following rights:
a) Right of access
You have the right to request confirmation as to whether we process your personal data and, where applicable, to request a copy of your personal data.
b) Right to rectification
You may request that inaccurate or incomplete personal data be corrected or completed.
c) Right to erasure
You may request the deletion of your personal data where the conditions for exercising this right under the GDPR are met.
d) Right to restriction of processing
You may request that we restrict the processing of your personal data in certain circumstances.
e) Right to data portability
Where applicable, you may request to receive personal data that you have provided to us in a structured, commonly used and machine-readable format, or request that it be transferred to another controller.
f) Right to object
You may object to certain processing activities, including processing based on our legitimate interests. You have an absolute right to object to processing for direct marketing purposes, as described in Section 10.
g) Right to withdraw consent. Where processing is based on your consent, you may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
The exercise of these rights is subject to the conditions and limitations established by applicable law.
You may exercise your rights by contacting us using the contact details provided in Section 2.
10. Right to Object to Direct Marketing
You have the right to object at any time to the processing of your personal data for direct marketing purposes, in accordance with applicable data protection and electronic communications laws.
If you no longer wish to receive newsletters, invitations or other marketing communications, you may use the unsubscribe option included in the relevant communication or contact the Chamber directly.
Your objection to direct marketing does not necessarily affect other processing of your personal data that is carried out on another lawful basis.
11. How to Request a Copy of Your Personal Data
If you would like to access or receive a copy of the personal data held by the Chamber about you, please contact us using the contact details provided in Section 2.
We may need to request additional information to verify your identity before processing your request.
If we refuse a request, we will provide you with the reasons for the refusal, subject to any restrictions under applicable law.
12. How to Withdraw Your Consent
Where the Chamber processes your personal data on the basis of your consent, you may withdraw your consent at any time by contacting us or using the relevant unsubscribe or preference-management option.
Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
Please note that withdrawing consent may mean that the Chamber is unable to provide certain services or communications that depend on that consent.
13. What Happens If You Choose Not to Provide Personal Data?
In some circumstances, the Chamber may need certain personal data to:
• enter into or perform a membership or other contract;
• register you for an event;
• provide a service;
• comply with legal obligations; or
• administer our relationship with you or your organisation.
If you do not provide personal data that is necessary for these purposes, we may not be able to provide the relevant service, register you for an event, maintain your membership or otherwise fulfil the relevant purpose.
Where the provision of personal data is optional, we will inform you when collecting the information.
14. Photographs and Audiovisual Recordings at Events
The Chamber may take photographs, video recordings or other audiovisual materials during Chamber events for purposes such as documenting and promoting Chamber activities, publications, websites and social media channels.
Where required by applicable law, the Chamber will obtain appropriate consent or rely on another lawful basis for such processing.
If you have concerns about the use of a particular photograph or recording, please contact the Chamber using the contact details in Section 2.
15. Automated Decision-Making and Profiling
The Chamber does not generally use personal data for automated decision-making that produces legal or similarly significant effects on individuals.
If this changes, we will provide the information required under applicable data protection legislation.
16. How to Register a Complaint
You also have the right to lodge a complaint with the State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija), the competent supervisory authority in Lithuania. Further information and contact details are available on the Inspectorate’s official website:
State Data Protection Inspectorate
17. Security of Personal Data
The Chamber takes appropriate technical and organisational measures designed to protect personal data against unauthorised access, accidental loss, destruction, alteration or unlawful processing.
Access to personal data is limited to persons who need the information for legitimate business or organisational purposes.
However, no method of transmitting or storing information can be guaranteed to be completely secure.
18. Changes to This Notice
The Chamber may update this Notice from time to time to reflect changes in our activities, services, technology, applicable legislation or data protection practices.
Any material changes will be published on the Chamber’s website or communicated through other appropriate channels where required. Last updated: 25.08.2026
Advertisements