Effective Date: July 29, 2024
This Privacy Policy (hereinafter – "Policy") explains how UAB "THESTUDYSTATION", operating as "Studystation"(hereinafter – "we", "our", or "us"), collects, uses, stores, and discloses your personal data when you use our consultation and training services provided via the website [Your Website Address].
Your data privacy and security are very important to us. We comply with the requirements of the General Data Protection Regulation (EU) 2016/679 (GDPR) and other applicable data protection laws.

1. Data Controller

The data controller for your personal data is: UAB "THESTUDYSTATION" [Your Company Address] [Your Company Registration Code] [Your Company VAT Code (if applicable)] Email: [Your email address] Phone: [Your phone number]

2. What Data Do We Collect?

We collect and process the following personal data:
Contact Information: Name, surname, email address, phone number. This data is collected when you fill out a consultation inquiry form or contact us directly.
Consultation Inquiry Information: Information you provide about your area of interest for consultation/training, academic assignment field/subject, current assignment scope, preferred consultation deadline, and any additional information you provide in the form or during communication with us.
Technical Information: IP address, browser type, operating system, date and time of visit, pages you viewed on our website. This data is collected automatically using cookies and similar technologies (see Section 6 "Cookies").
Communication Information: Correspondence, email exchanges, call recordings (if applicable and with your consent).

3. What is the Legal Basis for Data Collection and the Purposes of Data Use?

We collect and use your personal data for the following purposes and based on the following legal grounds:
For the performance of a contract or to enter into a contractual relationship (GDPR Article 6(1)(b)):

• To provide you with the ordered consultations and training.
• To respond to your inquiries and requests.
• To process payments for services (if applicable).

For our legitimate interest (GDPR Article 6(1)(f)):

• To improve our services and website functionality.
• To conduct market research and analyze trends.
• To ensure the security of our website and information systems.
• To pursue and defend our legal claims.
• To maintain communication with you regarding news or offers if you are our client and do not object to direct marketing.

With your consent (GDPR Article 6(1)(a)):

• To send you direct marketing communications (e.g., newsletters), if you have given explicit consent. You have the right to withdraw your consent at any time.

For compliance with a legal obligation (GDPR Article 6(1)(c)):

• To comply with applicable legal requirements (e.g., tax or accounting).

4. To Whom Do We Disclose Your Data?

We may disclose your personal data only when necessary and in compliance with GDPR requirements:
Service Providers: To third parties who provide services to us (e.g., IT service providers, payment processing companies, consultants, accountants). These service providers have access only to the data necessary for them to provide their services and are obligated to maintain the confidentiality of your data.
Law Enforcement and Regulatory Authorities: If required by law or legal process.
In case of business transfer: To third parties in the event of business reorganization, merger, sale, or other business transfer.

5. How Long Do We Store Your Data?

We store your personal data for as long as necessary to achieve the purposes for which it was collected, or for as long as required by applicable law. Typically:

• Consultation inquiry data is stored for [specify a concrete period, e.g., 2 years after the last contact] or for as long as contractual relations are valid.
• Accounting data is stored for [specify, e.g., 10 years] according to legal requirements.
• Direct marketing consents are valid until they are withdrawn.

Upon expiry of the storage period, your personal data will be securely destroyed or anonymized.

6. Cookies

Our website uses cookies (small text files stored on your device) to improve Browse experience, analyze website usage, and personalize content.
We use the following cookie categories:
Strictly Necessary Cookies: Essential for the website's operation. Analytical/Statistical Cookies: Collect anonymous information about website usage (e.g., number of visits, popular pages). Functional Cookies: Remember your choices (e.g., language) and enhance functionality. Marketing Cookies: Used to display personalized advertisements to you based on your Browse habits.
You can control cookie settings through your browser or via our website's cookie consent banner. Please note that disabling some cookies may affect website functionality.

7. Your Rights

Under GDPR, you have the following rights regarding your personal data:
Right to be informed: To be informed about the processing of your data. Right of access: To obtain confirmation as to whether we are processing your personal data and, if so, to access that data. Right to rectification: To request the correction of inaccurate or incomplete data. Right to erasure ("right to be forgotten"): To request the deletion of your personal data under certain circumstances (e.g., when the data is no longer necessary for the purposes for which it was collected). Right to restriction of processing: To request the restriction of processing of your data under certain circumstances. Right to data portability: To receive the data you have provided in a structured, commonly used, and machine-readable format and to transmit it to another data controller. Right to object: To object to the processing of your data when it is based on legitimate interest or direct marketing. Right to withdraw consent: To withdraw your given consent at any time when data processing is based on consent. Right to lodge a complaint with a supervisory authority: If you believe your rights have been violated, you have the right to lodge a complaint with the State Data Protection Inspectorate (www.vdai.lrv.lt).
To exercise these rights, please contact us by email at [Your email address].

8. Security Measures

We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction. This includes, but is not limited to, data encryption, access control procedures, and regular security audits.

9. Policy Changes

This Privacy Policy may be updated. We will notify you of any significant changes by posting the updated version of the Policy on our website. We recommend that you periodically review this Policy to stay informed about how we protect your data.