1. General Provisions 

1.1. Mediafon (hereinafter referred to as “we”, “our”) is committed to protecting and respecting your privacy. We make every effort to ensure that our processing of personal data complies with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (General Data Protection Regulation, GDPR). 

Companies operating the website: 

• UAB Mediafon Technology, company code 304067476 

• UAB Mediafon Carrier Services, company code 304065315 

• UAB Mediafon Datapro, company code 304065322 

Address: Olimpiečių st. 1-33, LT-09235 Vilnius, e-mail: [email protected]

1.2. Please read this Privacy Policy carefully to understand the purposes for which we collect your data and how we will use it. 

1.3. This Privacy Policy covers the following topics: 

• the purposes for which your personal data will be used; 

• cases of transfer of personal data to third parties and the data transferred; 

• the period of storage of your personal data; 

• marketing messages; 

• your rights; 

• use of cookies; 

• processing of children’s personal data; 

• changes to the Privacy Policy; 

• ways to contact us. 

1.4. When you visit our website for the first time, we will ask you to confirm that you agree to the use of cookies in accordance with the terms of this Privacy Policy, or we will only use necessary cookies, without collecting your data or asking for your consent. 

2. How We Use Your Personal Data

How do we use data?	How long do we store it?	Goals. Why do we use them?
1.1 The history of your communication with us (information you provide, such as by phone (recording of a phone call or voice message left when you call our customer service line) or via email). By providing services and assistance to ensure uniform and good quality service and to protect our interests.	We will keep the data of such communication for no longer than 2 (two) years from the end of the communication.	This is necessary in order for us to be able to fulfil our contractual obligations to you and to have evidence in the event of a dispute over the quality of services and/or the fulfilment of your contractual obligations. Also to provide you with the highest level of service.
To perform the tenders. You provide us with your personal details when you send us your CV or cover letters. If you contact us in writing or via email, we will save the correspondence data.	We will keep your data for no longer than 3 (three) months from the end of the tender. The data subject is deemed to have given consent to the processing of personal data for the purpose of the competition by submitting a CV or filling in an electronic form.	Processed for the purpose of tendering, statistics and document management.
1.2 Information about your device (IP address and device type, screen resolution and, if you choose to share it, your location data (IP geolocation), as well as information on how you use our website). In order to improve our website and set default options for you.	We will keep your data for a maximum of 2 (two) years from the date of your last login.	In this way, we aim to ensure the most enjoyable browsing experience possible.
Fraud prevention and detection. To protect our website and applications.	We will keep your data for a maximum of 2 (two) years from the date of your last login.	This is necessary to prevent and detect fraud in order to protect you and Mediafon.

2.1. We use your personal data for the purposes set out in this Privacy Policy, and where it is necessary to comply with or defend legal requirements. For this reason, we process your personal data on the basis of a legitimate interest in protecting and ensuring your rights and the rights of others. 

2.2. We may also process your personal data when it is necessary to fulfil a legal obligation to which we are bound, or to protect the vital interests of you or another natural person. 

3. To Whom We Transfer Personal Data 

3.1. We want to gain and maintain your trust, so we will only transfer your personal data when necessary. 

3.2. We may transfer your personal data to the following categories of data recipients: 

• any of our group companies (including subsidiaries, our holding company, and all of its subsidiaries);
• our insurers and professional advisers, for risk management, professional advice, or to make, enforce or defend legal claims;
• other service providers, for specific services, such as website hosting providers, server and maintenance providers, e-mail service providers, customer service centres, and data protection officer service providers.

3.3. We only use service providers who have implemented appropriate technical and organizational measures ensuring an appropriate level of data-processing security under a data processing agreement, in line with GDPR requirements. 

3.4. We may transfer your personal data not only in the cases above, but also to fulfil our legal obligations and where it is necessary to protect your interests or the interests of other persons. For direct marketing purposes, with your consent, we may transfer personal data to partners who provide us with marketing services. 

3.5. The recipients referred to in this section may be established outside the Republic of Lithuania, the European Union, or the European Economic Area. We will only transfer your personal data to third parties who comply with GDPR requirements. 

4. How Long We Store Your Personal Data 

4.1. In all cases, we store your personal data for no longer than is necessary to achieve the specific purposes. Detailed information on storage periods can be found in the “How We Use Your Personal Data” section of this Privacy Policy. 

5. Marketing Communications 

5.1. Your data is not processed for direct marketing purposes, and direct marketing messages are not sent to you. 

6. Your Rights 

6.1. In this section we review your rights under data protection law. We recommend that you consult the relevant legislation and supervisory authority guidance to be fully aware of these rights. 

6.2. You have the following data protection rights:

• the right to receive information about the processing of your personal data;
• the right of access to the personal data we store;
• the right to request rectification of your personal data; 
• the right to request erasure of your personal data (“right to be forgotten”); 
• the right to restrict the processing of your personal data; 
• the right to object to the processing of your personal data; 
• the right to object to processing for direct marketing purposes; 
• the right to data portability; 
• the right to withdraw consent to the processing of your personal data at any time; 
• the right to lodge a complaint with a supervisory authority. 

6.3. If you want to exercise your rights, or have questions about the processing of your personal data or the exercise of your rights, write to us at [email protected]. 

6.4. Right to information on processing. We provide information about the processing of your personal data at the time of collection. You can also always find it in this Privacy Policy or request it by e-mail. 

6.5. Right of access to the personal data we process. You have the right to obtain confirmation from us as to whether we process your personal data. Where we do, you have the right to access the data and information about its processing — purposes, categories of data, recipients, etc. We will provide you with a copy of your personal data. You have the right to receive your personal data in a structured, commonly used and machine-readable format. However, you will not be able to exercise this right where it could adversely affect the rights and freedoms of others. 

6.6. We have the right to refuse to provide the data we process where the circumstances specified in law, under which personal data is not to be provided, are established. 

6.7. Right to rectification. You have the right to have inaccurate personal data corrected and, taking into account the purposes of the processing, to have incomplete personal data completed. 

6.8. Right to erasure. You may exercise this right when: 

• the personal data is no longer necessary for the purposes for which it was collected or otherwise processed; 
• you withdraw your consent and there is no other legal basis for processing; 
• you object to the processing carried out on the basis of our or a third party’s legitimate interest; 
• the data is processed for direct marketing purposes; 
• the data has been processed unlawfully; 
• the data must be erased in order to comply with a legal obligation to which we are subject.

Please note that in certain cases you will not be able to exercise this right due to applicable exceptions, i.e. where processing is necessary: 

• to exercise the right of freedom of expression and information; 
• to comply with our legal obligations; or 
• for the establishment, exercise or defence of legal claims. 

6.9. Right to restriction of processing. This right may be exercised where: 

• you contest the accuracy of the personal data; 
• the processing is unlawful but you do not want the data erased; 
• we no longer need the data, but you need it for the establishment, exercise or defence of legal claims; or 
• you have objected to processing based on our or a third party’s legitimate interest, pending verification of whether our grounds override yours. 

Where processing is restricted, we may continue to store your personal data but will not otherwise process it, except: 

• with your consent; 
• for the establishment, exercise or defence of legal claims; 
• to protect the rights of another natural or legal person; or 
• for reasons of important public interest. 

6.10. Right to object to processing. You may exercise this right for reasons relating to your particular situation, but only to the extent that we use the data on the basis of our or a third party’s legitimate interests. If you object, we will no longer process the personal data unless we can demonstrate compelling legitimate grounds which override your interests, rights and freedoms, or the processing is necessary for the establishment, exercise or defence of legal claims and/or our legal requirements. 

6.11. Right to object to processing for direct marketing purposes (including profiling for direct marketing purposes). If you object, we will no longer process your personal data for this purpose. We do not currently process your personal data for this purpose. 

6.12. Right to data portability. You may exercise this right where we process your personal data by automated means and the legal basis for processing is: 

• your consent (we do not currently collect such data); or 
• performance of a contract, or steps taken at your request prior to entering into a contract. 

6.13. Right to withdraw consent. Where the legal basis for processing your personal data is consent, you have the right to withdraw it at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal. 

6.14. Right to lodge a complaint with a supervisory authority. If you believe that we are infringing data protection legislation in processing your personal data, you have the right to lodge a complaint with the State Data Protection Inspectorate, registered office address: L. Sapiegos g. 17, LT-10312 Vilnius, www.vdai.lrv.lt. In all cases, please contact us first so that we can try to find a suitable solution together. 

7. Use of Cookies 

7.1. Our website, like many others, uses cookies. These are small data files stored on your computer that help us deliver content faster and more reliably. When you visit or use our websites, as well as our services, applications, tools or messaging channels, we or our authorized service providers may use cookies to serve you better, faster and more reliably, as well as for promotional purposes. 

7.2. Cookies do not normally contain any information that could directly identify you, but the personal information we process may be linked to your use of a computer or other device, including browsing our websites and other information obtained and stored through cookies. 

7.3. There are several ways to manage your cookies: 

External sources 

We use Google Analytics on our website to find out how visitors use the content of the website. Google Analytics uses a set of cookies to collect information and report on website usage statistics to Google, without personally identifying individual visitors. 

You can read more about Google’s privacy policy here. 

If you do not want your browser to use Analytics, you can install the Google Analytics Opt-out Browser Add-on. 

Browser settings 

Many web browsers, and add-ons designed specifically for this purpose, allow users to refuse or delete cookies. The steps vary depending on the specific browser and its version. You can find up-to-date information on how to block or remove cookies on the websites of the browser providers themselves, such as Chrome, Firefox, Internet Explorer and Safari. Please note that deleting or disabling cookies in advance will not prevent you from continuing to use our website properly. 

Cookies on our website 

Necessary cookies. To make the website easier to use, necessary cookies activate basic functions such as browsing pages and accessing protected areas of the website. Without these cookies, the website will not function properly. 

Name	Provider	Purpose	Expiry
cookieDirective	Mediafon.com	Remembers whether consent has been given for the use of cookies.	24 h
session cookie (e.g. carrierservices / datapro)	Mediafon.com	Used to save a session ID during a single visit. Does not collect private information. Required for the website to operate.	Until end of session
_ga	Google	The main cookie used by Google Analytics; it allows the service to distinguish between different users without personally identifying individual visitors.	2 years
_gat	Google	Used by Google Analytics to limit the rate of requests.	24 h
_gid	Google	Used by Google Analytics to distinguish users.	24 h

7.4. Third-party websites. We may work with third parties (commonly referred to as service providers) who, with our permission, may place third-party cookies on our websites, in our service locations, or in our applications and tools. These service providers help us serve you better, faster and more reliably. Please note that third-party cookies are subject to the privacy policies of those third parties, and we do not accept any responsibility for their privacy practices. 

8. Processing of Children’s Personal Data 

8.1. The services provided on our website are intended only for persons over 16 years of age. 

9. Changes to the Privacy Policy 

9.1. We may periodically change this Privacy Policy to properly reflect how we handle your personal information. 

9.2. If we make significant changes, we will notify you on the website so that you can review them before continuing to use our website. 

10. How to Contact Us 

10.1. We always want to hear feedback from our customers and are ready to answer any questions you may have. 

10.2. Feel free to contact us if: 

• you have any questions or feedback regarding this Privacy Policy; 
• you want us to stop using your personal data; 
• you want to exercise your rights under this Privacy Policy or file a complaint. 

10.3. You can contact our data protection officer at [email protected]. 

11. Video Surveillance Privacy Policy 

This notice informs you how and where Mediafon Group companies operating at Olimpiečių st. 1-33, Vilnius, process visitor data in connection with video surveillance of the office premises. Visitors are informed of ongoing video surveillance by information signs bearing a video camera symbol and the data controller’s details, displayed before entering the monitored area and/or room. 

Data collected: the image of visitors and records related to visitors, as well as all other personal data and actions within the coverage area of the video surveillance cameras. When carrying out video surveillance, we collect the following information: video recordings, the date and time of recording, and the location. 

Purposes: 

• real-time video surveillance to ensure the safety of persons (employees and other visitors to our premises) and the physical protection of material resources and information; 
• management of video surveillance recordings to investigate security incidents involving persons or company property. 

Legal basis: protection of legitimate interest and of vital interests. 

Storage period: video surveillance recordings are stored for no longer than 14 (fourteen) days, unless a recording contains information necessary to achieve the defined purpose, in which case it is stored until the identified issue has been clarified or the relevant investigation completed. 

Data subject rights in relation to video surveillance are exercised subject to certain limitations arising from the nature of video surveillance (for example, limited ability to rectify or erase specific data, as it is collected automatically). To exercise your rights, please contact us at [email protected]. 

Privacy Policy updated 2026-07-14.