Privacy Policy

Our work is built on trust and confidentiality. This policy explains what personal data we process, why we process it, how long we keep it and what rights you have.

1. Who processes your data

The data controller is Advokatų profesinė bendrija VAIČEKAUSKYTĖ ir partneriai (Law partnership VAIČEKAUSKYTĖ ir partneriai; hereinafter the “Partnership”, “we”), legal entity code 307632265, VAT identification number LT100019945418, registered office and office address: Konstitucijos pr. 7, Europa Business Centre, 17th floor, 09308 Vilnius.

For any questions regarding personal data, please email rasa@rasavaicekauskyte.lt or call +370 676 90078.

We process data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR), the Law on the Legal Protection of Personal Data of the Republic of Lithuania, the Law on the Bar of the Republic of Lithuania and other applicable legislation.

2. Attorney’s professional secrecy

Information you entrust to us when seeking legal assistance is protected as attorney’s professional secrecy. We disclose it only with your consent or in cases expressly provided for by law. This obligation applies to all of the Partnership’s attorneys, assistant attorneys and employees.

3. What data we process, for what purposes and on what legal bases

Enquiries, calls and the contact form

First name, surname, email address, telephone number and the information you provide about your situation. Purpose: to respond to your enquiry and arrange a consultation. Legal basis: steps taken at your request prior to entering into a contract and our legitimate interest in responding to your enquiry (Article 6(1)(b) and (f) GDPR).

Consultation bookings

First name, surname, contact details, the selected time, consultation format and practice area, payment information. Purpose: to organise and provide the consultation. Legal basis: the conclusion and performance of a contract (Article 6(1)(b) GDPR).

Provision of legal services

Identity and contact details of the client and the client’s representatives, the circumstances of the case, documents, correspondence, payment data, as well as information about other parties to the case and related persons. Purpose: to provide legal services and representation. Legal bases: performance of a contract, legal obligations, legitimate interest and, where special categories of data are processed, the necessity for the establishment, exercise or defence of legal claims (Article 9(2)(f) GDPR).

Conflict of interest checks

Before starting work, we check that there is no conflict of interest. For this purpose, we process the names or company names of the client and other parties to the case. Legal basis: the legal obligation imposed on attorneys and our legitimate interest.

Prevention of money laundering and terrorist financing

Where required by law, we identify the client and the beneficial owner and process identity document data, information on politically exposed person status and the source of funds. Legal basis: legal obligation (Article 6(1)(c) GDPR).

Accounting and tax

Invoice, payment and contract data. Legal basis: legal obligation.

Purchase of expert video briefings

First name, surname, email address, order and payment data, data relating to access to the recording. Legal basis: performance of a contract and legal obligation.

Newsletter and legal insights

Email address and selected topics. Legal basis: your consent (Article 6(1)(a) GDPR). We may write to our clients about similar services of ours on the basis of legitimate interest. You may unsubscribe at any time by clicking the link in the email or by writing to us.

Website operation, security and analytics

IP address, browser and device data, visit statistics. Strictly necessary cookies are used on the basis of legitimate interest; analytics and marketing cookies are used only with your consent. For more information, see our Cookie Policy.

4. Where we obtain data from

Mostly from you. When providing legal services, we also obtain data from the client, other parties to the case, courts, state registers and other lawful sources.

5. To whom data may be disclosed

We disclose data only to the extent necessary for a specific purpose:

  • to courts, pre-trial investigation authorities, bailiffs, notaries, state institutions and registers, where necessary for the provision of services or required by law;
  • to service providers acting on our behalf: the website and e-commerce platform (Shopify), the consultation booking system, email, IT and data storage service providers, payment service providers and accounting service providers;
  • to analytics and marketing service providers (Google, Meta) – only if you have consented to the relevant cookies;
  • to auditors, insurers and other professional advisers, where necessary to defend our legitimate interests.

We never sell data.

6. Transfers of data outside the European Economic Area

Some service providers (e.g. Shopify, Google, Meta) may process data outside the EEA, for example in the United States. In such cases, the safeguards provided for in the GDPR apply: a European Commission adequacy decision (the EU-U.S. Data Privacy Framework) or standard contractual clauses approved by the European Commission.

7. How long we keep data

  • Enquiries not followed by a contract – up to 1 year from the last contact.
  • Case files and legal services documents – 10 years from the end of the provision of services. This period corresponds to the general limitation period.
  • Anti-money laundering data – 8 years from the end of the business relationship with the client, or longer if required by the competent authority.
  • Accounting documents – for the period prescribed by law.
  • Conflict of interest check data – for as long as the related case file is kept.
  • Newsletter data – until you withdraw your consent.
  • Cookies – for the period specified in the Cookie Policy.

We may keep data for longer if it is needed for ongoing disputes or investigations or for the defence of legal claims. Once the retention period expires, the data are destroyed or anonymised.

8. Your rights

You have the right to:

  • access your data and obtain a copy of it;
  • request the rectification of inaccurate data or the completion of incomplete data;
  • request the erasure of data where there is no longer a basis for processing it;
  • restrict the processing of data;
  • object to processing based on legitimate interest and to direct marketing;
  • receive the data you have provided in a structured, machine-readable format;
  • withdraw your consent at any time. This does not affect the lawfulness of processing carried out before the withdrawal.

Some rights may be restricted where necessary to protect attorney’s professional secrecy, the rights of others or legal claims. In such cases, we will explain the reasons.

You may submit a request by email to rasa@rasavaicekauskyte.lt, by post or in person at our office. We respond within one month at the latest. Before providing information, we may ask you to verify your identity.

If you believe that your rights have been infringed, you may lodge a complaint with the State Data Protection Inspectorate (L. Sapiegos g. 17, 10312 Vilnius, vdai.lrv.lt). We recommend contacting us first – in most cases, we can resolve the matter more quickly.

9. How we protect data

We apply organisational and technical security measures: we restrict access, use encrypted connections and reliable service providers, and our staff are bound by confidentiality obligations. Please do not submit documents or excessive data, such as your personal identification number or health information, via the website form. We will discuss these securely after our first contact.

10. Changes to this policy

We may update this policy when legislation or our activities change. The current version is always published on this page.