AB KN Energies, legal entity code 110648893, registered office at Burių g. 19, LT-92276 Klaipėda, Lithuania (hereinafter – the Company or KN, We) as the Data Controller, provides the information below to Data Subjects.
If you have any questions, issues, recommendations, or requests related to the protection of personal data, please contact the Company by e-mail at [email protected]. Information may also be submitted to the Company via the Report channel.
To exercise their rights, Data Subjects must contact the Company in writing by submitting a request to Burių g. 19, Klaipėda, or by sending a request signed with a qualified electronic signature to [email protected].
The AB KN Energies Personal Data Privacy Policy (hereinafter – the Policy) provides information on how KN processes personal data. Information about the rights of data subjects and how to exercise them is provided at the end of this document.
In accordance with the Applicable Data Protection Laws, the Company, as the Data Controller, is obliged to inform the Data Subject about the processing of their personal data carried out by the Company.
Personal data is processed in accordance with, and ensuring the protection of, the following Data Subject rights (except in cases where legal exceptions apply):
Data Subject rights are ensured free of charge. If a Data Subject’s requests are manifestly unfounded or excessive, particularly due to their repetitive nature, the Company may charge a reasonable fee based on the administrative costs of providing the information or taking the requested action, or may provide a justified refusal to act on the request.
Data Subjects may submit requests to the Data Controller to exercise any of their rights in several ways: directly to the Company, by post, or by electronic means, using the contact details provided in the “Personal Data Protection” section of the Company’s website.
When submitting requests, Data Subjects must verify their identity in one of the following ways:
The rights described in this Policy may be exercised by the Data Subject personally or through a representative. In such a case, the representative must verify their identity in the manner described in this Policy, submit a document confirming the representation, and provide any additional required information.
Upon receiving a Data Subject request and verifying the individual’s identity, the Company shall, without undue delay and in any event no later than 1 month from receipt and identity verification, provide the Data Subject with information on the actions taken in response to the request. Taking into account the complexity and number of requests, the Company may extend this period by up to 2 additional months, informing the Data Subject of the extension and its reasons before the end of the first month.
If the Data Subject submits a request by electronic means, the Company will provide the response electronically unless this is impossible or unless the Data Subject requests another method of response.
If the circumstances listed in the Applicable Data Protection Laws apply, the Company may refuse to fulfil the Data Subject’s request by providing a reasoned written response.
If the Data Subject believes that their personal data has been processed unlawfully by the Company, or that their rights have been violated, they have the right to lodge a complaint with the supervisory authority — the State Data Protection Inspectorate (A. Juozapavičiaus g. 6, 09310 Vilnius; tel. (+370 5) 271 2804, 279 1445; e-mail: [email protected]).
To facilitate the exercise of Data Subject rights, KN prepares and publishes the following Data Subject request forms on its website www.kn.lt in the section “Personal Data Protection”:
This Website Privacy and Cookie Policy (hereinafter – the Policy) provides information about the processing of personal data of visitors (hereinafter – the Visitor or You) carried out by AB KN Energies (hereinafter – KN or the Data Controller) on its website www.kn.lt (hereinafter – the Website). The Policy describes the categories of personal data collected and processed, how such data is used, stored, and other relevant aspects.
Links placed on the Website to third-party websites are not covered by this Policy. We recommend that you review the privacy policies of any third-party websites you visit.
This Policy has been prepared in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (General Data Protection Regulation – GDPR), the Law on Legal Protection of Personal Data of the Republic of Lithuania, and other applicable European Union and Lithuanian legal acts.
The most recent and up-to-date version of this Policy is published on the Website at:
https://www.kn.lt/interneto-svetaines-lankytoju-asmens-duomenu-privatumo-ir-slapuku-naudojimo-politika/2525
The following data shall be processed in the context of the maintenance of KN website, cyber security, or efforts to facilitate the browsing and use of the website by you and the adaptation of operations as required. Website visitor personal data gathered by cookies:
Purpose: Website improvement and administration
| DATA CATEGORIES | |||
|---|---|---|---|
| Demographics | IP address, region from which you are browsing. | ||
| Statistics | The address of the opened KN website, the most frequently read information on the website, the type and version of the browser and device, the type and version of the operating system, the language settings, webpage that was visited before visiting the website, the time spent browsing the pages, the login time, and other statistical data. | ||
| LEGAL BASIS FOR DATA PROCESSING | |||
| Consent GDPR article 6(1)(a) | With the help of analytical cookies, personal data is collected after receiving the consent of the person. Website visitors can express their consent to the use of analytical cookies on the website by an active action. The visitor can withdraw the consent (permission) given to us to use analytical cookies at any time. You can do this by changing your browser settings so that it does not accept cookies. How to do this depends on the operating system and web browser used by the visitor. Detailed information about cookies, their use, opt-out options can be found at http://AllAboutCookies.org or http://google.com/privacy_ads.html. | ||
| ADDITIONAL DATA PROCESSOR USED | |||
| Company providing website maintenance | To ensure the smooth and uninterrupted operation of the KN website and the relevance of the published content. | ||
| Google Ireland Limited | The website analytics service Google Analytics is used to collect analytical information about the website’s activities. Gordon House, Barrow Street, Dublin, D04 E5W5, Dublin. | ||
| BI The Core Centre of State Telecommunications | To ensure the smooth and uninterrupted operation of the KN website securing it from cyber-attacks. Pilies str. 23/15, LT-01123 Vilnius, Tel. No. 8 5 239 1727, e-mail: [email protected] | ||
Purpose: Ensuring cyber security and security of confidential information
| DATA CATEGORIES | |
|---|---|
| General information | IP address |
| LEGAL BASIS FOR DATA PROCESSING | |
| Legal obligation GDPR article 6(1)(c) | Ensure compliance of KN with the Cyber Security Law of the Republic of Lithuania and the Law of the Republic of Lithuania on the Protection of Important Objects for National Security and related by-laws. |
| ADDITIONAL DATA PROCESSOR USED | |
| BI The Core Centre of State Telecommunications | Ensure smooth and uninterrupted KN internet site performance. Pilies str. 23/15, LT-01123 Vilnius, Tel. No. 8 5 239 1727, e-mail: [email protected] |
Personal data about you is collected directly – when you visits the website www.kn.lt and (or) consent is given for statistical cookies usage. Statistics are collected using the Google Analytics tool.
Strictly Necessary – these cookies are necessary for the functions of the website. Without these cookies, the website would not run smoothly, these cookies are activated the moment you visit the website.
| Strictly Necessary cookies | |||
|---|---|---|---|
| Name | Cookie provider | Purpose | Period of validity |
| PHPSESSID | kn.lt | To support the Visitor’s session. | Throughout a browsing session |
| Cloudflare security cookies (cf_clearance, cf_chl_rc_ni and cf_chl_2) | “Cloudflare” | To ensure cyber security and the safety of confidential information, to protect against malicious attacks. | 1 year (cf_clearance) 1 hour (cf_chl_rc_ni and cf_chl_2) |
Analytical – these cookies allow us to record your visit to the website. They are used to ensure the information displayed is relevant to the interests of you, while also making it clear to the employees managing the website content which content is relevant and in demand. These cookies are activated only when the visitor’s consent is obtained. In this case, the following Google Analytics analytical cookies are used:
| Analytical cookies | |||
|---|---|---|---|
| Name | Cookie provider | Purpose | Period of validity |
| _ga | google-analytics.com | Logs a unique ID that is used to generate statistics on how a Visitor uses the website. | 2 years |
| _gat | google-analytics.com | Used to excel the query rate. | 1 minute |
| _gid | google-analytics.com | Logs a unique ID that is used to generate statistics on how a Visitor uses the website. | 24 hours |
Data process for usage behaviour analysis are stored for a maximum of 24 months on Google Analytics services.
The storage of the Visitor’s personal data for a longer period than specified in this Policy may be carried out only when:
In any case, we may retain the consent given by you and the proof of obtaining this consent for a longer period if this is necessary in order to meet or defend legal requirements and/or protect your or another person’s rights, or for reasons of public interest.
All personal data which is accessed through the company’s social network accounts (including messages, use of the “Like” and “Follow” fields in the social network account, etc.), managed by the respective social network service provider. We recommend that you read the privacy policies of social networking service providers.
These accounts are currently used on behalf of KN:
We may transfer your data to third parties who provide services related to the creation, development, administration of the website and helps to ensure the smooth and uninterrupted operation of the website by protecting it from cyber attacks (e.g. BI The Core Centre of State Telecommunications). in accordance with the instructions of internal KN policies. In such cases, only as much data as is necessary to fulfil the specific KN instruction or to provide specific services shall be provided. KN has written agreements with all service providers under which they can process Visitors’ personal data only in accordance with the KN instructions, although they are unable to use the data for other purposes without the consent of KN.
KN can transfer the visitor’s data to the authorized institutions and other entities provided for in the Law on Cyber Security of the Republic of Lithuania, the Law on the Protection of Objects Important for Ensuring National Security of the Republic of Lithuania and the Law on Prevention of Corruption of the Republic of Lithuania and other entities that have the right to receive data in accordance with the legislation in force in the Republic of Lithuania.
We process your data within the European Union, except in cases where the Google Analytics tool is used and the owner of this tool, US company Google Inc., processes such data in accordance with its Terms of Service or according to privacy policies on US, EU or Asian servers which can be found at https://support.google.com/analytics/answer/6004245. In such a case, Google Inc. is committed to taking appropriate measures to comply with the requirements of the EU Privacy Standards as set forth in the Google Analytics Additional Terms of Service. Standard contractual clauses are the part of agreement between Google Inc. and Google Analytics tool user.
You have the right to:
If you believe that the way we process your personal data does not comply with the applicable legal acts, you have the right to apply to the State Data Protection Inspectorate (L. Sapiegos st. 17, 10312 Vilnius; Tel. No.: (8 5) 271 2804, 279 1445; e-mail address: [email protected]).
Any request or instruction relating to the processing of data must be made in writing to KN in one of the following ways:
We must identify the data subject at the request of the data subject for the exercise of any right of the data subject. For this purpose, the KN employee accepting the request must view an identity document (a passport of a citizen of the Republic of Lithuania or a personal identity card) for confirmation of identity). Additional identification documents are not required for data subject requests submitted electronically and signed with a qualified electronic signature.
Upon receipt of such a request or instruction, we will provide a response within 30 (thirty) calendar days and will perform or refuse to perform the actions specified in the request. Data are provided free of charge once a calendar year.
Depending on the complexity and number of requests, we shall be entitled to extend the one-month period by a further two months, informing the applicant before the end of the first month and stating the reasons for such extension.
If the request is made by electronic means, the response shall also be provided to the data subject by electronic means, unless this is not possible (e.g. due to the extremely large amount of information) or if the data subject requests a response by other means.
We may refuse the data subject’s request and in this case will provide a reasoned response in writing, explaining the circumstances specified in the legislation.
Data controller details and contacts:
Public limited company KN Energies (KN), legal entity code 110648893, e-mail address [email protected], telephone No. +370 46 391 772, fax +370 46 311 399, address – Burių st. 19, LT-92276 Klaipėda, Lithuania.
Contact details of the Data Protection Officer appointed by the Data Controller for all data processing matters:
KN processes personal data in a manner that ensures an appropriate level of security, applying relevant technical and organisational measures to protect personal data against loss, unauthorised use, and alteration.
KN does not make automated decisions or perform profiling in relation to you.
This Policy is reviewed and updated at least once a year. All changes to the Policy will be posted on the website. After making significant changes, we will notify you separately on the Website or by other means of communication, such as e-mail.
The Policy was last revised on May 16th, 2023
You can find more information about personal data protection at KN Energies, including details on the processing of personal data of job applicants, interns, members of collegial bodies, service recipients, shareholders and their representatives, as well as individuals visiting KN administrative premises, in the Personal Data Protection section of this website.