Privacy statement

2025-04-16

PRIVACY STATEMENT

(on the processing of data of natural persons using the STI electronic sales platform)

 

This privacy notice is intended for natural persons who visit the State Tax Inspectorate (hereinafter referred to as STI) electronic sales platform[1] which is available at http://www.vmi.lt/pardavimai, and use it (e.g., purchase property transferred to the state in the STI e-shop, participate in STI e-tenders, subscribe to newsletters, etc.).

When processing your personal data, we comply with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) of the European Parliament and of the Council of 27 April 2016 and other legislation governing the protection of personal data.

Data manager:

State Tax Inspectorate under the Ministry of Finance of the Republic of Lithuania, legal entity code — 188659752, Vasario 16-sios g. 14, LT-01514 Vilnius, tel. +370 52605060, e-mail: [email protected]. 

Data protection officer: [email protected].

 

Purpose of personal data processing:

We will process your personal data for the following purposes:

  • to perform the functions of the STI established by law in the field of sale of property transferred to the state;
  • to fulfill contractual obligations (sale of property transferred to the state on the STI electronic sales platform);
  • for direct marketing purposes (when subscribing to the newsletter);
  • to ensure the legitimate interests of the STI (to ensure the quality of services provided, to store information about the performance of contracts, to have evidence and effective means of defending its rights during the examination of legal disputes or claims, etc.).

List of data processed:

  • Technical/administrative data of the STI electronic sales platform user account: first name, last name, telephone number, e-mail address,  correspondence (registered office) address, VAT payer code, bank account number, bank name, account status (active, blocked, etc.), language selection, IP address, technical data on logins to the account and actions in the account (action performed, date and time), indication that you have read the rules for the purchase and sale of goods in the STI e-shop and e-tenders and this Privacy Statement, date and time of reading; 
  • Registration data on the STI electronic sales platform: the specific scope of personal data depends on the method of registration and login to the STI electronic sales platform, i.e. when registering on the electronic sales platform or logging in to it via the administrative and public electronic services portal “Electronic Government Gateway” or using electronic banking functionalities, the name, surname, personal identification number, name and code of the represented legal entity are obtained from the administrators of these platforms; when logging in with the login credentials issued by the STI, the user name and the initial password provided are processed; when connecting using a stationary or mobile electronic signature, information about the processing of personal data in this case is provided in an information notice, which is available in the login section itself[2];
  • Data on participation in STI e-tenders: participant's first and last name, description of goods sold in STI e-tenders, initial prices of goods, participant's bid, e-tender status (e.g., “Awaiting result,” “Lost,” “Did not take place”, “Awaiting payment”, “Unpaid”, “Awaiting withdrawal”, ‘Completed’, “Cancelled”); additionally processed personal data of the winner of the STI e-tender: payment date and time, name of the bank and account number from which the payment was made, place and method of collection of the goods, information about communication and interaction with you on matters related to the conduct of the e-tender;
  • Data on purchases (orders) in the STI e-shop: buyer's first and last name, order number, goods ordered, their quantity, prices, date and time of order submission, order fulfillment stage (e.g., “Submitted,” “Paid,” “Ready for pickup,” “Completed”); additionally processed STI e-shop buyer data: payment date and time, bank name and account number from which the payment was made, place and method of collection of goods, information about communication and interaction with you on issues related to the order and its execution;
  • Newsletter subscription data (processed if the person gives consent to the processing of personal data for direct marketing purposes, i.e. subscribes to the newsletter): date and time of consent, IP address, e-mail address at which you agree to receive newsletters;
  • Data from browsing the STI e-sales platform: choices regarding the use of cookies; if consent is given for the use of specific analytical cookies, the following data is also processed: pages viewed, products viewed, date and time of viewing, duration of browsing, products added to the shopping cart and/or e-tender list, date and time of adding, IP address, session ID, browser used, device type. More information about the processing of this personal data can be found in the cookie policy used on the STI websites;
  • Data from communications carried out via the e-mail address [email protected], which is used for the administration of the STI e-sales platform: when you contact us for help, ask us questions, provide us with feedback, complaints, etc., we process your communication with us (date, time, e-mail address), the documents and data you have submitted, to the extent necessary to examine your request and provide a response. 

Legal basis for the processing of personal data:

Personal data is processed in accordance with: 

  • Article 6(1)(a) of Regulation (EU) 2016/679 (for the purpose of direct marketing), point (b) (for the purpose of concluding and executing contracts for the sale and purchase of property transferred to the state and taking action prior to the conclusion of such contracts), point (e) (for the purpose of performing the function of administering property transferred to the state) and point (f) (for the purpose of pursuing the legitimate interests of the STI);
  • Article 81 of the Law on Electronic Communications of the Republic of Lithuania (for the purpose of direct marketing);
  • Rules for the transfer, accounting, storage, disposal, return, and recognition as waste of ownerless, confiscated, state-inherited, and state-transferred property, material evidence, treasures and findings, approved by Resolution No. 634 of the Government of the Republic of Lithuania of 26 May 2004 “On the Approval of the Rules for the Transfer, Accounting, Storage, Realization, Return, and Recognition as Waste of Ownerless, Confiscated, State-Inherited, and State-Transferred Property, Material Evidence, Treasures, and Finds” (STI administering property transferred to the state);
  • Index of storage periods for internal administrative documents, approved by Order No. V-100 of the Chief Archivist of Lithuania of 9 March 2011 “On the approval of the index of storage periods for internal administrative documents”;
  • Recommended form of vehicle purchase and sale agreement, approved by Order No. 1V-46 of the Director General of AB Regitra of 14 March 2024 “On the Approval of the Recommended Form of Vehicle Purchase and Sale Agreement”.

Personal data storage period:

Your data will be stored:

  • Data on purchases (orders) in the STI e-shop and participation in STI e-tenders: specific orders in the e-shop or participation in e-tenders and related personal data and documents are stored for 10 years after the order in the e-shop has been fulfilled or the e-tender has ended. Your personal data that you store in your personal STI e-sales platform account for the purpose of future orders (e.g., first name, last name, telephone number, delivery addresses) is stored until you remove it from your account or delete your account. Inactive accounts and the personal data they contain are deleted 5 years after the last login to the account;
  • Registration data on the STI e-sales platform and technical/administrative data of the user account: we store registration, login, and other account data until you delete your account on the STI e-sales platform. Once you delete your account, the data processed in it is irretrievably destroyed. Inactive accounts and the personal data contained therein are deleted 5 years after the last login to the account. Purchase data is separated from your account and stored for a specified period (i.e., 10 years after the completion of an order in the e-shop or the end of an e-tender);
  • Data from communications carried out via the STI e-sales platform administration email address [email protected]: 2 (two) years after your request or inquiry has been resolved and a response has been provided. If your request, claim, or inquiry results in a legal dispute, we may store your data for a longer period of time, until the expiry of the limitation periods for filing a complaint or lawsuit provided for in the legislation and/or until a final decision comes into force;
  • Newsletter subscription data: for as long as your consent is valid, but no longer than 12 months from the moment you subscribe to the newsletter. You can withdraw your consent to receive newsletters at any time in your STI e-sales platform account, by clicking on the unsubscribe link in the email, or by contacting us at [email protected];
  • Browsing data on the STI e-sales platform: information on the processing (storage) of this personal data is provided in the cookie policy used on the STI websites.

Provision of personal data:

Data will not be disclosed to third parties, except where required by law. Data processors providing STI information system maintenance and other related services and processing personal data on behalf of the data controller and only in accordance with its instructions (authorizations) are not considered third parties.

Data subject rights:

You have the data subject rights specified in Chapter III of Regulation (EU) 2016/679. The procedure for exercising these rights is regulated by the Description of the Exercise of Data Subject Rights at the State Tax Inspectorate. You also have the right to lodge a complaint with the State Data Protection Inspectorate (address: L. Sapiegos g. 17, LT10312 Vilnius, https://vdai.lrv.lt/), but before submitting a complaint to the State Data Protection Inspectorate, we recommend that you contact us first.

If you believe that we are violating Regulation (EU) 2016/679 or other legislation regulating data processing and/or you have questions regarding the processing of your personal data and/or the exercise of your rights, you can contact us by email at [email protected] or submit a query via My STI[3].

__________________________

 

[1] STI electronic sales platform – environment for sales of state-transferred property in an electronic shop and electronic tenders.

[2] The privacy statement is also available at: https://www.vmi.lt/evmi/documents/20142/744810/MIT-SOFT.pdf.

[3] State Tax Inspectorate portal e. VMI authorized electronic services area. Available online: https://sso.vmi.lt/sso/login?TARGET=https%3a%2f%2fwww.vmi.lt%2fmvmi%2flt%2fManoVMIep.aspx.