Privacy policy

PRIVACY AND DATA PROTECTION POLICY

1. Introduction

NNL LT, UAB (the “Company”) is committed to safeguarding individuals’ fundamental rights and freedoms, including their right to privacy when personal data are processed. Our data protection practices apply to all personal data, regardless of form (paper, electronic, etc.).

Our goal is to ensure that everyone we interact with feels safe and confident that we respect and protect their privacy. We also seek to reduce the likelihood of legal and regulatory risks that could affect our reputation and operations.

In our day-to-day activities we process various personal data relating to:

  • current, former and prospective customers;
  • service providers and partners;
  • drivers, suppliers and their representatives;
  • current, former and prospective employees;
  • job candidates;
  • interns;
  • website users;
  • visitors to our premises;
  • other interested parties.

This Policy sets out the measures we take to ensure compliance with the General Data Protection Regulation (GDPR) and national legislation.

The Policy applies to all Company employees, partners, contractors and other persons who have access to our data or systems. We require external data processors to meet the standards set out in this Policy.

2. Responsibilities

Information users. All Company employees and any other persons processing data on the Company’s behalf must comply with applicable data protection laws and this Policy. They must also ensure that any personal data they provide are accurate and up to date.

Data Protection Officer (DPO). The Company has appointed a DPO responsible for day-to-day oversight of data protection, organizing training, implementing best practices and providing advice.

IT specialists and system developers. They ensure that privacy by design is applied during the development of products, services and infrastructure—that is, privacy is ensured from the outset of system design.

3. Core principles

When processing personal data we follow these principles:

  • Transparency – we clearly inform about the personal data we process and the purposes.
  • Lawfulness – we process data only on lawful bases.
  • Informed consent – where applicable, we obtain the data subject’s clear and informed consent.
  • Purpose limitation – we collect only the data necessary and proportionate to clearly defined purposes.
  • Fairness and lawfulness – we process personal data fairly and lawfully, regardless of location.
  • Data minimization – we process only the data needed to carry out our activities.
  • Storage limitation – we retain data only as long as necessary to achieve the purposes.
  • Accuracy – we ensure data are accurate and kept up to date.
  • Security – we apply technical and organizational measures to prevent unlawful disclosure, loss or destruction.
  • Rights assurance – we uphold data subjects’ rights under the GDPR.

4. Data subjects’ rights

Under the GDPR, data subjects have the right to:

  • be informed about processing;
  • access their data;
  • have inaccurate data rectified;
  • have data erased (the right to be forgotten);
  • restrict processing;
  • receive their data in a portable format;
  • object to processing based on legitimate interests or for direct marketing;
  • withdraw consent at any time.

Requests to exercise these rights may be submitted by e-mail to duomenuapsauga@nnl.lt. The Company will respond no later than 1 month from receipt of the request.

5. Transfers of data outside the EU

If personal data are transferred outside the European Union, we assess whether the recipient country ensures an adequate level of data protection in line with GDPR requirements.

6. Data Protection Officer

Our DPO is independent, has sufficient knowledge of data protection, is provided with the necessary resources, and reports directly to management. The DPO’s tasks are to:

  • monitor internal processes for GDPR compliance;
  • provide advice on data protection obligations;
  • carry out data protection impact assessments;
  • act as a contact point for data subjects and supervisory authorities.

If you have any questions or comments regarding this Policy, please contact the DPO at duomenuapsauga@nnl.lt.

Document version: 2.0
Last updated: 2025-09-01

Scroll to Top