Privacy Policy

Updated: June 12, 2025

The processing of personal data provided in this system is regulated by the EU General Data Protection Regulation.

The Lithuanian Academy of Sciences (hereinafter – the Academy) is the controller of the personal data you provide, which ensures that personal data is processed in compliance with the personal data protection requirements applicable to data controllers. This Privacy Policy applies when we collect your personal data through the website https://konkursai.lma.lt.

In this Privacy Policy, we describe how we process your data when you use our website. By using the website, you agree to the collection and use of information in accordance with the rules set out in this Privacy Policy.

This Privacy Policy has been prepared in accordance with the following legal acts:

1. Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter – GDPR);
2. Law on Legal Protection of Personal Data of the Republic of Lithuania (hereinafter – ADTAĮ);
3. Other applicable legal acts, insofar as they relate to the processing of your personal data for the purposes set out in this Policy.

When processing personal data, the Academy complies with the requirements established in the GDPR, ADTAĮ, as well as other legal acts regulating the processing and protection of personal data.

I. Information about the data controller

Lithuanian Academy of Sciences, BI
Legal entity code: 111958852
Registered office address: Gedimino pr. 3, LT-01102 Vilnius
Email: prezidiumas@lma.lt
Tel. +370 602 653 54

II. Information about the Academy's Data Protection Officer

The Academy has appointed a Data Protection Officer responsible for ensuring the protection of personal data and compliance with applicable legal acts.

If you have questions about the processing of your personal data or wish to exercise your rights under the General Data Protection Regulation (GDPR), you can contact the Data Protection Officer by email: dap@lma.lt

III. What information do we collect about you?

We collect and use the following information:

1. Personal Data

When you use our website, we collect certain personal information about you (hereinafter – Personal Data). You provide such data voluntarily, for example:

• during registration or login;
• when submitting your data;
• when contacting via contact forms, etc.

When we collect Personal Data, we always provide a link to this Privacy Policy or other relevant notice about data collection.

2. Usage Data

When you use the website, certain information may be collected automatically using various technologies such as server logs, tracking pixels, cookies or other tracking tools. Usage Data may include:

• IP address, browser type and version;
• browsing session time and duration;
• visited pages and actions performed (e.g., clicks);
• device type and operating system;
• geographic location (if determined by IP address);
• technical information about network connection.

Some of this data is collected using cookies or other tracking technologies. Automatically collected information may also include Personal Data if it can be directly or indirectly linked to a specific person. Such data is collected only with a legal basis (e.g., having received consent for the use of cookies or having a legitimate interest to process such data).

3. Cookie Data

Our website uses cookies to monitor activity and store certain information about user browsing experience. Cookies can collect data such as:

• browsing history and behavior on the website;
• individual settings (e.g., language selection);
• user identifiers for analytics and marketing purposes.

More information about cookies, their purposes of use and management can be found in our Cookie Policy.

IV. Collected and processed Personal Data, their processing purposes and legal bases, storage periods, data recipients

1. For registration on the website

Personal data is processed in order to create a user account and administer login to the application submission system.

• Legal basis: performance of a contract (GDPR Art. 6(1)(b)).
• Processed data: name, surname, email address, phone number, login data (password).
• Storage period: data is stored for the entire validity period of the account and 1 year after its deletion.
• Data recipients: LMA administration, IT service providers (data hosting, system maintenance providers).

2. Administration of application submission for competitions

Personal data is processed in order to administer the competition organization process, including application acceptance, evaluation, decision making and results announcement.

• Legal basis: performance of a task carried out in the public interest (GDPR Art. 6(1)(e)), when data processing is necessary for the Lithuanian Academy of Sciences to carry out its assigned tasks related to the administration of scholarships and awards according to assignments from the Government or ministries.
• Processed data: name, surname, date of birth; contact details (email, phone number); workplace, position, scientific degree; dissertation title, defense date; scientific activity data: list of publications, project participation, received science awards, patents; other information required for receiving a scholarship or award, provided by the applicant.
• Storage period: data is stored until the end of the competition and for 10 years for archiving purposes.
• Data recipients: experts appointed by LMA and members of evaluation commissions, IT service providers (to maintain technical infrastructure), state institutions if required by legal acts.

3. Publicizing Personal Data

Certain data (e.g., name, surname of the winner of an awarded prize or scholarship, scientific institution, dissertation topic, scientific activity achievements) may be publicized on the Academy's website or other public communication means in order to ensure transparency of competitions, promote the activities of scientists and publicize competition results.

• Legal basis:
  • When publicizing is provided for in legal acts – legal obligation (GDPR Art. 6(1)(c))
  • In other cases – person's consent for publicizing (GDPR Art. 6(1)(a))
• Processed data: name, surname, position, institution, scientific activity (e.g., project titles, publications) or other information provided on the basis of consent.
• Withdrawal of consent: consent can be withdrawn at any time by contacting via email dap@lma.lt. Withdrawal will not affect the lawfulness of data processing carried out until then.

4. Ensuring website operation

Personal data is processed to ensure smooth website operation, identify technical disruptions and ensure user convenience.

• Legal basis: legitimate interest (GDPR Art. 6(1)(f)).
• Processed data: IP address, browser type, device information, cookie data, user actions on the website.
• Storage period: 1 year after visiting the website.
• Data recipients: IT service providers, website hosting service providers.

5. Ensuring IT security and prevention of abuse

Personal data may be processed to protect the website from cyber attacks, unauthorized access, fraud or other malicious actions.

• Legal basis: legitimate interest (GDPR Art. 6(1)(f)).
• Processed data: IP address, connection time, browser and device used, suspicious activity (e.g., too frequent logins).
• Storage period: 1 year from the last login.
• Data recipients: IT service providers, security solution providers.

V. Are you required to provide Personal Data to us?

In order for us to provide you with the services specified in this Policy and ensure your participation in competitions organized by the Academy, certain Personal Data is necessary. If this data is not provided, we will not be able to fulfill competition administration functions and ensure the possibility for you to participate in competitions.

1. Registration and application submission for competitions. In order for you to register on the website and submit an application for a competition, it is necessary to provide the minimum required information, including name, surname, email address, phone number and other data provided for in the application. If this data is not provided, registration on the website and participation in the competition will not be possible.
2. Additional data in the application. Certain data, such as list of publications, project experience, dissertation information and other documents required for the competition, are necessary to ensure objective evaluation of applications. If this data is not provided, the application may be considered insufficient and cannot be examined.
3. Publicizing of data based on consent. Certain Personal Data (e.g., name, surname, title of awarded scholarship or prize) may be published publicly, in accordance with legal acts or on the basis of your consent. If you do not agree, such data will not be published, except in cases where required by legal acts (e.g., results are publicized for transparency).

VI. Where do we get your data from?

We receive Personal Data directly from you when you voluntarily provide it by registering on the website or submitting an application to participate in competitions organized by the Academy. This can happen in the following cases:

• Filling out the registration form on the website konkursai.lma.lt
• Submitting an application to receive a competition or scholarship.
• Submitting documents related to the application and additional information.
• Communicating with us by email or other means.
• Browsing our website – certain information about website usage (e.g., IP address, device type, browser information) may be collected using cookies or other tracking technologies (more about this in the Cookie Policy).

In certain cases, we may receive data from other sources when it is necessary for the purpose of organizing competitions or evaluating applications:

• From institutions or organizations that delegate you or provide recommendations (e.g., your employer, scientific institution, scientific project partners).
• Publicly available sources, if the data relates to your scientific activity and is necessary to substantiate the application (e.g., publication databases, project platforms, official websites of institutions).

VII. Are your data transferred outside the EU?

Your personal data is stored and processed only within the European Union (EU) or European Economic Area (EEA), except in cases where:

• It is necessary for the implementation of competitions or programs when cooperating with partners located in third countries (e.g., in the case of international scientific initiatives, projects or scholarships).
• Such data transfer is provided for by legal acts, e.g., in order to execute court decisions or cooperate with supervisory or control institutions located outside the EU.
• You have given clear consent for data transfer to a third country.

In all cases where data is transferred outside the EU/EEA, an appropriate level of protection for your data is ensured in compliance with GDPR requirements – e.g., by using standard contractual clauses approved by the European Commission, adequacy decisions or other legal protection measures as provided for in the GDPR.

VIII. Your rights as data subjects

When providing your Personal Data through our website and in accordance with the GDPR, you have the following rights:

1. The right to receive information about data processing (GDPR Articles 13 and 14).
2. The right to access your personal data, including the right to a copy of personal data (GDPR Article 15).
3. The right to request rectification of your personal data if it is inaccurate (GDPR Article 16).
4. The right to request erasure of your personal data ("right to be forgotten") (GDPR Article 17). This right is implemented only if at least one of the conditions specified in Article 17(1) of the GDPR is met.
5. The right to request restriction of processing of your personal data (GDPR Article 18). This right is implemented only if at least one of the conditions specified in Article 18(1) of the GDPR is met.
6. The right to data portability (GDPR Article 20). This right is implemented if Personal Data is processed on the basis of consent or contract and also by automated means (GDPR Article 20(1)(a) and (b)).
7. The right to object to the processing of Personal Data (GDPR Article 21).

We inform you that if you disagree with the Academy's decision taken regarding your submitted request related to the implementation of your rights as a data subject, you have the right to submit a complaint to the State Data Protection Inspectorate.

You also have the right to withdraw your consent (if you gave one) to process your personal data for the specified purpose at any time. You can withdraw your consent at any time by submitting a free-form request by email to dap@lma.lt. Withdrawal of consent does not affect the lawfulness of the Academy's Personal Data processing based on consent until its withdrawal, i.e., Personal Data processing for the specified purposes will be considered lawful until the moment of the statement of withdrawal of consent.

IX. How should you apply regarding the implementation of your rights?

In order to implement the aforementioned rights, you must submit a request to us in writing and in a way that allows us to identify you, i.e., by confirming your identity. Requests for the implementation of rights, in the absence of the possibility to determine the identity of the person submitting the request, are not examined at the Academy.

All notices related to personal data processing are submitted:

1. By email dap@lma.lt
2. By post at the address: Gedimino pr. 3, LT-01102 Vilnius.

Your requests related to the implementation of data subject rights are examined no longer than within 1 (one) month. Depending on the complexity of the request and the number of requests received, this period may be extended by the Academy for 2 (two) months. The Academy will inform you about the extension of the term in all cases.

Requirements for the request when submitted in writing:

1. the request must be legible;
2. the request must be signed;
3. the request must indicate your name, surname, place of residence, contact information for maintaining communication;
4. the request must indicate which right you wish to exercise and, where applicable, arguments or documents substantiating such request;
5. if the request is submitted on your behalf by a representative, the request must indicate not only the data specified above, but also your representative's name, surname, place of residence, contact information for maintaining communication.

Ways to confirm your identity:

1. When submitting a request directly by arriving at the Academy's office: by presenting a document confirming personal identity to an Academy employee.
2. When submitting a request by post: together with the request, a copy of a document confirming personal identity approved by a notary, or a copy of this document approved in another order established by legal acts, must be submitted.
3. When submitting a request by email: requests submitted in this way must be signed with a qualified electronic signature or formed by electronic means that allow ensuring the text's integrity and immutability (except in cases where you withdraw given consent to process personal data in the order established in this Policy).

Scanned copies of signed requests or complaints submitted by email message without signing with a qualified electronic signature do not meet the requirements established in legal acts. Such submission of a request may be an obstacle to accept your request for examination, therefore, in that case, if you do not have a qualified electronic signature, you should submit the request by post or directly arrive at the Academy's office.

When submitting a request through a representative, a document confirming representation or its copy approved in the order established by legal acts must be additionally submitted with the request.

X. Policy changes

The Academy has the right to change or supplement the conditions of this Privacy Policy. The Academy announces changes on the website by indicating the updated Policy date.

We advise you to periodically review this Privacy Policy for changes that have occurred. This Privacy Policy was last updated on the date indicated at the top.