Privacy Notice

Regarding the Processing of Personal Data for Direct Marketing Purposes
Effective as of: 22 May 2025

This Privacy Notice explains how Mark ID, UAB (hereinafter – “Mark ID”) processes personal data for direct marketing purposes (e.g., sending newsletters, survey invitations, using pixels, etc.). It outlines what personal data we collect, the legal basis for the processing, data retention periods, potential data recipients, and the rights of data subjects whose data we process for direct marketing purposes.
Terms used in this notice (such as data controller, data processor, data subject, etc.) are understood as defined in Regulation (EU) 2016/679 (General Data Protection Regulation, GDPR).

I. DATA CONTROLLER

The data controller for the personal data processing described in this Privacy Notice is:
Mark ID, UAB
Company code: 305098955
Address: Žygio g. 97A, Vilnius, LT-08236, Lithuania
Email: [email protected]
Website: https://marksign.lt

II. DATA PROTECTION OFFICER

We have appointed a Data Protection Officer (DPO). If you have any questions about how we process your personal data or wish to exercise your data protection rights, please contact the DPO at: [email protected]

III. SOURCES OF PERSONAL DATA

We collect personal data for direct marketing purposes (via “opt-in”) directly from you when:
You subscribe to the newsletter via a popup on the Mark ID website;
You opt in to receive newsletters via the pop-up when logged into the Mark ID self-service portal;
You check the option to receive newsletters when submitting a form on the Mark ID website (e.g., “Consult with a Specialist” form).
We may also collect data for direct marketing (via “opt-out”) when you enter into a service agreement with us. In such cases, you are provided with a clear, free, and easy opportunity to object or withdraw from receiving marketing communications.
Please note that our direct marketing (both opt-in and opt-out) includes the use of pixels that collect data when, for example, you open a marketing email.
You are not required to provide your personal data or consent to direct marketing. However, without it, we won’t be able to send you Mark ID news directly to your inbox.

IV. LEGAL BASIS FOR DATA PROCESSING

For opt-in communications, the legal basis is your consent (Art. 6(1)(a) GDPR, Art. 81(1) of the Law on Electronic Communications of the Republic of Lithuania).
You can withdraw your consent at any time by emailing [email protected] or by clicking the unsubscribe link in each newsletter. Withdrawal does not affect the lawfulness of processing before the withdrawal.
If we collect your email under a service agreement and you do not object, we may use it to send marketing communications about similar services based on legitimate interest (Art. 6(1)(f) GDPR, Art. 81(2) of the Law on Electronic Communications).
The use of pixels is included in both opt-in and opt-out marketing. Therefore, giving consent or not objecting includes consent to pixel use.

V. SCOPE OF PERSONAL DATA PROCESSED

We may process the following personal data for marketing purposes:
Identification data: name, surname
Contact data: email address
Other data: represented company (for corporate representatives), content and date of sent messages, read/unread status, method and date of consent

VI. RETENTION PERIOD

For opt-in, we store data for 5 years from consent or until you withdraw it.
For opt-out, we store data for the duration of the service contract or until you object.

VII. DATA SHARING

We do not share your data with third parties acting as separate controllers unless required by law. We do not transfer your data outside the EU/EEA.
However, we may use tools such as Google services or Meta Pixel, which may process data in third countries under their terms. Google confirms GDPR compliance in their contracts.
We may also use processors (acting under our instructions) and ensure they apply appropriate security measures and confidentiality.

VIII. DATA SUBJECT RIGHTS

Under GDPR, you have the right to:
Access your data (Art. 15 GDPR)
Rectify inaccurate or incomplete data (Art. 16 GDPR)
Request data deletion (Art. 17 GDPR)
Restrict processing (Art. 18 GDPR)
Data portability (Art. 20 GDPR)
Object to processing (Art. 21 GDPR)
Withdraw consent (Art. 7(3) GDPR)
Lodge a complaint with the supervisory authority – State Data Protection Inspectorate ([email protected])
To exercise your rights, contact us using the details in this notice.
To verify your identity, sign the request with a qualified electronic signature or provide a certified ID copy (depending on the method of contact).

IX. CONTACT US

If you have any questions, suggestions, or complaints regarding this Privacy Notice, contact us at: [email protected]
You can find more information in our Privacy Policy.