Last update: 2023 July
Data controllers
UAB “Virtosoftware” (Company code: 302602930; VAT payer code: LT100009960710), a legal entity established in Lithuania, and its group companies listed below (collectively “VirtoSoftware”, “we”, “us”, “our”) is committed to safeguarding your privacy.
Email of data protection officer: [email protected]
From another side:
Administrators of social media platforms: Meta Platforms, Inc., Twitter, Linkedin, YouTube.
In relation to some personal data processed on our social media accounts, we act as a joint controller with the administrator of social media platforms as per Article 26 of the GDPR.
“VirtoSoftware” manages these social media accounts:
Facebook: https://www.facebook.com/virtosoftware/
Linkedin: https://www.linkedin.com/company/1025136/
YouTube: https://www.youtube.com/@VirtosoftwareVideo
Twitter: https://twitter.com/VirtoSoftware
PLEASE BE AWARE THAT OUR SOCIAL MEDIA ACCOUNTS ARE PUBLIC AND EASILY ACCESSIBLE TO OTHERS.
Responsibility of Social media platforms
We have very limited control over the personal data processing (for example, account management, posting rules, advertising rules, community standards, etc.) carried out by the administrators of any social media platform. We do not know what data is processed by the administrator of the platform. In situations where we can influence the parameters of data processing, we ensure that the administrator of the social media platform processes data in a user-centric approach.
The platform administrator manages all IT infrastructure, sets its own data processing rules and privacy policies, and also interacts with you as a user of the platform (if you are a registered user). Furthermore, only the platform administrator is responsible for the processing of personal data linked to your account. We do not have any access to such data of yours.
You can find more information about data processing and your data subject rights in the privacy policies of each social media platform.
Data Processing purpose and legal ground
The main purpose of data processing is to inform our followers about the products we develop, and the services we provide, to share general IT news, and to communicate with our followers by answering their questions, and on occasion, to invite participation in our marketing activities. Our legal basis for such data processing is our legitimate interest to promote our brand and provide good customer service.
We reserve the right to delete any comments if it seems necessary. For example, when posts infringe the ethical principles of VirtoSoftware, mandatory legal acts, social norms, trademarks, and intellectual property rights, or when the posts are otherwise offensive, discriminatory, pornographic, or abusive in nature.
If we deem it necessary, we will contact you via your social media account.
Data recipients
Data is generally not shared with other third parties except if it is necessary for the handling of your claim or request. Please be aware that some social media accounts allow sharing of content (like comments). Therefore, your interaction with us may be visible to other users. For example, if you participate in any of our games or events and content is posted on our account, this can be seen by others. If you are using your real name and photo in your account, others can directly identify you.
In contrast, personal data which you provide to us using confidential channels, such as a private message, will be used by us only and shall not be transferred to others not related to the “VirtoSoftware.” This rule does not apply if your message contains the content described above.
Data retention
All personal information that you send to us by private messages (your offers, comments, requests, and other interactions) is deleted within 90 days of the final resolution of the issue.
All other content created by you on our social media account is stored for an unlimited amount of time unless we delete it for the reasons specified in 3.2 above or if we close our account. Please note, in most of the platforms, you can also manage your content yourself, for example, you can amend or delete your content without our permission.
Please note: We do not have any control over the retention rules of the platform administrator; therefore, your content can be deleted by the platform administrator if you do not comply with the rules applicable to that specific platform.
All personal information that you send to us by private messages (your offers, comments, requests, and other interactions) is deleted within 90 days of the final resolution of the issue.
All other content created by you on our social media account is stored for an unlimited amount of time unless we delete it for the reasons specified in 3.2 above or if we close our account. Please note, in most of the platforms, you can also manage your content yourself, for example, you can amend or delete your content without our permission.
Please note: We do not have any control over the retention rules of the platform administrator; therefore, your content can be deleted by the platform administrator if you do not comply with the rules applicable to that specific platform.
Joint controllers, according to Article 26 of the GDPR
Some of our data processing is carried out together with the platform administrator. This processing is subject to provisions of Article 26 of the GDPR (joint controllers):
When the social media platform administrator applies users’ monitoring technique, platform administrators and we are acting as joint controllers. Please note monitoring of the user can be implemented regardless of whether you are a registered user or unregistered. The legal basis for such monitoring is the legitimate interest of the platform administrator and us, according to Article 6 1(f) of the GDPR – the necessity to optimize the use of accounts and the platform itself.
More about the data recipients and data retention terms can be found in the privacy policies of the relevant social media platform.
More information about the rights you have as a data subject, especially the right to object to the monitoring of your account, can be found in the privacy policies of the relevant platform administrator.
The collection of statistical data, which is provided to us by the platform administrator, can only partly be influenced by us. However, we make sure that no excessive data would be transferred to us by the platform provider.
You should be aware that there is a possibility that the social media platform is using your account data and your behavioral data to analyze your relations, likes and dislikes, beliefs, and other preferences. “VirtoSoftware” does not participate in this data processing and has no influence in this regard whatsoever.
Your data subject rights
- Right of access which means 1) the right to know whether data concerning you is being processed and 2) if so, access it (GDPR Article 15).
- Right to rectification. When personal data are inaccurate, then you have a right to request us to correct them indeed (GDPR Article 16).
- Right to erasure or right to be forgotten with additional stipulations (GDPR Article 17).
- Right to restriction of processing. Simply said, it is your right to limit the processing of your personal data with several rules and exceptions (GDPR Article 18).
- Right to data portability. (GDPR Article 20).
- Right to object (GDPR Article 21). That does indeed mean what it says: data subjects can say they don’t want the personal data processing to be done or going on. In practice, the data subject can, within specific conditions, exercise the right to object and the right to be forgotten.
- Right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her.
- Right to lodge a complaint with the local supervisory authority (for example, State Data Protection Inspectorate in Lithuania).
You can implement your data subject rights by using any of the contact details indicated at the beginning of this policy.
