GDPR

Fintech Europa UAB, operating as paramountdax.org, is committed to protecting the privacy and personal data of our customers, employees, and partners. This GDPR policy outlines our commitment to comply with the European Union’s General Data Protection Regulation (GDPR) and Lithuanian data protection laws.

The purpose of this policy is to ensure that Fintech Europa UAB:

• Protects the rights of individuals whose personal data we process.
• Complies with data protection laws and follows good practices.
• Is transparent about how we store and process individuals’ data.
• Protects itself from the risks of data breaches.

This policy applies to all personal data processed by Fintech Europa UAB, including data related to customers, employees, suppliers, and partners.

Fintech Europa UAB adheres to the following data protection principles as outlined in the GDPR:

• Lawfulness, Fairness, and Transparency: Personal data will be processed lawfully, fairly, and in a transparent manner.
• Purpose Limitation: Personal data will be collected for specified, explicit, and legitimate purposes and not further processed in a manner that is incompatible with those purposes.
• Data Minimization: Personal data will be adequate, relevant, and limited to what is necessary in relation to the purposes for which they are processed.
• Accuracy: Personal data will be accurate and, where necessary, kept up to date.
• Storage Limitation: Personal data will be kept in a form that permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed.
• Integrity and Confidentiality: Personal data will be processed in a manner that ensures appropriate security, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage.

Fintech Europa UAB will process personal data only when there is a legal basis to do so. The legal bases include:

• The data subject has given consent to the processing of their personal data.
• The processing is necessary for the performance of a contract to which the data subject is a party.
• The processing is necessary for compliance with a legal obligation.
• The processing is necessary to protect the vital interests of the data subject or another natural person.
• The processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority.
• The processing is necessary for the purposes of legitimate interests pursued by the controller or a third party.

Fintech Europa UAB respects and upholds the rights of data subjects as provided under the GDPR. These rights include:

• Right to Access: Data subjects have the right to access their personal data and obtain information about how it is being processed.
• Right to Rectification: Data subjects have the right to request the correction of inaccurate personal data.
• Right to Erasure (Right to be Forgotten): Data subjects have the right to request the deletion of their personal data under certain conditions.
• Right to Restriction of Processing: Data subjects have the right to request the restriction of processing of their personal data under certain conditions.
• Right to Data Portability: Data subjects have the right to receive their personal data in a structured, commonly used, and machine-readable format and transmit it to another controller.
• Right to Object: Data subjects have the right to object to the processing of their personal data under certain conditions.
• Rights Related to Automated Decision-Making and Profiling: Data subjects have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects them.

Fintech Europa UAB implements appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

• Encryption of personal data.
• Measures to ensure the ongoing confidentiality, integrity, availability, and resilience of processing systems and services.
• Measures to restore the availability and access to personal data in a timely manner in the event of a physical or technical incident.
• Regular testing, assessment, and evaluation of the effectiveness of technical and organizational measures for ensuring the security of processing.

In the event of a personal data breach, Fintech Europa UAB will:

• Notify the relevant supervisory authority without undue delay and, where feasible, not later than 72 hours after becoming aware of the breach, unless the breach is unlikely to result in a risk to the rights and freedoms of individuals.
• Communicate the personal data breach to the affected data subjects without undue delay when the breach is likely to result in a high risk to their rights and freedoms.

Fintech Europa UAB will appoint a Data Protection Officer (DPO) who will be responsible for overseeing data protection strategy and implementation to ensure compliance with GDPR requirements. The DPO’s responsibilities include:

• Informing and advising the company and employees about their obligations to comply with the GDPR and other data protection laws.
• Monitoring compliance with the GDPR and other data protection laws, including managing internal data protection activities, raising awareness of data protection issues, training staff, and conducting internal audits.
• Acting as the first point of contact for supervisory authorities and for individuals whose data is processed (employees, customers, etc.).

This policy will be reviewed and updated annually or as required by changes in laws and regulations. Any amendments to this policy will be communicated to all employees and relevant stakeholders.

Fintech Europa UAB is dedicated to maintaining a robust data protection framework to safeguard the personal data of our customers, employees, and partners. By adhering to this policy, we aim to ensure compliance with GDPR and uphold the highest standards of data privacy and protection.