Rights of the data subject

Data subjects have the rights set out in Regulation (EU) 2016/679:

to know (be informed) about the purposes of the processing of his or her personal data in the Ministry of Finance;
to access to his or her personal data processed by the Ministry of Finance;
to request the rectification of personal data and the completion of incomplete personal data;
to request the erasure of personal data (‘right to be forgotten’) where one of the grounds provided for in Article 17(1) of Regulation (EU) 2016/679 applies;
to restrict the processing of personal data when one of the following clauses provided for in Article 18(1) of Regulation (EU) 2016/679 applies;
to object to the processing;
to data portability;
not to be subject to a decision based solely on automated processing, including profiling;
to withdraw consent;
to lodge a complaint with the supervisory authority.

Where personal data contained in the Register of Persons who Have Restricted Their Ability to Gamble (RPRAG) managed by the Ministry of Finance are processed, the rights of data subjects are exercised by the RPRAG processor (processor of personal data) - the Gaming Control Authority under the Ministry of Finance of the Republic of Lithuania in accordance with the Description of the Procedure for Exercising the Rights of Data Subjects in Processing Personal Data in the Register of Persons who Have Restricted Their Ability to Gamble.

Where personal data contained in the European Union Investment Administration Information System (INVESTIS) managed by the Ministry are processed, the rights of data subjects are implemented by the INVESTIS processor (processor of personal data) – public institution Central Project Management Agency in accordance with the Description of the Procedure for Exercising the Rights of Data Subjects in Processing Personal Data in the European Union Investment Administration Information System.

Last updated: 23-10-2025