GRIGEO PRIVACY POLICY

As one of the largest paper and wood industry groups of companies in the Baltic countries, the AB Grigeo group of companies recognises the importance of the protection of personal data and respects the right of each person to the protection of his/her personal data.

In this privacy policy (hereinafter referred to as “the Privacy Policy”), we provide information about how the companies of the AB Grigeo group of companies (AB Grigeo, legal entity registration number 110012450, registered office address: Vilniaus g. 10, Grigiškės, Vilniaus m. sav., Lietuva / Lithuania, AB Grigeo Klaipėda, legal entity registration number 141011268, registered office address: Nemuno g. 2, Klaipėda, Lietuva / Lithuania, UAB Grigeo Baltwood, legal entity registration number: 126199731, registered office address: Vilniaus g. 10, Grigiškės, Vilniaus m. sav., Lietuva / Lithuania, UAB Grigeo Recycling, legal entity registration number 302529158, registered office address: Vilniaus g. 10, Grigiškės, Vilniaus m. sav., Lietuva / Lithuania, and UAB Grigeo Packaging, legal entity registration number 302329061, registered office address: Vilniaus g. 10, Grigiškės, Vilniaus m. sav., Lietuva / Lithuania) (hereinafter referred to as “the Grigeo Group of Companies”) process your personal data, which you can provide on the website www.grigeo.lt of the Grigeo Group of Companies (hereinafter referred to as “the Website”), its social media accounts, when contacting us by e-mail or telephone, or visiting any office of a company within the Grigeo Group of Companies as well as which you provide to the companies of the Grigeo Group of Companies in the course of the performance of their activities.

What kind of Your personal data do we collect?

When you visit any office of a company within the Grigeo Group of Companies, the Website, social media accounts, or contact us by e-mail or telephone, we can collect and process the following data:

  •  the personal data which you provide seeking employment or internship with a company within the Grigeo Group of Companies (for more detail, please see the section “Protection of applicants” personal data’ of the Privacy Policy);
  •  the data which we collect using cookies (for more detail, please see “What kind of cookies are used on this website?” of the Privacy Policy);
  •  the personal data which you provide to us when placing with us your inquiries, requests or complaints (name, surname, e-mail address, and the text of your application). We will store those data within 2 (two) years from the day of receipt of your application;
  •  the personal data which you provide to us seeking to participate in our tender procedures, promotions and/or lotteries (name, surname, e-mail address, telephone number, and other data which we will ask you to provide according to the rules of the tender procedure or promotion). We will store those data for the period established in the rules of the specific tender procedure, promotion and/or lottery on the basis of your consent which you express to us by providing your personal data seeking to participate in a tender procedure, promotion, or lottery;
  •  the personal data (name, surname, comment, inquiry, etc.) which you provide voluntarily, by your active actions in our social media accounts (e.g. Facebook or LinkedIn). We will store those data within 2 (two) years from the day of their provision;
  •  Your video data if you enter the field of view of video surveillance equipment when visiting offices of the companies within the Grigeo Group of Companies. We process the video data of our employees and other individuals who enter the field of view of video surveillance equipment on the basis of out legitimate interest, in order to ensure their security and security of assets as well as in the course of the execution of applicable legal obligations. We will store those data for a period of not more than 3 (three) months;
  •  Your personal data (name, surname, vehicle's make, registration plate number, trailer number, purpose of arrival, and other personal data) which you will provide when registering in the systems of the Grigeo Group of Companies for the registration of guests and vehicles, a reference to which is provided on the Website, when you arrive to the offices of the Grigeo Group of Companies, which you will provide to us in order to enter the area or premises of the companies of the Grigeo Group of Companies or which you will be recorded by us or controlling systems while entering the area or premises of the companies of the Grigeo Group of Companies. We will process those data on the basis of our legitimate interest, in exercising the control of access to the area and/or premises of the companies of the Grigeo Group of Companies by individuals or vehicles with a view to ensure the security of individuals and assets as well as in executing applicable legal obligations (when entering the area of AB Grigeo Klaipėda in Klaipėda State Seaport). We will store those data during the period of the permit granted to you to enter the respective area of a company of the Grigeo Group of Companies plus 1 (one) year after its end, and those for entering the area of AB Grigeo Klaipėda, for 3 (three) years from the day of receipt of the data;
  •  any other of your personal data which you can provide to us at any time using the Website or when communicating with us. We will store those data within 2 (two) years from the day of their provision.

In order to implement the legal obligations applicable to the companies of the Grigeo Group of Companies, each company of the Grigeo Group of Companies in its activities processes the personal data of its shareholders, members of management and supervisory bodies and beneficiaries, their representatives, and authorised persons (position, name, surname, personal identification number, date of birth, addresses of place of residence, information about held securities, and other personal data the processing of which is required in accordance with legal acts). These personal data will be stored within the time limits prescribed in legal acts.

The companies of the Grigeo Group of Companies process the personal data (name, surname, personal identification number, address of place of residence, signature, e-mail address, telephone number, and other provided personal data) of data subjects (clients, suppliers, business, partners, consultants, other contractual parties, their representatives, employees, agents, members of management bodies, and other persons engaged by them for the execution of the contract concluded with the company) for the purposes of the conclusion, execution, and administration of various transactions, contracts, or agreements and issue of VAT invoices. Those personal data will be stored to the extent necessary for the purposes for which they are processed, in accordance with the terms specified in the Index of the General Document Storage Terms approved by an order of the Chief Archivist of Lithuania as well as in accordance with the retention requirements applicable for such kind of data prescribed in legal acts.

For the purpose of drawing up an insiders’ list, AB Grigeo shall process the personal data (name, surname, surname at birth (if different), personal identification number, date of birth, work and personal telephone numbers, functions and reasons for being insider, home address, and time and date at which a person obtained access and ceased to have access to inside information) of the persons who have access to inside information concerning AB Grigeo. These personal data will be stored for a period of at least 5 (five) years after an insiders’ list is drawn up or updated as prescribed in legal acts.

Protection of applicants’ personal data

When carrying out selection to vacant positions in the companies within the Grigeo Group of Companies, we will collect and process data which you will provide to us by filling out the form on our Website, data which you will provide to us by e-mail or by other means seeking to become employed with a company within the Grigeo Group of Companies, and data which we will lawfully receive from other persons in order to evaluate your suitability as an applicant (personal information: preferred position, name, surname, date of birth, address, city,e-mail, telephone number; education: education institution and speciality; work experience: company, duration of employment (start and end dates), position, and nature of work; other information: information on whether you have a driver’s license, your wishes and requirements for the future job, desired salary as well as data provided in the CV, motivation letter or other documents when applying for the job; information on your evaluation as an applicant).

When carrying out selection of candidates seeking internship in the companies within the Grigeo Group of Companies, we will process the personal data which you will provide to use by filling out a trainee/intern form on our Website (name, surname, address, telephone number, e-mail address, education institution, future speciality, year of study, study subject, preferred work location, department in which you want to take traineeship/internship, traineeship/internship starting date and its duration, additional experience, information on why you would like to take traineeship/internship in the company within the Grigeo Group of Companies, and the personal data provided alongside with the CV).

We collect and process your personal data provided during participation in selections to the vacancies and internship places available in the companies within the Grigeo Group of Companies for the purpose of conducting the selection on the basis of your consent, which you express to us or the recruitment service provider by sending or otherwise providing to us your CV and other related documents or filling out the form on our Website.

In order to evaluate your suitability for work as an applicant, we may address your former employers seeking to obtain information about your qualification, professional abilities, business qualities, and work assessment, so we will collect and process information which your former employers will provide about your qualification, professional abilities, and business qualities.

We promise that we will address your current employers in order to obtain your personal data related to your qualification, professional abilities, and business qualities only in exceptional cases and only if you clearly express in writing your consent regarding our addressing your current employer.

In case you are not selected as the successful applicant, we will erase and destroy all your personal data undergoing processing for the purposes of selection within 10 (ten) working days after an employment contract is signed with the selected applicant or the intern is selected, unless you clearly express in writing your consent to the storage of your personal data (CV and other information provided by you during participation in the selection process) by a specific company of the Grigeo Group of Companies in order to offer you a job or intern's position in future. In this case, we will store your personal data for a period of not more than 2 (two) years from the end of the selection process.

What kind of cookies is used on Website?

A cookie means information sent by an internet server to an internet browser and which is stored at the browser. This information is sent to the internet server each time when the browser requests opening the page from the server. This allows the internet server to identify and monitor the internet browser.

For more information about the cookies used on the Website, please visit:

Most browsers allow rejecting all cookies, while some browsers only have the possibility to reject only third-party cookies. Therefore, you can use those possibilities. However, please not that the blocking of all cookies will have a negative impact on the use of the Website and, without cookies, you will not be able to use all the services provided on the Website. For more information, please visitAllAboutCookies.org or www.google.com/privacy_ads.html.

To whom can we disclose Your personal data?

We may disclose your personal data to personal data processors which provide their services to us or perform work for us (information technology, software maintenance and administration service, security service, and document archiving service providers, etc.) and process your data on behalf of a company within the Grigeo Group of Companies. The data processors have the right to process personal data only according to our instructions and only to the extent necessary. When engaging the data processors, we take all necessary measures in order to ensure that our data processors have also implemented appropriate organisational and technical measures ensuring the security of personal data and keep the personal data confidential.

Personal data may be transferred to law enforcement institutions as well as to other state or municipal institutions conducting investigations or checks or considering administrative, civil, and criminal cases as evidence in order to assist the respective authorities to properly perform the functions they discharge, conduct an investigation, consider a case, or in other cases established by law.

Personal data may also be provided to competent law enforcement institutions, other state or municipal and supervisory institutions when the provision of such information is mandatory in accordance with effective legal acts.

We inform hereby that your personal data will not be transferred to any third country and/or international organisation.

How will Your personal data that You provide to us via social media be used?

All information which you provide to use via social media (including messages, use of Like and Follow fields, and other communication) is controlled by the social network controller.

Now, we have the following accounts in social media:

We recommend you to read the privacy notices of third parties and contact the service providers directly in case you have any questions as to whether they use your personal data.

How are Your personal data processed?

Your personal data will be processed in accordance with the requirements established by Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation), the Law of the Republic of Lithuania on Protection of Personal Data, and other legal acts.

We process your personal data only on the basis of the legal grounds defined in legal acts regulating personal data protection, i.e. your consent when personal data should be processed for the legitimate interest of the companies of the Grigeo Group of Companies, for the performance of a contract to which the data subject is a party, and in order to fulfil the legal obligations applied to the companies of the Grigeo Group of Companies.


When processing your personal data, we implement appropriate organisational and technical measures that ensure the protection of the personal data against accidental or unlawful destruction, alteration and disclosure as well as against any other unlawful processing.

For how long to we store Your data?

We will store your personal data during the periods established in the Privacy Policy. After the expiry of the personal data storage periods, the personal data will be erased and destroyed.

In those cases when your personal data are contained in texts of respective documents (agreements, authorisations, etc.), we will archive and store them in accordance with the terms specified in the Index of the General Document Storage Terms approved by an order of the Chief Archivist of Lithuania.

We promise that in all cases, we will store your personal data not longer than it is required by the purposes of data processing or provided for by legal acts if they establish a longer data storage period.

What rights do You have?

You have the following rights:

  •  to file with us a written request to provide you with information as to whether data relating to you are being processed and, if such data are processed, you have the right to access your personal data and the following information: the purposes of the processing; the categories of the respective personal data; the data recipients or categories of the data recipients to which your personal data have been or will be disclosed; where possible, the expected storage period of the personal data or, if it is not possible, the criteria applied to determine that period;
  •  to withdraw your consent to the processing of your personal data at any time when we process your personal data on the basis of your consent, while informing about that in the ways of the submission of requests specified in this Privacy Policy below;
  •  to require the rectification of inaccurate or supplementation of incomplete personal data relating to you;
  •  to require erasure of your personal data (‘right to be forgotten’). Irrespective of the foregoing, this right is not absolute and it can be justified when at least one of the following reasons is available: the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed; you have decided to withdraw your consent to the processing of your personal data when your personal data are processed exclusively on the grounds of the consent and there are no other grounds for the processing of your personal data; your personal data have been unlawfully processed; your data must be erased when we are imposed the obligation to do so;
  •  to require that the processing of your personal data be restricted where one of the following applies: you contest the accuracy of the data, for a period enabling us to verify the accuracy of your personal data; the processing of your personal data is unlawful and you oppose the erasure of your personal data and request the restriction of their use instead; we no longer need your personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defence of legal claims. Where the processing of your personal data has been restricted, we can process such your personal data, with the exception of storage, only with your consent or for the establishment, exercise or defence of legal claims and/or for the protection of your rights or the rights of another person or for reasons of public interest;
  •  to request that we transfer your personal data being processes to another data controller when it is technically possible;
  •  to file with us a complaint if you believe that your rights, as those of a data subject, have been and/or may be infringed.

How can You implement Your rights?

In order to implement your rights, please provide your requests, complaints or claims to us in writing: asmensduomenys@grigeo.lt or in the ways specified below:

AB Grigeo

  •   by e-mail: info@grigeo.lt
  •   by post: Vilniaus g. 10, Grigiškės, 27101 Vilniaus m. sav., Lithuania
  •   by visiting us in the office of AB Grigeo at the address: Vilniaus g. 10, Grigiškės, 27101 Vilniaus m. sav., Lietuva / Lithuania

AB Grigeo Klaipėda

  •   by e-mail: info.klaipeda@grigeo.lt
  •   by post: Nemuno g. 2, 91199, Klaipėda, Lithuania
  •   by visiting us in the office of AB Grigeo Klaipėda at the following address: Nemuno g. 2, 91199, Klaipėda, Lietuva / Lithuania

UAB Grigeo Baltwood

  •  by e-mail: info.baltwood@grigeo.lt
  •  by post: Vilniaus g. 10, Grigiškės, 27101 Vilniaus m. sav., Lithuania
  •  by visiting us in the office of UAB “Grigeo Baltwood” at the following address: Vilniaus g. 10, Grigiškės, 27101 Vilniaus m. sav., Lietuva / Lithuania

UAB Grigeo Recycling

  •  by e-mail: info.recycling@grigeo.lt
  •  by post: Vilniaus g. 10, Grigiškės, 27101 Vilniaus m. sav., Lithuania
  •  by visiting us in the office of UAB Grigeo Recycling at the following address: Vilniaus g. 10, Grigiškės, 27101 Vilniaus m. sav., Lietuva / Lithuania

UAB Grigeo Packaging

  •  by e-mail: info.packaging@grigeo.lt
  •  by post: Vilniaus g. 10, Grigiškės, 27101 Vilniaus m. sav., Lithuania
  •  by visiting us in the office of UAB Grigeo Packaging at the following address: Vilniaus g. 10, Grigiškės, 27101 Vilniaus m. sav., Lietuva / Lithuania

We will reply to your requests, complaints or claims in accordance with the procedure and within the time limits established by legal acts and will apply our best effort to provide you with information as soon as possible, but not later than within one month from the receipt of your request. Taking into account the complexity of the request and the number of received requests, the said time limit may be extended for another two months. In this case, however, we will inform you, within one month from the receipt of the request, about such extension of the time limit and its causes.

If upon receipt of a request, complaint or claims we doubt the identity of the person addressing us, we have the right to request the addressing person to provide a personal identification document.

If we are unable to provide you with required information and/or if you have claims regarding the way how your personal data are processed, you have the right to file an appeal with the State Data Protection Inspectorate.

How will we inform You about changes in the Privacy Policy?


We can update or amend this Privacy Policy at any time. Such an updated or amended Privacy Policy shall enter into force from the moment of its publication on our Website.

We will inform you about the amendments of the Privacy Policy by publishing the updated Privacy Policy on the Website. The date, when the Privacy Policy was last updated is indicated at the bottom of the Privacy Policy.

How to contact us?

If you have any questions relating to the terms and conditions of this Privacy Policy, please contact us by the following particulars, by calling us by the below phone number, or sending us a inquery by e-mail or registered letter:

AB Grigeo
Legal entity registration number 110012450
Registered office address: Vilniaus g. 10, Grigiškės, 27101 Vilniaus m. sav., Lietuva / Lithuania
Phone: +370 5 243 5801
E-mail: info@grigeo.ltasmensduomenys@grigeo.lt

These provisions of the Privacy Policy shall be governed by the law of the Republic of Lithuania. Any disputes that arise in respect of these privacy provisions shall be resolved by means of negotiations and, in case of their failure, in the courts of the Republic of Lithuania, in Vilnius.

The Privacy Policy was last updated on 2 January 2019.