Let’s work togerther.
Privacy notice
We, UAB “Sveikuva”, trademark Evigrow (hereinafter – the Organization), take care of the security of your personal data (personal data means any information that relates to an identified or identifiable living person, such as the name, surname, address, email address, website behaviour, etc.). The Privacy Notice below is addressed to all persons who contact, employ, apply for, or otherwise engage with the Organization, use the Organization’s services, or otherwise provide their personal data to the Organization.
This Privacy Notice is based on applicable legal acts and guidelines, such as the General Data Protection Regulation (hereinafter – the GDPR), the Law on Legal Protection of Personal Data, and the guidelines of the State Data Protection Inspectorate (hereinafter – the SDPI). The purpose of the Privacy Notice is to set out the rights and obligations of data subjects, as well as other information that is required to be provided under the GDPR.
The services of the Organization are not intended for children (i.e. persons under 14 years of age).
UAB “Sveikuva”, legal entity code: 210893160, registered office address Vytauto pr. 23, LT-44352 Kaunas, Lithuania, is the data controller (as defined in the GDPR) of the personal data described in this Privacy Notice.
Organization has appointed the Data Protection Officer (hereinafter – the DPO) in accordance with Article 37 of Section 4 of the GDPR, who can be contacted by email: dap@evigrow.com.
Data may be processed, for example, in the following cases, when:
- You provide the data yourself, for example, when applying for a job, browsing a website or social networks, making an email enquiry or subscribing to a newsletter.
- The data is provided by the organization you work or otherwise belong, and which has a contractual or legal relationship with Organization.
- When you use our services.
- The we submit a request on the basis of the legitimate interest (e.g., to social insurance, credit rating companies, public registers, etc.)
- We receive data from other sources who pass it on to us as part of our work to comply with orders of public authorities, etc.
- We obtain data from public sources when it is published by you or the company / Organization you represent.
- We conduct services based on our client orders (acting as a data processor on behalf of our client).
The processing shall be carried out on the basis of the following principles specified in Article 5 of the GDPR:
- the principle of lawfulness, fairness and transparency
- the principle of purpose limitation
- the principle of data minimisation
- the principle of accuracy
- the principle of storage limitation
- the principle of integrity and confidentiality.
The Organization takes appropriate technical and organisational measures to ensure that it can meet the obligation under the accountability principle.
To protect your data, we have taken organisational and technical measures that are designed to properly regulate and process your data. Such measures include but are not limited to the SDPI guidelines, the measures set out in the ISO/IEC 27001:2022 /ISO/IEC 27002:2022 information security management standard, the EDPS (European Data Protection Supervisor) and WP29 (Working Party 29) guidelines and recommendations.
The organisational measures for the protection of personal data include, but are not limited to, the following: privacy policy, data subject access request procedures, risk assessments, information security incident management procedures, information security documents, records of data processing activities, data processing agreements with data processors, various staff procedures, ongoing staff training, etc.
Technical measures for the protection of personal data are implemented based on information security documents. Data processing agreement is always concluded when data processors are involved.
The Organization, as the data controller, shall process your personal data:
Legitimate interest, Article 6(1)(f) of the GDPR
Conclusion and performance of a contract, Article 6(1)(2) of the GDPR
Consent, Article 6(1)(a) of the GDPR
Consent, Article 6(1)(a) of the GDPR
Until the results of the research are compiled and presented
webinars, training, hackathons, consulting and organising, disseminating statistical material
Legitimate interest, Article 6(1)(f) of the GDPR
Article 6(1)(f) of the GDPR
Consent, Article 6 of the GDPR
Decision
Normally, we do not process the initials of the patients unless we identify adverse reactions to a medication when analysing medical literature and initials of the patients are provided in medical publications (copy of a respective medical publication is normally attached to the case of suspected adverse reaction).
Third parties that report potential adverse reactions (e.g. health care specialists): name, surname, profession, address, tel. number and e-mail address
Organization operates various websites which also process personal data generated during browsing (such as IP address, page visited, browser data, etc.), collected when ordering specialised information (e.g., market / sector reports), through contact forms, subscribing to newsletters, through cookies placed on websites and processed in social networks. Please find detailed information on this below.
We currently hold the following social media accounts:
The information you provide to social media is controlled by the operator of the social network in question. The Organization, having access to this data, shall use it only for the purpose of managing its social media accounts.
Cookies are simple text files that are placed in the browser memory of your device (e.g., computer, mobile phone, tablet) with your consent when you browse a website. Cookies can be used to ensure the security of the website, to identify unique users, to store information about cookie options you have chosen, the pages you have browsed, what you have clicked on, etc. This is a common practice when browsing websites.
Please note that cookies are in many cases managed in conjunction with the company that collects and processes the cookie information, e.g., Google, Meta (formerly Facebook), and you should also read the Privacy Notices of these companies.
If you do not want your personal data to be processed by cookies, you can change the settings of your web browser so that cookies are not automatically accepted or delete cookies that have already been stored. You can do this at any time, as all browsers have an option to delete cookies. More detailed instructions depend on the browser you are using; you can find instructions for the most commonly used browsers here:
- Cookie settings in Internet Explorer
- Cookie settings in Microsoft Edge
- Cookie settings in Firefox
In most cases, we set cookies together with our technology partners through their use of, for example, cookie management tools, fonts etc. In other cases, certain security, analytical, advertising functions are performed by general data controllers. Here is a list of such partners and their privacy policies:
- The right to be informed in a transparent way, including the rights you have. We inform you by means of this Privacy Notice.
- The right to be informed about the processing of your data, and to know what data we process about you. You can request a copy of your data by contacting the DPO.
- The right to data rectification and erasure. If you find that your data is incomplete or inaccurate, you can contact the DPO and we will look into your case. You can also ask us to remove your data. We will be able to do this if there are no other legal acts that oblige us to keep the data.
- The right to restriction of processing. For example, until we clarify inaccuracies.
- The right to data portability.
- The right to object to our processing of your data and to withdraw your consent at any time.
- The right to object to automated decision-making, including profiling, which has significant consequences for you. The Organization does not currently apply such decision-making.
- You have given your consent to the transfer
- We must do so in the manner prescribed by laws when required by a public authority / law enforcement body / pre-trial investigation authority, court or their representatives, when suspecting a criminal offence, in the event of a dispute, for example, by the Police and other authorities.
- We use a data processor or partner for certain data processing operations or legal obligations:
- auditors
- consultants for finances, operations, security, processes, etc.
- insurance companies
- companies, which provide information technology services for us
- public media service companies
- archiving / data destruction service providers
- accounting service providers
- communications service providers
- providers of physical security services
- parties concerned – in the case of reorganisation or other restructuring of the Organization
- similar data processing operations
- and in other cases when the data recipient has a lawful basis for processing your personal data.
- By email: dap@evigrow.com
- By post to the address: UAB “Sveikuva”, Vytauto pr. 23, LT-44352 Kaunas, Lithuania
- Visiting our head office at the address: UAB “Sveikuva”, Vytauto pr. 23, LT-44352 Kaunas, Lithuania
- By submitting a document directly to the Organization and presenting a personal identity document to Organization employee;
- If the request is submitted by post or via persons providing postal or other parcel delivery services: the application must be accompanied by a copy of the personal identity document certified by a notary public or in other manner established by legal acts;
- If the request is submitted by email: it shall be signed with a qualified electronic signature. Signing the request with a qualified electronic signature allows the Organization properly identify the sender and ensure that the requested information or information on the fulfilment (refusal) of the requested action is only disclosed to the intended recipient.
We regularly review this Privacy Notice for compliance with legal acts and personal data processed by the Organization.
We may update or amend this Privacy Notice at any time. Such updated or amended Privacy Notice shall enter into force from the date of its posting on our website.
This Privacy Notice was last modified on 12 Dec 2025.
