Privacy Policy.

1. Who is responsible for your personal data?

The data controller is:

Antanas Paulauskas, attorney at law
Gynėjų g. 16
LT-01109 Vilnius
Lithuania

Email: info@claimsinsport.com

In this Privacy Policy, ClaimsInSport, we, us and our refer to Antanas Paulauskas acting as an attorney at law and operating the ClaimsInSport Website.

2. What personal data do we collect?

2.1. Information provided through the contact form

When you contact us through the Website, we may collect information such as:

• your name;
• your email address;
• your role or professional capacity, for example player, coach, agent, club or federation representative;
• the sport or type of matter concerned;
• the type of legal issue or proceeding concerned;
• any relevant deadline indicated by you;
• the subject and description of your enquiry; and
• any other information that you choose to include in your message.

Providing the information requested in the contact form is voluntary. However, we may be unable to assess or respond properly to an enquiry if sufficient information is not provided.

The contact form is intended primarily for an initial enquiry. Please provide only the information reasonably necessary for us to understand the nature of the matter and determine whether we may be able to assist you.

2.2. Information provided by email or other communications

If you contact us directly by email or another means, we may process your contact details, correspondence and any information or documents that you provide.

Because legal matters may involve confidential or sensitive information, you should avoid sending extensive case files, identification documents, medical information or other particularly sensitive material before we have confirmed that we are able to consider or accept the matter.

2.3. Information processed when providing legal services

If we agree to provide legal services, we may process additional personal data necessary for the relevant matter, including:

• identification and contact information;
• contractual and professional information;
• information concerning employment, representation, transfers or sporting relationships;
• financial and payment information;
• correspondence;
• contracts, decisions, submissions and other documents;
• information concerning disputes, disciplinary proceedings or other proceedings;
• evidence and information concerning other persons involved in the matter; and
• any other information necessary to provide the agreed legal services.

Depending on the nature of the matter, this may include sensitive information such as health data or information relating to disciplinary proceedings, alleged offences or criminal convictions.

2.4. Website and technical data

When you use the Website, certain technical information may be processed automatically, including:

• IP address;
• browser and device information;
• operating system;
• date and time of access;
• pages requested;
• referring website;
• server logs; and
• information necessary to ensure the security and proper operation of the Website.

We seek to minimise the collection of technical information to what is reasonably necessary for operation and security of the Website.

3. Why do we process your personal data?

We process personal data only where there is an appropriate legal basis for doing so.

3.1. Responding to enquiries and requests for legal services

When you contact us with a view to obtaining legal services, we process information necessary to consider and respond to your enquiry and, where appropriate, to take steps at your request before entering into a legal services agreement.

The legal basis is Article 6(1)(b) GDPR – taking steps at the request of the data subject prior to entering into a contract.

Where an enquiry is submitted by a representative of a club, company, federation, agency or another organisation, or where Article 6(1)(b) does not apply directly to the person whose data are processed, processing may instead be based on our legitimate interests under Article 6(1)(f) GDPR in responding to professional enquiries, considering prospective engagements and operating our legal practice.

3.2. Conflict-of-interest checks

Before accepting an instruction, we may use information provided to us to determine whether a potential conflict of interest exists.

This may include processing the names of the prospective client, counterparties, clubs, federations, agents, athletes and other relevant persons or organisations.

This processing is necessary for our legitimate interests in complying with professional duties, protecting clients and prospective clients and ensuring the proper conduct of legal practice, as well as, where applicable, compliance with legal and professional obligations.

3.3. Providing legal services

Where we accept an instruction, personal data may be processed to:

• provide legal advice;
• analyse contracts and other documents;
• prepare correspondence, agreements, claims, submissions and other legal documents;
• communicate with clients and other persons involved in the matter;
• conduct negotiations;
• represent clients before courts, arbitral tribunals, sports governing bodies and other institutions;
• establish, exercise or defend legal claims; and
• otherwise carry out the agreed legal services.

Depending on the circumstances, such processing is based on:

• Article 6(1)(b) GDPR – performance of a contract;
• Article 6(1)(c) GDPR – compliance with a legal obligation; and/or
• Article 6(1)(f) GDPR – our legitimate interests or those of our client in providing legal services and establishing, exercising or defending legal rights and claims.

3.4. Compliance with legal and professional obligations

We may process personal data where necessary to comply with obligations applicable to attorneys at law, including obligations relating to professional conduct, conflicts of interest, accounting, taxation, prevention of money laundering where applicable, regulatory requirements and cooperation with competent authorities where required by law.

The legal basis is Article 6(1)(c) GDPR.

3.5. Protection of legal rights

We may process and retain information where necessary to establish, exercise or defend legal claims, respond to complaints, demonstrate compliance with our professional obligations or protect our rights or the rights of our clients.

Depending on the circumstances, processing is based on Article 6(1)(f) GDPR and/or Article 6(1)(c) GDPR.

3.6. Website operation and security

Technical information may be processed for purposes such as:

• delivering the Website;
• preventing unauthorised access or misuse;
• detecting malicious activity;
• investigating technical problems or security incidents;
• maintaining server and website security; and
• ensuring the availability and integrity of the Website.

This processing is based on our legitimate interest under Article 6(1)(f) GDPR in operating and protecting the Website.

4. Sensitive personal data

Sports-law matters can involve information that receives enhanced protection under data-protection legislation.

For example, an injury dispute may involve health data, while disciplinary or integrity proceedings may involve allegations concerning an individual's conduct.

Where special categories of personal data within the meaning of Article 9 GDPR are necessary for the establishment, exercise or defence of legal claims, such data may be processed in accordance with Article 9(2)(f) GDPR.

Where another Article 9 condition is required, such data will be processed only if that condition is satisfied.

Personal data relating to criminal convictions and offences are processed only where permitted under Article 10 GDPR and applicable European Union or Lithuanian law.

Please do not provide sensitive personal data through the initial contact form unless they are genuinely necessary for us to understand your enquiry.

5. Confidentiality and professional secrecy

As an attorney at law, Antanas Paulauskas is subject to professional confidentiality and professional secrecy requirements under Lithuanian law and the professional rules applicable to advocates.

Professional secrecy protects, among other things, information concerning the fact that a person has approached an advocate, information and data provided in connection with legal assistance, the nature of legal consultation and the content of lawyer-client communications.

Information received in connection with a request for legal assistance is therefore handled with particular regard to confidentiality.

However, submitting the contact form, sending an email or otherwise contacting ClaimsInSport does not by itself mean that we have agreed to act for you or that a lawyer-client relationship has been established.

Before accepting an instruction, we may need to conduct a conflict-of-interest check and determine whether we are legally and professionally able to act.

You should therefore initially provide only the information reasonably necessary to identify the parties, explain the general nature of the matter and identify any relevant deadline.

6. Personal data about other people

Sports disputes frequently involve personal data relating to persons other than the person contacting us, for example:

• athletes;
• coaches;
• agents;
• club officials;
• federation representatives;
• employees;
• witnesses;
• counterparties; or
• representatives of other parties.

If you provide us with personal data concerning another person, you should do so only where disclosure of that information is lawful and reasonably necessary in connection with your enquiry or legal matter.

We may also obtain personal data concerning relevant persons from:

• clients and prospective clients;
• counterparties and their representatives;
• other lawyers;
• sports clubs, leagues and federations;
• FIFA, FIBA and other sports governing bodies;
• arbitral tribunals and dispute-resolution bodies;
• courts and public authorities;
• public registers;
• publicly accessible sources; and
• other lawful sources relevant to the matter.

Where required by Articles 13 or 14 GDPR, appropriate privacy information will be provided unless an applicable exemption applies, including where providing such information would conflict with professional secrecy or another legally recognised duty of confidentiality.

7. Who may receive your personal data?

We do not sell personal data.

Personal data are disclosed only where reasonably necessary for the relevant purpose.

Website and IT providers

The Website at claimsinsport.com is operated using a WordPress-based environment and hosted through Hostinger. The ClaimsInSport preview at claims-in-sport-concept.juodosrudosakys.chatgpt.site is hosted through OpenAI Sites. Enquiries submitted through the preview are delivered through Hostinger to info@claimsinsport.com.

Accordingly, personal data necessary for the operation of the Website may be processed by our hosting, website maintenance, cybersecurity, email or other technical service providers acting on our behalf.

These providers are permitted to process personal data only to the extent necessary for providing the relevant services and subject to applicable data-protection and confidentiality obligations.

Legal matters

Where necessary for a legal matter, personal data may also be disclosed to:

• other lawyers or local counsel;
• experts and consultants;
• translators;
• courts and arbitral tribunals;
• sports governing bodies;
• leagues and federations;
• FIFA, FIBA and other relevant sporting institutions;
• dispute-resolution bodies;
• counterparties and their legal representatives;
• competent public authorities; and
• other persons whose involvement is reasonably necessary for the relevant matter.

Any disclosure of information forming part of professional secrecy is additionally subject to the professional obligations applicable to attorneys at law.

8. International transfers

ClaimsInSport operates from Lithuania and personal data are generally processed within the European Economic Area (EEA).

However, sports-law matters are frequently international. Personal data may therefore need to be transferred to or disclosed to organisations or persons outside the EEA, including foreign clubs, federations, lawyers, experts, courts, arbitral tribunals or sports governing bodies.

Certain technical service providers may also process data outside the EEA.

Where the GDPR requires a specific mechanism for an international transfer, we will ensure that an appropriate mechanism is used. Depending on the circumstances, this may include:

• a European Commission adequacy decision;
• European Commission Standard Contractual Clauses;
• another transfer mechanism recognised under the GDPR; or
• a derogation expressly permitted by Article 49 GDPR where applicable to the particular circumstances.

Where appropriate, additional safeguards will be applied having regard to the nature of the information and the circumstances of the transfer.

You may contact us for further information concerning safeguards applicable to transfers of your personal data.

9. How long do we keep personal data?

Personal data are not retained for longer than reasonably necessary having regard to the purpose for which they were collected and applicable legal and professional requirements.

Initial enquiries

Where an enquiry does not result in the provision of legal services, the correspondence and information relating to that enquiry will generally be retained for up to two years following the last substantive communication, unless there is a legitimate reason to retain it for longer.

Conflict-of-interest information

Limited information may be retained for a longer period where reasonably necessary for future conflict-of-interest checks or compliance with professional obligations.

Such information will, where practicable, be limited to information necessary to identify the prospective client, relevant parties and the general nature of the matter.

Client matters

Where an enquiry results in the provision of legal services, the relevant file may be retained after completion of the matter for the period necessary to comply with legal, tax, accounting and professional requirements and to establish, exercise or defend legal claims.

Website information

Technical logs and similar information are retained only for the period reasonably necessary for website operation, security and investigation of technical or security incidents.

When personal data are no longer required, they will be deleted, anonymised or otherwise disposed of appropriately.

10. Cookies and similar technologies

The Website may use cookies or similar technologies that are technically necessary for its operation, security, language or privacy settings.

Strictly necessary technologies may be used without consent where permitted by applicable law.

ClaimsInSport will not place analytics, advertising, behavioural tracking or other non-essential cookies on your device before obtaining your consent where such consent is legally required.

If non-essential cookies or similar technologies are introduced, visitors will be provided with:

• clear information about their purpose;
• the identity of relevant third-party providers where applicable;
• an opportunity to accept or reject them;
• equivalent access to acceptance and rejection choices; and
• an accessible mechanism allowing consent to be withdrawn or preferences to be changed.

Any cookie settings or Cookie Policy made available on the Website form part of this Privacy Policy.

11. Direct marketing

Submitting an enquiry through ClaimsInSport does not subscribe you to marketing communications.

Information provided through the contact form will not be used to send newsletters, promotional emails or similar direct marketing merely because you contacted us about legal services.

Where consent is legally required for direct electronic marketing, such communications will be sent only after obtaining appropriate consent.

Any consent to direct marketing may be withdrawn at any time.

12. Data security

We implement appropriate technical and organisational measures designed to protect personal data against:

• unauthorised access;
• accidental or unlawful disclosure;
• alteration;
• loss;
• destruction; or
• other unlawful processing.

Because information relating to legal matters can be particularly confidential, access to such information is restricted having regard to professional confidentiality requirements and the need to know.

However, no website, email system or electronic transmission method can be guaranteed to be completely secure. You should therefore avoid including unnecessary sensitive information in an initial online enquiry.

13. Your data-protection rights

Subject to the conditions and limitations established by the GDPR and applicable law, you may have the right to:

• access your personal data and obtain information about their processing;
• rectify inaccurate personal data;
• have incomplete personal data completed;
• request erasure of your personal data;
• request restriction of processing;
• object to processing based on legitimate interests;
• receive certain data in a structured, commonly used and machine-readable format and exercise the right to data portability;
• withdraw consent at any time where processing is based on consent; and
• lodge a complaint with a competent data-protection supervisory authority.

Where processing is based on legitimate interests and you object to that processing, we will cease the relevant processing unless there are compelling legitimate grounds for continuing it which override your interests, rights and freedoms, or where processing is required for the establishment, exercise or defence of legal claims.

These rights are not absolute. Their exercise may be limited where necessary to comply with legal or professional obligations, protect professional secrecy or confidentiality, safeguard the rights and freedoms of other persons or establish, exercise or defend legal claims.

To exercise your rights or ask a question concerning your personal data, contact:

info@claimsinsport.com

We may request information reasonably necessary to confirm your identity before responding to a request.

14. Automated decision-making

We do not make decisions producing legal effects or similarly significantly affecting individuals solely through automated processing of personal data.

15. Minors

Sports-law matters may concern athletes who are under the age of 18.

Personal data concerning minors are processed with particular care and only where reasonably necessary for the relevant purpose.

Depending on the circumstances and applicable law, instructions, communications or other steps concerning a minor may need to involve the minor's parent, guardian or other authorised representative.

16. Your right to complain

If you believe that your personal data have been processed unlawfully, you have the right to lodge a complaint with a competent supervisory authority.

In Lithuania, the competent supervisory authority is:

State Data Protection Inspectorate
Valstybinė duomenų apsaugos inspekcija (VDAI)
L. Sapiegos g. 17
LT-10312 Vilnius
Lithuania

Email: ada@ada.lt
Website: vdai.lrv.lt

You may also have the right to complain to another competent supervisory authority in the European Union, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement.

You are welcome to contact us at info@claimsinsport.com first so that we have an opportunity to address your concern directly.

17. Links to other websites

The Website may contain links to websites operated by sports organisations, courts, arbitral bodies, publications, social-media services or other third parties.

ClaimsInSport does not control the processing of personal data carried out independently by those third parties.

When following a link to another website, you should review the privacy information provided by the operator of that website.

18. Changes to this Privacy Policy

We may update this Privacy Policy from time to time, including where:

• the Website or its functionality changes;
• new service providers or technologies are introduced;
• our processing activities change; or
• applicable legal or regulatory requirements change.

The current version will be published on claimsinsport.com, and the date of the latest update will appear at the beginning of the Policy.

19. Contact

For any questions concerning this Privacy Policy or the processing of personal data by ClaimsInSport, please contact:

Antanas Paulauskas, attorney at law
Gynėjų g. 16
LT-01109 Vilnius
Lithuania

Email: info@claimsinsport.com