General provisions

This Privacy Policy is addressed to all clients of Bikebaltic – UAB “Velotakas” (hereinafter – the Company or we) and / or to the visitors of the Company’s website www.bikebaltic.com (hereinafter referred to as “the Website”) and also to other data subjects who use or intend to use the Company’s services.

The Company considers that you are familiar with this Privacy Policy and you agree that the company UAB “Velotakas”, (legal entity code 302643966 registered office address A. Stulginskio st. 5–45, 01115 Vilnius) processes your provided information and personal data for provision of services and the Website management.

The Company is considered as the manager of personal data that is specified in this Privacy Policy. All customers of the Company and/or visitors of the Company’s Website, are data subjects by this Privacy Policy.

While respecting your privacy, the Company makes every effort to ensure the security and confidentiality of your personal data and other information handled by the Company. This also includes information that is recorded in the Company’s website.

The Company reserves the right to modify or supplement this Privacy Policy at its own discretion. Modifications to the Privacy Policy take effect on the day, when the changes are posted on the Website. When you use the Company’s services and/or the Website after the Privacy Policy was modified or supplemented, we consider that you agree with any made additions and changes.

Privacy Policy was last reviewed on and is valid since 19 April 2019. Privacy Policy version No.: 2019 ver. 01.

What is personal data?

Personal data – any information that is related to an identified or identifiable living person. Different pieces of information that may reveal the identity of the individual if assembled together, are also considered to be personal data. For more information on the concept of personal data please check here.

How do we manage your personal data?

The Company manages personal data in accordance with the European Union General Data Protection Regulation (EU) 2016/679 (hereinafter referred to as the Regulation) regarding the personal data transferring and storing by the legislation of the Republic of Lithuania.

The Company understands the importance of personal data protection and manages your personal data by following these rules of personal data processing:

▪ Your personal data is only used for clearly defined and legitimate purposes, that respect your privacy;

▪ Your personal data is processed fairly and lawfully and only for purposes that were stated before the data was collected;

▪ The Company handles your personal data strictly in accordance with the statutory requirements that ensure clear and transparent processing of personal data;

▪ Your personal data is only processed in a form that identifies you for no longer than it is necessary for the purposes for which the personal data was collected;

▪ The processing of your personal data is managed by respecting appropriate technical and organizational measures that seek to ensure the security of personal data, including protection against unlawful processing and unintentional loss.

The Company does not use automated data processing solutions that produce legal effects or may have a significant impact on personal data processing.

What kind of data and for what purposes do we process it?

We collect and manage personal data so that we could provide the services in a proper manner. The Company collects personal data for the below listed purposes:

▪  Tourism services;

▪ Direct marketing;

▪ Customer complaints management;

▪ Processing of personal data of candidates.

Personal data processing for the purposes related to tourism services

While applying for the tourism services, the Company will ask you to provide the following personal data: full name, country of origin, date of birth, email address, telephone number, and other information that may be required to complete the order. Personal data that is collected for the purposes related to tourism services provision is stored for 10 years counting from the day when the order was completed. When data storage period expires, the Company undertakes to destroy the data within a reasonable period of time.

Personal data processing for direct marketing purposes

The Company handles your personal data for direct marketing purposes in accordance with the Company’s Rules which can be found here.

Personal data processing for the reasons related to customer complaints

The Company also processes your data when you submit a complaint, claim or other non-tourist travel order by mail, e-mail or in the Company’s website. This also includes Company’s social network accounts (Facebook, Instagram). Personal data is processed on the legal basis of the contract.

You can file a complaint (claim) directly by contacting the manager who has served you by mail to: A. Stulginskio st. 5–45, 01115 Vilnius or by email: info@velotakas.lt

The personal data that you submitted for handling the complaints (claims) is stored by the Company for 3 years from the day when the complaint was made.

For the purpose of all other inquiries, the Company will keep your personal data until the information provided by you has been properly analyzed and/or the questions you have posed have been answered, but for no longer than 3 months.

Candidates personal data management

When processing the candidate’s personal data, the Company only handle the data that was voluntarily submitted by the candidate.

The Company will keep your personal data for as long as the selection process for a certain position shall require but for no longer than 6 months. Later on, candidate’s personal data is destroyed.

Personal data processing on the Company’s website

The Company manages personalized data by collecting visitors’ statistical data when he/she visits the Company’s website, in order to ensure the provision of quality services and visitor experience improvement. The Company records the following personalized data: IP address, date and duration of visit, subpages visited, devices and apps used for web browsing etc.

Our Website uses Cookies. A cookie is a small text file that a browser places in your device when you visit our site. Cookies are designed to ensure the smooth and secure functioning of the site as well as to understand your habits. This way we can make our website more convenient and efficient.

You can find more information about cookies by reading our Cookies Policy.

The Company’s Website uses the website analysis tool Google Analytics. Because of that we can analyze website’s usage statistical data. You can find more information about Google Analytics and the type of information it registers here.

The Company’s website has a live chat feature, which allows you to directly contact the Company’s employees so that they could consult you. You can also request a service order. When you use tawk.to’s live chat feature, your chat history is forwarded to the Company’s email address and is stored for up to 2 years. You can read more about twok.com Privacy Policy here.

We also use Google, Facebook and other online advertisers. You can familiarize yourself with the privacy policies of these providers and the applicable personal data protection policies in the privacy policies of those providers. For more information on how online advertising works, as well as how you can disagree with the display or use of such ads, please refer to the information provided by advertisers. If you want to learn more about Google provided information press here, if you want to learn more about Facebook provided information press here,  if you want to learn more about Instagram provided information press here.

With the help of OneSignal, Google and Facebook, data collected is not personalized. If the data’s anonymity is secured in such a way that a person’s identity cannot or can no longer be identified is no longer considered to be personal data.

From what sources do we collect your personal data?

The Company manages the data provided by you. You provide the data by visiting our office in order to use the services provided by the Company, calling us by phone, sending an e-mail, visiting the Company’s website or social networking accounts, etc.

To the extent that is permitted by applicable law, we may receive information about you from third parties. This may be information provided by our partners, service providers.

To whom do we provide your personal data?

The Company may, depending on the services you wish to order, transfer your personal data (except for candidates to posts) to our responsible business partners or to companies that provide services at our request.

The data is transferred only to the extent that is necessary to fulfil your order and provide the services.

Data recipients may also be established outside the European Economic Area. When ordering the services of the Company that are physically provided outside the EEA, you understand that your personal data will be transferred to the recipient outside the EEA and such transfer is necessary in order to fulfil the contract or to implement the contractual measures taken at your request.

The Company may also transfer your personal data to other third parties (processors) who manage your personal data and / or have access to it, for example, information systems, designed for the provision of the services. This also includes other persons who assist the Company in providing the services properly. In this case, the Company shall take appropriate measures to ensure that the processors involved process the personal data solely for the purposes specified by the Company, only perform actions that the Company has ordered them to do and ensure appropriate organizational and technical security measures of personal data.

The Company has the right to transfer your personal data to state institutions in order to properly implement the requirements of legal acts. Your personal data may also be passed on to legal services providers when such personal data needs to be disclosed in order to identify, implement or defend the Company’s rights and legitimate interests.

The Company reserves the right to transfer personal data in order to administer debt.

Your rights

We remind you that you as a data subject have these rights:

▪ to be informed about your personal data management;

▪ To know from which sources and what personal data has been collected, for what purpose it was processed, to which recipients of data it has been provided;

▪ To require your personal data correction if the processed data is inaccurate or incorrect;

▪ If you withdraw your consent or have other grounds for doing so, you can require the destruction of your personal data or the suspension of your personal data processing;

▪ To retrieve personal data that you have provided to the Company in a systematic, commonly used, and computer-readable format. You can transfer that data to another data controller, or to require the Company to direct such personal data to another data controller when technically feasible (right to data portability).

You want to use your rights? Contact the Company by email info@velotakas.lt or by phone +370 618 45727

Please note that when exercising your rights, you must properly verify your identity. You should submit a request addressed to the Company along with an identity document or, in the manner prescribed by law, submit a request by electronic means of communication that enable the person to be properly identified.

The Company will provide you with the requested information free of charge within one month, but if the requests you send are manifestly unreasonable or disproportionate, in particular because of their repetitive content, the Company is entitled to charge a reasonable fee to cover the administrative costs or refuse to act upon your request.

If you believe that the Company is inadequately handling your personal data or improperly implementing or enforcing your rights, please contact us first. The company is ready to solve all the problems with you. If you are not satisfied with the Company’s reply, you also have the right to file a complaint to the State Data Protection Inspectorate, which is responsible for the supervision and control of the legal acts that regulate personal data protection (more information: www.ada.lt).

Your responsibilities and duties

You take full responsibility for the correctness and accuracy of the personal data you provide, as well as for the lawfulness of the submission of your personal data. This applies when you use Company’s services and the Company’s Website (eg by filling out the inquiry form). You are responsible for the illegal processing of such personal data and the possible loss of the Company or third parties.

If you change any information related to your personal data, you must immediately inform the Company with a request to change and/or supplement your personal data.

The Company’s rights

The Company has a right to reject your billing offer as well as your personal data if you are under 16 years old. In such case, you must have a consent of your parents or your legal guardians.

If the Company has doubts about the correctness of the personal data or other related information you submit, the Company has the right to request to revise and/or supplement such data. The Company, with all reasonable efforts, strives to ensure the smoothest functioning of the Website but does not undertake to ensure the continuous operation of the Website, when it is influenced by factors that are beyond the control of the Company.

How do we ensure the security of your personal data?

The Company applies and continuously updates appropriate organizational and technical security measures to protect your personal data from accidental or unlawful disclosure, destruction, alteration or any other unlawful actions. These measures are selected considering the risks to your rights that you have as a subject of your personal data.

The Company ensures strict control of access to the personal data. The Company has made confidentiality agreements with persons who have the right to process your personal data. Access to your personal data is granted only to those employees of the Company and only to the extent that is necessary to perform the functions assigned to the Company’s employees and/or provide the services to you.

The company carefully chooses people who can get access to your personal data. Individuals who have access to the personal data must follow instructions we provide and must also ensure the security of your data in accordance with applicable legislation and written agreements.

Have any questions? Contact us

If you have any questions related to your personal data management, please feel free to contact us by e-mail info@velotakas.lt, phone +370 618 45727 You can also send a letter to UAB “Velotakas“ A. Stulginskio st. 5–45, 01115 Vilnius, address the letter to the project manager of UAB “Velotakas“.

If you are not satisfied with the Company’s reply, you also have the right to file a complaint to the State Data Protection Inspectorate, which is responsible for the supervision and control of the legal acts that regulate personal data protection (more information: www.ada.lt).