Purpose:
This Privacy Policy aims to inform you how we collect and process your personal data, explain how long we keep it, who we disclose it to, and your rights as a data subject.
Legal Framework:
We process your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (hereinafter referred to as the GDPR), the Law on Legal Protection of Personal Data of the Republic of Lithuania, and other legal acts regulating the protection of personal data.
Data Management Principles:
- Keep-n-Trip Lithuania is guided by the following core data management principles:
- Personal data is collected only for clearly defined and legitimate purposes.
- Personal data is processed only lawfully and fairly.
- Personal data is kept up-to-date.
- Personal data is stored securely and no longer than necessary for the stated data processing purposes or legal requirements.
- Personal data is processed only by the Company's employees who have been authorized to do so in accordance with their job duties or by authorized data processors.
Definitions:
1.1. Data Controller - Keep-n-Trip Lithuania (hereinafter referred to as the Company), legal entity code 306131714, registered address Naugarduko g., 99-301A, LT-03160, Vilnius, Lithuania.
1.2. Data subject - any natural person whose data is processed by the Company. The Data Controller collects only the data of the data subject that is necessary for the Company's activities and/or when visiting, using, browsing the Company's websites, social media accounts, etc. (hereinafter referred to as the Website). The Company guarantees that the collected and processed personal data will be safe and will be used only for specific purposes.
1.3. Personal data - any information directly or indirectly related to the data subject, whose identity is known or can be directly or indirectly identified using the relevant data. Processing of personal data - any operation performed with personal data (including collection, recording, storage, editing, modification, provision of access, submission of requests, transfer, archiving, etc.).
1.4. Consent - any freely given and specific informed confirmation by which the data subject agrees to the processing of his/her personal data for a specific purpose.
1.5. Cookies - small pieces of text information used on the Company's website, which are automatically created when browsing the website and stored on the computer or other device used by the data subject (website visitor). Cookies are used to improve the browsing experience, analyze traffic and visitor behavior on the website.
2. Sources of Personal Data
2.1. Personal data is provided by the data subject himself/herself. The data subject contacts the Company, uses the services provided by the Company, purchases goods and/or services, leaves comments, asks questions, subscribes to the newsletter, contacts the Company for information, etc.
2.2. Personal data is collected when the data subject visits the Company's website. The data subject fills in forms or leaves his/her contact details, etc. for any reason.
2.3. Personal data obtained from other sources. Data obtained from other institutions or companies, state registers, etc.
3. Processing of Personal Data
3.1. By submitting personal data to the Company, the data subject agrees that the Company will use the collected data to fulfill its obligations to the data subject, to provide the services that the data subject expects.
3.2. The Company processes personal data for the following purposes:
3.2.1. Ensuring the continuity of the Company's activities. For this purpose, the following data is processed:
For the purpose of concluding and executing contracts, the personal data of suppliers (individuals) may be processed: name(s), surname(s), identification number or date of birth, place of residence (address), telephone number, e-mail address, address, place of work, job duties, current bank account and the bank where this account is located, date, amount, currency and other data of the money transaction or operation presented by the person himself/herself, which the Company receives in accordance with the law in the course of the Company's activities and/or which the Company is obliged to process by law and/or other legal acts. For example, data contained in the certificate of individual activity (type of activity, group, code, name, periods of activity, date of issue, amount), individual activity certificate number, information whether the data subject is a VAT payer, etc. data necessary for the proper fulfillment of the obligations provided for in the contract and (or) legal acts.
Contracts, VAT invoices and other relevant documents are stored in accordance with the terms specified in the General Index of Document Storage, approved by the order of the Chief Archivist of Lithuania.
The legal basis for data processing is the necessity to fulfill the contract, to which the client is a party as a data subject, or to respond to the client's request before concluding a contract with him/her (GDPR, Article 6 d. 1 point b) if certain personal
3.2.2. Inquiries, comments and complaints. For this purpose, the following data is processed:
Name(s), surname(s) and/or username, email address, phone number, address, message topic, comment, feedback or complaint, message text, comment, feedback or complaint.
Data on requests, comments and complaints is stored for 1 calendar year from the date of submission.
The legal basis for data processing is the processing of data necessary for the realization of the legitimate interests of the controller or a third party, except in cases where such interests of the data subject or fundamental rights and freedoms are necessary to ensure the protection of personal data. to cancel them, especially if the data subject is a child (GDPR, Article 6 d.1, point f) and the consent of the data subject (GDPR, Article 6 d.1, point a).
3.2.3. Electronic Commerce
For this purpose, the following data is processed:
Name(s), surname(s), purchase history, delivery address, residence address, phone number, email address, payment details for goods/services, accumulated loyalty points.
Personal data is stored only to the extent and for as long as necessary to achieve the stated goals. In the event of termination of the processing of the client's personal data, a decision is made to destroy them, with the exception of those that are subject to archival storage in accordance with the requirements of legislative acts or internal local legislation of the company in cases established by law.
The legal basis for data processing is the necessity to fulfill the contract, to which the client is a party as a data subject, or to take actions at the request of the client before concluding a contract with him/her (GDPR, Article 6 d. 1 point b)).
3.2.4. Direct Marketing
For this purpose, the following data is processed:
Name (name), date of birth, phone number, email address.
The data is stored for 5 years from the date of consent. This period may be extended if personal data is used or may be used as evidence or a source of information in the course of a pre-trial or other investigation, including an investigation conducted by the State Security Service, in a civil, administrative or criminal case, as well as in other cases provided for by law. In this case, personal data may be stored for as long as necessary for the purposes of data processing and immediately destroyed when they are no longer needed.
The legal basis for data processing is the consent of the data subject (Article 6 d.1 point a GDPR) and the need to realize the legitimate interests of the company in improving its activities and business efficiency (Article 6 d.1 point f GDPR).
3.2.5. To ensure the safety of company employees, other data subjects and property (video surveillance).
For this purpose, the following data is processed:
Image image. Video surveillance systems do not use face recognition and/or analysis technologies, the video data they record is not grouped or profiled by a specific data subject (person). The data subject is informed about the current video surveillance by means of information signs with a video camera symbol and information about the company, which are displayed in front of the entrance to the controlled zone and/or premises. Premises where the data subject expects full protection of personal data are not covered by video surveillance using video cameras.
Personal data (video data) obtained from video surveillance cameras is stored for up to 30 (thirty) calendar days from the date of recording, after which it is automatically destroyed, unless there is reason to believe that an offense has been committed. a criminal act or other illegal actions have been recorded (until the end of the relevant investigation and (or) trial).
The legal basis for data processing is the processing of data necessary for the realization of the legitimate interests of the controller or a third party, except in cases where such interests of the data subject or fundamental rights and freedoms are necessary to ensure the protection of personal data. to cancel them, especially if the data subject is a child (Article 6 d. 1 point f GDPR).
3.2.6. For other purposes for which the Company has the right to process the personal data of the data subject, if the data subject has given his/her consent, if the data must be processed in accordance with the legitimate interests of the Company or if the Company is obliged to process the data by relevant legal acts.
4. Use of Cookies
4.1. The Company uses cookies on the website with the aim of improving and improving the quality of customer and website visitor service.
4.2. The following types of cookies can be used on the Company's website:
4.2.1. Technical (necessary) cookies - help the website visitor to display the website and its contents, help to ensure the functionality of the website, create an account, log in to your account and process your orders. Technical cookies are necessary for the normal operation of the website, and their use does not require the consent of the website visitor.
4.2.2. Functional cookies - are used to help the website visitor use the company's website, remember the choices and preferences made during browsing. Functional cookies are not required for the full functionality of the website, but they add functionality and improve your experience of using the company's website.
4.2.3. Analytical cookies - are used to collect information about how website visitors use the company's website. This is necessary for the optimization and improvement of the company's website. With the help of analytical cookies, we can collect data about the web pages you have viewed, the pages you have come from and which emails you have sent. emails, which you have opened and replied to, as well as information about the date and time. This also means that we may use information about you and how you use this website, such as the frequency of visits, the number of clicks on a specific page, the search queries used, etc.
4.2.4. Commercial (targeting or advertising) cookies - are used to deliver personalized advertising to visitors to the company's website. This is called "remarketing", which is based on browsing such actions as the products and/or services you are looking for, browsing.
4.3. Company employees responsible for analyzing this data and improving the website have access to statistical data about visitors to the company's website.
4.4. Access to technical records may also be provided by the Company's partners, who provide tools for managing the content of the Company's website.
4.5. The Google Analytics tool is provided by the American company Google Inc., therefore it also has access to statistical data collected by the Google Analytics tool. This provider is subject to contractual and legal obligations to ensure confidentiality.
4.6. The data collected with the help of cookies is stored by the company no longer than necessary to achieve the data processing purposes, or no longer than required by the data subject and/or provided for by legal acts.
4.7. More information about cookies can be found on the website AllAboutCookies.org.
4.8. If you do not agree with our use of cookies, you have the option to change your internet browser settings and control the number of cookies. Useful links on how to opt out of cookies can be found below:
For Chrome browser: https://support.google.com/chrome/answer/95647?hl=en;
For Firefox browser: https://support.mozilla.org/en-US/kb/cookies-information-websites-store-on-your-computer?redirectlocale=en-US&redirectslug=Cookies;
For Safari browser: https://support.apple.com/guide/safari/manage-cookies-and-website-data-sfri11471/mac;
For Edge browser: https://support.microsoft.com/en-us/help/4468242/microsoft-edge-browsing-data-and-privacy-microsoft-privacy.