個人情報保護方針

General information

Public enterprise “Lithuania Travel” (hereinafter referred to as We or Data Controller) is the controller of this website www.lithuania.travel (hereinafter referred to as the Website). In this Privacy Policy (hereinafter referred to as the Privacy Policy), we establish and inform you about the collection and further processing of your personal data on the Website.
This Privacy Policy is applicable to all persons visiting the Website, and the terms and conditions laid down herein are applicable every time you wish to access our content and/or service irrespective of the device (computer, mobile telephone, tablet, etc.) you use.
We process the data of all users of this Website in a lawful, transparent and fair manner, for pre-determined purposes and only to the extent necessary to achieve them. We process your personal data in adherence to the personal data processing requirements set out in the General Data Protection Regulation No 2016/679 (EU) (hereinafter referred to as the GDPR), the Republic of Lithuania Law on Legal Protection of Personal Data, as well as other legal acts or recommendations and/or instructions of supervisory authorities. We also undertake to use all reasonable technical and administrative measures to protect your data collected by us from loss, unauthorised use and/or changes.
 

Persons under the age of 14 cannot provide any personal data through our website/social networking accounts. If you are a person below the age of 14, before submitting personal information, you must obtain the consent of your legal guardians (parents, adoptive parents, guardians, carers.
The terms used in this Privacy Policy are understood as defined in the GDPR.

Details of the Data Controller:

Public enterprise “Lithuania Travel”
Legal entity code: 304971997
Registered office: Gedimino pr. 38, 01104 Vilnius, Lithuania
Phone: +370 698 03 509
E-mail: [email protected]
 

How do we collect information about you?

Your personal data, i.e. any information about you that allow us to recognize you, is collected in various ways:

• You may provide us with information (personal data) directly;
• We may collect information about you automatically;
• In some cases, we acquire information about you from third parties and may collect information about you from publicly available sources.

You may provide us with your personal data directly. Typically this will happen when you:

• Submit a query, request and/or claim to us by phone, e-mail or regular mail.

We may collect information about you automatically. Typically this will happen when you:

• You submit a query through our social networking accounts (Facebook, Instagram, YouTube);
• Publish public posts on social networking platforms (Facebook, Instagram, YouTube) that we are administering;
• Use our Website (data are collected with the help of cookies and similar technologies. You can find further information about cookies that we use down below).

Where permitted by law, we may acquire information about you from third parties. This may be the information provided by marketing agencies or your public profile information (e.g., on Facebook, Instagram, YouTube). We may associate the information we receive about you from yourself, public and commercial sources with other information we receive from you or about you. We may collect information about you in other cases that are not covered by this Privacy Policy as well. If this happens, we will inform you additionally.

What information about you (personal data) do we process?

Although we try to collect as little information about you as possible, we collect the following information for our activities:

• Information that you submit when calling or writing us;
• Information about your achievements, professional or other public activities that are important for the promotion of tourism in Lithuania;
• We do not ask or process special categories of your personal data revealing your racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as health data or data on your sexual life and sexual orientation. your image (recorded in photos); Information about the device you use.

Information we collect from you directly, for example:​​​​​

• Name, surname, e-mail address, address of the place of residence.

Information that we collect automatically will generally concern:

• Information about how you use our Website (device information: IP address, operating system version and parameters of the device you use to access the content; login information: your session time and duration and any and all information stored in cookies set up by us in your device (the cookie policy is provided below); location information: device GPS signal or information about the nearest WiFi access points and mobile towers that may be transferred to us when you use the content of our Website).

Information that we collect from third parties or publicly-available sources is usually as follows:

• Your name, surname, place of work/professional activity/business, education, place of residence, image (recorded in photos).

You may choose not to provide us certain information; however, in this case, we may not be able to provide our service to you (e.g., if you do not indicate the required information that we ask in order to reply to a query submitted by you, we will not be able to answer you).
Important: Personnel of public enterprise “Lithuania travel“ will never ask you to provide, neither in writing nor by telephone or via any other means, your login data, bank card numbers, passwords, or any other information which could be used to cause you financial or any other damage.

Data processing purposes and legal basis

The above information is processed for the following purposes:

• To implement Lithuanian tourism marketing activities and provide information to tourists;
• To carry out the internal administration of the public enterprise “Lithuania travel“;
• To determine quality of internet services provided by the public enterprise “Lithuania travel“;
• To defend interests of the public enterprise “Lithuania travel“ in courts or in other institutions.

The legal basis for our processing of your personal data is one or several of the following lawful processing grounds:

• Compliance with the requirements provided by law;
• Performance of a contract with you;
• Legitimate our or public interests that are not overridden by your private interests;
• In certain cases, your consent.

The purposes, grounds and personal data processed by us are presented in this table:

Where we do not base our processing of personal data on one of the legal bases provided in the table, we will ask for your consent before we process your personal data (these cases will be clear from the circumstances and context).
In some instances, when we use your personal data for purposes that are not described in this Policy, we will notify you by providing a supplemental notice.

Who do we share your personal data with?

• Companies that provide services on our request;
• Law enforcement and state authorities;
• Other parties, where required by law or is necessary to protect our legitimate interests.

Data processors are entitled to process personal data only on the grounds of a written agreement concluded between us and them, in accordance with our instructions, and only to the extent necessary to fulfil obligations set out in the agreement in a duly manner. When we engage processors, we take all measures required to ensure that our data processors have implemented proper organisational and technical safety measures and will keep personal data secret. The list of categories of data processors is as follows:

• Marketing agencies;
• Companies supervising the IT system of the public enterprise “Lithuania travel“;
• Companies providing postal services and courier services;
• Auditors;
• Companies providing legal services.

You can obtain further information about specific companies indicated in this section that could be provided with your personal data by reaching us using the contact details provided in this Privacy Policy.

To which countries your personal data are transferred?

Sometimes we may have to transfer your personal data to other countries that may not have equivalent data protection standards. In such cases, we would do our best to ensure the security of your personal data being transferred.
In very rare cases, we may send your personal data to countries outside of the European Economic Area. In such cases, we make sure that one of the following security measures is used:

• Agreement concluded with the data recipient is based on Standard Contractual Clauses approved by the European Commission;
• Binding corporate rules are applicable;
• Data recipient is incorporated in the country recognised the European Commission as applying adequate data protection standards;
• Codes of conduct, certification mechanisms;
• Permit of the State Data Protection Inspectorate was obtained.

Where none of the aforementioned appropriate security measures are available, we may use exceptions provided in Article 49 of the Regulation (e.g., transfer your data on the grounds of your consent); however, these exceptions may be used only in cases strictly provided for in the Regulation.

How do we protect your personal data?

We have implemented intelligent and appropriate physical and technical measures to protect the information we collect for content/service purposes. However, please keep in mind that while we are taking appropriate action to protect your personal data, no website, online transaction, computer system or wireless connection is completely safe.

How long will we keep your personal data?

We establish personal data retention periods pursuant to the requirements provided by the laws and regulations and instructions of supervisory and/or other competent authorities. Where such requirements (instructions) are not provided, data retention periods are established in consideration of our legitimate or public interests, but they will not exceed 2 years. When data retention periods expire, your data will be erased in such a way that they cannot be restored or anonymized in such a way that there is no possibility to identify you.

Typically, personal data is stored in the following terms:

Your rights

The data subject whose data is processed in the course of our activities, depending on the circumstances, has the following rights:

• To know (to be informed) about his/her data being processed (right to be informed);
• To access personal data processed in the course of our activities and get information about how they are being processed (right to access);
• To demand the rectification of your personal data or, in consideration of personal data processing purposes, have the right to have incomplete personal data completed (right to rectification);;
• To demand the erasure of personal data concerning you (right to be forgotten);
• To require us to restrict the processing of personal data concerning you (right to restriction of processing);
• To require us to transmit personal data provided to us (right to data portability);
• To object at any time to the processing of personal data concerning you which is based on the performance of a task carried out in the public interest, for the purposes of the legitimate interests pursued by us or by a third party, or when personal data are processed for the purposes of direct marketing, including profiling (right to object);
• To withdraw your consent for personal data processing where personal data are processed on the grounds of consent.

We always strive to ensure your rights appropriately and promptly respond to any possible breach in exercising them; therefore, if you have any questions regarding your personal data processed by us, please contact us first. We also note that in all cases you have the right to file a complaint with the State Data Protection Inspectorate at any time.
We offer you easy ways to exercise these rights. You can do this by calling + 370 698 03 509, writing us at Gedimino pr. 38, Vilnius, Lithuania, e-mail [email protected] or by using certain links at the bottom of the promotional content provided by us, if we provide any. Your rights will be fulfilled once your identity is confirmed live (by submitting an ID: personal identity card or passport) or by electronic means (e.g., by electronic signature).
We may refuse to fulfil the aforementioned rights in cases provided by the law where it is necessary to ensure the prevention, investigation or determination of offences, breaches of official or professional ethics, as well as protection of rights and freedoms of data subject or any other persons.

Cookies, signals and similar technologies

In this Privacy Policy, we use the term ‘cookies’ for cookies and other similar technologies, such as Pixel Tags, Web Beacons, and clear GIFs.
When you visit our Website, we want to provide content and features tailored to your needs. This requires cookies. Cookies are small items of information stored in your web browser. They help the data controller to recognize you as the previous visitor to a certain website save the history of your visit to the site and adapt the content accordingly. Cookies also help ensure the smooth running of websites, allow you to monitor the duration, frequency of visits to websites and collect statistics about the number of site visitors. By analysing this data, we can improve our Website and make it more user-friendly for your convenience.

Cookies used in our Website:

When you use browser to access the content we provide, you can configure your browser to accept all cookies, reject all cookies or get notified when a cookie is downloaded. Each browser is different, so if you do not know how to change cookie preferences, look in its help menu. Operating system of your device may have additional cookie controls. If you do not want the information to be collected using cookies, use easy-to-use procedure in most current browsers that allows you to stop using cookies. To learn more about managing cookies, visit: www.allaboutcookies.org/manage-cookies/. .
However, do not forget that some services may be designed to work only if there are cookies. Turning them off, you will no longer be able to use such services or certain parts of them. In addition to the cookies used by the data controller, certain third parties (Google and Facebook), in our websites, can set up and access cookies on your computer. In this case, third-party privacy policies apply to the use of cookies. Please note that our social networking accounts (Facebook, Instagram, YouTube) are subject to the appropriate social networking cookie policies.

External websites

The Website contains links to external websites, i.e. websites of institutions associated with tourism in Lithuania (for example, lodging, catering, organisation of leisure activities). When using such links, please note that these websites and services available via them must have their own separate privacy policies (rules), for which we cannot assume responsibility; therefore, we recommend to read them carefully before providing any of your personal data.

Contact us

If you notice a discrepancy between this Privacy Policy, a security loophole on our Website or other issues related to the processing of your personal data, please contact us in the manner most convenient to you:
By mail: Gedimino pr. 38, 01104 Vilnius, Lithuania;
By phone: + 370 698 03 509;
By e-mail: [email protected]

Final provisions

This Privacy Policy is reviewed and updated as required but at least once per two years or in case of a change in the legal acts regulating the processing of personal data. When our Privacy Policy is updated, we will notify you, in our opinion, about essential changes by posting a notice on the Website.

Last modified on 24th February 2021.