Privacy Policy

In this privacy policy you will find information about UAB „BMS Technologija“ (the data controller) processing of personal data. In processing personal data, the Data Controller shall comply with all legal provisions governing the protection of personal data and personal data protection measures to ensure that personal data are processed accurately, fairly, lawfully, transparently and securely.

 

Purposes, categories of personal data and legal bases for processing personal data

 

  • Provision of services and administration of payments for services

 

Categories of personal data

Legal basis

Name, surname, date of birth, contact details (email address, telephone number, address), ID card details, driving licence details, details of the vehicle to be rented, rental period, pick-up location, additional services ordered in conjunction with the rental services, payment card details required for payment for the services.

When a company wishes to rent a vehicle, we will additionally process the data of the company and its representative - the name, surname, position, name, code number, VAT code, registered office address, telephone number, email address of the company represented.

Performance of contractual obligations (Article 6(1)(b) GDPR).

 

  • Keeping proper accounting records

 

Categories of personal data

Legal basis

Name, surname, address, personal identification number, VAT identification number of the client (his/her representative) where the person is registered as a VAT payer, details of the services (description of the services, the price, the amount paid), the accounting documents issued and the details thereof, and any other accounting and tax data we are obliged to collect, process and store in accordance with the laws and other legal regulations.

The legitimate interest of the controller in the proper keeping of financial records (Article 6(1)(f) GDPR).

 

  • Dealing with enquiries, requests and complaints

 

Categories of personal data

Legal basis

The name, surname, contact details (telephone number or e-mail address), the content of the enquiry, request or complaint (the event, its circumstances, the customer's request, demand or feedback, information about the services ordered and provided, other information), other documents and data submitted in connection with the enquiry, request or complaint.

Performance of contractual obligations (Article 6(1)(b) GDPR), legal obligations and legal requirements (Article 6(1)(c) GDPR)

 

  • Ensuring the security of property owned or controlled by us

 

Categories of personal data

Legal basis

Identity card details, driving licence details.

To ensure the safety of property owned or managed by us and the fair and proper use of our services, rental vehicles are equipped with GPS transmitters that can provide us with data on the location, route and distance travelled of the vehicle rented to you during the rental period.

The legitimate interest of the controller (Article 6(1)(f) of the GDPR) to ensure the protection of the property belonging to him or under his control.

 

 

  • Requesting feedback on services provided 

 

Categories of personal data

Legal basis

Name, surname, email address and content of the feedback on the services provided.

The legitimate interest of the controller (Article 6(1)(f) of the GDPR) to improve the quality of the services provided.

 

 

  • Recovery of debts from defaulting customers

 

Categories of personal data

Legal basis

Name, surname, address, telephone number and email address of the client (representative of the legal person).

The legitimate interest of the controller (Article 6(1)(f) of the GDPR) to recover debts.

 

 

  • Cookie policy.

WHAT ARE COOKIES?
Cookies are small text data files that are automatically created when you browse our website and are stored on your
on the device you're using (computer or mobile phone). The cookie contains anonymous information and is sent to
from the server of the website you are viewing to your computer or mobile phone.

WHAT ARE COOKIES USED FOR?
The Data Controller UAB „BMS Technologija“ (hereinafter also referred to as „the Company“ or „we“) is constantly improving its
the website, to make it as easy and user-friendly as possible. This website uses cookies
to improve your browsing and experience on our website and to learn about the behaviour of our website users,
analyse traffic, improve the website. To achieve these goals, we need to know which information
what our website visitors are most interested in, from which countries and cities our website is visited, and how often visitors return,
which browser is used, on which devices the website is read, etc.
When you visit our website, only essential cookies are placed on your device. Other cookies can only be installed
By checking your consent in the cookie settings. If you disable cookies in your browser, some features of the website
may be partially or completely inoperable.
Essential cookies are used on the basis of the Company's legitimate interest (Article 6(1)(f) of the GDPR), other cookies are used on the basis of your consent,
when you give your consent.

WHAT TYPES OF COOKIES DO WE USE?
Our website uses:

  • Strictly necessary cookies. These cookies are necessary for the website to function properly and for you to be able to browse the website. Without these cookies, the website would not function as smoothly as it should. Your browser settings may be changed to block essential cookies or you may receive a warning about these cookies, but some parts of the website will not work.
  • Statistical cookies. These cookies collect anonymous information that allows us to determine the number of users of the website and the frequency of their visits. The information collected through the use of statistical cookies helps us to improve the performance of the website.

Marketing cookies. These cookies record visits to the website, its pages and links. The information collected using marketing cookies helps to provide the visitor with advertising that is most relevant to them.

We use the following cookies:

Type Cookie name Purpose Period of validity
Analytical __ga Used to measure the user's visit goals, to report website activity to website operators and to improve the customer's experience when visiting the website 2 years
_gat Used to control the number of requests made to a web page. 1 minute
_gid Used for tracking purposes to distinguish between visitors to the website. 24 hours

 

ACCESS TO DATA
„Google Analytics and other tools are provided by Google (a US company), so it also has access to the data collected by this tool.
Data. „Google is subject to contractual privacy obligations, which you can read more about here:
https://marketingplatform.google.com/about/analytics/terms/lt/ .
Access to the data collected by cookies is available to the Company's employees responsible for the analysis of this data and for the online
improving the website. Service providers may also have access to certain data collected using cookies,
who provide hosting services, website content management tools or other
services.

PROFILING AND AUTOMATED DECISION-MAKING
The Data Controller does not use automated processing when processing personal data.

WHAT IF YOU DO NOT WANT COOKIES TO BE USED?
If you wish, you can change your browser settings to notify you when a cookie is activated or updated and
to choose which cookies are allowed or not allowed, to prevent them from being stored or to delete them. If you do,
the website or some of its features may not work or may not work properly, and you may have to manually enter your
your preferred settings each time you visit the website, as any options you have set will also be removed.
To find out more about cookies, such as how to manage or delete them, you can visit www.allaboutcookies.org.

DATA SUBJECT RIGHTS AND THEIR IMPLEMENTATION
For detailed information on data subject rights, please see our Privacy Policy.

CHANGES TO THE COOKIE POLICY
We reserve the right to change our Cookie Policy. Notification of changes or additions and the latest Cookie
A version of the Rules of Use will be published on our website.
We are constantly improving our website to make it as easy and user-friendly as possible. So that we can

 

 

Transmission of personal data. Your personal data may be provided to third parties if this obligation is provided by law. In cases where this is necessary for the performance of our contracts, your personal data will be transferred to companies or consultants providing IT, software maintenance, accounting services, companies or persons providing insurance services, intermediary companies, brokers, partners whose websites are used for making reservations, ordering supplementary services, payment service providers, financial institutions, other companies or persons, insofar as it is necessary for the proper performance of the contract concluded with you. In cases where we seek to protect our legitimate interests in the protection of our property, we may transfer your driving licence data to law enforcement and other public authorities. Where we are pursuing our legitimate interest to assert, enforce or defend legal claims arising from a contract with you, your data may also be transferred to entities providing debt management and collection services, courts, bailiffs or law firms.

 

Storage periods for personal data. We will keep your personal data for no longer than is required by the purposes of the processing or by law. Tax and accounting documents evidencing the conclusion and performance of the contract, which may contain personal data, will be kept for 10 years. The 10-year retention period starts in the year following the end of the calendar year in which the financial year (to which the information relates) ended. Enquiries, requests and complaints
Your data provided for the purpose of the examination will be processed for a period of 12 calendar months from the date of the request, application or complaint. In the case of video surveillance on our premises, video recordings will be kept for a maximum of 30 calendar days. For the purpose of debt recovery, personal data shall be retained during the period of sending debt reminders and while the debt is being recovered, and, in the case of debt recovery, during the term of the contract and for a period of 10 years after the end of the contract and the fulfilment of the obligations, the recovery of the debt or the conclusion of a certificate of impossibility of recovery.

 

Data subject rights and their implementation. You have the right to access your personal data and how they are processed, to request the rectification, completion or destruction of the personal data provided, and to stop the processing of your personal data (withdrawal of your consent). You also have the right to request that the controller restrict the processing of your personal data, the right to data portability, and the right to lodge a complaint with the State Data Protection Inspectorate (contact details
available on the website https://vdai.lrv.lt/) and to object to the processing of the personal data provided. If you would like to receive detailed information on how to exercise these rights, please submit an enquiry to the following email address info@carsrent.lt or by post to Rodūnios kelias 2, LT-02189, Vilnius.

 

Changes to privacy policy. We reserve the right to change our Privacy Policy. A notice of changes and the latest version of the Cookie Policy will be posted on our website.