UAB Autocom LT, legal entity code 302482395, registered office at Savanorių pr. 129, Vilnius (hereinafter – the Company), values your trust and strives to ensure adequate protection of your personal data. We respect your privacy, therefore we undertake to process your personal data legally, to comply with all requirements established by the European Union (General Data Protection Regulation 2016/679) (hereinafter – GDPR) and the legal acts of the Republic of Lithuania.
For all questions related to the processing of your personal data, please contact the Company by e-mail email@example.com.
You can also contact the Company by sending a registered letter to Savanorių pr. 129, Vilnius
The Company receives personal data directly from you when you conclude a short-term and long-term vehicle rental contract with us, agree to participate in the Company’s loyalty and share programme, agree to receive direct marketing messages, send your CV or other information regarding employment in the Company, submit an inquiry or a request to us.
We may also receive your personal data from third parties (for example, your employers). We can also receive information about you in certain cases from our partners, publicly available sources (e.g., LinkedIn), when you have agreed to have this information about you made public.
Conclusion and execution of short-term and long-term rental contracts of vehicles
The company provides short-term and long-term vehicle rental services. In order for the Company to enter into a vehicle rental contract with you and to fulfil it properly, the Company needs to process the following personal data of yours:
To rent a vehicle, it is necessary to process your personal data (name, surname, personal identification number or date of birth, contact data (e-mail, phone number, residential address), driver’s license data (in the form of a photo), image);
Other personal data that the Company processes when you use the vehicle (date and time of vehicle use, place of use of the vehicle and distance travelled).
The specified personal data are processed on the basis of the conclusion or execution of the contract and/or the fulfilment of the obligations set forth in legal acts, the Company’s legitimate interests.
Your personal data is processed and stored for 5 years from the date of providing vehicle rental services. Information about your specific trip (date, time, place and distance travelled) is stored for 2 years from the end of your specific trip by vehicle.
The Company receives your personal data both when you provide your personal data upon physical arrival at the Company's branch, and when using the vehicle rental service platforms created by the Company(www.autocomcarrental.com or mobile application AUTOCOM GO).
In order to provide vehicle rental services, the Company may also process your personal data in cases where your employer is a client of the Company. In this case, the Company will process your name, contact data (e-mail, phone number), information about the workplace and the position held, driver's license data (if you use the vehicle on behalf of the employer), other data that the Company will process for you while you use the vehicle (date and time of use of the vehicle, place of use of the vehicle and distance travelled), image.
Your personal data is processed on the basis of the Company’s legitimate interests and stored for 5 years from the date of providing vehicle rental services. Information about your specific trip (date, time, place and distance travelled) is stored for 2 years from the end of your specific trip by vehicle.
In such case, when your personal data is provided in the contract between the Company and your employer, your personal data is processed for 10 years after the end of the specific contract.
The Company informs you that in implementing the requirements of legal acts, your personal data may be transferred to state and municipal institutions. In most cases, your personal data will be transferred to the Police Department under the Ministry of Internal Affairs of the Republic of Lithuania or to a specific unit of it due to a traffic violation committed by you using a vehicle provided by the Company.
Management and administration of personal accounts
In order to provide higher quality and simpler vehicle rental services, we suggest that vehicle reservations be made after creating your own account on www.autocomcarrental.lt website or on mobile application AUTOCOM GO. Once you have created one personal account, you will be able to login to your account using any of the above platforms.
In order to ensure the functionality and administration of the aforementioned personal accounts, the Company must process your name, surname, e-mail address (as login name) and account password, account creation date.
The aforementioned personal data is processed on the basis of the Company’s legitimate interest.
An active account is considered an account that has been used at least once in a 5-year period. For this reason, the Company will process and store your personal data for 5 years from the date of your last use of the Company’s services.
Data about your personal account is not provided to anyone.
Execution of company contracts
In order to conclude or execute a contract, the Company may process the personal data of employees of companies with which the Company has concluded or seeks to conclude contracts for the provision of services.
In such cases, we process the name, surname, workplace, and content of correspondence with the Company of the above-mentioned persons (contractor employees).
These aforementioned personal data are processed on the basis of the Company’s legitimate interest.
For this purpose of data processing, personal data is stored for as long as the relevant service provision agreement with the Company is valid and for 10 years from the end of the contractual relationship with the Company.
Loyalty and discount programme execution
By using the Company’s vehicles, you can also participate in the loyalty and discount programme organised by the Company and receive special offers and discounts tailored to you.
Participation in the loyalty and discount programme is possible only if you actively agree to participate in such a programme.
During your participation in the Loyalty and Discounts Programme, the Company processes your name, surname, order history (history and frequency of using vehicles).
All personal data is processed based on your consent.
Personal data is processed and stored for 5 years from the date of providing vehicle rental services.
Conducting direct marketing
The company may conduct direct marketing in individual cases. The Company can contact and send newsletters to persons who have provided their contact details (e-mail) and have expressed a desire to receive information about the Company’s services and newsletters.
For the purpose of direct marketing, the Company will process the following personal data: name, surname, e-mail address.
Your data will be processed for direct marketing purposes for 2 (one) years after receiving consent.
You have the right to opt out of receiving direct marketing communications at any time by contacting us by e-mail firstname.lastname@example.org.
Recording of telephone conversations to preserve evidence of the terms of future transactions and/or transactions entered into and executed
The Company, in order to protect itself from future disputes with individuals and in order to collect evidence about the details discussed during a telephone conversation with the Company’s client, records telephone conversations.
For this purpose, the Company processes the following personal data: Your phone number, voice and other information you choose to provide to the Company.
In all cases, the Company processes your personal data based on your consent. Every time you call the Company, you are informed about the recording of the telephone conversation. In this case, if you do not agree to the recording of the telephone conversation, please come to the nearest branch of the Company or contact the Company by other means of communication.
Created recordings of telephone conversations will be stored for 6 months after the creation of the recording of the telephone conversation.
Video surveillance for the protection of persons and property
The company carries out video surveillance in its branches for the purpose of protecting persons and property. The Company does not conduct video surveillance in the premises of the Company’s branches where a person can expect absolute privacy.
During video surveillance, the Company processes your image.
Created videos are stored for 14 calendar days.
The company conducts video surveillance on the basis of a legitimate interest in ensuring the protection of persons and property.
Tracking of vehicles (with the help of navigation devices) for the purposes of asset protection and service provision
The Company, in order to protect its assets (vehicles) and to properly provide vehicle rental services, tracks the vehicles used by the Company with the help of navigation devices.
The company processes your name, surname and location (starting place, trip and ending place).
The Company carries out vehicle tracking on the basis of the Company's legitimate interest.
Collected personal data is stored for 1 day.
Processing of personal data in instances of providing services to persons
The Company also processes your personal data in cases where you contact us, submit requests, questions, and send information through the Company’s publicly announced contacts.
You provide us with your personal data on the basis of consent, which is expressed by your active actions, i.e., contacting us.
Depending on the way you choose to contact us, the amount of personal data processed may vary.
Your collected personal data is stored for 1 (one) year from the date of your contact with us. In individual cases, in accordance with the requirements of legal acts, your personal data may be stored longer.
Administration of candidates for a vacant position
The Company may also process the personal data provided by you for the purposes of administration of candidates for a vacant position, when you submit your personal data to the Company in order to join the Company’s team. In this instance, you provide us with your personal data on the basis of consent, which is expressed by your active actions, i.e., contacting us.
We collect and process your resume and/or cover letter (and, accordingly, all information provided in them) and/or other information provided by you during the selection process (including but not limited to the content of correspondence with you). The provided data is processed for the purpose of personnel selection on the basis of your consent, which you express to us or to the company providing recruitment services by sending your resume.
If you do not submit your resume and/or cover letter, we will not be able to assess your suitability for the position offered.
Please do not send any personal information that is not related to your professional abilities, qualifications, and is not necessary to assess your suitability for the relevant position. Please do not include unnecessary personal data, such as personal identification number, marital status, special (sensitive) data, financial data, bank account number, etc., either in the letter or in the attached CVs and cover letters.
The Company will store your received data until the end of the specific selection for the vacancy, except in cases where you agree that your personal data will be stored for an additional 1 (one) year. You have the right to withdraw your consent at any time. We emphasise that the withdrawal of your consent will not affect the legality of the processing of your personal data until the corresponding withdrawal of the consent.
We would like to inform you that in order to evaluate your candidacy, we may contact your former employers and ask for information about your qualifications, professional abilities and/or professional qualities.
DATA PROCESSORS AND DATA RECIPIENTS
The company, in accordance with GDPR provisions, has the right to use data processors. A personal data processing contract is concluded with them, taking into account the requirements of the aforementioned regulation.
The company may use data processors to perform certain personal data processing actions. These service providers perform personal data processing actions only in accordance with the Company’s instructions. Third parties that process personal data are selected carefully and in accordance with applicable data protection legislation.
We may disclose information about you to our employees, service providers, such as information system administrators, state institutions supervising our activities, mandatory submission of data to state registers and/or databases, etc.
In addition, we may disclose information about you:
if we are required to do so by law;
in order to defend your rights or interests (including providing your data to third parties in order to collect your debts to us);
intending to sell a part of the Company’s activity or its assets, disclosing your personal data to a potential buyer of the activity or its part;
after selling the Company’s activities or a substantial part of its assets to third parties.
Based on your consent, we can transfer your personal data to other third parties.
Your personal data will not be transferred to any third country and/or an international organisation.
A cookie is information that a web server sends to a web browser and that is stored in the browser. This information is sent to the web server every time the browser requests to open a page from the server. Cookies are intended to ensure the smooth operation of the website.
With the help of cookies, the Company can collect information about the number of website visitors, IP address of visitors, etc.
However, please note that in some cases, deleting cookies may slow down your internet browsing speed, limit the functionality of certain website functions or block access to our website.
A system cookie is used for Google Map settings. A unique identifier is used.
During the session
System help block cookie. A unique identifier is used.
During the session
Your personal data is processed in compliance with GDPR and other legal requirements. When processing your personal data, we implement organisational and technical measures that ensure the protection of personal data against accidental or illegal destruction, alteration, disclosure, as well as against any illegal processing.
They include: active and reactive risk management, encryption, periodic software updates, use of anti-virus programs, access control and security systems, controlled access/user authorisation and maintenance, etc.
The company will provide you with information about the actions taken upon receipt of your request regarding the exercise of your rights without undue delay, but no later than within 1 (one) month from the receipt of the request. Considering the complexity of the request and the number of requests received, the above-mentioned deadline can be extended for another 2 (two) months. In this case, we will inform you about such extension of the deadline and the reasons for it within 1 (one) month after receiving the request. The company will refuse to exercise your rights only in the cases provided for by legal acts.
The Company will implement the rights of data subjects without undue delay, but in any case no later than one month after receiving the request. Within the specified period, the Company will provide the data subject with information about the actions taken upon receiving the request. The Company may extend the one-month period for another two months, taking into account the complexity and number of requests, but in any case, the Company will inform you of such an extension within one month of receiving the request, as well as indicating the reasons for the delay.
As a data subject, you have the following rights:
The right to be informed about the data processing
The right to access your personal data processed
The Company will confirm to you whether personal data related to you are being processed, and if such personal data is being processed, it will provide all the necessary information: the purposes of data processing; categories of relevant personal data; data recipients or categories of data recipients to whom personal data has been or will be disclosed; the periods of personal data storage or, if not possible, the criteria for determining that period; the right to request the data controller to correct or delete personal data or to limit the processing of personal data related to the data subject or to object to such processing; when personal data is not collected from the data subject, all information about its sources is available. A copy of the processed personal data will be provided by the Company.
The right to demand correction of your processed personal data
You have the right to demand from the Company that it immediately correct inaccurate personal data. Depending on the purposes for which the data were processed, you have the right to demand that incomplete personal data be supplemented.
The right to limit data processing:
You have the right to ask us to limit the processing of your personal data or not to process them:
during the period necessary for us to verify the accuracy of your personal data when you submit claims regarding the accuracy of the data;
when our collection, storage or use of your personal data is illegal, but you decide not to request data deletion;
when we no longer need your personal data, but you need it to establish, fulfil or defend a legal claim;
for the period required to determine whether we have an overriding legal basis to continue processing your personal data, if you have exercised your right to object to the processing of personal data.
The right to request data deletion
If there is a basis (for example, the personal data is no longer necessary to achieve the purposes for which it was collected, etc.), you can request that your personal data be deleted.
The right to object to data processing (disagree)
You have the right to object at any time to your personal data being processed when such data processing is carried out to achieve the legitimate interests of the Company, except when the Company processes data for reasons that are superior to the interests, rights and freedoms of the data subject, or in order to defend legal claims .
The right to data portability
In cases where the Company processes your personal data by automated means with your consent or on the basis of a contract concluded with the Company, you have the right to receive the personal data you have provided in a structured and computer-readable format, and forward them to another data controller, and the Company will not create obstacles to this. You have the right for the Company to transfer your personal data to another data controller when this is technically possible.
If you are not satisfied with the results of the investigation, you can submit a complaint to the supervisory authority – the State Data Protection Inspectorate(www.vdai.lrv.lt).
Read more about the exercise of your rights as a data subject in the Company’s Procedure for Exercising the Rights of Data Subjects..