Pickup
Date
Time
Return
Date
Time

Privacy policy

PRIVACY POLICY

  1. WHAT DOES THIS PRIVACY POLICY MEAN?

UAB Autocom LT, legal entity code 302482395, registered office at Savanorių pr. 129, Vilnius (hereinafter – the Company), values your trust and strives to ensure adequate protection of your personal data. We respect your privacy, therefore we undertake to process your personal data legally, to comply with all requirements established by the European Union (General Data Protection Regulation 2016/679) (hereinafter – GDPR) and the legal acts of the Republic of Lithuania.

This Privacy Policy contains information about persons who use the short-term and long-term vehicle rental services provided by the Company, participate in the loyalty and promotion programme prepared by the Company, visitors to this website, persons who have agreed to receive the Company’s direct marketing messages or participate in the publicity of the Company’s activities and/or services, candidates for vacancies in the Company, processing of personal data of the Company’s employees.

The privacy policy contains information about the amount of personal data processed, purposes, sources of personal data, recipients, purposes of data processing, etc.

The company may process your personal data for other purposes or by other means than specified in this Privacy Policy. In this case, we will inform you about it in a separate message.

This privacy policy may be changed, updated, so we encourage you to periodically review it, as well as familiarise yourself with it every time you visit this website.

  1. CONTACT INFORMATION

For all questions related to the processing of your personal data, please contact the Company by e-mail info@autocomcarrental.com.

You can also contact the Company by sending a registered letter to Savanorių pr. 129, Vilnius

  1. PERSONAL DATA

The Company receives personal data directly from you when you conclude a short-term and long-term vehicle rental contract with us, agree to participate in the Company’s loyalty and share programme, agree to receive direct marketing messages, send your CV or other information regarding employment in the Company, submit an inquiry or a request to us.

We may also receive your personal data from third parties (for example, your employers). We can also receive information about you in certain cases from our partners, publicly available sources (e.g., LinkedIn), when you have agreed to have this information about you made public.

Below in this Privacy Policy, information is provided about what personal data we process, for what purposes and how we process your personal data, on what legal grounds we base the processing of your personal data, to whom we can transfer your personal data.

Conclusion and execution of short-term and long-term rental contracts of vehicles

The company provides short-term and long-term vehicle rental services. In order for the Company to enter into a vehicle rental contract with you and to fulfil it properly, the Company needs to process the following personal data of yours:

The specified personal data are processed on the basis of the conclusion or execution of the contract and/or the fulfilment of the obligations set forth in legal acts, the Company’s legitimate interests.

Your personal data is processed and stored for 5 years from the date of providing vehicle rental services. Information about your specific trip (date, time, place and distance travelled) is stored for 2 years from the end of your specific trip by vehicle.

The Company receives your personal data both when you provide your personal data upon physical arrival at the Company's branch, and when using the vehicle rental service platforms created by the Company(www.autocomcarrental.com or mobile application AUTOCOM GO).

In order to provide vehicle rental services, the Company may also process your personal data in cases where your employer is a client of the Company. In this case, the Company will process your name, contact data (e-mail, phone number), information about the workplace and the position held, driver's license data (if you use the vehicle on behalf of the employer), other data that the Company will process for you while you use the vehicle (date and time of use of the vehicle, place of use of the vehicle and distance travelled), image.

Your personal data is processed on the basis of the Company’s legitimate interests and stored for 5 years from the date of providing vehicle rental services. Information about your specific trip (date, time, place and distance travelled) is stored for 2 years from the end of your specific trip by vehicle.

In such case, when your personal data is provided in the contract between the Company and your employer, your personal data is processed for 10 years after the end of the specific contract.

The Company informs you that in implementing the requirements of legal acts, your personal data may be transferred to state and municipal institutions. In most cases, your personal data will be transferred to the Police Department under the Ministry of Internal Affairs of the Republic of Lithuania or to a specific unit of it due to a traffic violation committed by you using a vehicle provided by the Company.

Management and administration of personal accounts

In order to provide higher quality and simpler vehicle rental services, we suggest that vehicle reservations be made after creating your own account on www.autocomcarrental.lt website or on mobile application AUTOCOM GO. Once you have created one personal account, you will be able to login to your account using any of the above platforms.

In order to ensure the functionality and administration of the aforementioned personal accounts, the Company must process your name, surname, e-mail address (as login name) and account password, account creation date.

The aforementioned personal data is processed on the basis of the Company’s legitimate interest.

An active account is considered an account that has been used at least once in a 5-year period. For this reason, the Company will process and store your personal data for 5 years from the date of your last use of the Company’s services.

Data about your personal account is not provided to anyone.

You have the right to object at any time (in accordance with the procedure provided in Chapter 7 of the Privacy Policy) and to request the deletion of your account. In this case, your account will be deleted and you will not be able to continue using the Company’s services. We emphasise that the deletion of the account does not affect the processing and storage of your personal data for other personal data processing purposes presented in this Privacy Policy (for example, the processing of personal data for the purpose of concluding and executing short-term and long-term vehicle rental contracts).

Execution of company contracts

In order to conclude or execute a contract, the Company may process the personal data of employees of companies with which the Company has concluded or seeks to conclude contracts for the provision of services.

In such cases, we process the name, surname, workplace, and content of correspondence with the Company of the above-mentioned persons (contractor employees).

These aforementioned personal data are processed on the basis of the Company’s legitimate interest.

For this purpose of data processing, personal data is stored for as long as the relevant service provision agreement with the Company is valid and for 10 years from the end of the contractual relationship with the Company.

Loyalty and discount programme execution

By using the Company’s vehicles, you can also participate in the loyalty and discount programme organised by the Company and receive special offers and discounts tailored to you.

Participation in the loyalty and discount programme is possible only if you actively agree to participate in such a programme.

During your participation in the Loyalty and Discounts Programme, the Company processes your name, surname, order history (history and frequency of using vehicles).

All personal data is processed based on your consent.

Personal data is processed and stored for 5 years from the date of providing vehicle rental services.

Conducting direct marketing

The company may conduct direct marketing in individual cases. The Company can contact and send newsletters to persons who have provided their contact details (e-mail) and have expressed a desire to receive information about the Company’s services and newsletters.

For the purpose of direct marketing, the Company will process the following personal data: name, surname, e-mail address.

Your data will be processed for direct marketing purposes for 2 (one) years after receiving consent.

You have the right to opt out of receiving direct marketing communications at any time by contacting us by e-mail info@autocomcarrental.com.

Recording of telephone conversations to preserve evidence of the terms of future transactions and/or transactions entered into and executed

The Company, in order to protect itself from future disputes with individuals and in order to collect evidence about the details discussed during a telephone conversation with the Company’s client, records telephone conversations.

For this purpose, the Company processes the following personal data: Your phone number, voice and other information you choose to provide to the Company.

In all cases, the Company processes your personal data based on your consent. Every time you call the Company, you are informed about the recording of the telephone conversation. In this case, if you do not agree to the recording of the telephone conversation, please come to the nearest branch of the Company or contact the Company by other means of communication.

Created recordings of telephone conversations will be stored for 6 months after the creation of the recording of the telephone conversation.

Video surveillance for the protection of persons and property

The company carries out video surveillance in its branches for the purpose of protecting persons and property. The Company does not conduct video surveillance in the premises of the Company’s branches where a person can expect absolute privacy.

During video surveillance, the Company processes your image.

Created videos are stored for 14 calendar days.

The company conducts video surveillance on the basis of a legitimate interest in ensuring the protection of persons and property.

Tracking of vehicles (with the help of navigation devices) for the purposes of asset protection and service provision

The Company, in order to protect its assets (vehicles) and to properly provide vehicle rental services, tracks the vehicles used by the Company with the help of navigation devices.

The company processes your name, surname and location (starting place, trip and ending place).

The Company carries out vehicle tracking on the basis of the Company's legitimate interest.

Collected personal data is stored for 1 day.

Processing of personal data in instances of providing services to persons

The Company also processes your personal data in cases where you contact us, submit requests, questions, and send information through the Company’s publicly announced contacts.

You provide us with your personal data on the basis of consent, which is expressed by your active actions, i.e., contacting us.

Depending on the way you choose to contact us, the amount of personal data processed may vary.

Your collected personal data is stored for 1 (one) year from the date of your contact with us. In individual cases, in accordance with the requirements of legal acts, your personal data may be stored longer.

Administration of candidates for a vacant position

The Company may also process the personal data provided by you for the purposes of administration of candidates for a vacant position, when you submit your personal data to the Company in order to join the Company’s team. In this instance, you provide us with your personal data on the basis of consent, which is expressed by your active actions, i.e., contacting us.

We collect and process your resume and/or cover letter (and, accordingly, all information provided in them) and/or other information provided by you during the selection process (including but not limited to the content of correspondence with you). The provided data is processed for the purpose of personnel selection on the basis of your consent, which you express to us or to the company providing recruitment services by sending your resume.

If you do not submit your resume and/or cover letter, we will not be able to assess your suitability for the position offered.

Please do not send any personal information that is not related to your professional abilities, qualifications, and is not necessary to assess your suitability for the relevant position. Please do not include unnecessary personal data, such as personal identification number, marital status, special (sensitive) data, financial data, bank account number, etc., either in the letter or in the attached CVs and cover letters.

The Company will store your received data until the end of the specific selection for the vacancy, except in cases where you agree that your personal data will be stored for an additional 1 (one) year. You have the right to withdraw your consent at any time. We emphasise that the withdrawal of your consent will not affect the legality of the processing of your personal data until the corresponding withdrawal of the consent.

We would like to inform you that in order to evaluate your candidacy, we may contact your former employers and ask for information about your qualifications, professional abilities and/or professional qualities.



  1. DATA PROCESSORS AND DATA RECIPIENTS

The company, in accordance with GDPR provisions, has the right to use data processors. A personal data processing contract is concluded with them, taking into account the requirements of the aforementioned regulation.

The company may use data processors to perform certain personal data processing actions. These service providers perform personal data processing actions only in accordance with the Company’s instructions. Third parties that process personal data are selected carefully and in accordance with applicable data protection legislation.

We may disclose information about you to our employees, service providers, such as information system administrators, state institutions supervising our activities, mandatory submission of data to state registers and/or databases, etc.

In addition, we may disclose information about you:

Based on your consent, we can transfer your personal data to other third parties.

Your personal data will not be transferred to any third country and/or an international organisation.

  1. COOKIES

A cookie is information that a web server sends to a web browser and that is stored in the browser. This information is sent to the web server every time the browser requests to open a page from the server. Cookies are intended to ensure the smooth operation of the website.

With the help of cookies, the Company can collect information about the number of website visitors, IP address of visitors, etc.

When you use your browser to access content we provide, you can configure your browser to accept all cookies, reject all cookies, or notify you when a cookie is being sent. Every browser is different, so if you don't know how to change your cookie settings, check its help menu. Your device’s operating system may have additional cookie controls. If you do not want information to be collected with the help of cookies, use the simple procedure available in most browsers that allows you to refuse the use of cookies. To learn more about how to manage cookies, visit: http://www.allaboutcookies.org/manage-cookies/.

However, please note that in some cases, deleting cookies may slow down your internet browsing speed, limit the functionality of certain website functions or block access to our website.



Title

Expiry date

Purpose

NID

1 year

A system cookie is used for Google Map settings. A unique identifier is used.

TawkConnection Time

During the session

System help block cookie. A unique identifier is used.

_dc_gtm_UA-80048190-4

During the session

Statistics cookie



  1. DATA SECURITY

Your personal data is processed in compliance with GDPR and other legal requirements. When processing your personal data, we implement organisational and technical measures that ensure the protection of personal data against accidental or illegal destruction, alteration, disclosure, as well as against any illegal processing.

They include: active and reactive risk management, encryption, periodic software updates, use of anti-virus programs, access control and security systems, controlled access/user authorisation and maintenance, etc.

  1. YOUR RIGHTS

In this section, we provide information about your rights related to the processing of your personal data and the cases when you can use these rights. If you would like more information about or to exercise your rights, please contact us at the e-mail address provided in this Privacy Policy.

The company will provide you with information about the actions taken upon receipt of your request regarding the exercise of your rights without undue delay, but no later than within 1 (one) month from the receipt of the request. Considering the complexity of the request and the number of requests received, the above-mentioned deadline can be extended for another 2 (two) months. In this case, we will inform you about such extension of the deadline and the reasons for it within 1 (one) month after receiving the request. The company will refuse to exercise your rights only in the cases provided for by legal acts.

The Company will implement the rights of data subjects without undue delay, but in any case no later than one month after receiving the request. Within the specified period, the Company will provide the data subject with information about the actions taken upon receiving the request. The Company may extend the one-month period for another two months, taking into account the complexity and number of requests, but in any case, the Company will inform you of such an extension within one month of receiving the request, as well as indicating the reasons for the delay.

As a data subject, you have the following rights:

The right to be informed about the data processing

The Company will provide you with all information that you have the right to receive and which is not specified in this Privacy Policy, for example: if any, recipients of personal data; the periods of personal data storage or, if this is not possible, the criteria used to determine that period; the right to request that the Company allow access to the data subject’s personal data and correct or delete them, or limit data processing, or the right to object to data processing, as well as the right to data portability; whether the provision of personal data is a legal or contractual requirement, etc.

The right to access your personal data processed

The Company will confirm to you whether personal data related to you are being processed, and if such personal data is being processed, it will provide all the necessary information: the purposes of data processing; categories of relevant personal data; data recipients or categories of data recipients to whom personal data has been or will be disclosed; the periods of personal data storage or, if not possible, the criteria for determining that period; the right to request the data controller to correct or delete personal data or to limit the processing of personal data related to the data subject or to object to such processing; when personal data is not collected from the data subject, all information about its sources is available. A copy of the processed personal data will be provided by the Company.

The right to demand correction of your processed personal data

You have the right to demand from the Company that it immediately correct inaccurate personal data. Depending on the purposes for which the data were processed, you have the right to demand that incomplete personal data be supplemented.

The right to limit data processing:

You have the right to ask us to limit the processing of your personal data or not to process them:

The right to request data deletion

If there is a basis (for example, the personal data is no longer necessary to achieve the purposes for which it was collected, etc.), you can request that your personal data be deleted.

The right to object to data processing (disagree)

You have the right to object at any time to your personal data being processed when such data processing is carried out to achieve the legitimate interests of the Company, except when the Company processes data for reasons that are superior to the interests, rights and freedoms of the data subject, or in order to defend legal claims .

The right to data portability

In cases where the Company processes your personal data by automated means with your consent or on the basis of a contract concluded with the Company, you have the right to receive the personal data you have provided in a structured and computer-readable format, and forward them to another data controller, and the Company will not create obstacles to this. You have the right for the Company to transfer your personal data to another data controller when this is technically possible.

If you believe that your rights as a subject of personal data have been and/or may be violated, please contact us immediately at the e-mail address specified in this Privacy Policy. We guarantee that only after receiving your complaint, we will contact you within a reasonable period of time and inform you about the progress of the investigation of the complaint, and later about the result.

If you are not satisfied with the results of the investigation, you can submit a complaint to the supervisory authority – the State Data Protection Inspectorate(www.vdai.lrv.lt).

Read more about the exercise of your rights as a data subject in the Company’s Procedure for Exercising the Rights of Data Subjects..

  1. PRIVACY POLICY UPDATE

We may update or change this Privacy Policy at any time. The updated or changed Privacy Policy will take effect from its publication on the Company’s website.

The Privacy Policy was last updated on 02-11-2022.



Go back