Privacy policy - Klaipedanida

General Information

UAB “Klaipėdos flotilė” (hereinafter referred to as the Data Controller) establishes, through this Privacy Policy (hereinafter referred to as the Privacy Policy), the terms and conditions for the processing of personal data when using the website managed by the Data Controller. The terms set out in this Privacy Policy apply every time you access our content and/or services, regardless of the device you use: computer, mobile phone, tablet, or any other device.

Data Controller Details

Data Controller: UAB “Klaipėdos flotilė”

Company code: 307647146

Address: L. Ivinskio g. 102-4, LT-45123 Kaunas

Phone: +370 642 68393

Email: [email protected]

It is very important that you carefully read this Privacy Policy, as every time you visit the website belonging to the Data Controller, you agree to the terms described in this Privacy Policy. If you do not agree with these terms, please do not visit our website and do not use our content and/or services.

We confirm that the data of visitors to the Data Controller’s website is collected and processed in accordance with the requirements of the applicable laws of the European Union and the Republic of Lithuania, as well as the instructions of supervisory authorities. Reasonable technical and organisational measures are applied to protect the data we collect about website visitors from loss, unlawful use, alteration, or disclosure.

Persons under the age of 16 may not provide any personal data through our website without the consent of their parents or legal guardians.

The terms used in this Privacy Policy shall be understood as defined in the General Data Protection Regulation (EU) 2016/679.

What Information Do We Collect About You?

Information provided directly by you may be used for visitor registration, ticket reservations, provision of services, administration of enquiries, and conclusion of contracts.

We may collect the following personal data provided by you:

first name;
last name;
phone number;
email address;
residential address;
date of birth;
the first name, last name, and year of birth of a child or children, where this is necessary for the provision of services, ticket reservations, or other legitimate purposes;
other information that you provide when submitting enquiries, registering, purchasing tickets, or ordering services.

Information About Website Use

When you visit our website, we may collect information about how you use our website, which pages you view, which functions you use, as well as automatically generated visit statistics. More information is provided in the “Cookies” section.

Information from Third-Party Sources

We may receive information about you from public and commercial sources, to the extent permitted by applicable law, and combine it with other information that we receive from you or about you. We may also receive information from third-party social networking services when you log in to them or interact with us through social networks, such as Facebook or Instagram.

How Do We Use Your Information?

The Data Controller needs personal data in order to provide services, administer enquiries, reservations, and ticket purchases, carry out direct marketing, improve the functioning of the website, and ensure high-quality customer service.

We may use your personal data for the following purposes:

to administer ticket reservations and purchases;
to conclude and perform service provision contracts;
to administer enquiries and provide responses;
to provide customer service;
for direct marketing purposes, if you have given your consent;
to send newsletters, offers, or information about services, if you have given your consent;
to analyse website traffic, performance, and user behaviour;
to improve the quality of services;
to fulfil legal obligations;
for other legitimate purposes, where we have your consent or another legal basis.

You have the right at any time to object to or withdraw your consent for the processing of your personal data for direct marketing purposes.

To Whom Do We Disclose Your Information?

We undertake not to transfer your personal data to unrelated third parties, except in the following cases:

when you have given consent to the disclosure of personal data;
when data transfer is necessary for the provision of services, for example to payment, ticket reservation, or technical service providers;
when required by law;
to law enforcement or other competent authorities in accordance with the procedure established by the laws of the Republic of Lithuania;
when necessary to protect our rights or legitimate interests.

Your personal data will not be transferred to a third country and/or an international organisation, except in cases where this is permitted by law and appropriate data protection measures are ensured.

What Do We Do to Protect Your Information?

Personal data is protected from loss, unlawful use, alteration, disclosure, or destruction. We apply physical, technical, and organisational measures designed to protect the information we collect.

Please note that although we take appropriate steps to protect your information, no website, online transaction, computer system, or wireless connection is completely secure.

We will retain your data for as long as necessary to achieve the purposes set out in this Privacy Policy, but no longer than 3 years after the last day of your use of our services or content, unless the law provides for a longer retention period. After the retention period expires, the data is deleted in such a way that it cannot be restored.

Your Rights

A data subject whose data is processed in the activities of the Data Controller has the following rights:

to know about the processing of their data;
to access their personal data and find out how it is processed;
to request the correction of inaccurate personal data or the completion of incomplete personal data;
to request the deletion of their personal data where there is a legal basis for doing so;
to request restriction of the processing of personal data;
the right to data portability;
to object to the processing of personal data where it is processed for direct marketing purposes;
to withdraw consent where data is processed on the basis of consent;
to submit a complaint to the State Data Protection Inspectorate.

If you no longer wish your personal data to be processed for direct marketing purposes, you may contact the Data Controller and object to the processing of your personal data for this purpose without giving reasons for your objection.

Any request or instruction related to the processing of personal data may be submitted to the Data Controller in writing by post to the following address: L. Ivinskio g. 102-4, LT-45123 Kaunas.

Upon receiving such a request or instruction, the Data Controller shall, no later than within one month from the date of receipt, provide a response and carry out the actions specified in the request or provide a reasoned refusal to carry them out. If necessary, this period may be extended by a further two months, taking into account the complexity and number of requests. In such a case, we will inform you of the extension and the reasons for it within one month from the date of receipt of the request.

Third-Party Websites, Services, and Products

The Data Controller’s website may contain third-party banners, links to their websites, services, or products that are not controlled by the Data Controller. The Data Controller is not responsible for the security and privacy of information collected by third parties.

We recommend that you read the privacy policy of each third-party website or service before using their services or providing personal data.

Cookies

Our website may use cookies. Cookies are small text files that are stored on your device when you visit the website. They help ensure the proper functioning of the website, improve the user experience, analyse website traffic, and provide relevant content.

When using the website, you may choose which cookies you allow to be used, if a cookie management tool is installed on the website. Certain necessary cookies may be used without separate consent because they are required for the functioning of the website.

Third-Party Services

Our website may use third-party services, such as Google Analytics, which help analyse how visitors use the website. This information is used to understand website traffic, improve website performance, and enhance the user experience.

The Data Controller does not seek to identify website visitors and does not allow the analytical tools used to do so.

The website may also contain YouTube videos or links to other third-party content. In such cases, information about your actions may be collected by the respective third parties in accordance with their own privacy policies.

All information that you provide to us through social media tools, including messages, comments, reactions, “Like”, “Follow”, or other actions, may be controlled by the operator of the respective social network.

Our website may contain links to our social media accounts. We recommend that you read the privacy policies of these social networks:

Facebook Privacy Policy;
Instagram Privacy Policy;
YouTube Privacy Policy.

Participation in Events and Private Sailings

With your consent, the fact of your participation, your first name, last name, and photograph may be used to inform the public about events, private sailings, promotional events, or other activities organised by the Data Controller.

Photos taken during events or sailings may, with your consent, be published on the Data Controller’s website, social media accounts, or other communication channels. We undertake not to violate your honour and dignity when using such photos.

Photos may be published and stored for up to 3 years after the event, except in cases provided for by law.

Participation in Recruitment Processes

If you participate in an employee recruitment process, we may collect and process your curriculum vitae, cover letter, and other information provided by you for the purpose of carrying out the recruitment process.

If you do not provide your curriculum vitae and/or other information required for the recruitment process, we will not be able to assess your suitability for the offered position.

If separate consent is not obtained to store personal data after the recruitment process has ended, your personal data will be deleted and/or destroyed within 5 working days after the employment contract is signed with the selected candidate.

Changes to the Privacy Policy

We may update or change this Privacy Policy at any time. The updated or amended Privacy Policy takes effect from the date it is published on our website.

We recommend that you periodically review this Privacy Policy so that you are familiar with its current version.

After updating the Privacy Policy, we may inform you of significant changes by publishing a notice on the website.

Contact Us

If you have any questions about the information provided in this Privacy Policy or would like to exercise your rights, please contact us using the following details:

UAB “Klaipėdos flotilė”