PERSONAL DATA PROCESSING POLICY (PRIVACY POLICY)

Please read this document carefully as it provides essential information about the processing and storage of your personal data. When we collect and use your data, we comply with the General Data Protection Regulation (better known as GDPR), the Republic of Lithuania Personal Data Protection Legal Protection Act and other legal acts.

Because this Policy is subject to change without notice, please check every time you visit our site. There you will find the latest version of the Privacy Policy.

1. WHO ARE WE?

We collect, use and store your personal data

Small partnership TrekTours

Legal entity code: 305473960

Address: S. Žukausko g. 20A-4, LT-08234 Vilnius, Lithuania

El. Email: [email protected]

Phone number: +370 686 15 111

Sorry, but if you are under 14, you must have the consent of your parents or other legal guardians when subscribing to our newsletter.

2. WHY AND WHAT DATA ARE WE COLLECTING?

For what purpose do we collect personal data?

What data are we collecting?

What GDPR condition do we use to process your personal data?

How long do we keep this data?

2.1. For the purpose of creating a user account. If you want to see your TrekTours organized hiking history, payment information, track the status of your bookings and fill out your details each time you sign up for a new hike, you can create a registered user account. If you have a Facebook account, you can sign up with this social network.

Sign up through your Facebook account.
Sign up through your Facebook account.will provide us with your public profile information (your full name, Facebook profile ID and profile photo link). If you do not wish to transfer this data, please register without a Facebook account. When you sign up with Facebook, we will also ask you for the personal information needed for regular sign up (see below).

When signing up without a Facebook account, you will be asked to enter the following:
– full name (required)
– email address (required)
– phone number (required)
– date of birth and gender (required). Need to evaluate the risks and statistics of the event being organized
– city and country (required). There is a need to evaluate inbound traffic flows and to gather volunteers who speak the appropriate languages

– password (stored in encrypted form)

Both through Facebook registration and individually, a confirmation letter is sent to the user in order to reduce the risk of using personal data by third parties.

Account created with your express consent (GDPR Art. 6 (1) (a))

Your name and contact details are collected for the purposes of the contract (GDPR Article 6 (1) (b))

The date of birth, sex, city, and country are collected with a legitimate interest in the proper performance of their contractual obligations (GDPR Article 6 (1) (f))

This data is retained for 36 months from the date of the last connection of the registered TrekTours user. After this deadline, the registered user will be notified of the cancellation of his account, giving him a period of 30 calendar days to log in to the TrekTours website to extend the user account for another 36 months. Failure to do so within 30 calendar days will result in the immediate removal of the registered user account with all its details.

2.2. Payment for ordered goods and services through an external banking service provider or electronic payment system of your choice

We collect your payment information (email address, purpose and method of payment, and payment amount).

The Payment Transaction Manager (see section 3 of the Policy) collects securely encrypted data from your credit or payment card.
This information is not available to TrekTours.

In order to perform the contract (GDPR Art. 6 (1) (b)) and to fulfill its legal obligations (GDPR Art. 6 (c))

10 years after purchase of goods or services

2.3. Traffic management of participants’ traffic and security of participants (video surveillance)

We use CCTV cameras at several locations along the route to respond to and manage congestion along the route. For this purpose, video monitoring is performed in real time. Videos can only be viewed in specific cases, such as an incident.

Having a legitimate interest in ensuring the safety and comfort of participants (GDPR Article 6 (1) (f))

30 days after the video was created

2.4. In order to inform us of your services and to ask for your opinion (direct marketing), please email us.

We collect your email address.

When you sign up for our site, we ask for your consent to the management of your email address for marketing purposes. You will only receive marketing emails with your consent, which you can unsubscribe from at any time by clicking on the unsubscribe link in each newsletter.

With your consent (GDPR Article 6 (1) (a))

Article 69 of the Law on Electronic Communications of the Republic of Lithuania basis which states that:
“A person who obtains e-mail contact information from his or her clients for the provision of services or goods may, under the terms and conditions of the Personal Data Protection Act, use such contact data to market his or her own similar goods or services. the ability to object to or refuse such use of the contact details for the purposes set out above when such data is collected and, if the customer has not initially objected to such use, by sending each message.”

We include an unsubscribe link in each newsletter. Clicking on it will remove you from the list of subscribers.

2.5. If you communicate with us and / or are interested in our activities on social networks or website help

We collect your name, contact information (if you provide us), the comments you leave under our posts, the shares of our posts, the “likes”, the “follow”, and your other reactions (including when you started following or liked it) TrekTours Social Account), your photo, the attachments you have sent to us, your communication history with us (including the content of the messages and when they were received / delivered), the feedback you left, and the TrekTours ratings.

With your consent (GDPR 6 Art. 1(a))

10 years

2.6. In order to improve your site, ensure its operation, increase its security and adapt its content and form to the needs of users

When you visit TrekTours, we automatically collect the following information from you:
IP address, operating system, user ID, and other information about your activity on our site and elsewhere. We collect and store this information as part of our logs or using cookies. For more information on the use of cookies, see Policy sections 7 and 8.

Having a legitimate interest in improving your website and ensuring its security
(GDPR 6 Art. 1(f))

For more information on retention periods, see Policy sections 7 and 8.

2.7. In order to select suitable candidates for vacancies

In the event that you choose to contact us for recruitment, we will process the following personal data from you as a candidate for the purpose of recruitment:
– Name, surname;
– Telephone number;
– Email address;
– Information on education, qualifications and professional experience;
– Information on language skills;
– Name (s) of existing or former workplace (s);
– Information about the type of work you want to do;
– Any other information you choose to include in your resume, cover letter, or other documentation provided to us.

Based on our legitimate interests, we may contact you based on information in your professional field provided through public and widely used career portals (such as LinkedIn, CV-Online) or through the recommendation of a friend or acquaintance.

With your consent, when you decide to send us your CV or other documents (GDPR 6 Art. 1(a))

Having a legitimate interest in selecting the most suitable candidate for the vacancy (GDPR 6 Art. 1(f))

6 mėnesiai po atrankos pabaigos.

3. TO WHOM DO WE DISCLOSE YOUR PERSONAL DATA WITHIN AND OUTSIDE THE EEA?

We transfer your personal data only to trusted third parties and only for the purposes of properly processing your personal data. Specifically, your data may be transferred:

In the EEA territory:

To Paysera, Payment Operations Manager. Please read their data protection policies here;
For an insurance provider. Each time we ask for your consent to transfer your personal data to an insurance company for the purpose of providing insurance services;
Mailerlite (newsletter sending platform). Familiarize yourself with their privacy policy here;
For our partners providing information technology, electronic communications, accounting, auditing, legal and other services;
For state supervisors and law enforcement.

Outside the EEA:

Facebook, Inc. (US). Data is stored under the Privacy Shield program, which you can read more about here
Google LLC (US). Data is stored under the Privacy Shield program, which you can read more about here.

We will provide all of these service providers only as much personal information as you need to complete a particular service.

4. HOW WE PROTECT YOUR PERSONAL DATA?

In the processing and storage of your personal data, we implement organizational and technical measures to ensure the protection of personal data against accidental or unlawful destruction, alteration, disclosure, and any other unlawful processing. One of the world’s most famous Secure Socket Layer (SSL) certification provides secure access to TrekTours. Using an SSL certificate, information sent between the user’s browser and the TrekTours server is encrypted. See certificate details www.ssls.com.

While we take all reasonable steps to protect your information, no site is completely secure, either through an online operation, a computer system or, more importantly, a wireless connection. And while we make every effort to protect your personal data, we cannot guarantee the absolute security of your personal data transmitted on our platform. By transmitting any information, you also assume the risks associated with its transmission. Upon receipt of your personal data, we will apply stringent procedures and safeguards to such data.

5. YOUR RIGHTS

Each data subject, i.e. each of you, whose data is processed by us, has the following rights:

Know (be informed) about the processing of your personal data (GDPR Article 12–14);
Access your personal data processed (GDPR Article 15);
Require correction of inaccurate personal data relating to you (GDPR Article 16);
Request the deletion of personal data relating to you (“the right to be forgotten”) (GDPR Article 17).

Attention! You have the right to be forgotten only if it can be justified by one of the following reasons:

- personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
- You withdraw your consent to process the personal data on which the processing is based and there is no other reason to process the data;
- You do not consent to the processing under Section 21 (1) of the GDPR and there are no overriding legitimate reasons for processing.

Restrict data processing (GDPR Article 18):

Attention! You have the right to restrict the processing of your data only if:

- personal data is inaccurate;
- the processing of personal data is illegal, but you do not consent to the deletion of the data;
- the controller no longer needs personal data to fulfill its purpose, but it is necessary for you to assert, enforce or defend legal requirements;
- You object to the processing under Article 21 (1) of the GDPR if the legitimate reasons of the controller are not superior to your own.

Transfer your personal data when the processing is based on consent or contract and the data are processed by automated means (GDPR Article 20);
Not to object to the processing of personal data for reasons specific to your particular case where the processing is in the legitimate interest of the controller or of a third party, unless the controller demonstrates that the processing is for compelling legitimate reasons overriding your interests and or to assert, enforce or defend legal requirements (GDPR Article 21).

If you believe that public establishment TrekTours is processing your personal data unlawfully or is not exercising your rights, you have the right to complain to the State Data Protection Inspectorate (L. Sapiegos str. 17, 10312 Vilnius, Lithuania, phone (+370 5) 271 2804, 279 1445, e-mail [email protected]).

If you no longer wish to have your personal data processed for direct marketing purposes or have any other request or instruction regarding the processing of your personal data, please email us [email protected].

6. THIRD PARTY WEBSITES, SERVICES AND PRODUCTS ON OUR WEBSITES

This website may contain third party banners, links to their websites and services, which we have no control over and are not responsible for the security or privacy of information collected by third parties. You must read the privacy statements that apply to the third party websites and services you use.

7. COOKIES

This site uses strictly mandatory, functional, marketing and statistical cookies to help display our site, ensure its functionality and ease of navigation. You can find more information about how cookies work on the website www.cookiecentral.com.

The cookie-related information is not used to personally identify you, and we control the data collected. Such cookies may be used for the following purposes:

to ensure the smooth and efficient operation of the site;
to collect anonymous statistics about how and what records you have viewed;
so that the settings you make during and between the visit are saved;
so that we can collect reliable information about the use of the website, which allows us to determine if the website meets the needs of our users and to improve it accordingly.

8. HOW TO MANAGE AND DELETE COOKIES

When you use a browser to access our content, you can always configure your browser to accept all cookies, reject all cookies, or notify you when a cookie is downloaded. Each browser is different, so if you don’t know how to change your cookie preferences, check out its Help menu. Your device’s operating system may have additional cookie controls. If you do not want your information to be collected by cookies, use the simple procedure in most browsers that allows you to opt out of cookies. To learn more about managing cookies, visit: http://www.allaboutcookies.org/manage-cookies/.

We do not associate a visitor’s IP address and email address with data that allows the visitor to be identified. This means that each visitor’s visit session will be recorded, but TrekTours sites the visitor will remain anonymous.

Strictly binding cookies and functionality are a condition of using our site. If you opt out of these types of cookies, we cannot guarantee how our site will perform when you visit it. You can control the use of static cookies and marketing cookies by changing your browser settings.

Our site may also contain links to the websites of other individuals, companies or organizations. Please note that we are not responsible for the content of such websites or the privacy practices used by them. Therefore, if you click on a link from our website to access other websites, you should specifically refer to their Privacy Policy.

Descriptions of cookies used on the TrekTours website

The name of the cookie	The cookie category	Description of the cookie	Cookie expiration
NID	Functional	Remembers user-selected settings (eg language settings) and stores them for easier browsing	6 months
SITEXRF EW4SITE	Strictly binding	POST XSRF protection; The session ID cookie used to ensure the functionality of the page (for example, going back to the last place in the list);	By the end of the session
_fbp	Marketing	Facebook marketing cookies, which allow you to show ads to website visitors based on which pages they visited and which products they bought. More about Facebook cookies: https://www.facebook.com/policies/cookies/ To disable this cookie, visit this website.	90 days
fr	Marketing		90 days
ads/ga-audiences	Marketing	A Google cookie that collects information about user behavior on your site	By the end of the session
tr	Marketing	Collects information on consumer behavior on the site and is used to optimize offers and submit to Facebook	By the end of the session
_ga	Statistics	Google Analytics cookies are used exclusively to evaluate your website usage habits. These cookies are used to collect information and report statistics on your use of the website to Google without personally identifying individual visitors. More information about these cookies: http://www.google.com/policies/privacy/partners/ To disable this cookie, visit this webpage.	2 years
_gat	Statistics		1 minute
_gid	Statistics		24 hours

9. CONTACT US

Your personal data processing policy is not clear? Got questions, requests, complaints? Let’s talk about it! Send your inquiries by email [email protected]