Privacy policy for users of the website/app services

1. GENERAL PROVISIONS

1.1. We care about your privacy and the security of your personal data, so in this privacy policy (the “Privacy Policy”), we explain how we process your personal data and what your rights are.

1.2. This Privacy Policy applies when you use the online vehicle history checking website www.carvertical.com or its Android and iOS mobile application (the “Website” and the “Mobile Application” are hereinafter collectively referred to as the “Platform”), visit our social networking sites Facebook, Instagram, LinkedIn, YouTube, Tik Tok (hereinafter - “Social Accounts”), and contact us by email, telephone, or other electronic communication channels.

1.3. In this Privacy Policy, “personal data” (“Personal Data”) means any information or set of information from which we can directly or indirectly identify you, such as your name, surname, email address, telephone number, etc. As used in this Privacy Policy, “You” means a user of the Platform and its services, a visitor to the Social Accounts or a person who communicates with us.

1.4. In processing Personal Data, we comply with the requirements of the General Data Protection Regulation 2016/679 (EU) (“GDPR”) and the legislation of the Republic of Lithuania, as well as the instructions of the controlling authorities.

1.5. If you use the Platform, its services, visit our Social Accounts, contact us, subscribe our newsletters, we consider that you have read and understood the Privacy Policy.

1.6. The Platform and Social Accounts may contain links to, for example, our partners’ websites, websites of our other projects. This Privacy Policy does not apply to such websites.

1.7. This Privacy Policy is subject to change, so please visit the Platform from time to time to read the latest version of the Privacy Policy posted.

1.8. You can read the Cookie Policy separately here. We have also developed privacy notices for vehicle owners or holders, candidates.

2. WHO ARE WE?

2.1. The controller of your Personal Data is UAB cV Group, a private limited liability company incorporated in the Republic of Lithuania, legal entity code 303134915, address Aukštaičių g. 7, LT-11341 Vilnius, Lithuania, the data is collected and processed in the Register of Legal Entities of the State Enterprise “Registrų Centras” (hereinafter referred to as “carVertical” or “We”).

2.2. Our Data Protection Officer can be contacted by email at dpo@carvertical.com.

3. HOW DO WE RECEIVE YOUR PERSONAL DATA?

3.1. We receive your Personal Data:

3.1.1. directly from You when You provide your Personal Data to us. For example, when You register on the Platform, use the Platform and its services, make a payment, communicate with us by email or telephone, etc.;
3.1.2. when We collect Personal Data when You use the Platform or Social Accounts. For example, We may record the history of orders made or visits to the Platform, IP address, service preferences, URL links opened, etc.;
3.1.3. when We receive Personal Data from other persons, such as the service provider who identifies You as a contact person, payment institutions about payments made, etc.

3.2. When You provide Personal Data about yourself or others (e.g., about your employees, agents, specifying the personal data of friends/colleagues), You are responsible for the accuracy, completeness, and timeliness of such Personal Data, as well as for informing or consenting of the person whose Personal Data is being provided to us. In certain cases, We may ask You to confirm that You have the right to provide us with Personal Data (for example, by completing registration forms).

4. WHAT PERSONAL DATA DO WE PROCESS ABOUT YOU?

4.1. We process your Personal Data for the following purposes and under the following conditions:

Purposes of personal data processing	Processed personal data	Personal data retention periods	Legal grounds for personal data processing
Creating and using an account, ordering and receiving services (carVertical reports, etc.).	The following data is required to create and use your account and to order and receive services: email address, Facebook, Apple ID, Google account details (if you log in via these accounts), encrypted account passwords; If You voluntarily provide (with your consent): name, surname, phone number, represented person (if You represent a company or another person), the relationship with the person You represent; Other data: date of use of the account, date of provision of the service (carVertival report), information on the services ordered and used and any changes to them, purchase history, credit data. When You purchase a report, we automatically create an account for You, where we temporarily place the report You have purchased and other information related to your purchase.	Account data is retained for the duration of the use of the account and for 7 years after the last login to the account; Service purchase data shall be stored for the duration of the use of the account and for a period of 10 years from the last login to the account; Where data is processed on the basis of consent, until the consent expires or is withdrawn.	The processing is necessary for the conclusion and performance of the contract (Article 6(1)(b) of the GDPR); The legitimate interests of the controller to ensure the quality of the operation of the account, the provision of services, and the proper administration of orders (Article 6(1)(f) of the GDPR). Consent of the data subject (Article 6(1)(a) of the GDPR).
Managing payments for services.	The following data is required for payment confirmation: payment amount, date, partial payment card number, payer’s email address, payer’s IP address. Payer’s name, surname, address, if provided by the payer.	The data shall be retained in accordance with the legislation governing financial transactions and accounting and, where no time limits are specified, for 10 years from the date of payment.	The processing is necessary for the conclusion and performance of the contract (Article 6(1)(b) of the GDPR); The processing is necessary for compliance with a legal obligation imposed on the controller to ensure proper financial accounting (Article 6(1)(c) of the GDPR).
Providing carVertical reports.	The report shall contain the following data (summarised): vehicle VIN; licence plate number, technical, registration, import/export, use and ownership restrictions, theft data, servicing information, mileage, warranties, details of damages (accidents, other damage), including photographs.	The data is retained for 30 days from the date of purchase of the report.	The processing is necessary for the conclusion and performance of the contract (Article 6(1)(b) of the GDPR); The legitimate interests of the controller or a third party to provide and obtain data-based information on the condition of the vehicle, to help prevent fraud in the purchase of second-hand vehicles and to protect the interest of road users in the safe operation of vehicles on the road (Article 6(1)(f) of the GDPR). Further details are set out in the Privacy Notice on the processing of vehicle data.
Physical inspection of the vehicle (purchase of the service, collection and transfer of personal data to the partner to provide the service).	The following contact details are additionally collected: name, surname, email address, telephone number, vehicle (inspection) address, comment; Data required for payment confirmation: payment amount, date, partial payment card number, payer’s email address, payer’s IP address.	We store contact data for 30 days from the date of the purchase of physical inspection of the vehicle (partners set their own data processing periods); The data required for payment confirmation is stored in accordance with the legislation governing financial transactions and accounting, and where no time limits are specified, for 10 years from the date of payment.	The processing is necessary for the conclusion and performance of the contract (Article 6(1)(b) of the GDPR); Consent of the data subject (Article 6(1)(a) of the GDPR).
Quality assurance, communication about services, reminders about pending orders.	Email address, VIN of the checked vehicle, subject and content of the communication (message, reply), data needed to address quality issues; If You provide (with your consent): name, surname, phone number, country, position, person represented, etc; If communicating via Social Accounts: publicly visible information of the account.	The data is stored for the duration of the communication and up to 2 years after the end of the communication (last message); Where the processing is based on consent, until the consent expires or is withdrawn.	The legitimate interests of the controller to provide information and to ensure the quality of the service, to remind the customer of pending orders and to assist the customer in completing them (Article 6(1)(f) of the GDPR); Consent of the data subject (Article 6(1)(a) of the GDPR).
Platform administration, development, assurance of security, fraud prevention.	IP address, device information, data collected by cookies, analytical data (visits, views, searches, links clicked and the date and time of these clicks), URL links to the Platform, information on data modification, deletion.	Platform data is stored as stated in the Cookie Policy and, if not included in the cookie information, for up to 2 years after collection; Where data is processed on the basis of consent, until the consent expires or is withdrawn; Logs are kept from 14 days to 2 years.	Consent of the data subject (Article 6(1)(a) of the GDPR); The legitimate interests of the controller in ensuring the smooth functioning, development and security of the Platform (Article 6(1)(f) of the GDPR).
Manage social accounts (for more see Section 6 of the Privacy Policy).	Username, comments and shares on the post, information about clicks on “like” and “follow”, information about reactions to entries, photo, details of the message and the reply to the message (time of receipt, content, attachments), rating information, and any other information You provide.	Information on social accounts is stored in accordance with the terms and conditions set out by the owners of the social networks.	Consent of the data subject (Article 6(1)(a) of the GDPR).
Conducting direct marketing campaigns for businesses and consumers, sending news (for more, see Section 5 of the Privacy Policy).	Name, surname, phone number, news preferences, service usage data for the provision of better quality news (location, language), data collected via advertising cookies; Other data: information on news readership, URL links to the Platform, information on the list of news recipients.	Where the user has an account, the data will be stored for the period of use of the account and for 7 years from the last access to the account or until the consent is withdrawn; Where the user does not have a registered account, the data shall be kept for no longer than until the consent is withdrawn.	Consent of the data subject (Article 6(1)(a) of the GDPR); The legitimate interest of the Data Controller in informing its users about similar goods and/or services (Article 6(1)(f) GDPR); The legitimate interests of the controller to manage the mailing lists of news recipients, to analyse aggregated marketing results, to resolve problems related to the provision of news (Article 6(1)(f) of the GDPR).
Conducting quality surveys to improve carVertical’s services and performance.	Email address, phone number, data requested in the survey announcement/questionnaire, comments, ratings, preferences.	The data will be kept for the duration of the survey and for 2 years after the end of the survey; Where the processing is based on consent, until the consent expires or is withdrawn.	The legitimate interest of the controller to analyse and use the aggregated quality results as a basis for organising its activities (Article 6(1)(f) of the GDPR); Consent of the data subject (Article 6(1)(a) of the GDPR).
Organising promotional competitions, games and campaigns (for more, see Sub-sections 5.8-5.9. of the Privacy Policy).	Name, surname, email address, phone number, the data requested in the contest, promotion, game announcement and/or form, social networks, account information and messages shared by the account holder, winners’ data, lists of participants.	During the period of the game, promotion, contest and for 2 years after the end of the game, promotion, contest; Where the processing is based on consent, until the consent expires or is withdrawn.	Consent of the data subject (Article 6(1)(a) of the GDPR).
Publishing and managing reviews on carVertical’s activities.	The name, surname, email address of the person submitting the review, the content of the review, the date on which the review was submitted, and the details of the Social Networking account, including a photo if the review is submitted via Social Networking.	Reviews are stored until they are cancelled.	Consent of the data subject (Article 6(1)(a) of the GDPR).
Public awareness of carVertical’s activities.	Personal data, photos, videos, excerpts from training content in publications and other presentation content.	The data shall be retained for 5 years after collection; Where the processing is based on consent, until the consent expires or is withdrawn; Publicly available data (in publications, etc.) are processed until the end of their public publication.	Consent of the data subject (Article 6(1)(a) of the GDPR); The legitimate interests of the controller in ensuring accurate, smooth and efficient communication (Article 6(1)(f) of the GDPR).
Resolving disputes and claims.	Email address, content of the complaint/claim/proceeding, information related to the dispute/claim; Other data provided by the person: name, surname, phone number, address, job title, person represented (if You represent a company or another person), relationship with the person represented.	During the pendency of the dispute and for 10 years after the end of the pendency of the dispute (or, in the case of a judicial dispute, after the final judgment has become final); Requests and correspondence from data subjects shall be kept for 2 (two) years after the end of the processing of the request.	The processing is necessary for compliance with a legal obligation imposed on the controller (Article 6(1)(c) of the GDPR); Legitimate interests of the controller or of a third party to assert claims or defend their rights (Article 6(1)(f) of the GDPR).
Analysis of the use of services.	Email address, IP address, order history, payment history, use of discounts, quantity and aggregate geographical distribution of services ordered, attributes used to select services, quality of service, date and country of user registration, time spent on the Platform, sections browsed, location from which accessed.	Where the user has an account, the data is stored for the duration of the use of the account and for 7 years after the last login to the account; Where the user does not have a registered account, the data shall be kept for no longer than until the consent is withdrawn.	The legitimate interests of the controller to improve and enhance the efficiency of its activities on the basis of data based on analysis (Article 6(1)(f) of the GDPR).

4.2. In some cases, We may use the contacts You have provided to send You messages or call You in connection with the order or provision of our services, for example, to inform You of confirmation of an order for the services, changes to the provision of the services, reminders of incomplete orders sent to your email address when You have not completed an order, and etc. Such communications are necessary for the proper provision of our services and are not considered promotional communications.

4.3. We process some of your Personal Data only with your consent. We observe the following rules for how data is processed on the basis of consent:

4.3.1. You are not obliged to provide Personal Data, for example, if You are required to fill in a form, You may not fill in the optional fields, or if consent is given by ticking the relevant box, You may not tick it. In case You provide data in optional fields on your own, provide us with more data than is necessary to answer our questions, communicate with us on our social accounts, We consider that the provision of such data constitutes, at the same time, your consent to the processing of such data;
4.3.2. You have the right to object to or withdraw your consent to the processing of your Personal Data at any time when it is processed on the basis of consent. Where We process your Personal Data on the basis of your consent, We will retain such data until You withdraw your consent. You can withdraw your consent by changing your account settings (if the data is processed in your account), by clicking on the relevant links (if provided) or by emailing us at info@carvertical.com. We will endeavour to implement your request to withdraw consent as soon as possible after We receive it, but in some cases, this may take a reasonable amount of time due to the operation of our systems. Withdrawing your consent to some processing may result in a reduction in the scope of services available to You;
4.3.3. even if You withdraw your consent, We may keep a record of when consent was given and withdrawn in order to demonstrate our compliance with the data protection rules where necessary.

4.4. You have the right to amend and update the information we hold about You. In some cases, it is necessary for us to have accurate up-to-date information relating to You and We may ask You to confirm that the information we hold about You is correct.

4.5. When providing services, We may sometimes use automated decision-making based on the processing of data, for example, to ascertain your needs in relation to the service and your compliance with the service requirements. Automated decision-making means the processing of personal data using, for example, software code or an algorithm, an artificial intelligence solution that does not require human intervention. We regularly review the automated decision-making methods We use to ensure that they are fair, effective and impartial. You can object to the results of an automated decision; in which case your situation will be assessed by one of our experts.

5. NEWS AND DIRECT MARKETING

5.1. We may send information about our and/or our group companies’ activities, services (direct marketing communications) to your email address and/or telephone number, call You if you have given us your consent to receive such information from us or if You or an organisation you represent is a client of ours. We may also ask you to help us assess the quality of our performance and service.

5.2. To provide you with bespoke newsletters, We may personalise direct marketing communications using information about your use of our services. The personalisation solutions we use are only intended to improve your experience and if You do not agree on receiving our newsletters, You will not lose your right to use our services and You will receive the same quality of service.

5.3. When we send out newsletters, We may collect information about the individuals who receive them, such as which message they have opened, what links they have clicked on, etc. This information is collected in order to provide You with more relevant and tailored newsletters.

5.4. Your contact details may be passed on to our partners/data processors who provide us with newsletters or quality assessment services. We may also pass on your contact details to other group companies for the purpose of providing You with their offers and news, if such transfer of data meets the requirements of the legal acts.

5.5. If You no longer wish to receive direct marketing, You can cancel them in the manner specified in the electronic communications (for example, by clicking on the “unsubscribe” link in the newsletter, etc.) or by sending us a notification by email to info@carvertical.com.

5.6. If You withdraw your consent, We will endeavour to stop sending You newsletters immediately, but this may take some time. As our news campaigns are planned in advance, You may still receive our newsletters one more time even after withdrawing your consent.

5.7. Withdrawal of consent does not automatically oblige us to destroy your Personal Data or to provide You with information about our processing of your Personal Data, and You should make a separate request for these actions.

5.8. Participation in our games, promotions or competitions is optional. However, in order to participate in a game, promotion or competition, You will be required to provide the information We have specified, including Personal Data. If the terms of the game require You to provide Personal Data of another person (friend, colleague), you must duly inform that person and obtain his/her consent before providing the data. We will run the games, promotions or competitions and process Personal Data in accordance with the rules set out for the specific game, promotion or competition. You have the right to withdraw your consent to the processing and use of Personal Data for this purpose at any time. If You withdraw your consent, You will no longer participate in the game, promotion or competition.

5.9. We have the right to contact the participants of the game, promotion or competition and announce the winners on the Platform, Social Accounts and other information channels specified by us. We may use a software application based on automated decision making to process the registration of a game, promotion or competition and/or to determine winners. This will be notified in the rules of the game, promotion or competition or will be evident from the links we provide. In this case, if You do not wish to be subject to automated decision making, You will not be able to participate in the game, promotion or competition.

6. SOCIAL ACCOUNTS

6.1. We post information about our activities, services offered, changes to services, and other news on our Social Accounts. We may also organise surveys, games, competitions, promotional campaigns, share advertisements and discount codes on the Social Accounts.

6.2. It is important to remember that users of Social Accounts are subject not only to this Privacy Policy, but also to the privacy policies, rules and terms of use of the operators of the social networks on which the Social Accounts are located. When You interact with us on the Social Accounts and provide certain information (for example, by messaging us and commenting on our posts), We may see public information about your profile (name, image, email, etc.) depending on the privacy settings you have chosen. This information (for example, a comment you have made) may also be visible to other visitors to a particular Social Account, depending on the privacy settings You have chosen.

7. HOW DO WE USE YOUR PERSONAL DATA AND WHAT PRINCIPLES DO WE FOLLOW?

7.1. We respect your privacy and only collect as well as process Personal Data that is necessary to achieve our stated purposes for processing Personal Data.

7.2. In processing your Personal Data, we will:

7.2.1. comply with the requirements of applicable and valid legislation, including the GDPR;
7.2.2. process your Personal Data in a lawful, fair and transparent manner;
7.2.3. We collect your Personal Data for specified, clearly defined and legitimate purposes and We do not process it in a way that is incompatible with those purposes, except to the extent permitted by law;
7.2.4. We take all reasonable steps to ensure that Personal Data which is not accurate or complete in relation to the purposes for which it is processed is promptly rectified, supplemented, its processing is suspended or it is destroyed;
7.2.5. We keep them in a form which permits your identification for no longer than is necessary for the purposes for which the Personal Data is processed;
7.2.6. We do not provide Personal Data to third parties and will not disclose it other than as set out in the Privacy Policy or applicable law;
7.2.7. We ensure that your Personal Data is processed securely, by ensuring technical and organisational security measures, and by limiting access to your Personal Data to those of our employees who need such access for the purposes of their job functions.

8. TO WHOM AND WHEN DO WE TRANSFER YOUR PERSONAL DATA?

8.1. We may transfer your Personal Data to processors or recipients who assist us in the performance of our activities:

8.1.1. accounting and order management software providers;
8.1.2. providers of IT, cloud hosting, Platform Management and telecommunications services. Main cloud hosting service providers are: (i) Amazon Web Services, Inc. Data is processed in EEA (ii) MongoDB, Inc. Data is processed in EEA;
8.1.3. providers of advertising, marketing and news distribution services;
8.1.4. providers of office applications and data storage, management, exchange services;
8.1.5. payment administration service providers;
8.1.6. We have engaged our partner Sift Science, Inc. for the prevention of payment fraud. The partner’s privacy policy can be found here: https://sift.com/service-privacy.

8.2. To enable us to publish content on Social Networking Accounts, We provide data to the following social networking platform operators:

8.2.1. Meta Platforms Ireland Ltd (Ireland) and Meta Platforms, Inc., (USA), (data is transferred in accordance with an adequacy decision issued by the European Commission);
8.2.2. LinkedIn Ireland Unlimited Company (Ireland) and LinkedIn Corporation (USA) (data transferred in accordance with the EU Standard Contractual Clauses approved by the European Commission);
8.2.3. TikTok Technology Ltd (Ireland) (data stored in the EEA; data may be transmitted, if necessary, in accordance with an adequacy decision taken by the European Commission or in accordance with EU Standard Contractual Clauses approved by the European Commission);
8.2.4. YouTube Inc. (USA) (data transmitted in accordance with the EU Standard Contractual Clauses approved by the European Commission).

Given that carVertical does not administer the social networks listed above, but only its own account on these social networks, You are invited to read the information about the storage of your personal data in the privacy documents of these social networks.

8.3. We may provide data to law enforcement and pre-trial investigation authorities, courts and other dispute resolution authorities, other persons performing functions assigned by law, in accordance with the procedure provided by the legislation of the Republic of Lithuania. We provide these entities with information that is required by law or specified by the entities themselves.

8.4. We may also transfer data to:

8.4.1. companies within a group of companies and, where there is a legal basis, to other data controllers or joint data controllers, e.g. carVertival OÜ (Estonia);
8.4.2. if necessary, to companies that would buy or acquire our business or engage in joint activities or other forms of cooperation with us, as well as to companies established by us.

8.5. We generally process Personal Data within the EU/EEA, but in some cases your Personal Data may be transferred outside the EU/EEA. The transfer of your Personal Data outside the EU/EEA is based on:

8.5.1. a data processing or supply agreement that describes such transfer and includes Standard Contractual Clauses for international transfers (to request a copy, please reach out to our Data Protection Officer); or
8.5.2. an adequacy decision adopted by the European Commission, which means that the European Commission has recognised the country in which the third party is established and/or carries on business as providing an adequate level of protection of personal data; or
8.5.3. a specific authorisation by the data protection supervisory authority to carry out such transfer; or
8.5.4. your consent to the transfer of your Personal Data outside the EU/EEA.

9. WHAT RIGHTS DO YOU HAVE?

9.1. As a data subject, You have the following rights in relation to your Personal Data:

9.1.1. to have access to your Personal Data, i.e., to receive a notice confirming whether We are processing your Personal Data and, if We are, to request access to the data processed and the information relating to it;
9.1.2. to ask us to correct inaccurate or incorrect information We use or to supplement information where it is incomplete;
9.1.3. to ask us to erase information We hold about You where there is a basis for erasure;
9.1.4. to request us to restrict the processing of the information We hold about You where You contest the accuracy of the data or object to the processing of the data, You object to the erasure of your data which is unlawfully processed, or You need the data in order to assert, exercise, or defend legal claims;
9.1.5. to object to the use of your data where We process your data for our and/or third parties legitimate interests;
9.1.6. to request us to transfer/receive data that You have provided to us under a contract or consent and that We process by automated means in a commonly used electronic format;
9.1.7. to object to the application to You of a fully automated decision, including profiling, where such a decision may have legal consequences or a similar significant effect on You;
9.1.8. to withdraw the consents, You have given us to use information about You where We are using the data on the basis of your consent;
9.1.9. lodge a complaint with the relevant data protection supervisory authority.

9.2. If You wish to exercise any of your rights set out above, You may contact us by email at info@carvertical.com or by contacting the Data Protection Officer at dpo@carvertical.com . In order to better understand your request, We may ask you to fill in the relevant request form, ask You to provide a request signed with an advanced or qualified electronic signature, send the request by post or visit us.

9.3. For security reasons, in some cases We will only be able to process your request after verifying your identity. We may therefore ask you to prove your identity, for example by providing an identity document or other information.

9.4. You can exercise some of your rights as a data subject by changing your account settings on the Platform or deleting your account yourself. By changing your settings or deleting your account, You may lose some or all of the information contained in your account.

9.5. We may refuse to exercise your rights other than to object to the processing of your Personal Data where it is processed on the basis of consent, including consent for direct marketing, where We are not permitted to comply with your request under the GDPR.

9.6. We do not normally charge any fee for exercising your rights. However, the law allows us to charge a reasonable fee or to refuse to comply with your request if it is manifestly unfounded or excessive.

9.7. Upon receipt of your request or instruction regarding the processing of your Personal Data, We will provide You with a response within no later than 1 month from the date of the request and will carry out the actions specified in the request or inform You why We refuse to do so. If necessary, the time limit may be extended by a further 2 months, depending on the complexity and number of requests. In this case, We will inform You of the extension within 1 month of receipt of the request.

9.8. If Personal Data is erased at your request, We may retain copies of the information as necessary to protect our legitimate interests and those of others, to comply with obligations of public authorities, to resolve disputes, to identify disturbances or to comply with agreements.

10. HOW DO WE PROTECT YOUR PERSONAL DATA?

10.1. Your Personal Data is processed responsibly and securely and is protected against loss, unauthorised use and alteration. We have put in place physical and technical measures (such as access control, data sharing restrictions, encryption, updating of systems, use of passwords, virus or malware protection, data protection documentation, etc.) to protect the information We collect from accidental or unlawful destruction, damage, alteration, loss, disclosure, as well as any other unauthorized processing. Our employees are under a written obligation not to disclose or distribute your Personal Data to any unauthorised third party.

10.2. The security measures for Personal Data shall be determined taking into account the risks involved in the processing of Personal Data. For more on data security, see here.

11. HOW DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?

11.1. A cookie is a small text file stored on your browser or device (PC, tablet, mobile phone). For more information about the cookies We use and the conditions of their use, please see our Cookie Policy.

12. CONTACT US

12.1. If you have any questions, comments or complaints about how We collect, use and store information about You, or if You wish to exercise your rights as a data subject, You may contact us at info@carvertical.com or our Data Protection Officer at dpo@carvertical.com , Aukštaičių g. 7, LT-11341 Vilnius.

12.2. If you believe that the processing of Your personal data infringes the GDPR provisions, You have the right to lodge a complaint with the supervisory authority of the EU Member State in which you have your habitual residence, place of work or the place where the alleged infringement took place.

The supervisory authority in Lithuania is the State Data Protection Inspectorate, address L. Sapiegos Str. 17, 10312 Vilnius, Lithuania, e-mail: ada@ada.lt, website: https://vdai.lrv.lt/.

13. FINAL PROVISIONS

13.1. We have the right to update or change this Privacy Policy at any time. Such updated or amended Privacy Policy will be effective upon its posting on the Platform. In the event of material changes to the Privacy Policy, we will provide you with additional notice by email, if you have provided us with such an email address.

The date of the last update: 06-02-2024.