UAB Tuvlita Privacy Policy

Current version 2022-11-11

Tuvlita UAB respects the privacy of its customers and the users of www.tuvlita.lt. We are committed to the protection, fair and lawful processing and maintenance of the data you provide. This privacy policy sets out Tuvlita UAB's privacy principles, policies and practices for the processing of personal data. This privacy policy also sets out what data we process on the website www.tuvlita.lt.

Tuvlita UAB is both the controller and the processor of personal data, depending on the category of personal data.

Contact information: company code 110584095, Lentvario g. 7A, LT-02300, Vilnius, info@tuvlita.lt, +370 6 3393000.

If you have any questions regarding the terms of this Privacy Policy, please send your request to: dap@tuvlita.lt.

Use of

This Privacy Policy is published on the Company's website www.tuvlita.lt.

The Privacy Policy is approved by the company's CEO and is reviewed annually and updated as necessary. The date of the current version of the Privacy Policy is indicated in the header of the document.

Your consent

By agreeing to this Privacy Policy, you consent to the use of certain of your personal data for the purpose of providing you with our company's services in an appropriate and efficient manner, as well as to the transfer of your personal data to third parties who are directly involved in the performance of the service provided to you.

By using the services provided on our website, you grant us the right to collect, manage, process and store your Personal Data to the extent and for the purposes set out in this Privacy Policy and our other documents.

Collection of information

When processing and collecting personal data, UAB "Tuvlita" is guided by the Law on Legal Protection of Personal Data of the Republic of Lithuania, the General Data Protection Regulation and other legal acts regulating the protection of personal data.

We collect data about our customers when you receive services provided by our company, or when you provide data about yourself online or otherwise.

If you visit our website, we also collect information that reveals the characteristics of the use of our services or automatically generates visit statistics. Read more "Cookie Policy".

For what purpose do we collect and process your personal data?

• Where we have an obligation to collect relevant personal data in accordance with legal requirements.
• To fulfil our contractual obligations and provide you with the service you want.
• To enable you to use our website and online services.
• For the purposes of protecting client/employee/company assets and preventing corruption.

Data we collect

By providing you with the services offered by our company:

- Details of the vehicle submitted for compulsory roadworthiness testing and the operator who submitted it;

- Details of the vehicle and the owner of the vehicle submitted for technical examination;

- Data from customer requests, complaints and proposals;

- Details of appeals against the decision of the Controller of Compulsory Roadworthiness Inspection;

- Details of technical inspections carried out in other countries;

- Data on vehicle photography during the compulsory roadworthiness test;

- Contact details provided by the customer of the compulsory MOT to receive a reminder of the end of the MOT;

- Video surveillance data (Tuvlita UAB has a video surveillance system. When you visit our company, your image remains on the CCTV cameras. The use of security cameras is our legitimate and legitimate interest. The purpose of the video recording is to protect our employees and customers, as well as our employees' and customers' property, from theft, destruction or damage, to prevent potential damage, and to identify the persons responsible for any damage if it occurs. For more information on the conditions of use of CCTV cameras, please contact our company);

- Data used to provide occupational safety and health services;

- Data used to provide staff training and development services;

- Data used for the provision of energy worker certification services;

- Data used to provide services for the condition monitoring of installations;

- Any other information that you may provide to us at any time when using our website, services or communicating with us.

By means of a website:

- All the information you provide in the "E-Services" sections of our website: registration for technical inspection, registration for technical expertise, cancellation of registration for inspection, validity and history of the technical inspection, reminder of the validity of the inspection, one-day access to the inspection, invoicing.

- Information about your computer and about your visits to and use of our website, including your IP address, time and date of access to the website;

- Data collected by means of cookies. For more information, see "Cookie Policy";

Remark. Our website may contain links to other third party websites. We are not responsible for the privacy policies and their implementation on third party websites.

Persons involved in the processing of data

We undertake never to transfer your personal data to third parties, except in the following cases:

• If you have consented to the disclosure of your Personal Data;
• Depending on the category of data, personal data is transferred to certain third parties directly related to the provision of the service (Association of Technical Inspection Companies "Transeksta", State Enterprise "Regitra", Motor Insurers' Bureau of the Republic of Lithuania, Board of the State Social Insurance Fund under the Ministry of Social Security and Labour, Ministry of Education and Science) and state control authorities (Police Department under the Ministry of the Interior, Lithuanian Transport Safety Administration, State Labour Inspectorate under the Ministry of Social Security and Labour) as far as it is necessary to implement the requirements of the legislation of the Republic of Lithuania in a proper and lawful manner, and to provide you with a high-quality service. We will only provide these third parties with as much of your personal information as is necessary for the performance of a particular service. The security of your data is a requirement for all third parties connected with us;
• law enforcement authorities in accordance with the procedure provided for in the legislation of the Republic of Lithuania.

Storage periods for personal data

We will retain your personal information for as long as necessary to fulfil the purposes set out in this privacy policy. The general time limit is 10 years after the service has been provided unless otherwise specified by law.

Your personal data will be stored for the purposes of providing electronic services for as long as you are a registered user of the electronic services and for 10 years after the last service is provided.

The retention periods for data collected by cookies are set out in "Cookie Policy".

Notwithstanding the above information retention periods, we have the right to retain your Personal Data on the server for as long as is necessary in the event that the data you have provided has been used in the course of an unlawful act or other suspected offence which has been or will be the subject of an investigation by the relevant law enforcement authorities, in the event of a complaint we have received in relation to the customer concerned, or for any other legitimate purpose for which we retain Personal Data. This data shall be destroyed upon lawful instructions from law enforcement or other authorised authorities.

Your rights

You may submit a written request to us to provide you with information on the sources and purposes for which your personal data are collected, processed and provided to which recipients. We will respond to such requests in accordance with the procedures and deadlines established by law and will endeavour to provide you with the information as soon as possible, but at the latest within 30 days of receiving your request.

At your request, such data shall be provided in writing to the address or email address provided. The provision of information on the sources and nature of your personal data collected, the purposes for which they are processed and the recipients to whom they have been provided in the last one year shall be free of charge once per calendar year.

If, following a request, we have suspicions about the identity of the applicant, we have the right to ask for the applicant's identity document or a copy thereof.

You also have the right, upon written request to us, to request the rectification of any incorrect, incomplete or inaccurate personal data, to request the suspension of the processing of your personal data, except for the storage of your personal data, where the data is processed in breach of the law and the terms of this Policy.

Upon your specific written request, all of your personal information may be removed.

Any request or instruction relating to the processing of Personal Data must be made to us in writing in one of the following ways:

• by delivering such request or instruction directly to us at Lentvario g. 7A, LT-2300 Vilnius
• by sending such a request or instruction by email to dap@tuvlita.lt

If you believe that the way we process your personal data does not comply with the applicable legislation, you have the right to contact the State Data Protection Inspectorate (www.ada.lt).

Responsibility

The company has appropriateorganisational and technical data security measures in place to ensure the protection of personal data, including protection against unauthorised processing, accidental loss, destruction or damage. Your personal data will be processed in accordance with the General Data Protection Regulation, the Law on Legal Protection of Personal Data of the Republic of Lithuania and other legal requirements.

The Company undertakes to regularly monitor, evaluate and update the controls in place and to update the Privacy Policy accordingly.

We may disclose information about you to our employees or sub-processors if reasonably necessary for those purposes as set out in this Privacy Policy.

In addition, we may disclose information about you:

• if we have to do it by law;
• to protect your rights or interests.

We do not provide your personal data to any third parties except as provided in this policy.

When processing your personal data, we implement organisational and technical measures to ensure the protection of personal data against accidental or unlawful destruction, alteration, disclosure, as well as against any other unlawful processing, taking into account the risks involved.

You are also responsible for ensuring that the data you provide to us is accurate, correct and complete. If there is any change in the data you have provided, you must inform us immediately by e-mail. In no event shall we be liable for any damage caused to you as a result of your providing incorrect or incomplete personal data or your failing to inform us of a change in data.