Privacy policy

Introduction

MARBIORA operates this website and the car rental service described on it (the Service). This policy explains what personal information we collect, why we collect it, who else processes it and what rights you have.

The terms used in this policy have the same meanings as in our Terms of service, unless they are defined here.

Who is responsible for your data

The data controller is Matas Tendziagolskis, who runs MARBIORA as an individual business registered in Lithuania under individual activity certificate No. 1532329.

For anything related to your personal data, write to marbiora777@gmail.com or call +370 699 66178.

What we collect

We collect only what we need to answer you and to provide the rental:

• When you send a booking request or a question: your name, phone number, email address, the car, the dates, the delivery place and your message.
• When you offer your car as a partner: your contact details and the details of the car.
• When you subscribe to the newsletter: your email address.
• When you write to us by WhatsApp, phone or email: the messages you send us.
• At handover: your driving licence and an identity document, checked because the law and our insurer require it, and the billing details needed for your rental agreement and invoice.

We do not ask for payment card details on this website. Giving us these details is voluntary, but without them we cannot answer your request or hand over the car.

Why we use it and on what legal basis

Under the GDPR every use of personal data needs a lawful basis. Ours are:

• Performance of a contract or steps before it: answering your request, arranging and providing the rental.
• Legal obligation: insurance records, tax documents and information we must give to the authorities.
• Legitimate interest: keeping the fleet and our clients safe, including driver checks, and counting visits to this website without cookies.
• Your consent: the newsletter and the Google cookies described in our Cookie policy. You can withdraw consent at any time.

Website statistics

We count visits with Umami, a statistics tool that runs on our own server. It uses no cookies, does not store your IP address and does not follow you to other websites. It tells us which pages are visited, from which country and from which website visitors arrived.

Google Analytics runs only if you choose "Analytics only" or "Accept all" in the cookie notice. Google advertising cookies, which help us measure whether our ads lead to enquiries, run only if you choose "Accept all". The details are in our Cookie policy.

Server logs

Our server records technical information that every browser sends: IP address, browser type, the page requested and the time of the request. We use it to keep the website secure and working, and we do not combine it with the information you give us.

Who processes your data and where it is stored

We use the following service providers. Each of them receives only what it needs for its task:

• UAB ESNET, Vilnius, Lithuania: hosting of our server. The website, the requests you send through it, newsletter subscriptions and visit statistics are stored on this server in the European Union.
• Exclusive Car Rent (MB A&J Realty, Vilnius, Lithuania): the rental platform behind our fleet. It receives the booking details needed to arrange your rental.
• The insurance companies covering the car you rent. They receive the driver details required for the insurance.
• Google Ireland Limited, Ireland, and Google LLC, United States: Google Analytics and advertising measurement, only with your consent. Data may be transferred to the United States under the EU-US Data Privacy Framework.
• WhatsApp Ireland Limited and Meta Platforms Ireland Limited, Ireland: only if you contact us through WhatsApp or Instagram. Those messages are processed under the providers' own policies, and Meta may transfer data to the United States under the EU-US Data Privacy Framework.

We do not sell your personal data and do not share it with anyone for their own marketing.

How long we keep it

We keep rental agreements, invoices and other accounting documents for 10 years, as Lithuanian accounting rules require. Enquiry correspondence that did not lead to a rental is kept only for as long as it is useful to you and to us. Newsletter subscriptions are kept until you unsubscribe. Server logs are deleted after 14 days.

Your rights

Under the GDPR you may ask us to:

• Show you the data we hold about you.
• Correct anything that is wrong.
• Delete data we no longer need to keep.
• Restrict a particular use, or act on your objection to it.
• Send your data to you or to someone else in a portable form.
• Act on your withdrawal of a consent you gave earlier.

Write to marbiora777@gmail.com and we will answer within one month, free of charge.

If you are not satisfied with our answer, you may complain to the State Data Protection Inspectorate of Lithuania (Valstybinė duomenų apsaugos inspekcija, vdai.lrv.lt) or to the data protection authority of the EU country where you live or work, for example the Agencia Española de Protección de Datos in Spain.

Security

We protect your data with encrypted connections, restricted access to our server and regular backups. No method of transmission over the internet or of electronic storage is completely secure, so we cannot guarantee absolute security.

Links to other sites

This website links to other sites, such as WhatsApp and Instagram. When you follow such a link, that site's own privacy policy applies, not ours.

Children

Our Service is not intended for anyone under the age of 18, and we do not knowingly collect personal information from children. If we discover that a child has given us personal information, we delete it.

Changes to this policy

We may update this policy. Changes are posted on this page together with the new date at the top. If a change affects you materially, we will tell you rather than leave you to notice it.