BOOK NOW

Privacy policy

1. DATA CONTROLLER

MB „Margio spindulys“ (hereinafter referred to as the Company) is the controller of the personal data processed within it, ensuring that personal data is handled in compliance with the data protection requirements applicable to data controllers.

Company Information: MB „Margio spindulys“, a legal entity of the Republic of Lithuania, entity code 302875929, registered office address: Margio Kranto g. 2, Penkininkų k., Trakų r., Republic of Lithuania, website: www.orangepinktravel.lt, email: info@orangepinktravel.lt, tel. +370 63009115, +370 60874425.

This Privacy Policy has been prepared in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation) (hereinafter – the GDPR). This policy provides information regarding the purposes of data processing, legal grounds, processed data types, origins, storage periods, data recipients, and the procedure for exercising data subject rights.

2. IMPLEMENTATION OF DATA SUBJECT RIGHTS

You have the right to contact the Company regarding the processing of your personal data and exercise the following rights:

  • The right to receive information about data processing;
  • The right to access your data;
  • The right to request rectification of data;
  • The right to request erasure (“the right to be forgotten”);
  • The right to restrict data processing;
  • The right to data portability (when processed by automated means);
  • The right to object to data processing (when based on consent or legitimate interest);
  • The right to object to decisions based solely on automated processing, including profiling.

You may submit requests orally or in writing (personally, by mail, or via email to info@orangepinktravel.lt). If applying orally or in person, you must provide a valid identity document. Without identity verification, the Company will not be able to implement your rights.

The Company shall provide information on actions taken within 1 (one) month of receiving the request. In case of delay, you will be informed of the reasons and your right to lodge a complaint with the State Data Protection Inspectorate (L. Sapiegos g. 17, Vilnius, tel. (8 5) 271 2804, email: ada@ada.lt).

3. PURPOSES AND LEGAL GROUNDS FOR DATA PROCESSING

As a Data Controller, the Company processes your data for:

  • Customer service during pre-contractual stages: Legal basis – processing is necessary at the request of the data subject prior to entering into a contract (GDPR Art. 6(1)(b)).
  • Submission of contract proposals: Legal basis – necessary to take action at your request (GDPR Art. 6(1)(b)).
  • Conclusion and administration of accommodation service contracts: Legal basis – performance of a contract (GDPR Art. 6(1)(b)). Includes reservations, handling claims, and providing updates.
  • Direct marketing for new clients: Legal basis – your consent (GDPR Art. 6(1)(a)).
  • Direct marketing for existing clients: Legal basis – legitimate interest of the Company (GDPR Art. 6(1)(f)) to offer similar services.

As a Data Processor, the Company processes your data on behalf of other controllers for purposes including direct marketing and the conclusion of travel/transportation service agreements.

4. PROCESSED DATA AND STORAGE PERIODS

Depending on the purpose, the Company processes data such as:

  • General info: Name, email, phone number.
  • Contractual info: Surname, date of birth, payment details (credit/debit card info).
  • Legal/B2B info: Personal ID codes, addresses, representation details.
  • Travel/Insurance info: Identity document details (passport/ID card), gender, nationality, information about special needs or health (if applicable for insurance).

Storage periods:

  • Service contracts: 10 years after contract expiration.
  • Claims management: Duration of the contract plus 3 years.
  • Pre-contractual inquiries: 1 year from the date of receipt.
  • Direct marketing: 5 years, or until consent is withdrawn.

Upon expiration of the storage period, documents are destroyed in accordance with the laws of the Republic of Lithuania.

5. DATA TRANSFER

Your information will not be disclosed to third parties without a legal basis, except for entities involved in fulfilling your requested services (e.g., service providers, common data controllers, or processors with whom the Company has security agreements).

Data may be provided to:

  • UAB „Waavo“, Go Global Travel, ADB Compensa Vienna Insurance Group;
  • Tour operators on whose behalf contracts are concluded;
  • Archiving service providers;
  • Law enforcement, courts, and other state institutions when required by law.

FINAL PROVISIONS

For any questions regarding data protection, please contact: info@orangepinktravel.lt or tel. +370 63009115. The Company reserves the right to amend this Privacy Policy. Changes take effect from the date of their publication on the website.

Last updated: 2024.07.01