This privacy and cookie policy explains how UAB „Kertušas“, which operates the „Puikūs Kemperiai“ brand, collects, uses, stores and otherwise processes personal data when you visit our website, send an enquiry, book or rent a vehicle, buy a camper, or contact us about service, parts or other services we provide.

We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR), the Law on Electronic Communications of the Republic of Lithuania and other applicable legislation.

The controller of your personal data:

UAB „Kertušas“

• Company code: 121253292
• VAT number: LT212532917
• Address: Kirtimų g. 2, K4, LT-02300 Vilnius
• Email: info@puikuskemperiai.lt
• Phone: +370 684 35550

For any questions about the processing of personal data or the exercise of your rights, you can contact us by email at info@puikuskemperiai.lt.

• Contact details: first name, surname, telephone number, email address, residential or correspondence address.
• Booking and rental data: the vehicle chosen, the rental period, booking information, contract data, information on the handover and return of the vehicle.
• Driver and identity data: information necessary to conclude and perform the rental contract, including driving licence data, driving experience and other identity information lawfully required.
• Payment and accounting data: payment information, invoice data, the reservation fee, the deposit, the payment method and other information needed for settlement and accounting.
• Sales, service and parts order data:the camper you want, the vehicle's VIN or other technical information, the service order, the equipment being repaired, the parts ordered and information related to the order.
• Information on insured events and damage: information about road accidents, damage to the vehicle, losses, insurance cases and other data needed to administer the event.
• Correspondence data: the content of the emails, contact forms, messages and other communication you send us.
• Website usage data: IP address, device and browser information, pages visited, time of visit, traffic source, cookie identifiers and other technical information, where such data is collected in line with your cookie choices.

If payment is made through an external payment service provider, payment card data is normally processed by the payment service provider itself under its own security and privacy rules.

To provide services and perform the contract

We process data in order to administer the booking, conclude and perform a camper or minibus rental contract, sell a camper or parts, and provide service and other services ordered.

Legal basis – performance of a contract, or steps taken at your request before entering into a contract, under Article 6(1)(b) GDPR.

To administer enquiries

When you contact us by phone, by email or through the website, we use your data to answer your question and provide the information requested.

Legal basis – steps taken at your request before entering into a contract, or our legitimate interest in properly administering customer enquiries.

For payments, accounting and compliance with legal obligations

We process invoice, payment and other data required by law in order to meet accounting, tax and other legal obligations.

Legal basis – Article 6(1)(c) GDPR.

To administer damage, insured events, claims and disputes

We may use data to establish, exercise or defend legal claims and to administer damage, an insured event, debts or disputes.

Legal basis – our legitimate interest in protecting our rights and property under Article 6(1)(f) GDPR.

For the security and proper operation of the website

Technical data may be processed to ensure the security of the website and information systems, prevent abuse and resolve technical faults.

Legal basis – our legitimate interest in ensuring safe and reliable provision of services.

For statistics and website improvement

If we use non-essential analytics cookies or similar technologies, they are activated only with your consent.

Legal basis – your consent under Article 6(1)(a) GDPR.

For direct marketing

We send news, offers and other direct marketing information to natural persons with their consent or, in the case provided for by law, to existing customers when offering our own similar goods or services and giving a clear opportunity to opt out of such marketing.

Every electronic marketing message must offer a simple, free way to opt out of further messages.

Providing certain personal data is necessary to conclude or perform a contract.

For example, without the contact or driver data necessary for a booking or rental contract, we will not be able to conclude a vehicle rental contract or provide the relevant service.

You are not obliged to provide data used for direct marketing or non-essential cookies. Refusing consent does not affect your ability to use our core services.

We obtain most personal data directly from you when you book a service, fill in a form, call us, write to us, visit our premises or conclude a contract.

Where necessary to provide a service, we may also obtain information from payment service providers, insurance companies, vehicle or equipment manufacturers, service partners, lawfully operating registers or other lawful sources.

We do not sell your personal data.

Where necessary for the purposes stated, data may be transferred to, or accessed by, service providers acting on our behalf or independently, for example:

• payment and banking service providers;
• insurance companies and claims administration partners;
• roadside assistance and transport service providers;
• persons providing accounting, audit, legal and debt administration services;
• providers of website, hosting, email, booking, CRM and other IT system services;
• manufacturers and importers of vehicles, equipment and parts, or their service partners, where necessary to fulfil a warranty, repair or order;
• couriers and logistics service providers;
• state or law enforcement authorities, where we are required by law to provide data.

We give data processors only as much data as is needed to perform the specific service and require them to ensure its proper protection.

We give preference to service providers that process personal data within the European Economic Area.

If an IT, analytics, marketing or other service provider we use transfers data outside the European Economic Area, the transfer takes place only where there is a legal basis under the GDPR – for example, a European Commission adequacy decision, standard contractual clauses or other lawful safeguards.

We do not keep personal data longer than is necessary for the purpose for which it was collected, or than the law requires.

• Enquiry and correspondence data: where no contract is concluded – up to 2 years from the last communication, unless the data must be kept longer because of a possible claim or dispute.
• Booking, contract, rental, sales and service data: for the term of the contract and afterwards for as long as needed to comply with legislation, accounting, warranty obligations or legal claims.
• Invoices and other accounting documents: kept for the period laid down by law.
• Data on insured events, damage and disputes: kept until the event or dispute is finally resolved and additionally for as long as necessary for possible legal claims.
• Direct marketing data: processed on the basis of consent until consent is withdrawn or until the end of the marketing data retention period we have set. Information needed to prove that consent was given or withdrawn may be kept for an additional period for accountability purposes.
• Technical security logs: kept for as long as reasonably necessary to ensure the security of the website and information systems.

When the retention period ends, data is deleted, destroyed or irreversibly anonymised.

Depending on the specific circumstances and the conditions laid down in the GDPR, you have the right to:

• obtain information about the processing of your personal data and access the data we process about you;
• request the correction of inaccurate data or the completion of incomplete data;
• request the erasure of data where there is a legal basis for it;
• request the restriction of data processing;
• object to data processing based on our legitimate interest;
• receive the data you have provided in a structured, commonly used and machine-readable format, where the right to data portability applies;
• withdraw consent at any time, where data is processed on the basis of consent;
• object to the use of personal data for direct marketing.

Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

You can submit a request concerning your rights by email to info@puikuskemperiai.lt.

Before acting on a request, we may ask for information reasonably needed to confirm your identity.

If you believe that your personal data is being processed unlawfully or that your rights are being infringed, please first contact us by email at info@puikuskemperiai.lt so that we can resolve the situation.

You also have the right to lodge a complaint with the State Data Protection Inspectorate.

State Data Protection Inspectorate

L. Sapiegos g. 17, LT-10312 Vilnius

• Website: vdai.lrv.lt

We do not currently make decisions based solely on automated processing of personal data, including profiling, that would produce legal or similarly significant effects for a visitor or customer.

If such measures were introduced in the future, this policy would be updated accordingly.

Cookies are small files of information, or similar technologies, that may be stored on your device when you visit a website.

Cookies may be used to make a website work, remember the user's choices, analyse website traffic or carry out marketing.

• Essential cookies: Needed for the basic functions of the website, security, and the operation of the booking process or cookie choices. They do not require separate consent where they are genuinely necessary to provide the service the user requests.
• Functional and preference cookies: Allow the visitor's choices to be remembered and the operation of the website to be further adapted.
• Analytics or statistics cookies: Help us understand how visitors use the website, which pages are visited and how its operation can be improved.
• Marketing cookies and tracking technologies: May be used to measure advertising effectiveness, build audiences or show advertising better suited to the visitor.

Non-essential functional, analytics and marketing cookies are switched on only when we have your consent.

On a first visit to the website a cookie choice window is shown. In it the visitor can choose „Accept all“, „Reject non-essential“ or „Choose settings“.

Non-essential analytics and marketing cookies are activated only with the visitor's consent. Pre-ticked consent choices are not used.

The visitor can change their cookie choices at any time by clicking the „Cookie settings“ link in the website footer. Withdrawing consent is as easy as giving it.

Below is the list of cookies actually used on the website. It must be updated when the technologies or service providers used on the website change.

The website may use third-party services or embedded content, for example maps, videos, social network features, analytics or advertising tools.

Such third parties may process personal data under their own privacy rules. Where consent is required for their use, such technologies must not be activated before you consent.

We apply reasonable technical and organisational measures to protect personal data against unauthorised access, loss, alteration, disclosure or destruction.

Access to personal data is given only to those employees and service providers who need it to perform their functions.

Our website may contain links to the websites of other companies, manufacturers or organisations.

By clicking such a link you move to a website operated by a third party, so we recommend reading its privacy and cookie rules.

We may update this privacy and cookie policy from time to time in line with changes to our services, the technologies we use or legislation.

The latest version of the policy is always published on the website.