General information
The Administration of the City of Vilnius Municipality (hereinafter referred to as “we” or the “Data Controller”) is the operator of the website neakivaizdinisvilnius.lt. In this Privacy Policy (hereinafter – the “Privacy Policy”), we define and explain how we collect and further process the personal data of Website visitors. The Privacy Policy also provides information on the processing of personal data of all other data subjects in the implementation of the project “Neakivaizdinis Vilnius”.
The Privacy Policy applies to all individuals visiting the Website. The terms set out herein apply each time you access the content and/or services provided by us, regardless of the device you use (computer, mobile phone, tablet, or other device). By continuing to browse the Website, you confirm that you have read this Privacy Policy and understand its provisions.
We process the personal data of all data subjects lawfully, transparently and fairly, for predetermined purposes and only to the extent necessary to achieve them. When processing your personal data, we comply with Regulation (EU) 2016/679 (the General Data Protection Regulation, hereinafter – the “GDPR”), the Law on the Legal Protection of Personal Data of the Republic of Lithuania, as well as the requirements for personal data processing established in other legal acts and in the recommendations and/or instructions of supervisory authorities.
Individuals under the age of 14 may not provide any personal data through our website neakivaizdinisvilnius.lt and/or social media accounts. If you are under the age of 14, you must obtain the consent of your legal representatives (parents, adoptive parents, guardians or custodians) before submitting any personal information.
The terms used in this Privacy Policy shall be understood as they are defined in the GDPR.
Details of the Data Controller:
Budgetary Institution “Administration of the City of Vilnius Municipality”
Legal entity code: 188710061
Registruotos buveinės adresas: Konstitucijos pr. 3, LT-09601 Vilnius
Phone number 8 5 2112000
Email: savivaldybe@vilnius.lt
How do we collect information about you?
Your personal data, i.e. any information about you that enables us to identify you, is obtained in various ways:
- You may provide information (personal data) yourself;
- information about you may be collected automatically;
- in certain cases, we receive information about you from third parties and may collect information about you from publicly available sources.
- You may provide your personal data to us directly. This most commonly occurs when:
- you register for events, training sessions or other projects organised by us;
- you submit an inquiry, request and/or complaint to us by telephone, email or regular mail;
- Information about you may be collected automatically. This most commonly occurs when:
- you submit an inquiry through our website or social media accounts (“Facebook”, “Instagram”);
- you make public posts on the social media platforms (“Facebook”, “Instagram”) that we administer;
- you use the websites managed by us (data is collected through cookies and similar technologies; more information about the cookies we use can be found below).
- To the extent permitted by applicable legal acts, we may obtain information about you from third parties. This may include information provided by our partners, contractors, service providers, as well as information from your publicly accessible profiles or databases.
- We may combine the information about you that we receive from you, public and commercial sources with other information that we obtain from or about you.
- We may also collect information about you in other cases not covered by the Privacy Policy; however, if this occurs, we will inform you additionally.
What information (personal data) about you do we process?
Although we strive to collect as little information about you as possible, in order to carry out our activities we collect the following information:
- Your contact details;
- information about your achievements, professional or other public activities relevant to the implementation of the project “Neakivaizdinis Vilnius”;
- your image captured in photographs;
- information you provide when calling or writing to us, submitting inquiries or completing registration forms;
- information necessary for the defence of our institution’s interests in court or other institutions;
- information about the device you use;
- information necessary for the implementation of direct marketing.
The information we collect directly from you most commonly includes the following:
- name, surname, city of residence, professional activity/workplace, telephone number, email address.
The information we collect automatically most commonly includes the following:
- information about how you use this Website (device information: IP address, operating system version and the device you use to access the content, settings; login information: the time and duration of your session and any information stored in cookies that we have placed on your device (the cookie policy is provided below); location information: the device’s GPS signal or information about nearby Wi-Fi access points and mobile network towers that may be transmitted to us when you use the content of our website).
The information we receive from third parties or publicly available sources most commonly includes the following:
- name, surname, workplace / employment activity / business, data on achievements relevant to the implementation of the project “Neakivaizdinis Vilnius”, place of residence, image captured in photographs.
You may choose not to provide us with certain information; however, in such a case, we may be unable to provide you with our services (for example, if you do not provide the required information requested in order to respond to your inquiry, we will not be able to reply to you).
Important: The staff of our institution will not, in writing, by telephone, or by any other means, request your login details, bank card numbers, passwords, or any other information the misuse of which could cause you financial or any other harm.
For what purposes and on what legal grounds do we process your data?
The above-provided information is processed for the following purposes:
- for the implementation of the project “Neakivaizdinis Vilnius”;
- for the fulfilment of our obligations under applicable legal acts;
- for the protection of our institution’s interests in court or other institutions;
- for the purposes of direct marketing.
We inform you that we seek to maintain contact with visitors to our website and to provide them with information about tourism news in the City of Vilnius and various events organised by us. For this purpose, we carry out direct marketing by telephone and email, providing notifications about tourism development news in Vilnius and organised events, etc. We have the right to send website visitors information about tourism news in the City of Vilnius and various events organised by us to the postal address obtained at the time of registration for events. Visitors to our website have the right to opt out of receiving such direct marketing communications from us now or at any time in the future by notifying us of their decision in any convenient manner: by email at neakivaizdinis@vilnius.lt, by post to Konstitucijos Ave. 3, LT-09601 Vilnius, or by using the unsubscribe link in the informational email itself. Such withdrawal shall not affect the processing of your personal data carried out by us prior to the withdrawal
In all other cases, we will process your personal data for direct marketing purposes only after obtaining your explicit consent to such processing. You may withdraw this consent at any time by notifying us using the methods indicated above.
Your personal data is processed on the basis of one or more lawful grounds for processing:
- compliance with the requirements of legal acts;
- public interest (unless your private interests override);
- our legitimate interests (unless your private interests override);
- The purposes, legal grounds and personal data we process are provided in this table.
- in certain cases – your consent.
Purpose Legal basis (bases) Personal data Development of the project “Neakivaizdinis Vilnius” Compliance with the requirements of legal acts Name, surname, gender, telephone number, email address or other contact details, workplace / employment activity / business, position, data on achievements relevant to the implementation of the project “Neakivaizdinis Vilnius”, image captured in photographs. Fulfilment of our obligations under applicable legal acts Compliance with the requirements of legal acts Depending on the requirements of applicable legal acts, the content of a request received from institutions or other objective circumstances. Assessment of the quality of the online services provided by our institution (with a view to improving them and creating new content) Legitimate interests of our institution IP address, operating system version and the device you use to access the content, settings, the time and duration of your session and any information stored in cookies that we have placed on your device, the device’s GPS signal or information about nearby Wi-Fi access points and mobile network towers that may be transmitted to us when you use the content of our website. Protection of our institution’s interests in court or other institutions Compliance with the requirements of legal acts Legitimate interests of our institution Public interest Depending on the claim or complaint submitted, for this purpose we may process all personal data about you available to us, as listed in the Privacy Policy. For direct marketing purposes (only if we have obtained your consent or, as applicable, have not received your objection) Consent Legitimate interests of our institution Name, surname, email address, photograph.
- In cases where we cannot rely on one of the legal bases provided in this table, before starting to process your personal data, we will request your consent (such cases will be clear from the circumstances and context).
- In cases where we process your personal data for purposes other than those specified in this Privacy Policy, we will inform you by providing a separate notice.
To whom do we disclose your personal data?
- Without your prior written consent, we may disclose your personal data only in the following cases:
- to law enforcement and public authorities;
- to other entities where required by law or where necessary to protect our legitimate interests.
The ability of recipients of your personal data (separate data controllers) to use your data is limited; they may not use this information for purposes other than those set out in the contract concluded with us. In order to receive their direct marketing offers, your separate consent will be requested.
We may also provide your data to data processors who provide services to us. Data processors have the right to process your personal data only on the basis of a written agreement concluded between us and them, in accordance with our instructions and only to the extent necessary for the proper performance of the obligations set out in the contract. When engaging processors, we take all necessary measures to ensure that our data processors implement appropriate organisational and technical security measures and maintain the confidentiality of your personal data.
Other parties to whom we may provide information about you, where necessary to protect our legitimate interests or to comply with mandatory legal requirements, include public authorities, pre-trial investigation officers, courts, etc.
More detailed information about the specific companies indicated in this section to whom your personal data may be disclosed can be obtained by contacting us using the contact details provided in this Privacy Policy, in the privacy policies of our other managed websites, or in the informational messages provided to you.
What do we do to protect your personal data?
We have implemented reasonable and appropriate physical and technical measures to protect the information we collect for the purposes of providing content/services. However, please note that although we take appropriate actions to protect your personal data, no website, internet-based operation, computer system or wireless connection is completely secure.
How long do we retain your personal data?
We determine the retention periods for personal data in accordance with the requirements of laws, regulatory legal acts and supervisory (or other competent) authorities. If no retention period is specified in legal acts, we determine the retention period taking into account the public interest or our legitimate interests, but not longer than 7 years from the date of receipt of the data (unless, as mentioned above, longer retention periods are established by legal acts).
Upon expiry of the data retention periods, your data will be deleted in such a way that it cannot be restored, or anonymised so that you can no longer be identified.
Personal data is generally retained for the following periods:
Personal data Retention period Data related to registration forms for events, conferences, exhibitions, courses or other projects organised by us 14 days from the start date of the event / conference / exhibition / course or other project Data contained in inquiries, requests and/or complaints submitted to us by telephone, email or regular mail Up to 1 year from the date of receipt of the inquiry / request / complaint or from the date of its fulfilment Your image captured in photographs For as long as your consent is valid, or, if you are a public person – for as long as the publication of your image is significant for the development of the tourism sector of Vilnius and the creation of the image of Vilnius. The data may be deleted earlier if your objection to the retention of such data is received (if your interests prevail). Personal data processed on the basis of your consent, except for consents regarding the use of your image captured in photographs Up to 2 years from the date of receipt of the consent, unless the consent has been withdrawn earlier IT system records (logs) 1 year What rights do you have?
Depending on the situation and the additional conditions established by the GDPR, you have the following rights:
- to know (to be informed) about the processing of your personal data (right to be informed);
- to access the personal data we process about you and how they are processed (right of access);
- to request the rectification of inaccurate personal data or, taking into account the purposes of processing, to have incomplete personal data completed (right to rectification);
- to request the erasure of personal data related to you (right to be forgotten);
- to request the restriction of the processing of personal data related to you (right to restriction);
- to request the transfer of the data you have provided to us (right to data portability);
- to object at any time to the processing of your personal data where such processing is carried out in the public interest, for the purposes of our or a third party’s legitimate interests, and where personal data are processed for direct marketing purposes, including profiling (right to object);
- to withdraw your consent to the processing of personal data where the data are processed on the basis of consent.
We always seek to properly ensure your rights and to respond promptly to any possible violation of their implementation; therefore, if you have any questions regarding our processing of your personal data, we kindly ask you to contact us first. We also note that in all cases you have the right to lodge a complaint with the State Data Protection Inspectorate at any time.
We may not enable you to exercise the above-listed rights where, in cases provided for by law, it is necessary to ensure the prevention, investigation and detection of criminal offences, breaches of official or professional ethics, as well as the protection of the rights and freedoms of the data subject or other persons.
Cookies, signals and similar technologies<br>
Cookies are small pieces of information stored in your web browser. In this Privacy Policy, the term “cookies” is used to describe cookies and other similar technologies, such as pixel tags (“Pixel Tags”), web beacons (“Web Beacon”), and network data collectors (“clear GIF”).
They help us to:
– recognise you as a previous visitor to a particular website;
– store your browsing history on the Website and tailor content accordingly;
– ensure the smooth operation of the Website;
– monitor the duration and frequency of visits and collect statistical information about the number of visitors to the Website.By analysing this data, we can improve our Website and make it more user-friendly.
Cookies used on our Website: When you use a browser to access the content we provide, you can configure your browser to accept all cookies, reject all cookies, or notify you when a cookie is being sent. Each browser is different, therefore, if you do not know how to change your cookie preferences, please refer to its help menu. Your device’s operating system may contain additional cookie controls. If you do not want information to be collected through cookies, use the simple procedure available in most browsers that allows you to refuse the use of cookies.
Please also note that, in addition to the cookies we use, certain third parties (for example, social media operators) may be allowed to set and access cookies on your device when you use our Website. Such third parties apply their own privacy policies, and we are not responsible for them (our Website does not have access to the information transmitted through such cookies). Therefore, we strongly recommend that you additionally review the privacy policies published on the websites of those third parties. Our social media accounts (“Facebook”, “Instagram”) are subject to the privacy policies of their respective operators.
Necessary (3 Cookies)
Necessary cookies are essential for the basic functions of the website to operate properly, and the website will not function as intended without them. These cookies do not store personally identifiable information.
- Cookie ID: pll_language
Domain: neakivaizdinisvilnius.lt
Duration: 1 year
Description: “Polylang” sets this cookie to remember the user’s selected language when returning to the website and to obtain language information when it is not available by other means.
Script URL pattern: plugins/polylang- Cookie ID: cookieyes-consent
Domain: neakivaizdinisvilnius.lt
Duration: 1 year
Description: “CookieYes” sets this cookie to remember the user’s consent preferences and to ensure that these preferences are respected during subsequent visits to the website. It does not store or process any personal information about website visitors.
Script URL pattern: cookieyes.com- Cookie ID: VISITOR_PRIVACY_METADATA
Domain: youtube.com
Duration: 6 months
Description: YouTube sets this cookie to store the user’s cookie consent state for the current domain.
Script URL pattern: youtube.comFunctional (14 Cookies)
Functional cookies help perform certain functionalities, such as sharing website content on social media platforms, collecting feedback, and enabling other third-party features.
- Cookie ID: _fbp
Domain: neakivaizdinisvilnius.lt
Duration: 3 months
Description: “Facebook” sets this cookie to display advertisements on Facebook or on digital platforms powered by Facebook advertising after visiting the website, and to analyse the effectiveness of advertising campaigns.
Script URL pattern: facebook.net- Cookie ID: _gct_au
Domain: neakivaizdinisvilnius.lt
Duration: 3 months
Description: “Google Tag Manager” sets this cookie to store visitor information used to measure advertising effectiveness.
Script URL pattern: googletagmanager.com- Cookie ID: test_cookie
Domain: doubleclick.net
Duration: 15 minutes
Description: doubleclick.net sets this cookie to determine whether the user’s browser supports cookies.
Script URL pattern: doubleclick.net- Cookie ID: luik
Domain: issuu.com
Duration: 6 months
Description: Issuu sets this cookie to recognise the user’s device and which Issuu documents have been read.
Script URL pattern: issuu.com- Cookie ID: loglevel
Domain: open.spotify.com
Duration: Never expires
Description: Squarespace sets this cookie to maintain settings and outputs when using the Developer Tools Console during the current session.
Script URL pattern: squarespace.com- Cookie ID: ttr_f
Domain: spotify.com
Duration: 1 year
Description: The ttr_f cookie is set by Spotify to enable audio content from Spotify on the website and to record information about user interaction related to the audio content.
Script URL pattern: spotify.com- Cookie ID: taidiiig
Domain: spotify.com
Duration: 6 months
Description: The ttr_f, taidiiig cookie is set by Spotify to enable audio content from Spotify on the website and to record information about user interaction related to the audio content.
Script URL pattern: spotify.com- Cookie ID: yt-remote-fast-check-period
Domain: youtube.com
Duration: Session
Description: The yt-remote-fast-check-period cookie is used by YouTube to store the user’s video player preferences for embedded YouTube videos.
Script URL pattern: youtube.com- Cookie ID: yt-remote-session-app
Domain: youtube.com
Duration: Session
Description: The yt-remote-session-app cookie is used to store the user’s video player preferences and settings when using embedded YouTube videos.
Script URL pattern: youtube.com- Cookie ID: yt-remote-cast-installed
Domain: youtube.com
Duration: Session
Description: The yt-remote-cast-installed cookie is used to store the user’s video player preferences when using embedded YouTube videos.
Script URL pattern: youtube.com- Cookie ID: yt-remote-session-name
Domain: youtube.com
Duration: Session
Description: The yt-remote-session-name cookie is used by YouTube to store the user’s video player preferences when using embedded YouTube videos.
Script URL pattern: youtube.com- Cookie ID: yt-remote-cast-available
Domain: youtube.com
Duration: Session
Description: The yt-remote-cast-available cookie is used to store the user’s preferences regarding whether casting is available on their YouTube video player.
Script URL pattern: youtube.com- Cookie ID: yt-remote-device-id
Domain: youtube.com
Duration: Session
Description: The yt-remote-device-id cookie is used by YouTube to store the user’s video preferences when using embedded YouTube videos.
Script URL pattern: youtube.com- Cookie ID: yt-remote-connected-devices
Domain: youtube.com
Duration: Session
Description: YouTube sets this cookie to store the user’s video preferences when using embedded YouTube videos.
Script URL pattern: youtube.comAdvertising (7 Cookies)
Advertising cookies are used to provide visitors with tailored advertisements based on the pages they have previously visited, and to enable the website to deliver targeted advertising to the visitor on social media platforms such as “Facebook” or other social networks.
- Cookie ID: _fbp
Domain: neakivaizdinisvilnius.lt
Duration: 3 months
Description: “Facebook” sets this cookie to display advertisements to users on its website or digital platform after they have visited the website, using the Facebook Pixel or Facebook social plugin.
Script URL pattern: facebook.net- Cookie ID: _gct_au
Domain: neakivaizdinisvilnius.lt
Duration: 3 months
Description: “Google Tag Manager” sets this cookie on websites that use its services to measure advertising effectiveness.
Script URL pattern: googletagmanager.com- Cookie ID: test_cookie
Domain: doubleclick.net
Duration: 15 minutes
Description: doubleclick.net sets this cookie to check whether the user’s browser supports cookies.
Script URL pattern: doubleclick.net- Cookie ID: luik
Domain: issuu.com
Duration: 6 months
Description: Issuu sets this cookie to recognise the user’s device and which Issuu documents have been read.
Script URL pattern: issuu.com- Cookie ID: NID
Domain: google.com
Duration: 6 months
Description: Google sets this cookie for advertising purposes, to display ads to users and to measure the effectiveness of advertising campaigns.
Script URL pattern: google.com- Cookie ID: yt.innertube::nextId
Domain: youtube.com
Duration: Never expires
Description: YouTube sets this cookie to register a unique ID in order to store data on which YouTube videos the user has viewed.
Script URL pattern: youtube.com- Cookie ID: yt.innertube::requests
Domain: youtube.com
Duration: Never expires
Description: YouTube sets this cookie to register a unique ID in order to store data on which YouTube videos the user has viewed.
Script URL pattern: youtube.comPerformance (1 Cookie)
Performance cookies are used to understand and analyse the main performance indicators of the website, which help provide visitors with a better user experience.
Script URL pattern: youtube.com
- Cookie ID: loglevel
Domain: open.spotify.com
Duration: Never expires
Description: Squarespace sets this cookie to maintain settings and outputs when using the Developer Tools Console during the current session.
Script URL pattern: squarespace.comAnalytics (1 Cookie)
Analytical cookies are used to understand how visitors interact with the website. These cookies help provide information about the number of visitors, traffic sources, visit statistics, and other similar data.
- Cookie ID: loglevel
Domain: open.spotify.com
Duration: Never expires
Description: Squarespace sets this cookie to maintain settings and outputs when using the Developer Tools Console during the current session.
Script URL pattern: squarespace.comUncategorised (0 Cookies)
Uncategorised cookies are cookies that we are in the process of analysing and that have not yet been assigned to any category.
External websites
The Website contains links to external websites, i.e. websites of institutions related to the tourism sector (for example, visitor attractions, catering, entertainment and other service providers). When following such links, please note that these websites and the services accessible through them have their own separate privacy policies (rules) for which we cannot assume responsibility; therefore, we recommend that you review them carefully before providing any personal data.
Final provisions
The Privacy Policy is reviewed and updated according to our needs, but at least once every two years, or upon changes to legal acts regulating the processing of personal data. After updating the Privacy Policy, we will inform you about our assessment and any material changes by publishing a notice on the Website or in another similar manner. If you continue to use the content and/or services we provide after such notice is published, we will consider that you agree to the new requirements set out in the updated Privacy Policy.
The Privacy Policy was last reviewed on 15 April 2019.
