Below is information about the data processed by Hill of Crosses and the purposes of the processing. If you have any questions regarding the processing of your personal data, please contact us by e-mail email@example.com
Legal basis for the processing data
We process data in accordance with Article 6 (1) of the General Data Protection Regulation of the European Union, General Law on Processing, as well as in accordance with the Law on Legal Protection of Personal Data of the Republic of Lithuania and the Law on Electronic Communications of the Republic of Lithuania.
- Date of birth,
- Telephone number,
- Email address,
- Home address.
- Payment history
Data retention period
The Hill of crooses shall retain data for the maximum periods required by law, as long as the data must be retained for the purposes of their processing. When personal data is no longer needed, it is destroyed. Exceptions apply to those personal data or specific documents which cannot be destroyed in accordance with the procedure established by legal acts and must be archived.
Payment details – maximum for 2 calendar years after the end date of the lease, the period within which the hill of crosses can receive a report of a traffic violation from the police and apply an administrative fee in accordance with the company’s terms and conditions. The storage period may be extended with the consent of the user for further reservations;
Described in cookies policy
Rights of the data subject
In accordance with the General Data Protection Regulation, the data subject has the right to:
- Obtain information from the controller about the stored data of the data subject: the purposes of the data retention, the categories of personal data, the recipients of the data, the data retention period if that possible. This right also includes the right to ask the controller to rectify personal data, to restrict the processing of personal data relating to the data subject or to object to such processing (BDAR, Art. 15);
- Require the correction of inaccuracies relating to the data subject. (BDAR, Art. 16);
- Require the deletion of data relating to the data subject, unless the retention of data in specific circumstances is mandatory simply for the purposes of website listed above. Such cases are to be dealt with individually. This right also applies when the data subject withdraws the consent on which the processing is based or the personal data have been processed unlawfully (BDAR, Art. 17);
- Require restrictions on the processing of personal data if the processing of personal data is illegal, the data subject disputes the accuracy of the data and the data controller must verify the data (BDAR, Art. 18);
- To disagree with processing of the data subject’s data for direct marketing purposes and to withdraw his consent at any time. Upon written request for withdrawal of consent from the data subject, we undertake to immediately terminate the processing of the data subject’s data for marketing purposes (BDAR, Art. 21);
- To submit a complaint against the processing his or her personal data with the supervisory authority if he or she considers that the processing of his or her personal data infringes the said Regulation. (BDAR, 77 p.). In Lithuania, Latvia and Estonia the functions of the supervisory authority are performed by the State of Lithuania, Latvia and Estonia, the functions of the supervisory authority are performed by the State Data Protection Inspectorate: firstname.lastname@example.org – Lithuania.
- All rights of access to e-mails related to the data subject by e-mail email@example.com
Links to Other Websites
The websites provide links to other websites. It is noted that clicking on links from third parties and / or partners transfers the data subject from the sites operated by us and we are not responsible for the security and privacy of the information provided by the data subject when visiting other sites. The policy set out in this document applies exclusively to the website.