1. General provisions
This privacy policy explains how UAB Erabalta collects, uses, stores and otherwise processes personal data when you visit the website www.erabalta.lt, submit a transport inquiry, or contact us by phone, e-mail or other means of communication.
We process personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (the General Data Protection Regulation, GDPR), the laws of the Republic of Lithuania and other applicable data protection requirements.
2. Data controller
The controller of your personal data is:
UAB Erabalta
Company code: 156877789
VAT code: LT568777811
Address: Ateities pl. 34B, LT-52165 Kaunas, Lithuania
E-mail: info@erabalta.lt
Phone: +370 685 56666
Website: www.erabalta.lt
You can send questions about the processing of personal data, or requests to exercise your rights, to info@erabalta.lt.
3. What personal data we process
Depending on how you use the website or contact us, we may process the following data:
3.1. Transport inquiry data
- first name and surname;
- the company you represent;
- phone number;
- e-mail address;
- loading and delivery locations;
- preferred loading date;
- cargo type, dimensions, weight and other parameters;
- information about loading, unloading and transport conditions;
- your comments;
- attached photos, technical drawings and documents;
- other information you choose to include in the inquiry.
3.2. Communication data
When you contact us by phone, e-mail or other means of communication, we may process:
- your contact details;
- the content of the correspondence;
- the date and time of the call;
- information about your inquiry and our reply;
- other data related to the communication and the provision of services.
We do not record phone calls unless you have been clearly informed about it before the call.
3.3. Contract and service data
When you order services, we may process:
- the name, surname and position of the client or its representative;
- the company’s contact and registration details;
- contract, order and shipment information;
- data contained in cargo documents;
- payment, invoice and settlement information;
- correspondence related to the performance of the service;
- information needed to arrange permits, escort vehicles or other stages of the shipment.
3.4. Website use and technical data
When you visit the website, the following may be collected automatically:
- IP address;
- browser and device type;
- operating system;
- date and time of the visit;
- pages visited;
- referring source;
- website usage and error diagnostics data;
- cookie identifiers and your cookie settings.
4. Purposes and legal bases of processing
4.1. Handling inquiries and preparing quotes
We process data so that we can:
- assess the cargo and the options for transporting it;
- choose a suitable vehicle;
- assess the route and the need for permits and escort vehicles;
- prepare and send a transport quote;
- contact you about missing information;
- answer your questions.
Legal basis: steps taken at your request before entering into a contract, and our legitimate interest in properly handling incoming business inquiries.
4.2. Concluding contracts and providing services
We process data to conclude and perform contracts for transport, freight forwarding or other logistics services, to organise shipments, to coordinate service providers and to stay in contact with the client.
Legal basis: performance of a contract, steps taken before entering into a contract, and compliance with applicable legal obligations.
4.3. Accounting and legal obligations
We process contracts, invoices, payments and other mandatory documents to comply with accounting, tax, transport and other legal requirements.
Legal basis: a legal obligation that applies to UAB Erabalta.
4.4. Protection of rights and legitimate interests
Data may be used to:
- establish, exercise or defend legal claims;
- handle complaints and disputes;
- ensure that contracts are performed;
- prevent fraud or abuse;
- protect the interests of the company, its clients and partners.
Legal basis: our legitimate interest in protecting our rights and legitimate interests.
4.5. Website operation and security
We process technical data to:
- ensure that the website works properly and securely;
- detect and fix technical errors;
- protect the website against unlawful activity;
- manage visitors’ privacy and cookie choices.
Legal basis: our legitimate interest in ensuring the security and functionality of the website and, where applicable, your consent.
4.6. Analytics and non-essential cookies
If the website uses analytics, functional or marketing cookies, the related data is processed only with your prior consent.
You can change or withdraw your consent at any time on the website by choosing Cookie settings. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.
5. Do you have to provide data
Mandatory fields in the contact or transport inquiry form are marked with an asterisk.
Without the basic contact and cargo details, we may not be able to assess the inquiry, prepare a quote or contact you about the transport terms.
Providing additional information, photos or technical drawings is voluntary, but this information may be needed for a more accurate assessment of the cargo and the transport conditions.
Please do not send special categories of personal data, copies of identity documents or other personal information unrelated to the transport inquiry.
6. Data recipients
Your data may be shared only to the extent necessary for a specific purpose with:
- employees and authorised persons of UAB Erabalta;
- carriers, freight forwarders and logistics partners;
- providers of permit, escort vehicle and route planning services;
- providers of lifting, loading and unloading services;
- providers of IT, website administration and hosting services;
- providers of e-mail and communication services;
- providers of accounting, legal, audit and insurance services;
- public authorities and other persons where we are required by law to provide data;
- other recipients where the transfer is necessary to perform a contract or you have given separate consent.
We give service providers only the data they need to deliver their services. Data processors must keep the data secure and confidential and process it only on our instructions.
7. Transfers outside the European Economic Area
We generally aim to process data within the European Economic Area.
When certain website, cloud, analytics or map services are used, data may be transferred to, or become accessible to, service providers outside the European Economic Area.
In such cases, data is transferred only on a lawful basis, for example:
- a European Commission decision on an adequate level of data protection;
- standard contractual clauses approved by the European Commission;
- other appropriate safeguards provided for in the GDPR.
8. Google Maps and external content
The contact page may use the Google Maps service. When the interactive map is loaded, the provider of this service may receive your IP address, device information and other technical data.
If the map relies on non-essential cookies or other tracking technologies, it should be loaded only with your consent. Until then, the map location or a Show map button may be shown instead.
External service providers may process data under their own privacy rules.
9. Cookies
Cookies are small text files that a website may store on your device.
The website may use the following categories of cookies:
Strictly necessary cookies
Needed for the website’s basic functions, security, the forms to work and to remember your privacy choices. These cookies do not require separate consent.
Functional cookies
Remember your chosen settings and provide additional features. They are used only with your consent, unless they are necessary for a service you have explicitly requested.
Analytics cookies
Help us understand how visitors use the website, which pages they visit and whether they run into technical problems. They are used only with your consent.
Marketing cookies
May be used to measure advertising effectiveness, follow visitors’ actions or show personalised advertising. They are used only with your consent.
A full list of the cookies used, their providers, purposes and duration must be provided in the website’s cookie settings window.
You can:
- accept all non-essential cookies;
- reject all non-essential cookies;
- choose individual cookie categories;
- change or withdraw your choice at any time.
Disabling strictly necessary cookies in your browser may prevent some website functions from working.
10. Data retention periods
We keep personal data no longer than necessary to achieve the purposes of processing:
- transport inquiries and correspondence that did not lead to a contract are usually kept for up to 2 years after the last contact;
- data on contracts concluded and services provided is kept for the term of the contract and for up to 10 years after its performance, unless a longer period is required by law or for the defence of legal claims;
- accounting documents are kept for the period required by law;
- data related to complaints and legal claims is kept until the matter is finally resolved and the applicable limitation period has expired;
- website security and technical logs are usually kept for up to 12 months, unless longer storage is needed to investigate a security incident;
- data processed on the basis of consent is kept until the consent is withdrawn or its set validity period ends;
- cookies are kept for the period stated in the cookie settings.
When the retention period ends, data is deleted, anonymised or securely destroyed, except where we are required by law to keep it longer.
11. Data security
We apply reasonable technical and organisational security measures to protect personal data against:
- unauthorised access;
- accidental loss;
- alteration;
- destruction;
- unauthorised disclosure;
- any other unlawful processing.
Access to data is given only to employees and service providers who need it to perform their functions.
Although we take appropriate security measures, no method of transmitting or storing data can guarantee absolute security.
12. Your rights
Depending on the specific circumstances and the conditions set out in the GDPR, you have the right to:
- receive information about the processing of your personal data;
- access the personal data we hold about you;
- have inaccurate data corrected and incomplete data completed;
- have your data erased;
- restrict the processing of your data;
- object to processing based on our legitimate interest or that of a third party;
- receive the data you provided in a structured, commonly used and machine-readable format and, where applicable, have it transferred to another controller;
- withdraw your consent at any time;
- lodge a complaint with a supervisory authority;
- not be subject to a decision based solely on automated processing, including profiling, where such a decision produces legal or similarly significant effects.
We currently do not make decisions based solely on automated processing that produce legal or similarly significant effects for you when providing services through the website.
13. How to exercise your rights
You can submit a request:
By e-mail: info@erabalta.lt
By post or in person: Ateities pl. 34B, LT-52165 Kaunas, Lithuania
Please include in your request:
- your first name and surname;
- the right you wish to exercise;
- information that allows us to identify which data the request concerns;
- contact details for our reply.
To protect your data, we may ask for additional information to confirm your identity.
We will handle your request without undue delay and no later than one month after receiving it. In complex cases this period may be extended by two further months, and we will inform you in the manner required by law.
14. Right to lodge a complaint
If you believe that your personal data is being processed unlawfully or that your rights are being infringed, we invite you to contact us first at info@erabalta.lt.
You also have the right to lodge a complaint with:
The State Data Protection Inspectorate
L. Sapiegos g. 17
LT-10312 Vilnius
Website: vdai.lrv.lt
The right to contact the supervisory authority does not limit your right to use other administrative or judicial remedies.
15. Data of other persons
If you provide another person’s data, for example the contact details of a colleague, client, cargo sender or recipient, you must be entitled to pass this data on to us and, where necessary, inform that person about the transfer and about this privacy policy.
16. Data of minors
The website and our services are not intended for minors. We do not knowingly collect personal data of children.
If it turns out that a minor has provided data without the knowledge of their legal representative, we will take reasonable steps to delete such data.
17. Changes to this privacy policy
We may update this privacy policy when there are changes to:
- the services we provide;
- website functions;
- the technologies we use;
- data processing procedures;
- the requirements of legislation or supervisory authorities.
The current version of the policy is always published on the website www.erabalta.lt. The date of the last update is shown at the top of the policy.
If the changes are significant, we may also inform you about them on the website or using the contact details you provided.