When processing your personal data Ballooning.LT is guided by the Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereafter - Regulation), the Law on Legal Protection of Personal Data of the Republic of Lithuania, as well as other applicable data processing and protection legislation and requirements.
What kind of information is collected?
In order to provide, improve, protect and evaluate our services, we collect the following information:
1. Personal Data
When you make an inquiry on our website, book our services for yourself or as a present, we collect the following information:
Inquirer's / Customer's name, surname, telephone number, e-mail address,
2. Website Usage Data
We may also collect information provided by your browser when you visit our Website www.ballooning.com or when you access it from a mobile device.
This may include information related to your IP (Internet Protocol) address, browser and device type, information on websites you have visited previously and other identifiers associated with your device.
3. Cookie Data
For what purposes do we collect personal data?
Personal data on the Website is collected for the following purposes:the administration of Inquiries;
How do we acquire your personal data?
Personal data is acquired directly from the Inquirer/Customer/Passenger. If you have not booked our services personally, we receive the information about you from the person who has booked the service.
When booking services, you must provide Ballooning Centre with accurate and correct personal data. Information about any third parties (your fellow travellers or the recipients of the gift certificate) should be provided with their consent.
Personal data could also be acquired from the Ballooning Centre’s partners (ticket distributors, event organizers, your employer if the company decides to organize a hot air balloon tour for its employees).
Please note that some of our services cannot be provided without the detailed and accurate information, which is mentioned in this Data Policy, about the Inquirer / Customer / Recipient of the gift or Passengers.
Criteria for a Lawful Processing of Personal Data
All the personal data you provide are processed solely based on the criteria (grounds) established in the Regulation and only for the purposes for which the data were obtained. Your personal data can only be processed on legitimate basis, that is.:
- for the purpose of fulfilling your order or contract to which you are a party, or at your request for any other actions before signing a contract (Article 6 (1) (b) of the Regulation), that is when you purchase (book) services through our Website;
- after your consent to the processing of personal data (Article 6 (1) (a) of the Regulation) is acquired, i.e. when you consent to data processing for direct marketing purposes;
- for the legitimate interests of the Ballooning Centre (Article 6 (1) (f) of the Regulation), such as flight safety, improvement of services, marketing, informing about our services, detecting, preventing and addressing any cases of fraud or abuse, as well as security or technical issues related to our services, or other.
To whom do we provide your personal data?
Your personal data may be transferred to third parties in order to provide you with our services. These third parties could be providers of identical services if they were chosen by Ballooning Centre for the provision of your selected service, other people/service providers for whose services your personal data is necessary (e.g. pilots and crew members, insurance companies and etc.).
For the managing of personal data, Ballooning Centre has a right to use data management service providers which would manage data on behalf of Ballooning Centre, such as cloud, server hosting and related services providing companies that store your personal data, as well as IT infrastructure monitoring companies which may have access to your personal data, marketing companies, etc. Providers of the aforementioned types of services act only in accordance with the legislative requirements and the instructions from Ballooning Centre.
Your personal data are never transferred to any third country or international organization. Your personal data is stored and processed within the territory of European Union (EU) or European Economic Area (EEA).
How long is your personal data stored?
Your personal data are not kept for longer than required for the purposes of data processing and (or) the Regulation. The duration depends on the specific storing purposes and the criteria for lawful personal data processing.
For the purposes of direct marketing your personal data are processed for 5 years.
You have the following rights:
You also have a right to revoke your consent to the processing of personal data for direct marketing purposes (if such consent has been given) at any time by informing Ballooning Centre using the contacts provided. However, the withdrawal of your consent does not affect the lawfulness of the processing of your personal data prior to the withdrawal of the consent.
You also have a right to file a complaint with the State Data Protection Inspectorate (for more information visit www.ada.lt) if you believe that your personal data are being processed in breach of personal data protection legislation.
In order to exercise these rights, you must submit a request to us in writing and in a way that allows you to be identified.
All the communication relating to the processing of personal data is made by email email@example.com or by mail: Kalvarijų g. 14-2, Vilnius. A response is delivered in the same form in which the notice or claim was received by Ballooning Centre. The response is delivered no later than 1 (one) month from the date the notice or claim was received (if necessary, this time limit may be extended for another 2 (two) months).