PRIVACY POLICY

 

General information

Administration of Vilnius City Municipality (hereinafter referred to as we or Data controller) is the controller of turistorinkliava.vilnius.lt website (hereinafter referred to as the Website). In this Privacy Policy (hereinafter referred to as the Privacy policy), we establish and explain how we collect and further process personal data of the Website users.

The Privacy policy is applicable to all persons visiting the Website, while the conditions established in it apply every time you want to access our provided content and/or service and submit a Tourist tax declaration, irrespective of the device (computer, mobile phone, tablet, etc.) you use. Continuing browsing the Website and using it, you confirm that you are familiar with the present Privacy policy and understand its provisions.

Data of all data subjects are processed by us legally, transparently, and fairly, for the pre-set purposes and exclusively to the extent, needed to achieve them. We process your personal data in accordance with the requirements established in the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation)(hereinafter referred to as the GDPR), the Law on Legal Protection of Personal Data of the Republic of Lithuania, and other legal acts, and recommendations and/or instructions of supervising institutions regarding the personal data processing.

 

Terms used in the Privacy policy shall have the same meaning as defined in the GDPR.

Details of the Data controller:

Budgetary institution Administration of Vilnius City Municipality

Code of a legal entity: 188710061

Registered address: Konstitucijos pr. LT-09601 Vilnius

Phone 8 5 2112000

Email: savivaldybe@vilnius.lt ir duomenuapsauga@vilnius.lt

How do we collect information about you?

Your personal data, i.e., any information about you that allows us to identify you is collected by the following modes:

• you yourself can provide information (personal data) when submitting a Tourist tax declaration;
• information about you can be collected automatically;
• in certain cases, we receive information about you from third parties and we can collect information about you from public sources;
• You yourself can provide your personal data directly;
• you make an inquiry, request and/or complaint to us over the phone, by email, or regular post;
• Information about you is collected when:
• you submit a Tourist tax declaration on the present website;
• you send an inquiry through our website;
• To the extent permitted by the effective legislation, we can receive information about you needed for administration of the Tourist tax service from the Centre of Registers.
• We can link the information about you needed for administration of the Tourist tax administration and received from your or the Centre of Registers with other information received from you or about you from third parties holding your consent to provide data about you.
• We can collect information about you also in the cases other than discussed in the Privacy policy, however, if it happened – you would be additionally informed.
  
  What information (personal data) about you do we process?

Although making efforts to collect minimum information about you possible, however, we collect the following information for the purposes of Tourist tax declaration and payment system administration:

• your personal data and contact details (such as, forename and surname, personal identity number, phone number, email address, etc.);
• payment details - amounts due for Tourist tax declarations, arrears, payment history, etc.;
• information you provide when calling us, writing to us, submitting inquiries and filling in Tourist tax declarations;
• information needed for defence of the interests of our institution in court or other institution;
• information about the device used by you;

 

Information that is collected by us directly from you:

• forename, surname, personal identity number, position in the represented company, phone number, email address, activity certificate number.

 

Information that is collected by us automatically:

• information about your use of this Website (device information: IP address, version of the operating system and parameters of the device used by you to access contents; login information: time and duration of your session and any information stored in cookies that we set in your device (cookies policy is available in the section of the cookies use).

 

Information that is collected by us additionally with your consent:

 

• forename, surname, employer / professional activity, business, data about services provided that are related to the administration of Tourist tax declaration and payment, residential address.

 

You may refuse providing the above-mentioned information, however, in that case, we may not be able to provide our service to you (e.g., if you do not provide the necessary information requested in order to respond to your submitted inquiry, you will not be able to respond).

Important: Staff members of our institution are not asking you in writing, over the phone, or by any other means for your login details, bank card numbers, passwords, or any other information, the use of which could cause financial or any other damage to you.

Please be informed, that for providing information to you about the Tourist tax declaration and payment applied in Vilnius City and other related relevant information, we will inform you by email. You can unsubscribe for the above-mentioned information at any time by sending an email to: turistorinkliava[eta]vilnius.lt.

We will process your personal data for direct information only upon receipt of your explicit consent to data processing. You can revoke the above-mentioned consent, by sending us an email to: turistorinkliava[eta]vilnius.lt.

Your personal data are processed on one or several bases of legitimate processing:

• implementation of the requirements of legislation;
• exercise of official authority (unless your private interests are superior);
• our legitimate interests (unless your private interests are superior);
• in certain cases – your consent.

Purposes, bases, and personal data processed by us are presented in the table below:

 

Purpose	Legal basis.	Personal data
Implementation of the Resolution of the Council of Vilnius City Municipality on administration of Tourist tax declaration and payment system	No. 1-1266 'Regarding establishment of the local tax for the use of public tourism and recreational infrastructure of Vilnius City Municipality'.	forename, surname, personal identity number, position in the represented company, employer / professional activity / business, data about the services provided that are related to administration of Tourist tax declaration and payment, residential address, phone number, email address, activity certificate number.
Fulfilment of our duties required for proper administration of Tourist tax	Proper fulfilment of our duties	forename, surname, personal identity number, position in the represented company, employer / professional activity / business, data about the services provided that are related to administration of Tourist tax declaration and payment, residential address, phone number, email address, activity certificate number. Information provided about the accommodations provided to tourists, their number, collected amount of Tourist tax.
Establishment of the quality of the online services provided by our institution (in order to improve them)	Legitimate interests of our institution	IP address, operational system version and parameters of the device you are using to access the content, your session time and duration and any information stored in cookies that we set in your device.
Exercise of the interests of our institution in court or other institution	Implementation of the requirements of legislation  Legitimate interests of our institution Public interest	Depending on the lodged complaint or claim, all your personal data possessed by us, as listed in the Privacy policy, can be processed for the present purpose.
Control of Tourist tax declaration and payment	Consent Legitimate interests of our institution	Information provided about the accommodations provided to tourists, their number, collected amount of Tourist tax.

• In the cases, when we cannot refer to one of the legitimate bases provided in the present table, prior to processing your personal data, we will request you for your consent (such cases will be clear from the circumstances and context).
• In the cases, when we process your personal data for the purposes other than specified in this Privacy policy, we will inform you by a separate notice.

 

Who is your personal data provided to?

• Without your prior written consent, we can transfer your personal data exclusively in the following cases:
• to law enforcement and state institutions;
• to other entities, when required by law or in order to protect our legitimate interests.

Besides, we can provide your data to the employees of Public enterprise Go Vilnius administering the system, who provide services to us. Data processors have the right to process your personal data exclusively on the basis of a written agreement between us and them, according to our instructions, and only to the extent needed for proper fulfilment of the obligations established in the agreement. When contracting processors, we exert all necessary measures to ensure our contracted data processors have proper organisational and technical security measures implemented and keep confidentiality of your personal data.

Other parties, to which information held by us about you can be provided when it is necessary for protection of our legitimate interests or implementation of the legal requirements mandatory to us, include state institutions, pre-trial investigation officers, courts, etc.

Further information about specific enterprises specified in this section, to which your personal data can be provided, can be obtained by contacting us according to the contact details provided in the present Privacy policy.

What do we do to protect your personal data?

We installed reasonable and appropriate physical and technical measures to protect information collected by us for the purpose of administration of Tourist tax declaration and payment system.

For how long do we store your personal data?

We establish personal data storage terms in accordance with the requirements of laws, legal regulations, and following the instructions of a supervising and/or other competent institution. If no such requirements or instructions established, we will establish data storage terms considering public interest or our own legitimate interest, however the term cannot be longer than 2 years from the moment of data receipt, unless the person revokes his/her consent. In the latter case, data will be stored until the expiry of the consent.

Once the data storage term expires, your data will be irrevocably erased, or depersonalised without any possibility to identify you.

Usually, personal data are stored for the following terms: 

Personal data	Storage term
Data contained in the inquiries, requests, and/or claims made to us over the phone, by email, or regular mail	Up to 1 year from the day of receipt of an inquiry / request/ claim or its fulfilment
Data about Tourist tax declaration payments	2 years from the day of completion of a payment operation, unless a person revokes his/her consent. In the latter case, data will be stored until the expiry of the consent.
Personal data processed with your consent, except for the consents regarding the use of your photographed image	Up to 2 years from the moment of receipt of your consent, unless the consent was revoked earlier
Your data related to potential or existing exercise of our interests in court or other institution	Until the end of the limitation period for lodging a claim / complaint or of a claim stipulated in legal acts and/or entry into effect of the final court decision

What rights do you have?

Depending on the situation and additional conditions laid down in the GDPR, you have the following rights:

• to be aware (be informed) about your data processing (the right to know);
• to familiarise yourself with your personal data processed by us and how they are processed (the right to access);
• to request for correction or considering the purposes of personal data processing - for supplementation of your incomplete personal data (the right to correct);
• to request for erasure of personal data related to you (the right 'to be forgotten);
• to request for limitation of processing of personal data related to you (the right to limit);
• to request for movement of data provided to us (the right to data portability);
• to object processing of you personal data at any time, when such processing is carried out for the public interest, in pursuit of our or third party's legitimate interests, and when personal data are processed for direct marketing purposes, including profiling (the right to object);
• to revoke your consent to personal data processing if data are processed on the basis of a consent.

We always exert efforts to ensure your rights properly and to respond promptly to any potential infringement of their exercise, therefore, should any question regarding processing of your personal data by us arises, one should know that data subjects' rights are exercised following the procedure established in Chapter IV of the Rules of Personal Data Processing of the Administration of Vilnius City Municipality approved by the Order No. 30-2504/21 of the Director of the Administration of Vilnius City Municipality of 16 September 2021. More information is available here. Please further note that in all cases you have the right to lodge a complaint to the State Data Protection Inspectorate at any time.

External websites

The Website contains links to external websites, i.e., websites of institutions related to the Tourist tax declaration and payment system (e.g., Electronic government gate, or payment and collection system, etc.). When following the above-mentioned links, please note that the websites and services accessible through them must have their own separate individual privacy policies, of which we cannot hold responsibility, therefore, we recommend reviewing them closely before providing any personal data.

Final provisions

The Privacy policy is reviewed and updated when needed, however, at least once in two years, or following any amendments in the legislation regulating personal data processing. Following update of the Privacy policy, we will inform you about the amendments considered essential by us by publishing the notice on the Website or in similar manner. By using our provided content and/or services after the above-mentioned notice is published, we will consider you agree with the new requirements laid down in the updated Privacy policy.

The last review of the Privacy policy was conducted in January 2023.

 

USE OF COOKIES

 

Cookies, signals, and similar technologies

Cookies are small textual files recorded by a website into your computer or mobile device while you are visiting the website concerned. Cookies are widely used for more effective functioning of a website and providing the website owner with useful information.

• to identify you as a previous visitor of a certain website;
• to save your website visit history and adapt content accordingly;
• to ensure smooth operation of the Website;
• to observe the duration, frequency of a visit, and to collect statistical information about the number of Website visitors.

Analysis of this data enables us to improve our Website and to make it user-friendlier.

 

We use the following Google Inc. tools:

Google Analytics – a tool that enables you to analyse the Website use, to make reports, plan and forecast operation of the Website. Data collected by Google Analytics are usually stored in the Google Inc. server, in the USA. You can change your browser settings and prevent Google Analytics from analysing information, by changing your browser settings. In such event, a refusal cookie will be recorded for you. However, if you delete all cookies, your refusal cookie can also be deleted. You can also prevent Google from recording data generated by a cookie and based on your use of the Website, and processing the above-mentioned data by downloading and installing a browser extension from https://tools.google.com/dlpage/gaoptout?hl=en.

An accurate list of the cookies used by us:

 

 

Management and deletion of cookies in our Internet browser

You are free to manage and/or delete cookies. You can erase all cookies already stored in your computer, or decline recording of cookies.

Most browsers enable:

• checking which cookies are recorded, and deleting individual cookies;
• blocking third parties' cookies;
• blocking cookies from specific websites;
• blocking downloading of all cookies;
• erasing all cookies, once the browser is closed.

If you choose to erase cookies, please remember that all set options will be deleted as well. Besides, if cookies are completely blocked, many websites (including our website) will not function properly. For these reasons, we do not recommend deactivating cookies, while using our website.

Should you need any further information about cookies, and instructions how to delete them, visit the website: www.allaboutcookies.org (the website is English).