LTG
AB LIETUVOS GELEŽINKELIAI MUSEUM PRIVACY NOTICE
Last updated on 28 October 2023
AB Lietuvos geležinkeliai (hereinafter referred to as the LTG or the Company or simply us) protects your personal information while processing the data in accordance with the provisions of the Regulation of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data (hereinafter referred to as the GDPR1). This LTG Privacy Notice (hereinafter referred to as the Privacy Notice) provides detailed information in this regard.
1 2016/679 Regulation (EU) 95/46 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation).
1. What is included in this Privacy Notice?
In this Privacy Notice, we provide answers to the most important questions, i.e., how we collect, use and store information about you. Please read this important information carefully and visit our website at https://ltg.lt from time to time as well as read the latest version of the Privacy Notice published there.
2. Who is responsible for protecting information about you?
AB Lietuvos geležinkeliai, legal entity code: 110053842, address of registered office: Geležinkelio g. 16, 02100 Vilnius, e-mail: info@ltg.lt, tel. (8 5) 269 2038.
3. Why and what information do we collect about you?
|
No. |
Why do we collect information about you? |
What information do we collect about you? |
Why do we have the right to collect the information you provide? |
How long do we use or store information about you? |
|---|---|---|---|---|
|
3.1. |
The contact details of the representative of the visitor group are collected at the time of registration for the purposes of organisation and cooperation. |
Name, surname, email address, telephone number |
We have a legitimate interest (Article 6(1)(f) of GDPR) |
1 year from the date of completion of the logbook |
|
3.2. |
A briefing logbook shall be kept to record the briefing of visitors on safe behaviour on the premises of the establishment (the logbook shall contain the personal data of the visitor over 14 years of age or of the leader of the group, who takes responsibility for the behaviour of the group members) |
Name, surname |
We have to comply with the data controller’s legal obligation (Article 6(1)(c) of GDPR) |
1 year from the date of completion of the logbook |
|
3.3. |
You submit a request, offer or complaint to us by general email address, or through other electronic communication channels. |
Name, surname, email address, country, phone number, subject of the request, time of receipt of the request, content of the request, attachments to the request, correspondence history, other provided information related to the submitted request, response to the request. |
We have a legitimate interest (to deal with your requests, enquiries or complaints) (Article 6(1)(f) of GDPR) |
1 year after the last application |
|
3.4. |
The registration details you have provided in order to become part of the Railway Enthusiast Community or to volunteer at the Railway Museum. |
Name, surname, email address, telephone number |
We have your consent (Article 6(1)(a) of GDPR) If you wish to withdraw your consent, please contact muziejus@ltg.lt |
Up to 2 years from the date of consent. |
|
3.5. |
We ensure the safety of your property managed by the right of your health, life and trust and managed by the Company’s right of property, when you are filmed on the Company’s premises, their accesses, level crossings, stations and their access areas |
Video material (in some cases, the image is recorded together with the sound). |
We have a legitimate interest (security of property and persons) (Article 6(1)(f) of GDPR) |
Up to 30 days |
|
3.6. |
We ensure the efficient and secure operation of our website |
IP address, version of the operating system, parameters of the device you use, session start time and duration, terms of requests you enter on our website, other statistical data and any information stored using cookies applied on your device (more about the cookies used read in Clause 11 of the Privacy Notice). |
We have a legitimate interest (to ensure that the Company’s website operates in a quality and secure manner and that visitors find information relevant to them) (Article 6(1)(f) of GDPR) |
Up to 2 years (more about the storage terms of the cookies used read in Clause 11 of the Privacy Notice). |
|
3.7. |
You submit a request to implement the rights of data subjects set out in the GDPR and we ensure the implementation of the request |
Depending on what personal data you provide: name, surname, phone number, address, date of birth, email address, payroll number, code of legal partner, copy of identity document, request for the exercise of the rights of the data subject, date of request, place of request, specified method of submitting a response to the request, content of the request and other information provided in the request of the data subject, response to the data subject, other information related to the exercise of the data subject’s rights |
We have a legal commitment (to ensure the implementation of the rights of data subjects – (Chapter III of GDPR) |
Requests are stored for 5 years from the date of submission of the response |
4. What information must you provide and why?
Please see the answer to point 3 above – you must provide the information about yourself that is necessary in order to:
4.1. provide you with an efficient museum visit service;
4.2. ensure your security and compliance with legal obligations.
5. What information must you provide and why?
All information is provided by you.
6. Who do we transfer information about you to?
We transfer or share information related to you with partners, service providers, as well as the entities listed below only to the extent that it is necessary and permitted by applicable laws, as well as for the reasons listed in Clause 3:
6.1. Banks carrying out settlement operations (data transmitted for the purposes referred to in clauses 3.1 and 3.2);
6.2. Judicial, supervisory, law enforcement and other public authorities (data may be transferred for all the purposes referred to in clause 3);
6.3. Lawyers, notaries, bailiffs, auditors, consultants, information technology maintenance service providers, electronic communication service providers, insurance companies, companies providing archiving services and other services to the Company (data may be transferred for all the purposes referred to in clause 3).
We note that the Company selects as data processors only those persons who have provided the Company with a sufficient guarantee that they apply appropriate technical and organisational measures that ensure the safe processing of personal data and the appropriate level of data protection in accordance with the applicable European Union legislation.
7. Will your data be transferred outside the European Economic Area?
In most cases, personal data is processed and transferred within the territory of the European Union and the European Economic Area², but if necessary for the provision of certain services, data may be transferred and processed outside the mentioned territories, when an adequate level of personal data protection is observed. When permitted by law and required for the reasons specified in Clause 6 of this Privacy Notice, we disclose information about you:
7.1. In accordance with the decision of the European Commission on adequacy, meaning that the European Commission has recognised the country in which the third party is established and/or operates as ensuring an adequate level of personal data protection;
7.2. We have signed a contract with a third party based on the Standard Contractual Terms approved by the European Commission;
7.3. We have obtained the permission of the State Data Protection Inspectorate;
7.4. Using, if possible, other possible personal data protection measures and derogations.
² The European Economic Area is made up of all the member countries of the European Union plus Iceland, Liechtenstein and Norway
8. What rights do you have?
The GDPR and other legal acts grant you rights, provide cases when you can use them, the procedure you must follow, as well as exceptions in which cases you cannot use the granted rights. Where permitted by law, you may:
8.1. have access to your personal data, i.e., receive a notification confirming whether LTG processes your personal data and, if it does, request access to the processed data and related information;
8.2. submit a request to us to correct inaccurate, incorrect information used or supplement it when it is not complete;
8.3. submit a request to us to delete the information we have about you if we use it illegally;
8.4. submit a request to us to limit the processing of available information about you, when you dispute the accuracy of the data or object to data processing, you do not agree to the deletion of your illegally processed data, or you need the data in order to assert, fulfil or defend legal claims;
8.5. object to the use of data when we process your data in pursuit of the legitimate interests of LTG and/or third parties;
8.6. submit a request to us to transfer (receive) data that you have provided to us pursuant to a contract or by giving consent for data processing and which we process by automated means in a commonly used electronic form;
8.7. object to the application of fully automated decision-making, including profiling, if such decision-making may have legal consequences or similar material impact on you;
8.8. withdraw the consents given to us regarding the use of information about you, when we use the data based on your consent;
8.9. submit a complaint to a supervisory authority, primarily in the member state where you have your permanent residence or the place where the suspected GDPR violation was committed and apply for judicial remedies. In the Republic of Lithuania, you may appeal to the State Data Protection Inspectorate acting as a supervisory authority (L. Sapiegos Str. 17, Vilnius; email: ada@ada.lt), but we recommend contacting us first, and we will try to solve all your requests together with you.
9. How could you enforce your rights?
In order to enforce your rights specified in Clause 8 of this Privacy Notice, you must:
9.1. personally deliver the request to exercise the rights of the data subject (hereinafter referred to as the Request³)14 to the Company’s headquarters or to the data protection officer at the addresses specified in Clause 14 of this Privacy Notice (a document confirming personal identity must be submitted for inspection together with the Request);
9.2. submit the Request to the Company or the data protection officer to the postal addresses specified in Clause 14 of this Privacy Notice (the Request must be accompanied by a copy of the document confirming the identity of the person, certified by a notary public or in the way specified by other legal acts);
9.3. submit the Request to the Company or the data protection officer at the email addresses specified in Clause 14 of this Privacy Notice (the request submitted by email must be signed with a secure, qualified electronic signature).
³ It is recommended to use the Request to exercise data subject rights form here (in the original language).
10. Do we profile you and make automated decisions?
The Company does not profile you on this website and does not make any automated decisions about you.
11. Does our website leave cookies on your computer or device?
Yes, we use cookies as indicated in the table below. Cookies are small text files stored in the browser of your device (e.g. computer, mobile phone, tablet) when you browse websites. Other technologies, including data we store on your browser or device, identifiers associated with your device, and other software, may be used for similar purposes. Cookies are used extensively to make websites work or work better and more efficiently.
|
Title |
Period |
Purpose |
|---|---|---|
|
AWSALB |
7 days |
Load balancer for AWS. The cookie is used to make the user’s path more efficient. This cookie does not process personal data. |
|
AWSALBCORS |
7 days |
Load balancer for AWS. The cookie is used to make the user’s path more efficient. This cookie does not process personal data. |
|
AWSALBTG |
7 days |
Load balancer for AWS. The cookie is used to make the user’s path more efficient. This cookie does not process personal data. |
|
AWSALBCORS |
7 days |
Load balancer for AWS. The cookie is used to make the user’s path more efficient. This cookie does not process personal data. |
|
_ga |
2 years |
Tracking cookie from Google Analytics. This cookie is used to collect personalised information about how visitors use the website. By using the cookie, a unique ID is registered and used to identify unique visitors to the page. |
|
_ga_VRNLS6XJKT |
2 years |
Tracking cookie from Google Analytics. This cookie is used to collect personalised information about how visitors use the website. By using the cookie, a unique ID is registered and used to identify unique visitors to the page. |
|
_gid |
24 h |
Tracking cookie from Google Analytics. The cookie collects information about user behaviour on the website and is used to report statistical information about the website. Anonymised data about the number of visitors, location of visitors and reviewed pages are collected. |
|
cf_clearance |
8 months |
The cookie is set by CloudFlare services to identify reliable Internet traffic. It does not correspond to any user ID in the web application and does not store any personally identifiable information. |
|
pll_language |
1 year |
The functionality cookie of the multilingual plugin is used to store information about the language preferences of the visitor’s page. |
|
cookieyes-consent |
11 months |
The cookie is set by the GDPR cookie consent plugin. This cookie is used to store the user’s consent to the use of cookies. |
12. How can cookies be managed?
By visiting the (www.ltg.lt) website, you can choose whether you want to use cookies. You can manage cookies on the website itself and/or delete them according to your preferences in your browser. You can refuse the use of optional cookies on the website, which are not mandatory, but the website may not work with full functionality.
You can choose which cookies you want to accept and which to reject in your browser settings. You can delete any cookies already on your computer, and most browsers can prevent cookies from being saved. The location of these settings depends on the browser you are using.
If you do not agree to cookies being saved on your computer or other device, you can withdraw your consent at any time by changing the settings on the website and deleting the saved cookies in your browser. If you choose to delete cookies, remember that all the options you have set will also be removed. In addition, if cookies are completely blocked, many websites (including www.ltg.lt) may not function properly. For these reasons, we do not recommend disabling mandatory cookies.
13. How to remove cookies from a device?
To prevent your personal data from being processed with the help of cookies, you can change the settings of your internet browser so that cookies are not accepted or delete saved cookies.
You can change the cookie settings in your browser at any time. All browsers have the option to delete cookies. More detailed instructions depend on the browser you are using, you can find them in the options menu of the browser you are using:
Cookie settings in Internet Explorer
Cookie settings in Safari web and iOS
For more information see https://www.allaboutcookies.org/
We reiterate that removing or blocking the cookies used may affect the operation of the website and some of its functionalities, as well as may negatively affect the use of the services available on the portal.
To get more information about cookies and how to manage or remove them, just visit https://www.allaboutcookies.org/ and your browser’s help page.
14. How to contact the Company or the Data Protection Officer?
If you have questions, comments, or complaints about how we collect, use and store information about you, or if you want to exercise your rights as a data subject, you can contact:
13.1. The Company, at the address: Geležinkelio g. 16, 02100 Vilnius, tel.: (8 5) 269 2038, email: info@ltg.lt;
13.2. Data Protection Officer, at the address: Pelesos g. 10 Vilnius, email: dap@ltg.lt