PRIVACY POLICY

Updated: 2025-03-06

GENERAL PROVISIONS

This Privacy Policy (hereinafter referred to as the "Privacy Policy") applies to all personal data that you provide to us or that we collect and process when you use the website www.monto.lt (hereinafter referred to as the "Website"). The Privacy Policy explains how we process and protect your personal data, what rights we guarantee, and provides other information regarding the processing of your personal data.

We process your personal data in compliance with the General Data Protection Regulation (EU) 2016/679 (hereinafter referred to as "GDPR"), the Law on Legal Protection of Personal Data of the Republic of Lithuania, the Law on Tourism of the Republic of Lithuania, and other applicable legislation of the Republic of Lithuania and the European Union.

TERMS USED IN THE PRIVACY POLICY

Personal Data – any information that directly or indirectly identifies you, such as surname, name, date of birth, postal or email address, location data, Internet identifier, characteristics specific to you, etc.
Data Controller – UAB "Monto EU", legal entity code 306976516, registered at Ozo g. 12A-1, Vilnius, Lithuania, Tel. +370 699 64685, email: [email protected]. Hereinafter referred to as "Monto."
Data Subject – any natural person whose data is processed by the Data Controller. The Data Controller collects only the data necessary for its activities. The Data Controller ensures that the collected and processed personal data is secure and used only for specific purposes.
Processing of Personal Data – any operation performed with personal data, including collection, recording, storage, editing, modification, granting access, submission, transfer, archiving, etc.

PRINCIPLES OF DATA PROCESSING

Personal data is collected only for clearly defined and legitimate purposes;
Personal data is processed lawfully and fairly;
Personal data is regularly updated;
Personal data is securely stored and not retained longer than necessary to achieve the intended purposes or as required by applicable law;
Personal data is processed only by authorized Monto employees or trusted data processors.

PURPOSES AND CONDITIONS OF PERSONAL DATA PROCESSING

By providing their personal data to the Data Controller, the Data Subject agrees that the Data Controller will process the collected data for the following purposes:

Contract Conclusion and Execution

We process personal data to conclude and execute contracts related to the services provided by the Data Controller. This includes negotiations, contract execution, service provision, and ensuring communication with the Data Subject.

Personal data is processed to:

Identify the client;
Perform service provision activities;
Administer and process customer orders;
Issue accounting documents;
Address issues related to provided services;
Inform about service changes or disruptions;
Fulfill all obligations of the Company as a service provider.

The Data Controller retains personal data for as long as the contract remains in effect or as long as required to fulfill the purposes for which the data is processed. Retention periods also depend on legal requirements, limitation periods for legal claims, and other applicable regulations.

Customer Identification, Verification, and Contract Conclusion

Legislation requires us to identify you before providing services. To verify your identity, we may:

Process copies of your identification documents (passport, identity card, residence permit) and the data contained within;
Use your image (from documents or provided by you);
Use third-party identity verification services;
Obtain identity data from your mobile network operator;
Cross-check data from all these sources.

Copies of identification documents may be stored in compliance with legal requirements.

Inquiry Administration via Electronic Channels, Telephone, and Email

Any other personal data that you provide to us when communicating (via email, inquiry forms on the Website, phone calls, or visits to the Data Controller’s office) will be processed based on our legitimate interest in providing services and your consent for such data processing.

The Data Controller retains personal data throughout the communication period and for two (2) years after the communication ends. If personal data is processed based on consent, the data is retained for the duration of the consent validity. If consent is withdrawn earlier, the data is stored until the consent expires.

If the Data Subject signs a contract with the Data Controller, such data is stored according to the provisions of the section Contract Conclusion and Execution of this Privacy Policy.

Direct Marketing (Newsletter Subscription)

For this purpose, we process your email address and phone number. The legal basis for processing your personal data is your explicit consent or the legitimate interest of the Data Controller to provide you with information about services similar to those you have previously used.

Your personal data may be processed for direct marketing purposes in the following ways:

You may receive a newsletter with offers, news, and updates from us and our affiliated partners;
You may receive personalized sales calls based on your needs;
You may be asked to provide feedback about our services or products.

The Data Controller receives this data directly from the Data Subject when they subscribe to the newsletter or request promotional materials.

The Data Subject may opt out of direct marketing communications at any time by clicking the unsubscribe link in the message, informing us via email at [email protected], or calling +370 699 64685.

To the extent that personal data processing is based on consent, you have the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. If data processing is based on our legitimate interest, you may object to such processing by notifying us at [email protected].

Ensuring Legal Rights and Interests

We process your personal data to protect and enforce our rights under contracts related to service provision. This includes debt collection, legal claims, and other measures to safeguard our legitimate interests.

Customer Service

When communicating with the Company by phone, conversations may be recorded to ensure high-quality customer service and collect evidence for the protection of our rights and interests. You will be informed separately about call recording.

Security of Property, Health, and Life

Your personal data may be processed to ensure the security of property, health, and life, e.g., through video surveillance in our premises.

Data Processing for Other Legal Purposes

Your personal data may also be processed for other purposes, where required by applicable law or when necessary for other legitimate objectives, in which case you will be properly informed or another lawful basis for processing will be provided.

DATA STORAGE PERIOD

The Data Controller processes and retains personal data for as long as necessary to fulfill the intended purposes or as required by law.

Your personal data is typically processed throughout the period of your service usage and for two (2) years after its termination.

RIGHTS OF DATA SUBJECTS

As a data subject, you have the following rights:

Access your personal data and learn how it is processed;
Request corrections to your personal data;
Object to the processing of your personal data;
Withdraw consent for direct marketing communications at any time;
Request deletion of your personal data (Right to be Forgotten);
Request data portability;
Restrict processing of your personal data;
File a complaint regarding personal data processing.

CHANGES TO THE PRIVACY POLICY

We may modify the Privacy Policy at our discretion. Any changes take effect once the updated Privacy Policy is published on www.monto.lt.

We encourage you to review the Privacy Policy regularly to stay informed about any updates.

Continued use of the Website or services after changes are made indicates your acceptance of the revised Privacy Policy terms.

This Privacy Policy is provided in English.