Privacy policy

WHAT IS THIS PRIVACY POLICY FOR?
1. In this privacy policy (the Privacy policy), we explain how we process personal data on Rocket Assistance platform (the Platform).
2. Capitalized terms not defined herein shall have the meanings set out in the Terms and Conditions.
WHO IS THE CONTROLLER OF PERSONAL DATA?
1. UAB "Rocket assistance", legal entity code 306232115, registered office address V. Nagevičiaus g. 3, LT-08237 Vilnius, Lithuania ("we" or the "Platform Manager") is the controller of the personal data of the Customers, Cargo consignors and consignees and Carriers and their representatives processed on the Platform and processes such personal data in accordance with the procedure set forth below in this Privacy Policy. You can contact the Platform Manager (data controller) at the following contacts: a) by phone +370 693 97 600, b) by email: [email protected], c) at Tarandės g. 34A, LT-14188 Vilnius, Lithuania.
2. Please note that by using the Platform, Carriers receive the data contained in the Orders assigned to them and confirmed by them, including the photos uploaded by the Customer via the Platform. In this case, the Carrier is an autonomous and independent data controller of the personal data referred to in this paragraph of the Privacy Policy. If you are interested in how your personal data is processed by the Carrier, you should contact the relevant Carrier.
WHAT PERSONAL DATA DO WE PROCESS ABOUT YOU?
1. The Platform Manager, in its capacity as data controller, processes the following personal data and for the following purposes:
  1. Purpose: Provision of Platform services and forwarding services
    1. Processed personal data: customer's name, surname, email address, phone number, address, details and photographs of the Cargo, the vehicle registration number; the name, surname, email address, phone number of the Sender and the Consignee of the Cargo, as well as any other data specified in the Order and/or in the Bill of Lading.
    2. Legal basis: the Agreement (in respect of personal data of Customers who are natural persons) and the legitimate interest in the performance of activities (in respect of personal data of representatives of Customers acting as legal persons and of consignors and consignees of Shipments and Receivers of Shipments who are not Customers).
    3. Retention period: 10 years after the moment the Roadside Service is provided.
    4. The data necessary for the execution of the Order shall be transferred to the Carrier to which the Order is assigned and which confirms the Order, as an autonomous and independent data controller.
  2. Purpose: Creation and administration of Carrier Accounts.
    1. Personal data processed: name, surname, sole proprietor's certificate number, address, email address, phone number, vehicle registration number, bank account number and other details, geographical, travel route, log of activities on the Platform; the name, surname, email of other users of the Account; the name, , email address, representative of the Carrier legal ), email address, phone number, vehicle registration number, geographical location, travel route, log of activities on the Platform.
    2. Legal basis: the Agreement (in respect of personal data of Carriers who are natural persons) and legitimate interest in the performance of their activities (in respect of personal data of representatives of Carriers who act as legal persons and other users of the Account).
    3. Retention period: as long as the person is an Account User and for 24 (twenty-four) months after the of the Account User's last login to the Account or the date of closure (deletion) of the Account.
  3. Purpose: Communication with Platform users
    1. Processed personal data: name, surname, phone number, email address.
    2. Legal basis: aim is to act at the request of the data subject prior to the conclusion of a contract or a legitimate interest to provide the service and/or ensure its quality.
    3. Retention period: 1 year after the date of the enquiry.
  4. Purpose: Direct marketing (newsletters, offers)
    1. Processed personal data: name, surname, phone number, email address.
    2. Legal basis: Agreement.
    3. Retention period: 2 years after receipt of consent.
    4. We may transfer personal data for the purpose of sending newsletters.
  5. Purpose: Managing your social media accounts
    1. Processed personal data: Unique ID.
    2. Legal basis: Consent or legitimate interest in communicating with customers.
    3. Retention period: As long as the visitor to the social website is a follower of the accounts.
    4. The information you provide to us via social media when you visit our accounts (including notifications, use of "Likes", and other communications) is jointly controlled by us and the managers of the social networks as joint controllers of personal data.
    5. At the moment we have these social network accounts:
      1. "Facebook" - https://www.facebook.com/rocketassistance, whose privacy notice can be found at https://www.facebook.com/privacy/explanation
      2. "Linkedin" - https://www.linkedin.com/company/rocket-assistance/, whose privacy notice can be found at https://www.linkedin.com/legal/privacy-policy
    6. We recommend that you read the privacy notices of third parties and contact the service providers directly if you have any questions about how they use your personal data.
COOKIES
1. A cookie is information that a web server sends to your web browser and is stored in your browser. This information is sent to the web server each time your browser requests to open the Platform from the server, and it distinguishes your computer or other device from other devices. Cookies therefore make the Platform more convenient to use and allow us to improve it.
2. Strictly necessary cookies are used automatically, without your explicit consent, when you take certain actions on the Platform. Other cookies (e.g. analytical, marketing cookies) are used only with your consent.
3. Cookies are used to process your IP address, browsing information such as pages visited on the Platform, time spent, etc. For a list of the cookies used on the Platform and more detailed information about them, please refer to the cookie management tool installed on the Platform by clicking on the "Cookie Preferences" link in the footer of the homepage.
4. You can change cookie settings in your browser at any time. All browsers have the option to delete cookies, please refer to your browser settings for details. If you delete strictly necessary cookies and prevent their use in your browser, some features of the Platform will not function properly and may prevent you from using the Platform.
TO WHOM CAN WE TRANSFER YOUR PERSONAL DATA?
1. We may transfer information about you to our employees, agents, service providers such as debt management or collection companies, archiving service providers, legal, marketing services, IT service providers or subcontractors as reasonably necessary for those purposes, as set out in this Privacy Policy.
2. We may also disclose information about you if we are required to do so by law or in order to protect our rights or interests (including disclosing your personal data to third parties in order to collect debts owed by you to us), or in connection with the contemplated transfer of the Platform, the Company or part of it, or the reorganization of a company, or in the course of these processes, disclosing your personal data to the (potential) acquirer of the Platform, the Company or part of it or to other parties to the reorganization.
HOW IS YOUR PERSONAL DATA PROCESSED?
1. Your personal data will be processed in accordance with the General Data Protection Regulation (GDPR), the Law on Legal Protection of Personal Data of the Republic of Lithuania and other legal requirements.
2. The Platform Manager, both when establishing the means of processing personal data and during the processing of the data itself, shall implement appropriate technical and organisational data protection measures, as provided for by law, in order to protect personal data processed against accidental or unlawful destruction, damage, alteration, loss, disclosure, as well as against any other unauthorised processing. The appropriate measures shall be determined taking into account the risks arising from the processing of personal data.
WHAT ARE YOUR RIGHTS?
1. Below you can find information about your rights in relation to the processing of your personal data by the Platform Manager and when you can exercise these rights. If you would like more information about your rights or to exercise them, please contact us at the email address set out in this Privacy Policy.
2. You can contact us at any time to enquire whether we process any of your personal data. If we store or use your personal data in any way, you have the right to access it. To do so, please submit a written request to us at the email address set out in this Privacy Policy. We may ask you to confirm your identity in order to fulfill your request. Please adhere to the principles of fairness and reasonableness when making such a request.
3. If you have given us your consent to the processing of your data, you may revoke it at any time by contacting us at the email address specified in this Privacy Policy.
4. You have the right to ask us to correct any inaccuracies in the data we hold. In this case, we may ask you to confirm the corrected information.
5. You have the right to ask us to delete your personal data. This right shall be exercised in situations described in Article 17 of the GDPR.
6. You have the right to ask us to restrict or not process your personal data.
7. You have the right to the transfer of data processed by automated means which we have received from you with your consent or for the purpose of concluding a contract. If you exercise this right, we will transfer a copy of the data you have provided to us upon your request.
8. You have the right to object to our use of your personal data in accordance with Article 21 of the GDPR.
HOW CAN YOU EXERCISE YOUR RIGHTS?
1. In order to exercise your rights, please submit your requests, complaints or claims in writing to us at the contact details provided in this Privacy Policy.
2. We will respond in writing to any requests, complaints or demands we receive in accordance with the procedures and deadlines established by law. We will try to provide you with the information as soon as possible, but no later than 30 days after receiving your request.
3. If, following a request, complaint or demand, we have any suspicions about the identity of the person making the request, we have the right to ask for personal identity documents of the person making the request.
COMPLAINTS
1. If you believe that your rights as a data subject have been and/or may be violated, please immediately contact us at the email address specified in this Privacy Policy. We ensure that only upon receipt of your complaint, we will contact you within a reasonable period of time to inform you of the progress of the investigation and, subsequently, the outcome of the complaint. If you are not satisfied with the outcome of the investigation, you may lodge a complaint with a supervisory authority: in Lithuania, the State Data Protection Inspectorate (https://vdai.lrv.lt/en/), and a list of supervisory authorities in other EU Member States can be found on the website of the European Data Protection Board (EDPB) at: https://www.edpb.europa.eu/about-edpb/about-edpb/members_en.
LIABILITY
1. You are responsible for ensuring that the data you provide to us is accurate, correct and complete. If the data you have provided us has changes, you must inform us immediately by email. In no event shall we be liable for any damage caused to you as a result of you providing incorrect or incomplete personal data or failing to inform us of any changes to it.