Privatumo politika

General provisions

This Privacy Policy is addressed to all customers of UAB "Vestekspress" (hereinafter referred to as the "Company" or "We") and/or visitors to the Company's website https://www.westexpress.lt (hereinafter referred to as the "Website"), as well as to other data subjects who use or intend to use the services provided by the Company.

The Company considers that you have duly read this Privacy Policy and agree that UAB "Vestekspress", legal entity code 110461363, registered office address A. Stulginskio str. 5-59, 01115 Vilnius will process the information provided by you, including your personal data, to the extent necessary to provide the Company's and the Website's services, as well as to manage the Website and ensure its functioning.

The Company is the controller and/or processor of the personal data specified in this Privacy Policy. All customers of the Company and/or visitors to the Company's website, other persons are considered data subjects for the purposes of this Privacy Policy.

The Company, while respecting your privacy and the protection of your personal data, shall make all reasonable efforts to ensure the security and confidentiality of your personal data and other information processed by the Company and/or the Company's website.

The Company reserves the right, at its sole discretion, to modify or supplement the provisions of this Privacy Policy. Changes to the Privacy Policy shall come into force from the date of their publication on the Website. When, after the addition or amendment to the Privacy Policy, you use the services provided by the Company and/or the Website, it is deemed that you do not object and agree to such additions and/or amendments. Privacy Policy last revised and is valid from 30 January 2024. Privacy Policy version No.: 2024 ver. 01.

What is Personal data?

Personal data means any information relating to an identified or identifiable living person. Different information which, taken together, may reveal the identity of a particular person is also considered personal data. For more information on the concept of personal data, please click here.

How do we process your personal data?

The Company processes personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (hereinafter referred to as the "Regulation") on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and the legislation of the Republic of Lithuania regulating personal data protection.

The Company understands the importance of the protection of personal data and adheres to the following principles when processing your personal data:

▪ Your personal data shall be processed only to the extent necessary to achieve the relevant clearly defined and legitimate purposes, taking into account the protection of your privacy;

▪ Your personal data shall be processed accurately, fairly and lawfully and shall be processed only for purposes that are consistent with the purposes specified before your personal data were collected;

▪ Your personal data is processed by the Company in strict compliance with the clear and transparent requirements for the processing of personal data set out in the legislation;

▪ Your personal data shall be processed only in a form which permits identification of you for no longer than is necessary for the purposes for which the personal data is processed;

▪ The processing of your personal data is subject to appropriate technical and organisational measures to ensure the security of your personal data, including protection against unauthorised processing and against accidental loss, destruction and damage. When processing your data, the Company does not apply decisions based on automated processing that produce legal effects or similarly have a significant impact.

For what purposes and what of your data do we process?

We collect and process personal data in order to enable us to provide you with the services offered by the Company and to carry out related activities. The Company collects personal data for the following purposes listed below:

▪ Booking airline tickets on the Company's website;

▪ Tourist travel organisation;

▪ Business travel arrangements;

▪ Business communication and service quality improvement (telephone call recording);

▪ Direct marketing;

▪ Handling customer complaints (claims) and other enquiries;

▪ Processing of personal data of job candidates.

Processing of personal data for the purpose of booking airline tickets on the Company's website

If you decide to purchase airline tickets on the Company's Website, the Company will ask you to provide the following data: name, surname, date of birth, identity document details (document number, date of issue and expiry, gender, name of issuing country), email address, telephone number.

The term of storage of personal data processed on the Company's Website for the purpose of ordering airline tickets shall be 10 years from the date of the order or contract execution. After the expiry of the specified period, the Company undertakes to destroy the data within a reasonable period of time.

Processing of personal data for the purpose of organising tourist trips

If you decide to apply for the organisation of a tourist trip or for the booking of services related to the trip, the Company will ask you to provide the following personal data: name, surname, date of birth, personal identification number, identity document data, e-mail address, telephone number, data of the person you represent and/or accompanying person, other person specified in the contract for the provision of tourist services, as well as other information necessary for the proper execution of the booking of the trip and/or other services related to the trip, to contact you regarding the intention to conclude a contract for the provision of tourist services, in order to properly perform the service requested by you.

The retention period for personal data processed for the purpose of organising tourist trips is 10 years from the date of the booking or the execution of the contract. After the expiry of the specified period, the Company undertakes to destroy the data within a reasonable period of time.

Processing of personal data for the purpose of organising business trips

Your personal data is received and processed by the Company for the purpose of performance of the services contract. In this case, the personal data will be provided to the Company by a legal entity related to you, such as your employer (hereinafter - "Customer"). In order to provide the Customer with the desired service, e.g. the organisation of a business trip (secondment trip) and the booking of other travel-related services, the Company will process the following personal data: name, surname, date of birth, personal identification number, personal identification document data, e-mail address, telephone number, as well as any other information that is necessary to contact you to clarify the details of the business trip, or in special circumstances (e.g. to inform you of a delayed flight), in order to properly provide the service requested by the Customer.

The retention period for personal data processed for the purpose of organising business trips is 10 years from the date of the booking or the execution of the contract. After the expiry of the specified period, the Company undertakes to destroy the data within a reasonable period of time.

Processing of personal data for the purpose of improving business communication and service quality

The Company will record your (incoming) and the Company's employees' (outgoing) calls to the business customer helpline telephone number (the number is specified in the contract between the Company and the Customer) to ensure business communication and to assess the quality of the service provided to you. The recording of conversations is based on a legitimate interest. You will be informed that the call will be recorded before the call starts. If you do not agree to Us recording the conversation, you may terminate it and contact Us by other means of communication.

The Company reserves the right to record other incoming and outgoing calls for the purpose of improving the quality of business communication and service. In the case of an incoming call, you will be informed before the call starts that the call will be recorded. In the case of an outgoing call, you will be informed by a member of the Company's staff of the intention to record the call and/or you will hear a beep at the beginning of the call to you, which is a signal that the recording of the call is about to start.

For the purpose of improving the quality of business communication and service, the retention periods for personal data processed (call recording) are 3 months for quality assessment and 1 year for transactional purposes.

Processing of personal data for the purpose of Direct marketing

The Company processes your personal data for the purpose of direct marketing in accordance with the Company's rules on the processing of personal data for Direct marketing purposes, which you can access here.

By visiting the Company's website, you have the opportunity to subscribe to newsletters. To do this, you need to enter your email address in the newsletter order form and click the "Subscribe" button. In addition, we will ask you to confirm that the email address you provided on the order form belongs to you. Once you have completed the confirmation steps, you will be able to receive the Company's newsletters, which will be sent one to four times a week.

You can unsubscribe from our newsletters in any way that suits you: by clicking on the "unsubscribe here" link at the bottom of the newsletter you have received, by emailing us at naujienos@westexpress.lt or by calling us on 8 5 2122500.

The Company will process the personal data you provide (email address) for as long as your consent is valid, but no longer than 3 years.

Processing of personal data for the purpose of customer complaints (claims) and other communications

The Company also processes your data in cases where you submit a complaint, claim or make a request for purposes other than the booking of a tourist trip, by post, email, on the Company's website or on the Company's social networking accounts (Facebook, LinkedIn, YouTube). Personal data is processed on the legal basis of the conclusion and performance of the contract.

You can lodge a complaint (claim) by contacting the manager who served you directly or an office manager , by post: Stulginskio str. 5-59, 01115 Vilnius or by email: biuras@westexpress.lt.

Your personal data submitted for the purpose of processing complaints (claims) will be retained by the Company for 3 years from the date of processing of the complaint or claim.

For the purpose of all other communications, the Company will retain your personal data until the information you have provided has been properly processed and/or your questions have been answered, but not longer than 3 months.

Processing of personal data for the purpose of processing personal data of job applicants.

The Company shall process the personal data of job applicants to the extent that you have voluntarily provided your personal data by active means and to the extent that it has been provided.

Your personal data provided for the purpose of processing the personal data of candidates for a position (job applicants) will be retained by the Company for the duration of the selection process for the position(s) of your choice, but not longer than 6 months. Thereafter, job applicants' (candidates) personal data are destroyed.

Personal data processed on the Company's website

When you visit the Company's website, the Company processes personalised data by collecting statistical data from Visitors in order to improve and ensure the provision of quality services on the Website and to improve the visitor experience. The Company processes the following personalised data: IP address, date of visit, duration of the visit, parts of the page visited, devices used for browsing, applications, etc.

We use cookies on our website. A cookie is a small text file that your browser places on your device when you visit our website. Cookies are used to ensure the smooth and secure operation of the website and to understand your browsing habits, so that the website is convenient, efficient and meets your needs and expectations.

For more information about the cookies used on our website, please see our Cookie Policy.

On the Company's Website, we use the Website analysis service Google Analytics, which allows us to record and analyse statistical data on the use of the website. You can find out more about Google Analytics and the information that these tools allow us to collect here.

The Company's website features a live chat function, which allows you to contact the Company's staff in real time to consult on issues that are relevant to you, or to make a direct request to order services. When you use the Intercom live chat function of the Intercom Chat provider, your chat history is forwarded to the Company's email account and may be stored for up to 2 years. You are welcome to read Intercom's privacy policy here.

We also use the services of Facebook, Google, other online advertising providers. You can read the privacy policies of these service providers, the data they collect and the personal data protection measures they apply in their privacy policies. For more information on how the services of online advertising providers work, as well as information on how you can object to the display of such advertisements or the use of such data, please refer to the information provided by these service providers. For information provided by Google, please click here, for information provided by Facebook, please click here.

With the help of providers the data collected by Facebook and Google is depersonalised. Personal data whose anonymity is such that the identity of the individual cannot or may no longer be established shall no longer be considered personal data.

The Company's website displays iframes of third-party websites, which enable you to order services (holiday and sightseeing trips, airline tickets, hotel reservations, car rentals, car parking, luggage and parcel services, etc.) directly from third parties (data controllers) via the Internet.

In this case, the Company acts as a third-party data processor and the personal data is provided to third parties. In the aforementioned parts of the Website, all responsibility for the processing of personal data provided by the Website Visitor rests with third parties.

The Company may ask for your consent on behalf of third parties for direct marketing on their behalf.

From what sources do we collect your personal data?

The Company only processes data provided by you. You provide the data through direct contact with the Company - by visiting our offices, using the services provided by the Company, calling us on the phone, sending an email, visiting the Company's website or social media accounts and subscribing to newsletters, etc.

Who do we provide your personal data to?

Depending on the services you wish to order (not limited to the services provided on the Company's Website), the Company may transfer your personal data (except for candidates for positions/job applicants) to the following data recipients: reservation systems (e.g., airline ticketing systems, hotel reservation systems); direct carriers providing services by air, land, water; accommodation establishments; embassies; insurance, transportation, rental companies, tour operators, tour guides and other companies or partners providing the services you wish to request.

Data - are only transferred in the amount and to the extent necessary to fulfil your order and provide the service.

Recipients may also be established outside the European Economic Area. By ordering the Company's services that are physically provided outside the EEA, you understand that your personal data will be transferred to the recipient outside the EEA and that such transfer is necessary for the performance of the contract or for the implementation of contractual measures taken at your request.

The Company may also transfer your personal data to other third parties (data processors) who process and/or have access to your personal data on behalf of and under the instructions of the Company, e.g. information systems, service providers who develop, maintain and support information systems, and/or other persons who assist the Company in the proper provision of services to you. In this case, the Company shall take appropriate measures to ensure that the data processors it engages process the personal data entrusted to them only for the purposes specified by the Company, carry out only those actions that the Company has instructed them to carry out, and ensure appropriate organisational and technical measures for the security of personal data.

The Company has the right to transfer the personal data processed by you to public authorities and bodies for the purpose of the proper implementation of legal requirements. Your personal data may also be transferred to persons providing legal services, where disclosure of such personal data is necessary to establish, exercise or defend the Company's rights and legitimate interests.

The Company reserves the right to transfer the personal data of defaulters (debtors) for the purpose of debt management.

Your rights

We remind you that you have the following rights as a data subject:

▪ to know (be informed) about the processing of your personal data;

▪ to obtain information on the sources and nature of the personal data collected, the purposes for which it is processed, and the recipients to whom they are and have been provided;

▪ to require rectification of personal data processed if the data is inaccurate and / or incomplete;

▪ to require the termination of their personal data or the suspension of the processing of their personal data if excessive personal data processing is carried out, if you withdraw your consent or there are sufficient other grounds;

▪ to receive, in a structured, commonly used and computer-readable format, the personal data relating to you that you have provided to the Company and to transmit that data to another data controller, or to require the Company to transmit that personal data directly to another data controller where this is technically feasible (the right to data portability).

Intending to exercise your rights? Please contact the Company by email at duomenuapsauga@westexpress.lt or by phone at 8 5 2122500.

Please note that you must properly verify your identity in order to exercise your rights. You should submit your request to the Company together with the personal identification document or, in the manner prescribed by legal acts, by means of electronic communication, which enable the identification of the person, to confirm your personal identity.

The Company will provide your requested information free of charge in one months' time, however if your requests are obviously unfounded or disproportionate, in particular because of their repetitive content, the Company may charge a reasonable fee, taking into account the administrative costs of providing the information or the messages or actions requested, or refuse to act upon your request.

If you believe that the Company is not properly processing your personal data or is not properly exercising or implementing your rights, please contact us first. The Company is ready to resolve any problems with you. If you are not satisfied with the Company's response, you also have the right to lodge a complaint with the State Data Protection Inspectorate, which is responsible for the supervision and control of the legislation on the protection of personal data (for more information: www.ada.lt).

Your duties and responsibilities

By using the services provided by the Company and on the Company's Website (e.g., by filling in the enquiry form), you assume full responsibility for the truthfulness and accuracy of the personal data provided by you, as well as for the lawfulness of the provision of your personal data, and you shall be liable for any damages that may arise to the Company and/or to third parties as a result of the unlawful processing of such personal data.

In the event of a change in the personal data or other information relating to you that you have provided, you must immediately inform the Company with a request to amend and/or supplement the personal data or other information relating to you.

Rights held by the Company

The Company has the right to refuse to allow you to subscribe to the services and to refuse to accept your personal data if you are under the age of 16. In this case, you must provide the Company with the consent of your parents or other legal guardians.

If the Company has any doubts as to the correctness of the personal data or other relevant information provided by you, the Company shall have the right to request that such data or other relevant information be corrected and/or supplemented.

The Company shall use all reasonable endeavours to ensure the smooth operation and continued maintenance of the Website, but shall not be obliged to ensure the uninterrupted operation of the Website where factors beyond the Company's control affect the Website.

How do we take care of the security of your personal data?

The Company applies and keeps up-to-date appropriate organisational and technical personal data security measures to protect your personal data against accidental or unlawful disclosure, destruction, alteration or other unauthorised acts. These measures are chosen taking into account the risks to your rights and freedoms as a data subject.

The Company ensures strict access control to the personal data processed. The Company has entered into confidentiality agreements and has made the personal data protection requirements known to the persons authorised to process your personal data. Access to your personal data is granted only to those employees of the Company and only to the extent necessary for the performance of the functions assigned to the Company's employees and/or the provision of services to you.

The Company carefully chooses data processors who can only process your personal data in accordance with the instructions we have given them and who must also ensure the security of your data in accordance with the applicable legislation and written agreements concluded with us.

Any questions? Contact us

If you have any questions regarding the processing of your personal data, you can contact the Data Protection Officer of the Company by e-mail: duomenuapsauga@westexpress.lt, by phone 8 5 2122500 or by post to the following address for correspondence: UAB "Vestekspress" A. Stulginskio str. 5-59, 01115 Vilnius, address the letter to the Data Protection Officer of UAB "Vestekspress".

Your data controller UAB "Vestekspress", legal entity code 110461363, registered office address A. Stulginskio str. 5-59, 01115 Vilnius.

If you are not satisfied with the Company's response regarding your rights or processing of your personal data, you also have the right to lodge a complaint with the State Data Protection Inspectorate, which is responsible for the supervision and control of the legislation on the protection of personal data (for more information visit: www.ada.lt.

Privilege card privacy policy

This Privacy Policy is intended for all customers of UAB "Vestekspress" (hereinafter referred to as the Company, We, Data Controller) who hold and use UAB "Vestekspress" privilege cards.

The Company considers that you have duly read this Privacy Policy and agree that UAB "Vestekspress", legal entity code 110461363, registered office address A. Stulginskio str. 5-59, 01115 Vilnius will process the information you have provided, including personal data, to the extent necessary to provide the Company's services.

1. By activating your Privilege card and agreeing to the Privilege card rules, you provide us with the personal data necessary for the execution and administration of the Privilege card: name, surname, email address, Privilege card number.

2. We will process the data you provide for as long as you are a cardholder or until 31 December of the current year.

3. We may pass your name and surname to third parties providing services obtained with this card, to VĮ "Lietuvos oro uostai", as well as to providers of information technology, auditing, accounting and legal services. We only provide third parties with as much data as is necessary for the execution of a specific order or the provision of a specific service. The data processors used by us may process your personal data only in accordance with our instructions and may not use them for other purposes or transfer them to other persons without our consent. In addition, they must ensure the security of Your data in accordance with applicable laws and agreements signed with us.

4. We will only use the email address you provide for registration, card expiry reminders, and information about card renewal terms.

5. We shall take the necessary technical and organizational measures to ensure the protection of the data provided by You against unintentional or unlawful destruction or unintentional loss, alteration, unauthorized disclosure or access, as well as against all other unlawful forms of processing.

6. You have the right to have access to the personal data processed for the above-mentioned purpose, to correct incomplete or inaccurate personal data, to request the restriction of processing operations (except for storage) or the destruction of the data where the data is processed in breach of the requirements of the legislation or on other grounds specified in the legislation, as well as the right to transfer the personal data (only the requests of the person who has provided proof of identity for the exercise of the rights of the data subject may be fulfilled in the procedure laid down by law).

7. If you have any complaints or questions about the processing of your personal data, you can contact our designated data protection officer at duomenuapsauga@westexpress.lt or the State Data Protection Inspectorate (ada@ada.lt).

Any questions?

Feel free to contact us

CONTACT FORM