2. What data do we use and why?

We receive data from you when you complete a form, send an email or SMS, call us, or provide information when entering into a training agreement. We collect only the information needed for the specific purpose.

GDPR means the General Data Protection Regulation (EU) 2016/679.

The registration form is not intended for medical or identity documents. Do not send a personal identification number, document copies, diagnoses or medical certificates. If health examination documents or other special documents are required by law during training, the submission method, scope of data and legal basis for processing special category data will be explained separately before collection.

Recordings of the final practical driving assessment, where required by driver training rules, are subject to a legal obligation; the learner is informed about recording, use and retention before the assessment. This policy does not itself provide consent to film ordinary lessons or publish recordings.

3. What information must you provide?

The first and last name, phone number and training of interest marked with an asterisk in the form are needed so that we can contact you and understand your enquiry. Email, preferred instructor and message are optional. Without contact details, we cannot reply or arrange a lesson. You can choose to contact us by phone or email.

The checkbox acknowledging this policy confirms that you have received the information. It is not consent to receive advertising. Processing data for the service you request relies on the basis stated above, rather than general consent to the entire policy.

Failure to provide contract details or mandatory training document data may prevent us from entering into a contract or lawfully delivering training. We explain the specific requirements when you register for a course.

4. Who may receive the data?

Data is used only by school staff and instructors who need access for their duties. Registration enquiries are sent to the school by email.

• Website hosting and maintenance: Hostinger services and authorised maintenance specialists, to the extent needed for the website and form to work. The website uses WordPress and Contact Form 7 functionality. Using software does not in itself mean that all enquiries are sent to its developers.
• Email service: a Google Gmail address is used for communication, so emails and the data they contain are processed using Google services.
• Payment and accounting services: banks and accounting service providers receive the information necessary for payments and accounting.
• Public authorities: Regitra, the Lithuanian Transport Safety Administration, tax authorities, law enforcement or other authorities, only when disclosure is required by law or a lawful request from an authority.
• Protection of legal interests: lawyers, courts or other parties involved in a dispute, only to the extent necessary for that dispute.

Your enquiries are neither published nor sold. Service provider access is limited according to their functions and applicable data protection requirements.

When international IT or email services are used, data may also be processed outside the European Economic Area. Such transfers must rely on a European Commission adequacy decision or other safeguards under Chapter V of the GDPR, such as standard contractual clauses. You can request information about safeguards for a particular transfer by emailing the school.

Service provider information: Hostinger privacy, Google privacy and data transfer bases.

5. How long do we retain data?

The retention period depends on the purpose of the information and the legislation applicable to the document. Data should not be retained merely because it was once received.

• Enquiries that do not lead to a contract: until a reply is provided and the related communication is completed. If later contact is agreed, until the matter is resolved or you tell us that you are no longer interested in the service.
• Training and contract data: during training and performance of the contract, and afterwards for the mandatory retention period applicable to the particular training or contract document.
• Accounting documents: for the periods set by legislation governing accounting and document retention.
• Technical logs: as long as needed to identify and resolve a system fault or security event, according to the provider’s log retention cycle. Related incident data may be retained until the investigation is complete.
• Applicant data: until the particular recruitment process ends; for future recruitment, only for a separately agreed period with consent.
• Complaints and disputes: until resolved, or, if needed to bring or defend legal claims, until the applicable limitation period or mandatory document retention period ends.

Once the purpose and mandatory retention periods end, data is erased or anonymised. Data remaining in backups is removed according to the normal backup update cycle and is not used for new purposes. You can ask the school about the retention period for your particular document.

6. Cookies and external services

Cookies are small files stored in your browser. Technologies necessary for website operation and security are used only to provide the relevant functions. Login and settings cookies may be used when signing in to WordPress administration; this is not a regular visitor’s registration for driving lessons.

Non-essential analytics or advertising cookies and tracking pixels may be used only with prior consent. If such tools are enabled, users must be given a choice and information on providers, purposes and duration before use. Refusing must be as easy as consenting, and consent must be withdrawable. Browsing or submitting a form alone does not constitute such consent.

You can delete or block cookies in your browser settings. Blocking necessary cookies may prevent some login or other technical functions from working.

The logo image is loaded from the Hostinger / Zyro image service. The server providing the image receives technical information needed for the image request, such as an IP address and browser information. A Hostinger Reach technical component is also loaded on the website. Its use does not authorise using registration contacts for newsletters without a separate lawful basis.

Facebook and Google Maps are provided as links. Clicking them takes you to other providers’ services, where their privacy and cookie rules apply. At present, the homepage does not embed a map or social media content as interactive frames.

7. Marketing and automated decisions

Lesson registration data is used to reply to an enquiry and organise training. The registration form does not subscribe you to a newsletter. If newsletters or other direct marketing were offered, their terms and lawful basis would need to be stated separately, with an easy way to opt out.

The registration form does not itself make an automated decision about your eligibility for training or confirm a booking. An instructor agrees the lesson time. Submitting the form is not an automated assessment of your suitability for training.

8. What rights do you have?

Subject to the conditions set out in the GDPR, you may:

• find out whether we process your data, access it and obtain a copy;
• request correction of inaccurate data or completion of incomplete data;
• request erasure where there is no longer a lawful basis for retaining the data;
• request restriction of processing;
• object to processing based on legitimate interests for reasons related to your particular situation; object to direct marketing at any time;
• receive portable data where processing is based on consent or a contract and carried out by automated means;
• withdraw consent where you gave it for particular processing. Withdrawal does not affect the lawfulness of processing before it was withdrawn.

The right to erasure is not absolute: we cannot erase accounting or training documents subject to mandatory retention early simply because a request is made.

Send your request to klapatauskas.z@gmail.com. If we have reasonable doubts about your identity, we may request only the additional information necessary to verify it. Do not send a document copy unnecessarily.

We respond without undue delay, normally within one month. For complex or numerous requests, the GDPR permits an extension of a further two months; we inform you about the extension and its reasons within the first month. Requests are normally handled free of charge.

If you believe your rights have been infringed, you can contact the State Data Protection Inspectorate or a competent court. Contacting the school first is not mandatory, but may help resolve the matter more quickly.

9. Scope and updates of this policy

This policy applies to the website, enquiries and the communications and training administration described here. Additional information may be provided for a particular training agreement or special data collection situation.

When services or data processing change, the policy is updated and the date is shown at the top of the page. A new purpose requiring consent cannot be introduced merely by changing this text. You can send questions to the school by email or phone.