Privacy Policy

Who We Are

We operate a website providing information about cycling heritage routes, lock gate viewpoints, and recreational activities along the Augustów canal for retirees and cycling enthusiasts. As the data controller, we are responsible for how your personal information is collected and processed. Our organization is registered in Lithuania, and we comply with all applicable data protection regulations, including the General Data Protection Regulation (GDPR).

Information We Collect

We collect different types of information depending on how you interact with our website:

• Contact information you provide through forms (name, email, phone number, address)
• Usage data automatically collected (IP address, browser type, pages visited, time spent on site)
• Cookie data for website functionality and analytics
• Location information if you grant permission for mapping features
• Device information (operating system, device type, screen resolution)

Legal Basis for Processing

We process your personal information based on the following legal grounds: your explicit consent when you submit forms or enable cookies; our legitimate interests in improving our website and providing better services; and compliance with legal obligations where applicable. For marketing communications, we process data only with your prior consent. We do not process special categories of personal data (such as health or biometric information) unless you voluntarily provide it for specific cycling route recommendations.

How We Use Your Information

We use your personal information for the following purposes:

• Responding to your inquiries and providing customer support
• Sending newsletters and promotional materials (with your consent)
• Analyzing website usage to improve our services and user experience
• Personalizing cycling route recommendations based on your interests
• Conducting research about canal heritage tourism and cycling activities
• Complying with legal obligations and protecting our rights
• Preventing fraud and maintaining website security

Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected. Specific retention periods include:

• Contact form submissions and inquiry data: retained for up to 24 months after your last interaction with us
• Analytics and usage data: retained for up to 13 months from collection date
• Email list subscribers: retained until you unsubscribe or request deletion
• Server logs and technical data: retained for up to 12 months for security purposes
• Cookie data: retained according to individual cookie expiration settings (typically 12-24 months)

After these periods, we securely delete or anonymize your data unless we are legally required to retain it longer.

Your Privacy Rights

Under data protection regulations, you have the following rights:

• Right of access: request a copy of your personal data
• Right to rectification: correct inaccurate or incomplete information
• Right to erasure: request deletion of your data ("right to be forgotten")
• Right to restrict processing: limit how we use your information
• Right to data portability: receive your data in a portable format
• Right to object: withdraw consent or oppose processing for specific purposes
• Right to lodge a complaint: contact the data protection authority if you believe your rights are violated

To exercise any of these rights, please contact us using the information provided in the Contact Us section below. We will respond to your request within 30 days.

Cookies and Tracking Technologies

We use cookies to enhance your browsing experience and analyze website traffic. Cookies are small text files stored on your device that help us remember your preferences. We use both essential cookies (required for website functionality) and optional cookies (for analytics and personalization). Essential cookies do not require consent, but optional cookies are set only with your explicit permission. You can control cookies through your browser settings or our cookie consent management tool. Please note that disabling certain cookies may affect website functionality. We also use analytics services to understand user behavior and improve our services.

Data Security

We implement appropriate technical and organizational security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. Our security practices include encryption of sensitive data, secure server infrastructure, regular security audits, and staff training on data protection. However, no security system is completely impenetrable. While we strive to protect your data, we cannot guarantee absolute security. We encourage you to use strong passwords and report any security concerns to us immediately.

Third-Party Sharing

We do not sell, trade, or rent your personal information to third parties. We may share your data only in the following circumstances: with service providers who assist us in operating our website and conducting our business (under confidentiality agreements); with legal authorities if required by law or to protect our rights; or with your explicit consent for specific purposes. Third-party service providers are required to maintain the confidentiality and security of your information. Our website may contain links to external websites, but we are not responsible for their privacy practices.

International Data Transfers

Our website operates in Lithuania within the European Union. If we transfer your personal information to countries outside the EU, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions. By using our website, you consent to the processing and transfer of your information as described in this policy. We comply with all applicable regulations regarding international data transfers.

Children's Privacy

Our website is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected such information, we will delete it immediately. Parents or guardians who believe their child has provided information to us should contact us right away. For users between 13 and 16, we require parental consent before processing personal information.

Supervisory Authority

You have the right to lodge a complaint with the relevant data protection authority if you believe your rights have been violated. In Lithuania, the competent authority is the State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija). You can file a complaint with them if you have concerns about our data processing practices. Contact information for the authority is available on their official website.

Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or applicable laws. When we make material changes, we will notify you by updating the "Last updated" date at the top of this page. We encourage you to review this policy periodically to stay informed about how we protect your information. Your continued use of our website following any changes constitutes your acceptance of the updated policy.