Privacy Policy

UAB “ĮRANKIS.LT” PRIVACY POLICY RULES,

adopted in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data 

KEY DEFINITIONS

1. Data Controller – a natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of processing personal data. When you visit the website www.irankis.lt is UAB “Įrankis.LT”, company registration number 304105382, registered office at Raudondvario pl. 150, Kaunas, Lithuania, email: juristas@bokstelis.lt, telephone: +370 (687) 56 419. Hereinafter referred to in this Privacy Policy as the “Company”.
2. lt  – the website available at www.irankis.lt.
3. Social Media Accounts – the irankis.lt accounts on Facebook, Twitter or other social networks providing information about the Company and its equipment rental services.
4. Browser – a software application used to display web pages on the internet or on a personal computer.
5. Personal Data – any information relating to an identified or identifiable natural person (Data Subject), whose identity can be established directly or indirectly, including by reference to a personal identification number or one or more factors specific to their physical, physiological, psychological, economic, cultural or social identity.
6. Privacy Policy – this document setting out the principal rules for the collection, accumulation, processing and storage of Personal Data when using irankis.lt.
7. IP Address – a unique number assigned to each computer connected to the internet, known as an Internet Protocol (IP) address, which may be used to identify a person.
8. GDPR / Regulation – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC.
9. Data Subject – a natural person whose personal data are collected by the Company, including a customer (including website visitors), an employee of a supplier or partner, a person who has consented to marketing, a person who has submitted a request, complaint or review, a debtor or a debtor’s representative.
10. Consent of the Data Subject – any freely given, specific, informed and unambiguous indication of the Data Subject’s wishes by a statement or clear affirmative action signifying agreement to the processing of personal data relating to them.
11. Processing – any operation or set of operations performed on personal data or sets of personal data, whether or not by automated means, including collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
12. Data Processor – a natural or legal person, public authority, agency or other body that processes personal data on behalf of the Data Controller.
13. Cookie – a small piece of text information automatically created when browsing the Website and stored on your computer or other terminal device.
14. Direct Marketing – activities aimed at offering goods or services to individuals by post, telephone or other direct means and/or seeking their opinions about such goods or services.

GENERAL PROVISIONS

1. The irankis.lt Privacy Policy establishes the principal rules governing the collection, storage and processing of Personal Data when a User accesses the Irankis.lt website. Personal Data may be provided on the website only when submitting equipment rental enquiries or logging into the equipment rental platform to place a rental order.
2. This Privacy Policy is intended to protect the Personal Data of Users of irankis.lt against unlawful use.
3. The purpose of this Privacy Policy is to regulate the processing of personal data on the Company’s website irankis.lt, ensuring compliance with and implementation of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, the Law of the Republic of Lithuania on Legal Protection of Personal Data and other applicable legislation.
4. The Company’s website irankis.lt may contain links to and from websites of the Company’s partners, advertising providers and affiliated persons. Please note that third-party websites accessed by Users through links on irankis.lt have their own privacy policies. The Company assumes no responsibility for those policies or for the processing of personal data on those websites. Users are advised to read the privacy policies of such websites before providing any Personal Data.

PROCEDURE FOR THE COLLECTION, STORAGE AND USE OF PERSONAL DATA

1. On the website irankis.lt the Company allows Users to submit enquiries about equipment rental by providing the following personal data: (i) first name; (ii) email address; (iii) telephone number; (iv) message (question or enquiry). Users who do not wish to provide such data may refrain from completing the enquiry form and instead contact the Company by telephone or visit a rental branch in person.

   1.1. The above data are generally retained for six (6) months from the date of the User’s enquiry, but for no longer than one year.
   1.2. When you submit an enquiry, we process your data on the basis of your consent for the purpose of administering enquiries.

2. The Company also allows you to create and use an account on the website www.irankis.lt by providing (i) first name, (ii) last name, (iii) email address and (iv) telephone number. When creating an account, your identity is verified using your personal identification number, telephone number and smart-card data via the Dokobit identity verification platform (Mobile ID, Smart ID or smart card). You can read the Dokobit Privacy Policy at: https://www.dokobit.com/lt/patikimumas/privatumo-politika. When you use your account, we also process data relating to account creation and activities within the account (orders, fulfilment and payments).

   2.1. The Company retains your account data until you request deletion of your account.
   2.2. Account data are processed on the basis of the consent you provide when creating the account, for account administration purposes.

3. When you rent equipment from us, you are provided with the rental terms and conditions. By confirming your order, you enter into an agreement with us for the provision of services. To provide these services, we process the following personal data: (i) first name, (ii) last name, (iii) email address, (iv) telephone number, (v) personal identification number, (vi) name of the legal entity employing the representative, (vii) job title and (viii) creditworthiness data.

   3.1. We retain your data for the duration of the agreement concluded with you. After the services end, the data are retained for no longer than five years.
   3.2. These data are processed on the basis of contractual obligations for the purpose of administering services.

4. When using our website, you may also subscribe to direct marketing communications by email or telephone. We may therefore process (i) your email address, (ii) telephone number, (iii) first name and (iv) the fact that you have given consent.

   4.1. We process your email address and telephone number until you withdraw your consent.
   4.2. We process your data for direct marketing purposes only after obtaining your consent.

5. The Company uses Users’ Personal Data to:

   5.1. Ensure that the content of the irankis.lt website is presented to Users in the most effective and appropriate manner.
   5.2. Provide Users with information and services they request or may find interesting, provided that they have consented to receiving such information.

6. The Company’s website may collect certain information about a User’s visit, including: (i) the Internet Protocol (IP) address used to access the internet; (ii) the date and time of the visit to the Company’s website; (iii) other web pages visited while on the Company’s website; (iv) the browser used; (v) information about the User’s computer operating system; (vi) mobile application versions; and (vii) language settings. Where the User accesses the website using a mobile device, information identifying the device type, device settings and geographical coordinates (longitude and latitude) may also be collected.

   6.1. We process these data for three months after collection. Thereafter, the data are anonymised and processed in anonymised form.
   6.2. We process information about your visits to our website on the basis of legitimate interests in order to improve website performance, analyse trends, improve products and services and administer the Company’s website. The User voluntarily provides these data when using the Company’s services, registering as a website User or visiting the website.

7. When you contact us through the contact email addresses provided on the website or via the website chat window, we process the following data: (i) first name, (ii) last name, (iii) telephone number, (iv) email address, (v) name of the legal entity employing the representative, (vi) content of the complaint or enquiry, and (vii) attached documents and visual materials.

   7.1. We retain data submitted via our contact email addresses or website chat window for up to one year.
   7.2. We process these data to administer business contacts, your requests and complaints, on the basis of performing agreements with you.

8. The Company undertakes not to disclose Users’ Personal Data to third parties except in the following circumstances:

   8.1. Where the User has consented to the disclosure of Personal Data;
   8.2. To the Company’s partners providing services necessary for the proper fulfilment of services ordered by the User;
   8.3. The Company may also transfer Users’ Personal Data to third parties acting as Data Processors on its behalf. Personal Data may be provided only to Data Processors with whom the Company has concluded appropriate agreements, or whose cooperation agreements include provisions governing the transfer or disclosure of personal data, and who ensure adequate protection of the transferred Personal Data;
   8.4. The Company does not transfer personal data to third countries. If such a transfer becomes necessary, the Company will ensure compliance with Article 44 of the GDPR;
   8.5. In all other cases, Users’ Personal Data may be disclosed to third parties only in accordance with the laws of the Republic of Lithuania. The Company may disclose a Data Subject’s personal data to governmental or law enforcement authorities upon request.

9. Although the Company makes all reasonable efforts to protect Personal Data, it cannot guarantee the security of data transmitted to the website. Any transmission of data is undertaken solely at the User’s risk. Once the data are received, the Company applies stringent personal data protection procedures and technical and organisational measures to prevent unauthorised access to Personal Data.
10. The Company uses Users’ Personal Data to:

    10.1. Ensure that the content of the irankis.lt website is presented to Users in the most effective and appropriate manner;
    10.2. Provide Users with information and services they request or may find interesting, provided that they have consented to receiving such information.

11. The Company’s website may collect certain information about a User’s visit, including: (i) the Internet Protocol (IP) address used to access the internet; (ii) the date and time of the User’s visit; (iii) other web pages visited while on the Company’s website; (iv) the browser used; (v) information about the User’s computer operating system; (vi) mobile application versions; and (vii) language settings. Where the User uses a mobile device, information identifying its type, settings and geographical coordinates (longitude and latitude) may also be collected. This information is used to improve the Company’s website, analyse trends, improve products and services and administer the website. The User voluntarily provides these data when using the Company’s services, registering as a website User or visiting the website.

You can read the privacy policies of the messaging applications and social networks on which the Company maintains accounts by following the links below. Please note that personal data processed through those applications or social networks are subject to the rules set out in their respective privacy policies:

Messenger, Facebook (Meta): https://www.facebook.com/privacy/policy/
Instagram (Meta) : https://help.instagram.com/2000935033561463/
LinkedIn: https://www.linkedin.com/legal/privacy-policy
TikTok: https://www.tiktok.com/legal/page/eea/privacy-policy/en
YouTube: https://www.youtube.com/howyoutubeworks/privacy/

11. Payments in the online store are processed through the makecommerce.lt platform operated by Maksekeskus AS (Niine 11, Tallinn 10414, Estonia, registration number 12268475). Accordingly, your personal information required to process and confirm payments will be transferred to Maksekeskus AS.
12. To protect the personal data we process, we:

    2.1. use certified software, antivirus software and firewalls, control access to data through passwords and access permissions, and implement IT infrastructure and network security measures;
    2.2. maintain clear rules governing the processing of your personal data;
    2.3. establish clear retention and deletion periods for your data;
    2.4. ensure data confidentiality by including personal data confidentiality clauses in agreements with employees and Data Processors;
    2.5. restrict system users’ access rights;
    2.6. document data processing activities in internal policies and procedures;
    2.7. maintain data backups in our systems.

USER RIGHTS

1. Users have the following fundamental rights on the irankis.lt website:
   • To be informed about the processing of their personal data;
   • To access their personal data and information about how they are processed;
   • To request rectification or erasure of their personal data held by the Company;
   • To object to the processing of their personal data.
2. A User who submits a written request (accompanied by a document confirming their identity) has the right to access their personal data processed on the irankis.lt website and to obtain information about the sources and categories of Personal Data collected, the purposes of processing and the recipients of such data. Within 30 calendar days of receiving the User’s request, the Company shall provide the requested information or explain the reasons for refusing the request, using the same form of communication as the User, unless the User has agreed to another method proposed by the Company.
3. A User may submit a request to access, correct or delete Personal Data collected by the Company about them by email to juristas@bokstelis.lt or by registered post to the Company’s business address: Raudondvario pl. 150, Kaunas, Lithuania.
4. Any request or instruction relating to the processing of Personal Data must be submitted to the Company in writing by either (i) registered post to Raudondvario pl. 150, Kaunas, Lithuania, or (ii) email to juristas@bokstelis.lt.
5. Complaints concerning improper or unlawful processing of Personal Data are handled by the State Data Protection Inspectorate, located at A. Juozapavičiaus g. 6, LT-09310 Vilnius, Lithuania, www.ada.lt.

FINAL PROVISIONS

1. This Privacy Policy is available at any time on irankis.lt. Users will be informed of future changes and/or additions to this Privacy Policy by publication of the updated version on irankis.lt.
2. The Company shall not be liable for communication disruptions that prevent Users or other persons from accessing the Company’s website or using its services.
3. The Company cannot fully guarantee that its website will operate without interruption, disruption or errors, or that it will be completely free of viruses or other harmful components. Users are informed that any material they read, download or otherwise obtain through the Company’s website is accessed at their own discretion and risk, and that they are solely responsible for any resulting damage to themselves or their computer systems.
4. Users may send questions, comments or requests concerning this Privacy Policy to juristas@bokstelis.lt.

This Privacy Policy was last updated on: 2026-10-20