In this privacy policy, you will find information about  personal data processing carried out by UAB “BMS Technologija” (data controller). When processing personal data, the data controller complies with all legal acts regulating personal data protection and personal data protection measures, ensuring that personal data is processed accurately, honestly, legally, transparently and securely.


  1. Purposes of processing personal data, categories of personal data and legal bases for their processing


  • Provision of services and administration of payments for services


Categories of personal data

Legal basis

Service recipient’s name, date of birth, contact information (e-mail address, phone number, address), identity card data, driver’s license data, data on the rented vehicle, rental period, vehicle pick-up location, added together with the rental services ordered by services, payment card data is required for payment of services.

When a company wishes to rent a vehicle, we will additionally process the data of the company and its representative – the name, surname, position of the representative, the name, code, VAT code, registered office address, phone number of the company represented. number, email postal address.

Fulfillment of contractual obligations (GDPR Article 6 (1)(b)).


  • Proper execution of accounting


Categories of personal data

Legal basis

Name, surname, address, personal identification number of the customer (his representative), VAT payer code, when the person is registered as a VAT payer, data on services (description of services, price, amount paid), issued accounting documents and their data, other accounting and tax data, which we are required to collect, process and store in accordance with laws and regulations.

The data controller’s legitimate interest in properly managing financial accounting (GDPR Article 6 (1)(f)).


  • Processing of inquiries, requests and complaints


Categories of personal data

Legal basis

Name, surname, contact details (telephone number or e-mail address) of the person who submitted the request, request or complaint, content of the request, request or complaint (event, its circumstances, customer’s request, demand or feedback, information about ordered and provided services, other information ), other documents, data submitted with a request, request or complaint.

Fulfillment of contractual obligations (GDPR Article 6 (1)(b)), legal obligations and legal requirements (GDPR Article 6 (1)(c))


  • Ensuring the protection of assets owned or controlled by us


Categories of personal data

Legal basis

Identity card data, driver’s license data.

In order to ensure the safety of the property owned by us or managed by us, as well as the fair and proper use of our services, the rented vehicles are equipped with GPS transmitters, thanks to which we can be provided with data about the location, route and distance traveled of the vehicle rented to you during the period of validity of the rental agreement.

The legitimate interest of the data controller (Article 6 (1)(f) GDPR) to ensure the protection of the property owned or controlled by him.



  • Providing requests for feedback on the services provided 


Categories of personal data

Legal basis

Name, surname, e-mail address of the person who submitted the feedback. e-mail address, content of the feedback on the services provided.

The data controller’s legitimate interest (GDPR Article 6 (1)(f)) to improve the quality of the services provided.



  • Debt collection from defaulting customers


Categories of personal data

Legal basis

Name, surname, address, telephone number and e-mail address of the client (representative of a legal entity). mail adress.

The data controller’s legitimate interest (GDPR Art. 6 (1)(f)) to recover debts.



  • Cookies

Detailed information about cookies can be found in our Cookie Use Rules, link to them: .


  1. Transfer of personal data. Your personal data may be provided to third parties, if such an obligation is provided for in legal acts. In cases where it is necessary for us to be able to fulfill contracts, your personal data is transferred to companies or consultants providing IT, software maintenance, accounting services, companies or individuals providing insurance services, brokerage companies, brokers, partners, on whose websites the reservation was made, additional services are ordered, payments to service providers, financial institutions, other companies or individuals, as far as this is necessary for the proper execution of the contract concluded with you. In cases where we seek to protect our legitimate interests by protecting our property, we may transfer your driver’s license data to law enforcement and other state institutions. In those cases,


  1. Personal data storage terms.  We will store your personal data for no longer than is required by the purposes of data processing or provided for by legal acts. Tax and accounting documents confirming the conclusion and execution of the contract, which may contain personal data, are stored for 10 years. The 10-year retention period begins in the year following the end of the calendar year in which the financial year (to which the information relates) ended. Inquiries, requests and complaints
    Your data submitted for the purpose of examination will be processed for 12 calendar months from the date of submission of the request, request or complaint. If the video is monitored on our premises, the videos are stored for no longer than 30 calendar days. For the purpose of debt collection, personal data is stored during the period of sending debt reminders and while the debt is being collected, in cases where the debt is being collected – during the validity of the contract and 10 years after the end of the contract and fulfillment of obligations, debt collection or the conclusion of a certificate that there is no possibility of debt collection.


  1. Data subject rights and their implementation.  You have the right to familiarize yourself with your personal data and how they are processed, to demand correction, addition or destruction of the provided personal data, as well as to stop their processing (withdraw your consent). You also have the right to demand that the controller of personal data restricts the processing of personal data, the right to transfer data, file a complaint with the State Data Protection Inspectorate (contact details are
    available on the website ) and object to the processing of submitted personal data. . If you would like to receive detailed information on the procedure for exercising these rights, please submit a request by email. to  or by mail to  Rodūnios  kelias 2, LT-02189, Vilnius.


  1. Changes to the privacy policy. We reserve the right to change the Privacy Policy. Notification of changes and the latest version of the Cookie Policy will be published on our website.