All shipping taxes and duties are paid by Monimoto

Privacy Policy

  • 1. Why should I read this policy?

    This Privacy Policy describes how Monimoto, UAB (‘we’, ‘our’, ‘us’ or ‘Monimoto’) collects, uses and stores your personal data and what statutory rights you have. We protect your data under the EU General Data Protection Regulation (‘GDPR’) and other applicable laws. This policy may be amended from time to time. Please visit our website regularly for the latest version of this policy.

  • 2. Who is responsible for protecting my information?

    We are: Monimoto, UAB

    Our company number is: 304932414

    Our address is: Saulėtekis Alley, 15, LT-10224, Vilnius, the Republic of Lithuania

    Our e-mail address: [email protected]

  • 3. Why and how do you collect and use my data?
    3.1. To process your orders, receive payments and deliver purchased goods
    • When is this relevant for me?

    When you purchase our products or order a SIM card subscription

    • What information do you collect about me?

    Full name, address, phone number, country, postcode, order number, company name (when applicable), VAT number, expiration date, security code, credit card type

    • Where do you collect the information from?

    From yourself

    • Am I obliged to provide this information?

    It is a requirement necessary to enter into a contract. If you do not provide this information, you will not be able to purchase and receive our products.

    • What is your legal basis to collect my data?

    Contract (Art. 6 (1) (b) of GDPR).

    • How long do you store information about me?

    10 years

    3.2. To provide you with GPS tracking service
    • When is this relevant for me?

    When you use our GPS tracking device via mobile app or web console

    • What information do you collect about me?

    User phone number, motorcycle photo and number plate (when applicable), tracking device’s coordinates received from Global Navigation Satellite System (GNSS) or wi-fi positioning system (WPS) providers or from mobile network Cells (Cell ID), date and time, movement speed, temperature, device SIM card , device SIM card number, subscription start/end date

    • Where do you collect the information from?

    From yourself

    • Am I obliged to provide this information?

    It is a requirement necessary to enter into a contract. If you do not provide this information, we will not be able to provide you with our services

    • What is your legal basis to collect my data?

    Contract (Art. 6 (1) (b) of GDPR).

    • How long do you store information about me?

    Until the user deletes his /her account or 6 months whichever is shorter.

    3.3. To ensure our website/app security
    • When is this relevant for me?

    When you use our website/app.

    • What information do you collect about me?

    IP address, user display information (colour depth, aspect ratio, resolution, primary and secondary screens), browser information (browser time zone, browser storage capabilities (local storage support, etc.), browser canvas capabilities, browser fonts, used browser, browser language), user device information (CPU class, OS or platform, touch support), type of information banners shown to user, country, preferred language, outlinks, referrers, page and website speed, accessed content on website and URL’s, time and date the content on website was accessed, manufacturer and device type (only by app), cookie ID)

    • Where do you collect the information from?

    From yourself

    • Am I obliged to provide this information?

    N/A

    • What is your legal basis to collect my data?

    Legitimate interest (security and website support) (Art. 6 (1) (f) of GDPR)

    • How long do you store information about me?

    24 months

    3.4. To provide you with customer support
    • When is this relevant for me?

    When you submit an inquiry to our customer support.

    • What information do you collect about me?

    Date and time of the inquiry / message, messages, submitted files, name (if provided), e-mail address, phone number, model of device from which the request is sent, approximate location of the device,  user agent (browser), IP address, feedback text.

    • Where do you collect the information from?

    From yourself

    • Am I obliged to provide this information?

    N/A

    • What is your legal basis to collect my data?

    Consent (Art. 6 (1) (a) of GDPR)

    • How long do you store information about me?

    36 months

    3.5. To send you marketing e-mails
    • When is this relevant for me?

    When you purchase our products or give your  consent to receive e-mails

    • What information do you collect about me?

    Full name, e-mail, order history

    • Where do you collect the information from?

    From yourself

    • Am I obliged to provide this information?

    N/A

    • What is your legal basis to collect my data?

    Consent, Legitimate interest (direct marketing), Customer relationship (Art. 6 (1)(a) of GDPR; Arts. 69(1) and 69(2) of on Electronic Communications Law (Lithuania)

    • How long do you store information about me?

    36 months

    3.6. To manage our social media profiles
    • When is this relevant for me?

    If you interact with our social media profiles (e.g. send a message, follow our profiles, share a post, react to a post)

    • What information do you collect about me?

    Name and surname, message, time and date the message was received, content of the message, message attachments, response to the message, time of response to the message, information about our rating, comments on a post, post shares, information about post reactions

    • Where do you collect the information from?

    From yourself , LinkedIn Ireland, Facebook Inc, Google Ireland Ltd

    • Am I obliged to provide this information?

    N/A

    • What is your legal basis to collect my data?

    Consent (Art. 6 (1) (a) of GDPR)

    • How long do you store information about me?

    10 years

    3.7. To carry out the selection of potential employees
    • When is this relevant for me?

    When you apply for a job at Monimoto

    • What information do you collect about me?

    Full name, e-mail, phone number, CV, work experience, other information you provide us with

    • Where do you collect the information from?

    From yourself

    • Am I obliged to provide this information?

    N/A

    • What is your legal basis to collect my data?

    Consent (Art. 6 (1) (f) of GDPR)

    • How long do you store information about me?

    2 years

    3.8. To fulfill statutory accounting requirements
    • When is this relevant for me?

    When you purchase our products or order our services

    • What information do you collect about me?

    Full name, address, VAT identification number (where applicable), value and description of supplied goods and/or services

    • Where do you collect the information from?

    From yourself

    • Am I obliged to provide this information?

    It is a statutory requirement. If you do not provide this information, we will not be able to provide you with our services

    • What is your legal basis to collect my data?

    Legal obligation (Art. 6 (1) (c) of GDPR)

    • How long do you store information about me?

    10 years

    3.9. To fulfill other statutory requirements and defend the rights and interests of Monimoto
    • When is this relevant for me?

    In case there is present or potential dispute with Monimoto or we otherwise need to defend, enforce, exercise and uphold our rights or we are statutorily required to provide data

    • What information do you collect about me?

    All of the afore-mentioned information, accounting and legal case files, legal documents, other information you provide us with

    • Where do you collect the information from?

    From afore-mentioned sources

    • Am I obliged to provide this information?

    N/A

    • What is your legal basis to collect my data?

    Legitimate interest (protection of the rights and interests of Monimoto) (Art. 6 (1) (f) of GDPR).

    • How long do you store information about me?

    3 years following the moment we became aware of the afore-mentioned circumstances of termination of legal proceedings, if any

  • 4. Who do you share my data with?

    Monimoto shares data with data recipients only in cases where necessary for the above-describe purposes and allowed in accordance with applicable laws.

    1.UAB “DPD Lietuva”:

    • Purpose of  data transfer – To deliver purchased goods(see par. 3.1 above)
    • Country – Lithuania
    • European Commission – decision on whether a non-EEA country has an adequate level of data protection – N/A
    • Suitable safeguards that protect my data transferred to non-EEA countries – N/A

     

    2. UAB “DHL Lietuva”:

    • Purpose of  data transfer – To deliver purchased goods(see par. 3.1 above)
    • Country – Lithuania
    • European Commission – decision on whether a non-EEA country has an adequate level of data protection – N/A
    • Suitable safeguards that protect my data transferred to non-EEA countries – N/A

     

    3. UAB „TNT“:

    • Purpose of  data transfer – To deliver purchased goods(see par. 3.1 above)
    • Country – Lithuania
    • European Commission – decision on whether a non-EEA country has an adequate level of data protection – N/A
    • Suitable safeguards that protect my data transferred to non-EEA countries – N/A

     

    4. Federal Express Corporation Lietuvos filialas:

    • Purpose of  data transfer – To deliver purchased goods(see par. 3.1 above)
    • Country – Lithuania
    • European Commission – decision on whether a non-EEA country has an adequate level of data protection – N/A
    • Suitable safeguards that protect my data transferred to non-EEA countries – N/A

     

    5. Omnisend, UAB:

    • Purpose of  data transfer -To send marketing e-mails(see par. 3.5 above)
    • Country – Lithuania
    • European Commission – decision on whether a non-EEA country has an adequate level of data protection – N/A
    • Suitable safeguards that protect my data transferred to non-EEA countries – N/A

     

    6. Tele2 IoT Aktiebolag:

    • Purpose of  data transfer -To provide you with our GPS tracking service(see par. 3.2 above
    • Country – Sweden
    • European Commission – decision on whether a non-EEA country has an adequate level of data protection – N/A
    • Suitable safeguards that protect my data transferred to non-EEA countries – N/A

     

    7. Hatzner Online GmbH:

    • Purpose of  data transfer -To host your data (see par. 3.2 above)
    • Country – Germany
    • European Commission – decision on whether a non-EEA country has an adequate level of data protection – N/A
    • Suitable safeguards that protect my data transferred to non-EEA countries – N/A

     

    8. Other service providers (IT, accounting service providers, consultants):

    • Purpose of  data transfer -To receive other support necessary to operate our service (see par. 3.1-3.3. above)
    • Country – Lithuania/EU
    • European Commission – decision on whether a non-EEA country has an adequate level of data protection – N/A
    • Suitable safeguards that protect my data transferred to non-EEA countries – N/A

     

    9. Attorney’s, notaries, bailiffs:

    • Purpose of  data transfer -To defend the rights and interests of Monimoto (see par. 3.9 above)
    • Country – Lithuania/EU
    • European Commission – decision on whether a non-EEA country has an adequate level of data protection – N/A
    • Suitable safeguards that protect my data transferred to non-EEA countries – N/A

     

    10. Law enforcement authorities and courts of the Republic of Lithuania and other EU member states:

    • Purpose of  data transfer -To meet the requirements of the law (see par. 3.9 above)
    • Country – Lithuania/EU
    • European Commission – decision on whether a non-EEA country has an adequate level of data protection – N/A
    • Suitable safeguards that protect my data transferred to non-EEA countries – N/A

     

    11. Google Ireland Ltd.:

    • Purpose of  data transfer -To manage device user’s account and provide you with our GPS tracking service (see par. 3.2. above)
    • Country – Ireland
    • European Commission – decision on whether a non-EEA country has an adequate level of data protection – N/A
    • Suitable safeguards that protect my data transferred to non-EEA countries – N/A

     

    12. LinkedIn Ireland:

    • Purpose of  data transfer -To manage our social media platforms (see par. 3.6. above)
    • Country – Ireland
    • European Commission – decision on whether a non-EEA country has an adequate level of data protection – N/A
    • Suitable safeguards that protect my data transferred to non-EEA countries – N/A

     

    13. Facebook Inc.:

    • Purpose of  data transfer -To manage our social media platforms (see par. 3.6. above)
    • Country – United States
    • European Commission – decision on whether a non-EEA country has an adequate level of data protection – No
    • Suitable safeguards that protect my data transferred to non-EEA countries – EU Standard Contractual Clauses for the transfer of data as approved by the European Commission (link)

     

    14. Freshworks, Inc:

    • Purpose of  data transfer -To provide you with customer support (see par. 3.4. above)
    • Country – United States
    • European Commission – decision on whether a non-EEA country has an adequate level of data protection – No
    • Suitable safeguards that protect my data transferred to non-EEA countries – EU Standard Contractual Clauses for the transfer of data as approved by the European Commission (link)

     

    15. The Rocket Science Group LLC d/b/a Mailchimp:

    • Purpose of  data transfer -To send marketing e-mails (see par. 3.5 above)
    • Country – United States
    • European Commission – decision on whether a non-EEA country has an adequate level of data protection – No
    • Suitable safeguards that protect my data transferred to non-EEA countries – EU Standard Contractual Clauses for the transfer of data as approved by the European Commission (link)
  • 5. What statutory rights do I have regarding my data?

    Subject to conditions, limitations, and exceptions established by statutory data protection provisions, you have the right at any time:

    • to be informed of the data we collect and use and to request access or demand a copy of the data concerned (right to be informed);
    • to demand the correction of inaccurate data and, subject to the nature of the collection and use, the completion of incomplete data (right to rectification);
    • subject to just cause, to demand the deletion of your data (right to deletion);
    • to demand restriction of the collection and use of your data, provided the statutory criteria are met (right to restrict processing);
    • subject to the statutory criteria being met, to receive the data you have provided in a structured, current and machine-readable form and to transfer this data to another processor or, where technically feasible, to have it transferred by Monimoto (right to data portability);
    • not to be subject to a decision based solely on automated processing, including profiling, which produces legal or similarly significant effects on you, unless the statutory conditions for such automated decision-making are met;
    • to object to the collection and use of data – only where the collection and use is based on a task carried out in the public interest or in the exercise of official authority vested (Art. 6 (1)(e) of GDPR) or legitimate interest (Art. 6 (1)(f) of GDPR), including profiling, based on the same data collection and use grounds as explained in other sections of this statement (right to object). You also have the right to at any time object to the collection of your personal data for direct marketing purposes;
    • to withdraw at any time any permission you have provided to us. Such withdrawal will not affect the lawfulness of collection and use carried out prior to withdrawal and based on the permission granted;
    • not to receive discriminatory treatment while exercising your rights.

     

    Regardless of any other legal remedy, you also have the right at any time to submit a complaint to the supervisory authorities.

  • 6. Do you use cookies?

    Yes, we use cookies on our Website as described below.

    hjAbsoluteSessionInProgress

    • Category – Statistics
    • Cookie purpose – This cookie is used to count how many times a website has been visited by different visitors – this is done by assigning the visitor an ID, so the visitor does not get registered twice.
    • Cookie expiry – 1 day

     

    _hjIncludedInPageviewSample

    • Category – Statistics
    • Cookie purpose – Determines if the user’s navigation should be registered in a certain statistical place holder.
    • Cookie expiry – Persistent

     

    _hjid

    • Category – Statistics
    • Cookie purpose – Sets a unique ID for the session. This allows the website to obtain data on visitor behaviour for statistical purposes.
    • Cookie expiry – 1 year

     

    _ga

    • Category – Statistics
    • Cookie purpose – Registers a unique ID that is used to generate statistical data on how the visitor uses the  website.
    • Cookie expiry – 2 years

     

    _lfa

    • Category – Marketing
    • Cookie purpose – Used in context with Account-Based-Marketing (ABM). The cookie registers data such as IP-addresses, time spent on the website and page requests for the visit. This is used for retargeting of multiple users rooting from the same IP-addresses. ABM usually facilitates B2B marketing purposes.
    • Cookie expiry – 2 years

     

    _gid

    • Category – Statistics
    • Cookie purpose – Registers a unique ID that is used to generate statistical data on how the visitor uses the website.
    • Cookie expiry – 1 day

     

    _fw_crm_v

    • Category – Marketing
    • Cookie purpose – Collects information on user preferences and/or interaction with web-campaign content – This is used on CRM-campaign -platform used by website owners for promoting events or products.
    • Cookie expiry – 1 year

     

    _fbp

    • Category – Marketing
    • Cookie purpose – Used by Facebook to deliver a series of advertisement products such as real time bidding from third party advertisers.
    • Cookie expiry – 3 months

     

    __cfduid

    • Category – Necessary
    • Cookie purpose – Used by the con ten t network, Cloudflare, to identify trusted web traffic.
    • Cookie expiry – 29 days

     

    _gcl_au

    • Category – Marketing
    • Cookie purpose – Used by Google AdSense for experimenting with advertisement efficiency across websites using their services.
    • Cookie expiry – 3 months

     

    mailchimp_landing_site

    • Category – Statistics
    • Cookie purpose – store which page was visited first
    • Cookie expiry – 1 month

     

    PHPSESSID

    • Category – Necessary
    • Cookie purpose – Enables websites to store serialized state data.
    • Cookie expiry – Session

     

    _dc_gtm_UA-#

    • Category – Statistics
    • Cookie purpose – Used by Google Tag Manager to control the loading of a Google Analytics script tag.
    • Cookie expiry – 1 day

     

    soundest-form-<form identifier>-closed-at

    • Category – Statistics
    • Cookie purpose – used to identify which signup form was closed
    • Cookie expiry – 1 year

     

    omnisendSessionID

    • Category – Statistics
    • Cookie purpose – Sets a unique ID for the session . This allows the website to obtain data on visitor behaviour for statistical purposes.
    • Cookie expiry – 1 day

     

    omnisendAnonymousID

    • Category – Necessary
    • Cookie purpose – Used to encrypt and contain visitor data – This is necessary for the security of the user data.
    • Cookie expiry – 1 year

     

    soundestID

    • Category – Statistics
    • Cookie purpose – This cookie is used to determine if the visitor has visited the website before, or if it is a new visitor on the website.
    • Cookie expiry – Session

     

    soundest-views

    • Category – Statistics
    • Cookie purpose – Assigns a specific ID to the visitor – This allows the website to determine the number of specific user-visits for analysis and statistics
    • Cookie expiry – Session

     

    cookies.js

    • Category – Necessary
    • Cookie purpose – Determines whether the visitor has accepted the cookie consent box. This ensures that the cookie consent box will not be presented again upon re-entry.
    • Cookie expiry – Session

     

    _gat

    • Category – Statistics
    • Cookie purpose – Used by Google Analytics to throttle request rate
    • Cookie expiry – 1 day
  • 7. How can I manage cookies?

    You can configure your browser to decline some or all cookies or to ask for your permission before accepting them. Please note that by deleting cookies or disabling future cookies you may be unable to access certain areas or features of our website. For information on how to adjust or change your browser settings, visit www.aboutcookies.org or www.allaboutcookies.org. You can control the use of functionality cookies, targeting cookies or advertising cookies by adjusting your browser settings. To find out how to manage cookies in your browser, please visit one of the links below:

    • Mozilla Firefox: link 
    • Google Chrome: link 
    • Opera: link 
    • Internet Explorer: link 
    • Microsoft Edge: link 
  • 8. Do you engage in automated individual decision-making, including profiling?

    No, we do not make decisions based solely on automated processing, including profiling, which would produce legal effects concerning you.

  • 9. How can I contact your DPO?

    If you have any questions, comments or complaints regarding how we collect, use and store information about you, Monimoto has a Data Protection Officer to help you. If you need his / her help, please send an e-mail to [email protected] .

Date last updated: 2020.12.14