It’s really hard to make everyone happy with a Privacy Policy. While we wish we could fit everything you need to know into a post, our regulators ask us to meet our legal obligations by describing them all in a lot of detail. So here it goes:
We value your privacy. This policy explains what we collect through this website, why we
hold it, how long we keep it, who else sees it, and what you can ask us to do about it.
1. Who we are, and what this covers
citytax UAB
Naujakurių g. 37, Kuprioniškių k., LT-13279, Vilniaus r., Lithuania
We are the data controller for the processing described here.
This policy covers this website — the pages you are reading and the contact form on
them. Use of the citytax platform itself (accounts for hosts, guests and municipalities) is
governed separately by the agreement covering that service.
2. What we collect
When you use the contact form, you give us:
- your first and last name
- your email address
- your phone number
- the subject and message you write
Automatically, when you submit that form, our server also records:
- your IP address
- an approximate city and country, resolved from that IP address by a third-party
service (see section 5)
If you accept analytics cookies, Google Analytics collects standard usage data: pages
viewed, approximate location, device and browser type, and how you reached the site. If you
decline, none of this is collected and no analytics scripts are loaded at all.
We do not ask for anything else, and this website has no account or login.
3. Why we use it, and our legal basis
We use the contact form data solely to read your enquiry and reply to it. We do not sell it,
rent it, or share it for anyone else's purposes.
- Article 6(1)(b) GDPR — steps taken at your request before entering into a contract.
- Article 6(1)(f) GDPR — where an enquiry does not lead to a contract, our legitimate
interest in responding to people who contact us, keeping a record of what was discussed,
and protecting the form from automated abuse.
- Article 6(1)(a) GDPR — consent, for analytics cookies only. You may withdraw it at any
time (section 6).
4. How long we keep it
Contact-form enquiries are kept for 12 months from our last contact with you, then
deleted. Where an enquiry leads to a contract, the related records are kept for as long as
that relationship and applicable law require.
You can ask us to delete your enquiry sooner at any time — see section 7.
5. Who else sees it
We use a small number of providers, as processors acting on our instructions:
- ipgeolocation.io — receives your IP address in order to return the approximate city
and country described in section 2.
- Google (reCAPTCHA) — protects the contact form from automated abuse. It runs on the
pages carrying the form and receives your IP address and interaction data. This is
necessary to keep the form usable, so it is not covered by the analytics choice.
- Google (Analytics) — only if you accept analytics cookies. Never loaded otherwise.
- Amazon Web Services (SES) — delivers the email your enquiry generates. Frankfurt, EU.
- Hosting and content delivery — providers who operate the servers this site and our
systems run on.
We do not sell, rent or trade your personal information. We may disclose it where the law
requires it, or in response to a lawful request from a public authority.
6. Cookies and analytics
This website sets no cookies at all unless you accept analytics. There is no tracking on
your first visit and nothing to opt out of by default.
If you accept, we load Google Analytics to understand which pages are read and how the site
is used. If you decline, it is never loaded. Either way we store one small cookie recording
your choice so you are not asked on every page — that one is strictly necessary and cannot
be declined.
You can change your decision at any time using Cookie settings in the footer of any
page. You can also delete cookies through your browser settings.
7. Your rights
Under the GDPR you can ask us to:
- give you a copy of the personal data we hold about you (access)
- correct it if it is wrong or incomplete (rectification)
- delete it (erasure)
- restrict how we use it (restriction)
- object to our use of it where we rely on legitimate interest (objection)
- send it to you, or to another provider, in a machine-readable form (portability)
- withdraw your consent to analytics, at any time, without affecting what came before
Write to info@citytax.app and we will respond within one month.
If you believe we have handled your data improperly you can lodge a complaint with the
State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija), the
supervisory authority in Lithuania — vdai.lrv.lt. We would rather you
told us first so we can put it right.
8. International transfers
Our systems and our email delivery operate within the EU. Where a provider processes data
outside the European Economic Area, that transfer relies on the European Commission's
standard contractual clauses or another safeguard permitted under Chapter V of the GDPR.
9. Data security
We use appropriate technical and organisational measures to protect personal data against
unauthorised access, alteration and loss. No system is perfectly secure, and we cannot
guarantee absolute security, but we take this seriously and review it.
10. Links to other sites
This website links to sites we do not operate. We are not responsible for their privacy
practices, and we encourage you to read their policies.
11. Children
This website is not directed at children and we do not knowingly collect personal data from
them. If you believe a child has provided us with personal data, contact us and we will
delete it.
12. Changes to this policy
If this policy changes materially we will update the effective date above. Enquiries already
sent are handled under the version in force when you sent them.
13. Contact
citytax UAB
Naujakurių g. 37, Kuprioniškių k., LT-13279, Vilniaus r., Lithuania