Privacy policy
This policy explains what personal data UAB Sigvi collects when you use sigvi.com, the Sigvi app and our car rental service, why we collect it, who we share it with, how long we keep it and what rights you have. We’ve kept it as short and plain as we can. If anything is unclear, write to info@sigvi.com.
The short version
| Question | Answer |
|---|---|
| Who is responsible for your data? | UAB Sigvi, Vilnius, Lithuania (details under Contact us). |
| What do we collect? | Your account and driving licence details, your bookings and payments, data from the car while you rent it, photos you take of the car, your messages to us, and how you use our website and app. |
| Why? | To rent you a car, bill you correctly, keep the cars and the people in them safe, handle damage and fines, answer you, meet our legal duties and, if you agree, tell you about offers. |
| Do we sell your data? | No. Never. |
| How long do we keep it? | While you use Sigvi and for 5 years after your last rental, unless the law or an open claim needs longer. |
| What can you do? | See, correct, delete or take a copy of your data, object, withdraw consent, and complain to a data protection authority. |
Who we are
The controller of your personal data is UAB Sigvi, a company registered in Lithuania, company code 306267550, Oršos g. 6-22, LT-09300 Vilnius. In this policy “Sigvi”, “we” and “us” mean UAB Sigvi.
In Poland our service is provided with our Polish company, SIGVI POLAND sp. z o.o. (KRS 0001250235, NIP 9512651136, ul. Przy Bażantarni 8D, 02-793 Warszawa).
This policy applies to everyone who visits our website, uses the Sigvi app, rents a car from us, contacts us, offers us their car or applies for a job with us. Read it together with our rental terms.
What data we collect
Data you give us
- Account details: your name, phone number, email address, password, address and, if you add one, a profile photo.
- Identity and driving licence: a copy of your driving licence and the details on it, so we can confirm who you are and that you may drive. If we can’t confirm your licence online, we may ask you to come to our office.
- Payment details: the payment method you use and your payment history. Card and bank payments are made through our payment provider, which handles your card details.
- Photos of the car: the photos of the car’s four sides and interior that you take in the app before and after a rental, and any photos of damage you send us.
- Messages: what you tell us by phone, email, chat or a form, including accident and damage reports.
- Business details: if you rent for a company, its name and invoicing details.
Data we collect when you rent a car
- Booking data: the car, the pick-up and return zones and times, whether you travel abroad, the protection package you choose, extensions, cancellations and invoices.
- Data from the car: every Sigvi car has a system that records and sends us its location, fuel level, speed, braking, acceleration, whether it is locked and other data about the car and how it is used. We collect it during your rental, and use it to calculate your invoice, find and protect the car, and check how it was driven.
- Charges after the rental: fuel, cleaning, damage, fines from the authorities and other fees under the rental terms.
Data we collect when you use our website and app
- Device and usage data: your IP address, device and browser type, language, the pages you visit, how often you visit and what you click.
- Cookies and similar technologies: some are needed for the site to work; the rest (statistics and marketing) are used only if you agree. See Cookies.
Data we get from others
- Authorities: traffic and parking fines, and notices about a car you rented.
- Insurers: claim numbers and decisions after an accident, including from the insurer of a driver who damaged your own car when you take a replacement car from us.
- Your employer: your name and contact details, if your company rents with us for you.
- Payment providers: confirmation that a payment went through or failed.
Why we use your data
The law lets us use personal data only on a legal basis. The ones we rely on are:
- Contract: we need the data to give you the service you asked for (GDPR article 6(1)(b)). Without it we can’t rent you a car.
- Legal obligation: the law requires it, for example accounting and tax rules, or a request from the police (article 6(1)(c)).
- Legitimate interests: we have a fair reason that doesn’t override your rights, which we explain below (article 6(1)(f)). You can object at any time (see Your rights).
- Consent: you said yes, for example to marketing emails or statistics cookies (article 6(1)(a)). You can withdraw it at any time; this doesn’t affect what we did before.
To create your account and rent you a car
We use your account details, driving licence, booking data and data from the car to open your account, confirm who you are, let you book, unlock and return a car, and send you confirmations and service messages.
Legal basis: contract. Checking your identity and licence is also in our legitimate interest, so that no one can rent a car in someone else’s name.
To charge you correctly
We use your booking data, the data from the car (time, distance, fuel) and your payment details to take payment, issue invoices and keep our accounts.
Legal basis: contract, and our legal obligations under accounting and tax laws.
To keep cars and people safe
We use the data from the car to find a car that is lost, stolen or not returned on time, and to check how it was driven. If the car records speeding of more than 30 km/h over the limit, we warn you, and repeated speeding can lead to a fine, or, at more than 50 km/h over the limit, to the rental being ended, as the rental terms set out. If a car isn’t returned or paid for, we may block its ignition and collect it.
Legal basis: our legitimate interest in protecting our cars, the people in them and other road users, and in making sure the rental terms are kept; and contract.
To deal with damage, accidents and fines
We use the photos you take, the data from the car, your messages and your booking data to work out what happened and when, settle claims with insurers, and pass fines on to the driver who received them. When the authorities ask who was driving a car at a given time, we tell them.
Legal basis: contract; our legal obligations; and our legitimate interest in recovering our losses.
To give you a replacement car after an accident
If your own car was damaged by someone else, we use the accident details and the claim number you give us to arrange a replacement car and deal with the at-fault driver’s insurer.
Legal basis: contract.
To help you
We use your messages, account and booking data to answer your questions, solve problems, handle complaints and improve our support. We record a phone call only after telling you at the start of it.
Legal basis: contract, and our legitimate interest in giving good support and keeping a record of what was agreed.
To tell you about offers
We send newsletters and offers by email or text message if you agreed to receive them. If you are already a customer, we may email you about our own similar services, as the law allows. Every message has a link to unsubscribe, and you can also write to us. Saying no never affects your rentals.
Legal basis: consent; for existing customers, our legitimate interest in telling them about similar services.
To improve our website, app and service
We use device and usage data to see how our website and app are used, fix problems and make them better and, if you accept marketing cookies, to show you our ads on other sites and measure whether they work. Where we can, we use data that no longer identifies you.
Legal basis: consent for statistics and marketing cookies; our legitimate interest in keeping the site and app secure and working.
To protect our rights and meet the law
If a claim or dispute arises, or a debt isn’t paid, we use the data we need to establish, exercise or defend our rights, including through lawyers, courts and debt collection agencies. We also answer lawful requests from the police, courts and other authorities.
Legal basis: our legitimate interest in protecting our rights; our legal obligations.
If you offer us your car
When you ask for an offer, we use your name, phone number, email address and your car’s details to contact you, make you an offer and, if you agree, prepare a contract.
Legal basis: steps taken at your request before entering into a contract.
If you apply for a job
We use your CV, cover letter and anything else you send us to consider you for the role. We keep your application after the role is filled only if you agree that we may contact you about future roles.
Legal basis: steps taken at your request before entering into a contract; consent for keeping your application for future roles.
If you subscribe to our newsletter
We use your email address to send you the newsletter until you unsubscribe.
Legal basis: consent.
We use your data for a new purpose only if it is compatible with the one we collected it for, or if we ask you first.
Automated decisions
The system in the car flags speeding and some other events automatically. A person at Sigvi then looks at each case and decides whether to warn you, charge a fine or end the rental. We don’t make decisions with legal or similarly significant effects on you by automated means alone. If you disagree with a decision, tell us and a person will review it.
Who we share your data with
We share only what each recipient needs, and we never sell your data.
- Service providers who work for us under a contract and only on our instructions: payment processing, hosting and cloud storage, the system in our cars, customer support and task management software, email and text messaging, analytics and advertising tools, and accounting and legal services.
- The owner of the car, when the car you rent belongs to one of our partners: your name, contact details and booking details, when needed to deal with damage, a fine or a claim involving their car.
- Insurers and claims handlers, to settle claims after damage or an accident, including the at-fault driver’s insurer when you take a replacement car from us.
- Authorities: the police and other public bodies that issue fines or investigate, courts and regulators, when the law requires it or to protect our rights.
- Your employer, when your company rents with us for you: the details of rentals made on its account.
- Debt collection agencies and lawyers, when an amount owed under the rental terms isn’t paid.
- SIGVI POLAND sp. z o.o., our company in Poland, for rentals and support there.
- A buyer or investor, if all or part of our business is sold or reorganised, under the same protection as in this policy.
Our main service providers
| What they do | Provider |
|---|---|
| Card and bank payments | Montonio |
| Customer support requests | Zendesk |
| Internal task management | Atlassian (Jira) |
| Car owner offers and contracts | Pipedrive |
| Cookie consent | Cookiebot |
Write to us for the full, current list of providers who process your data.
Transfers outside the EU
We keep your data in the European Economic Area (EEA) wherever we can. Some of our providers, or their own suppliers, are based in or can access data from other countries, such as the United States. We transfer data outside the EEA only when the European Commission has decided that the country protects data adequately (for example under the EU-US Data Privacy Framework), or under the European Commission’s standard contractual clauses, with extra safeguards where needed. Write to us for a copy of the safeguards that apply.
How long we keep your data
- Your account and rentals: while you use Sigvi and for 5 years after your last use of it.
- Accounting documents, such as invoices and payments: as long as accounting and tax laws require, generally 10 years in Lithuania.
- Data needed for a claim or dispute: until it is resolved, and for as long as the law allows a claim to be brought, if that is longer.
- Data from the car and photos of the car: as long as needed to bill the rental and settle any damage, fine or claim arising from it.
- Marketing: until you unsubscribe or withdraw your consent.
- Car owner offers: while we are in talks; if no contract follows, until the data is no longer needed for that offer.
- Job applications: until the role is filled, or longer only if you agreed we may contact you about future roles.
- Cookies: for the periods shown in the cookie settings.
When a period ends, we delete the data or make it anonymous so it can no longer be linked to you. Deleting the app doesn’t delete your account; to close it, write to us. Our payment providers keep payment data for the periods their own rules set.
How we keep your data safe
We protect your data with technical and organisational measures against loss, misuse and unauthorised access or change. Only people at Sigvi who need your data for their work can see it, and our providers must protect it under their contracts with us. No system is completely secure, so please keep your password to yourself, don’t use it anywhere else, and tell us straight away if you think someone else knows it.
Your rights
Under the GDPR you have the right to:
- know how we use your data, which is what this policy is for;
- access your data and get a copy of it;
- correct data that is wrong or incomplete;
- delete your data (“the right to be forgotten”), unless we must keep it, for example for accounting or an open claim;
- restrict how we use your data, for example while we check a complaint;
- take your data with you in a common format, or have us send it to someone else (data portability);
- object to our use of your data based on legitimate interests, and to direct marketing at any time;
- withdraw your consent at any time, where we rely on it;
- ask a person to review a decision and challenge it (see Automated decisions).
To use any of these rights, write to info@sigvi.com. We may ask you to confirm who you are first. We answer within one month; if a request is complex, we may need up to two more months, and we’ll tell you why. Using your rights is free.
Complaints
If you think we use your data unlawfully, please tell us first: most things can be fixed quickly. You also have the right to complain to a data protection authority, in particular in the EU country where you live or work, or where you think the problem happened:
- Lithuania: State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija), L. Sapiegos g. 17, LT-10312 Vilnius, ada@ada.lt, +370 5 271 2804, vdai.lrv.lt.
- Poland: President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl.
Cookies
Cookies are small files that a website stores in your browser. We use:
- necessary cookies, which make the site work, remember your cookie choice and keep the site secure. These don’t need your consent;
- statistics cookies, which show us how the site is used, only if you agree;
- marketing cookies, which let us and our advertising partners show you relevant ads and measure them, only if you agree.
When you first visit, the cookie banner asks you to choose. You can change or withdraw your choice at any time in the cookie settings, or delete cookies in your browser. Refusing statistics and marketing cookies doesn’t stop you using the site.
Other websites
Our website links to other sites and services, such as our Facebook and LinkedIn pages and our payment provider. They have their own privacy policies, and we aren’t responsible for how they use your data.
Children
Our rental service is for drivers with a valid driving licence. We don’t knowingly collect data about children.
Changes to this policy
We update this policy when our service or the law changes. The date at the top shows when it was last changed. If a change significantly affects how we use your data, we’ll tell you by email or in the app before it applies.
Contact us
UAB Sigvi
Company code 306267550
Oršos g. 6-22, LT-09300 Vilnius, Lithuania
Phone +370 660 99 911
Email info@sigvi.com (please write “Privacy” in the subject line)