Last Updated: 2025.08.10
1. WHAT DOES THIS PRIVACY POLICY MEAN?
In this Privacy Policy (the Privacy Policy) we will provide information on how SpotGo, UAB, a limited liability company registered and acting under the laws of the Republic of Lithuania, company number 306377370, with its registered domicile at Mokyklos str. 86-60, 08414 Vilnius, Lithuania (the Service Provider), processes your personal data when providing the SpotGo Services (the SpotGo Services).The Service Provider can be contacted via email support@spotgo.eu.The capitalised terms used in this Privacy Policy have the same meaning as defined in the General Terms and Conditions.
2. WHAT PERSONAL DATA DO WE PROCESS AND FOR WHAT PURPOSES?
2.1. Accounts and SpotGo Services
- Purpose: for creating and managing the Accounts and providing SpotGo Services to the Customers.
- Personal data processed: first name, last name of the Customer and the User; Account name and password; Customer’s phone number, email address, address, VAT number/tax ID.
- Legal basis: legitimate interest to provide SpotGo Services (Art. 6(1)(f) GDPR) when processing personal data of the Users representing the Customers who are legal entities; or performance of a contract and taking steps at the request of the data subject prior to entering into a contract (Art. 6(1)(b) GDPR) when processing personal data of the Customers who are natural persons.
- Storage period: twenty-four (24) months of the last activity within the Account. The Account may be closed by the Customer at any time. The Account may also be closed in accordance with the General Terms and Conditions.
2.2. Communication, customer support
- Purpose: for communicating with the Users, customer support.
- Personal data processed: first name, last name, phone number, email address.
- Legal basis: taking steps at the request of the data subject prior to entering into a contract (Art. 6(1)(b) GDPR); legitimate interest to provide SpotGo Services and/or ensure quality of SpotGo Services (Art. 6(1)(f) GDPR).
- Storage period: one year after the enquiry is solved.
2.3. Newsletters, proposals
- Purpose: for direct marketing (to send newsletters/ invitations to events, to offer similar goods/ services).
- Personal data processed: first name, last name, phone number, email address.
- Legal basis: consent (Art. 6(1)(a) GDPR) or legitimate interest to offer similar services to the Customers (Art. 6(1)(f) GDPR).
- Storage period: two years after the consent or as long as the Customer holds an Account.
- Personal data may be transferred to newsletter sending solutions.
2.4. Social media
- Purpose: for managing social media accounts
- Personal data processed: first name, last name, unique ID, IP address, hardware information.
- Legal basis: consent (Art. 6(1)(a) GDPR); legitimate interest to communicate with clients and potential clients (Art. 6(1)(f) GDPR).
- Storage period: for as long as the person is a follower of our social media account.
- Information communicated to us when visiting our social media sites (including notifications, use of “Like” and “Follow” buttons or other communication) will be controlled by us jointly with social media managers as joint controllers.
- Currently, the Service Provider operates the following social media accounts:
- https://www.linkedin.com/company/spotgoeu/ on Linkedin; their privacy policy is available at https://www.linkedin.com/legal/privacy-policy
2.5. Cookies
- 2.5.1. A cookie is information that a web server sends to your web browser and that is stored in your browser. This information is sent to the web server each time your browser requests to open the website or app of the SpotGo System from the server and it distinguishes your computer or other device from other devices. Cookies therefore make the SpotGo System more user-friendly and allow us to improve it.
- 2.5.2. Strictly necessary cookies are used automatically, without your explicit consent, when you take certain actions (e.g., choose the language of the SpotGo System). Other cookies (e.g., analytical, advertising cookies) are used only with your consent.
- 2.5.3. Cookies are used to process your IP address, browsing information such as pages visited, time spent, etc.
- 2.5.4. A list of the cookies used by the SpotGo System and more detailed information about them can be found in the cookie management tool installed on the website by selecting “Settings”.
- 2.5.5. If you do not want your personal data to be processed by cookies, you can do so in the cookie management tool installed on the website, or you can change the settings of your web browser so that cookies are not accepted, or delete the saved cookies. If you delete the necessary cookies and prevent them from being used in your web browser, some of the functions of the SpotGo System will not function properly.
- 2.5.6. You can change the cookie settings in your browser at any time. All browsers have the option to delete cookies, please refer to your browser settings for details.
3. WHOM CAN WE TRANSFER YOUR PERSONAL DATA TO?
- 3.1. In addition to what is stated above, we may transfer information about you to our employees, agents, legal, marketing, IT, archiving service providers or subcontractors if it is reasonably required for the purposes stated in this Privacy Policy.
- 3.2. Also, we may disclose your personal information in cases when required to do so by law or seeking to protect our rights or interests (including the case when your personal data is transferred to others for debt recovery purposes), also when intending to sell the SpotGo System or a part of the company’s business or assets, to attract investors, or to reorganize the company (and during such processes) we are asked to disclose your personal data to any (potential) buyer of the SpotGo System or such business or assets, (potential) investors, or to other participants in the reorganization.
4. HOW IS YOUR PERSONAL DATA PROCESSED?
Your personal data will be processed in accordance with the General Data Protection Regulation (the GDPR), the national data protection laws applicable in the countries the SpotGo Services are provided, and other legal requirements. When identifying personal data processing measures and during such processing, the Service Provider should implement appropriate technical and organizational measures envisaged in the laws for the protection of personal data against accidental or unlawful destruction, damage, modification, loss, disclosure, or any other kind of illegal handling and will adopt proper measures considering the risks involved in such personal data processing.
5. WHAT ARE YOUR RIGHTS?
Below, please find information about your rights associated with the processing of your personal data by the Service Provider and about how such rights may be exercised. If you want more information about your rights or want to exercise them, please contact us at the email address given in this Privacy Policy.5.1. According to the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, GDPR), the Service Provider is the data controller of the Users’ personal data needed for creating and managing the Account and providing the SpotGo Services to the Customer. The processing of personal data by the Service Provider is described in the Privacy Policy.
- You may contact us at any time to ask whether any of your personal data is being processed by us. If your personal data is stored or used by us in whatever way, you have the right of access to such data. In order for you to exercise such right, please send us a written request at the email address given in this Privacy Policy. We may ask you to confirm your identity so that your request could be granted. Please observe the principles of reasonableness and good faith when submitting such request.
- If you have given us consent to process your personal data, you may withdraw such consent at any time by sending us an email letter to the email address given in this Privacy Policy.
- You have the right to request us to correct any inaccuracies in your personal data. In that case, we may ask you to confirm the information corrected.
- You have the right to request us to erase your personal data. This right may be implemented in the cases described in Article 17 of the GDPR.
- You have the right to request us to restrict/refrain from processing your personal data.
- You have the right to data portability if processing of such data is carried out by automated means and we have obtained such data from you based on your consent or for the purpose of concluding an agreement. If you opt to exercise this right, we will transmit at your request a copy of the data submitted by you.
- You have the right to object to processing of your personal data pursuant to Article 21 of the GDPR.
6. HOW CAN YOU EXERCISE YOUR RIGHTS?
- 6.1. To enforce your rights, you may submit requests, complaints or claims to us in writing by using the contact information given in this Privacy Policy.
- 6.2. We will respond to your request, complaint or claim in writing in accordance with the applicable laws and will do our best to provide you with the necessary information within the shortest time possible but in no event later than within thirty (30) days after receiving your request.
- 6.3. If having received your request, complaint or claim we have doubts about your identity, we may ask the applicant to produce an identity document.
7. COMPLAINTS
If you believe that your rights as the data subject have been and/or may be violated, please immediately contact us at the email address given in this Privacy Policy. We assure you that having received your complaint, we will inform you within a reasonable time about the progress of the complaint investigation, and later about its outcome. If you are not satisfied with such investigation outcome, you may file a complaint with the supervisory authority – the list of the EU national data protection authorities is available at https://edpb.europa.eu/about-edpb/about-edpb/members_en.
8. RESPONSIBILITY
You are responsible for ensuring that the information provided by you is accurate, correct, and complete. You should immediately notify us by email if changes are made to the data you have submitted. Therefore, we will not be held liable for any damage resulting from your failure to provide correct or complete personal data or to give us notice of changes made to such data.
9. GOOGLE USER DATA RETENTION AND DELETION
- 9.1. We retain Google user data only as long as necessary to provide our services and fulfill the purposes outlined in this privacy policy. User data is stored only while the user maintains an active account with us. Once a user deactivates their account and no longer uses our platform, their data will be permanently deleted.
- 9.2. Users have the right to request deletion of their Google user data at any time by contacting us via email at support@spotgo.eu. Upon receiving such a request, we will permanently delete the user's data from our active systems and backups within a reasonable timeframe, in compliance with Google's data deletion policies.
10. LAST UPDATED
This Privacy Policy was last updated on 10 August 2025.
