Privacy policy
Last updated: 21 October 2026
This privacy policy explains how we process your personal data when you use the website ngrent.lt, send inquiries and rent vehicles. We process data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and the laws of the Republic of Lithuania.
1. Data controller
The data controller is AUTO MOTO NG, UAB (VAT code LT100004780916), registered address Dubijos g. 30a, Siauliai, e-mail info@nggroup.lt, phone 37068504885.
2. What data we process and why
| Purpose | Data | Legal basis | Retention period |
|---|---|---|---|
| Replying to rental inquiries (inquiry form, e-mail, phone) | Name, surname, e-mail address, phone number, selected car, rental dates and location, message content | Steps at your request prior to entering into a contract (GDPR Art. 6(1)(b)) | 1 year from the last correspondence if no contract is concluded |
| Concluding and performing the rental contract | Name, surname, personal code or date of birth, identity document and driving licence details, address, contact details, signature, rental period, vehicle handover and return details, payment and deposit details | Performance of a contract (GDPR Art. 6(1)(b)) | For the term of the contract and 10 years after it ends |
| Accounting and taxes | Invoice and payment details | Legal obligation (GDPR Art. 6(1)(c)) | 10 years under the Law on Accounting of the Republic of Lithuania |
| Handling fines, damage, insurance events and disputes | Contract details, related documents and correspondence | Legitimate interest in defending our rights (GDPR Art. 6(1)(f)) and legal obligation | Until the matter is closed and the limitation period expires |
| Website operation and traffic statistics | Cookie data, IP address, browser and device information | Strictly necessary cookies – legitimate interest; analytics – your consent (GDPR Art. 6(1)(a)) | As set out in the cookie policy |
The data required to conclude a rental contract is mandatory – without it we cannot conclude the contract. Providing any other data is voluntary.
3. Who we share data with
We share data only to the extent necessary for the purposes above:
- IT, website maintenance, server and e-mail service providers (data processors);
- payment service providers and banks;
- insurance companies when an insured event occurs;
- public authorities (e.g. the police, the tax authority, courts) when required by law, including providing driver details in connection with traffic offences;
- debt collection companies and lawyers when contractual obligations are not fulfilled;
- Google Ireland Limited – for traffic statistics, if you have given your consent.
Where data is transferred outside the European Economic Area (e.g. for Google services), this is done with the safeguards provided by the GDPR – a European Commission adequacy decision (EU–U.S. Data Privacy Framework) or standard contractual clauses.
4. How we protect data
We apply appropriate organisational and technical measures: we restrict access to data and use encrypted connections (HTTPS) and password-protected systems. Data is accessible only to employees who need it for their work.
5. Your rights
You have the right to:
- access your personal data;
- have inaccurate data rectified;
- have data erased (“right to be forgotten”) where there is no longer a basis for processing it;
- restrict the processing of data;
- data portability;
- object to processing based on legitimate interest;
- withdraw your consent at any time (this does not affect processing carried out before withdrawal).
You can submit a request by e-mail to info@nggroup.lt. We will reply within 1 month at the latest. Before handling a request, we may ask you to confirm your identity.
If you believe your data is processed unlawfully, you have the right to lodge a complaint with the State Data Protection Inspectorate of Lithuania (L. Sapiegos g. 17, 10312 Vilnius, vdai.lrv.lt).
6. Cookies
Information about the cookies used on the website is provided in the cookie policy.
7. Changes to this policy
We may update this privacy policy. The current version is always published on this page.