carOne Privacy Policy

Last updated: 09-Jul-2025

1. INTRODUCTION

This Privacy Policy describes how we, carOne, UAB, process your personal data when you use our App (as defined in our carOne Terms of Use).

We respect your privacy, and protecting your information is our top priority. We want you to be informed and familiarised with privacy protection when using our App, so please read this Privacy Policy carefully before using the App. Together with our carOne Terms of Use, this Privacy Policy sets out our position and actions regarding your personal data and how we collect, process and treat them, as well as your rights related to the protection of your personal data.

Any use of “we”, “our” or “us” in this Privacy Policy and our App are references to carOne, UAB. Any use of “you” and “your” are references to each natural person who uses our App.

2. THE CONTROLLER OF YOUR PERSONAL DATA

The controller of your personal data is carOne, UAB, company code 306657511, with our registered office at Aukštaičių str. 7, LT-11341 Vilnius, Lithuania. You can contact us by e-mail at info@carone.app.

3. BASIC CONCEPTS

“Terms of Use” means the terms of use for the services or products provided, which establish our rights and obligations and yours when using these services or products, are published on our website at www.carone.app/terms.

“Data protection legislation” means the General Data Protection Regulation ((EU) 2016/679; GDPR) and all other personal data protection legislation, including, but not limited to, national and European Union implementing legislation, regulatory acts and secondary legislation, as amended or updated.

“Product suppliers” means any natural or legal person who directly or indirectly helps us develop, provide, administer or support the products or services we offer, including, but not limited to, insurance companies, reinsurers, insurance brokers, administrators, etc.

“Personal data” means any information relating to an identified or identifiable natural person, which we have received from you or third parties or have collected ourselves while providing you with a service or product.

“IP address” means your Internet Protocol address, i.e. the code that every device connected to the Internet has to identify that device and to ensure the proper functioning and security of services.

“Data subjects” means identified or identifiable natural persons using our App, including, but not limited to, our customers, potential customers, website or app visitors and other individuals.

Other concepts not defined in this Privacy Policy shall have the meaning as set forth in the Terms of Use or applicable data protection legislation.

3. WHAT INFORMATION DO WE COLLECT AND WHERE DO WE COLLECT IT FROM?

In order to properly provide our services, fulfil our legal obligations, and continuously improve the user experience, we may obtain your personal data directly from you or from third parties, or collect them ourselves.

3.1. Information that we obtain from you. We may obtain your personal data from you when you use our App or related services, when you enable us to prepare and submit enquiries to third parties regarding your vehicle data or to get an insurance quote or purchase insurance, or when you communicate with us. This includes (but is not limited to) the information you enter during registration by answering specific questions, as well as the information you provide when you give us feedback, participate in surveys, use third-party services through our App, upload an ad to sell a car, report a problem, and in other cases.

The personal data you provide to us may include:

your contact information and identification data, such as your name and surname, address, e-mail address and telephone number;
your vehicle registration number, vehicle identification number (VIN) and other vehicle-related information;
the vehicles you own/operate and information about these vehicles, including, but not limited to, vehicle inspection data (date and place of the last vehicle inspection, time remaining until the next vehicle inspection, etc.) and your vehicle specifications (VIN, vehicle registration plates, model, year, registration date, colour, number of seats, etc.);
information about the date of issue, expiration date and registration number of your driving licence;
data related to your payments;
your national identification number and electronic signature;
your communications and other interactions with us, including messages, uploaded documents and other relevant content that you provide on the App.

3.2. Information that we obtain from third parties. In certain cases, we may obtain information about you from third parties so that we can ensure more accurate, higher quality and more relevant service provision or comply with applicable legislative requirements.

If you decide to provide us with certain additional information (such as your national identification number or other identity number used on a national level), we will use this to obtain certain information relating to you and the vehicle you drive from available public or private registers or other lawful sources.

These data may be obtained from sources including, but not limited to:

state or national registers (e.g., vehicle and driver registers, property, ownership or rights registers, etc.);
databases and/or registers administered by healthcare institutions;
insurance companies, insurance brokers, reinsurers, claims administration companies;
vehicle manufacturers and their authorised partners (e.g., official dealerships, authorised maintenance and repair centres, etc.);
other data providers who lawfully provide data in accordance with legislative requirements.

The personal data we obtain from third parties may include:

information about the vehicles you own/operate (e.g., vehicle inspection data (date and place of the last vehicle inspection, time remaining until the next vehicle inspection, etc.) and your vehicle specifications (vehicle identification number (VIN), vehicle registration plates, model, year, registration date, colour, number of seats, etc.));
the date of issue, expiration date and registration number of your driving licence;
unique vehicle owner declaration code details, including, but not limited to, date and time of issue, status;
personal data of the person who acquired ownership of the vehicle, i.e. name, surname;
the validity period of the driver’s medical certificate and personal identification data, such as name and surname (required for personal identification);
data related to vehicle insurance, including, but not limited to, insurance claim history and validity periods.

Your national identification number is stored in encrypted form and no one can access it. Using your personal information, we will perform automated updates to your basic information in order to keep your data up to date.

3.3. Information that we collect automatically. When you use our services through the App, we may collect certain information about you automatically. We do this to ensure the proper technical functioning of the services, improve the user experience, and prevent security incidents.

This information may be collected using various technologies, including, but not limited to, cookies, system logs and other tools, as described in Section 8 of this Privacy Policy, “Cookies”.

The data collected may include the following categories:

technical information about your device and browser, including the IP address used to connect your device to the Internet, your login information, browser type and version, browser extension types and versions, operating system and platform, device model, and other information collected using cookies as described in Section 8 of this Privacy Policy;
information about your geographic location, including your location data, to determine which service locations (e.g., carwash, car park) are closest to you. You can disable our access to your location data at any time through your device or browser settings;
login details and user interaction data, including login time, session duration, authentication status, actions in the application or website (e.g., clicks, searches, browsing history), services or products viewed, sequence of pages browsed, navigation methods, response time, scrolling speed, download errors;
communication metadata, including information about your interactions with us (e.g., customer service calls or messaging via the App or online),
a screenshot of the user’s device when you initiate an enquiry through the App. In the event that personal data such as your national identification number or payment card details are visible in the screenshot, these data are immediately pseudonymised using automatic technical means (e.g., by masking or hiding data fragments).

4. WHAT ARE YOUR PERSONAL DATA USED FOR AND WHAT ARE THE RELEVANT LEGAL BASES?

We make sure we have appropriate legal bases for collecting, using and sharing your personal data. All of the personal data available to us are processed for the purposes set out below.

4.1. To provide you with the services offered through our App

We process your personal data (including, but not limited to, your registration data, data related to your permit and vehicle, payment-related data, your actions in the App) in order to fulfil our obligations to provide services as described in the Terms of Use. These obligations include, inter alia, providing insurance quotes and other products/services, preparing and submitting enquiries to third parties for your vehicle data, informing you of necessary changes or updates to our App, administering payments through the App, providing you with services, including those administered by third parties, on our App (both instant services (e.g., fuel, charging, parking, carwash, etc.) and long-term services (e.g., car insurance, roadside assistance, uploading car sales ads, etc.).

Therefore, we may use your contact details in some cases to provide service-related notifications and messages via the App, e-mail, text messages, telephone calls or push notifications. This includes providing account information, informing you about the creation of an account in the App, informing you about order confirmations, payments, reminders of unfinished orders, and alerts of important information or changes related to a service ordered, and informing you about security or other service-related issues associated with your account or orders. These messages are necessary for the proper provision of our services and are not considered advertising messages.

The legal basis for the processing of personal data for this purpose is the performance of a contract with you (GDPR Article 6(1)(b)) or our legitimate interest in providing you with important service-related information (GDPR Article 6(1)(f)).

4.2. To obtain your data from third parties and display it in the App

If you give us permission, we may use your national identification number to obtain certain data related to you or the vehicle you drive on your behalf from public registers, databases or other lawful sources of information. We will display these data on the App in your account so that you can more effectively use the services offered, submit enquiries or complete orders.

With your permission, we may periodically update the data to ensure that they are accurate and complete.

The legal basis for the processing of personal data for this purpose is your consent (GDPR Article 6(1)(a), (GDPR Article 9(2)(a))). Before collecting data from third parties, we will ask for your consent (permission). You may choose not to give your consent, in which case we will not be able to request data from third parties. You can withdraw your consent at any time, in which case we will stop collecting and processing such data.

4.3. To provide you with an insurance quote

In certain cases, we may transfer your personal data to insurance companies or their authorised representatives (e.g., insurance brokers) so that they, based on the data received, can assess insurance risk, calculate an individual insurance premium, form an insurance quote and provide it to you through our App.

For this purpose, data – such as your municipality of registration, driving experience, vehicle registration plates, vehicle technical parameters, details of previous collisions or other damages, or other relevant information necessary for calculating the premium in accordance with the risk assessment rules applied by the insurer – may be processed.

The data will only be transferred if you express your explicit desire to receive a quote and provide your consent thereto in the App (GDPR Article 6(1)(a)).

4.4. To manage our communication with you regarding your enquiries and complaints

We process your personal data (e.g., your communications and other interactions with us, including messages, uploaded documents and other relevant content that you provide on the App, as well as other information related to our communication) in order to communicate and manage our relationship with you, i.e., to verify your instructions to us, respond to your enquiries or complaints, and ensure that your requests for the exercise of your rights are complied with.

The legal basis for the processing of personal data for this purpose is the fulfilment of a legal obligation that we are subject to under consumer protection legislation (GDPR Article 6(1)(c)) or our legitimate interest in processing your enquiries and complaints (GDPR Article 6(1)(f)).

4.5. To analyse, evaluate and improve our App and the services we provide to you

We process your personal data (e.g., technical information collected from your use of the App, services that you have viewed or searched for, and other actions taken on the App) to ensure quality control and to ensure that the content of our App is presented in the most effective way for you and your device. We also use your personal data for the purposes of analysing, training and troubleshooting. Your personal data are also necessary for us to improve our processes, products and services.

The legal basis for the processing of personal data for this purpose is our legitimate interest in improving the functioning of our App and the services provided to you through our App (GDPR Article 6(1)(f)).

4.6. To send you relevant messages and newsletters and to inform you about third-party services provided on our App

If you have given us your consent or if the organisation you represent is our customer, we may use personal data such as your registration details, e-mail address, telephone number and order history to provide you with relevant information and news that may be of interest to you about our services and/or the services of our group companies or partners that can use through our App.

The legal basis for the processing of personal data for this purpose is your consent (GDPR Article 6(1)(a)).

We may send you marketing communications via the App, e-mail, text messages or push notifications. We may also ask for your feedback about our activities and services.

We may use your personal data to personalise marketing communications about our services and/or to improve your experience on the App, so that they are more relevant and interesting to you (where permitted by law). This may include analysing how you use our services, with the sole aim of improving the overall experience.

When sending newsletters, we may collect recipient data (whether messages were opened, links were clicked, etc.) in order to offer more relevant and personalised content in the newsletters received.

If you have ordered our services and in cases where it is permitted by national law, we will assume that you want us to contact you via push notifications, e-mail or text message with information about similar services and offers. The legal basis for the processing of personal data for this purpose is our legitimate interest in informing you about similar services that we offer (GDPR Article 6(1)(f)). Where we are required by national law to obtain your consent (GDPR Article 6(1)(a)) to send you promotional communications, we will do so in advance.

We may share your contact details with data processors to facilitate communication for marketing purposes or quality assessment. Your information may also be shared with our group companies and/or partners for their offers and communications for marketing purposes, provided that such data sharing complies with legal requirements.

You can withdraw or reject your consent at any time by clicking the “unsubscribe” link in the newsletter, by changing the App settings, or by e-mailing us at info@carone.app. You can also adjust your marketing preferences. If you withdraw your consent, we will try to stop the newsletters immediately, but this may take some time. You may receive another notification after you withdraw your consent for planned news campaigns.

If you withdraw your consent, we do not necessarily have to erase your data automatically or provide data processing details. If necessary, please request that these actions be performed separately.

4.7. To ensure that our App is safe and secure and to prevent fraud

We will process your personal data (e.g., your registration data, payment-related data, technical information collected from your use of the App, services you have viewed or searched for, and other actions on the App) to ensure the security of our App and to prevent fraud, including money laundering.

The legal basis for the processing of personal data for this purpose is the fulfilment of a legal obligation that we are subject to under anti-money laundering legislation (GDPR Article 6(1)(c)) or our legitimate interest in ensuring the security of our App (GDPR Article 6(1)(f)).

4.8. To establish, exercise or defend legal claims

If we become a party to legal proceedings to which you are the subject, or if we are required by legislation to collect or provide information about you, we will process the personal data of yours that are necessary for the establishment, exercise or defence of legal claims.

The legal basis for the processing of personal data for this purpose is our legitimate interest in protecting our legal rights (GDPR Article 6(1)(f)).

In the cases described above, where the legal basis for processing your personal data is the performance of a contract or compliance with a legal obligation, the provision of your personal data is mandatory. If you do not provide these data, we may not be able to provide you with the App services or you may not be able to use all of the App’s features.

You can rest assured that we will never sell your information to third parties.

5. WHO DO WE SHARE YOUR DATA WITH?

As described in our Terms of Use, we may need to disclose your personal data to third parties to make it easier to provide you with the App services and insurance quotes, to buy and manage insurance, and to provide any additional services you request while using the App.

We may share your data with:

state or national registers (e.g., vehicle and driver registers, property, ownership or rights registers, etc.);
insurance companies, insurance brokers, reinsurers, claims administration companies, etc. (e.g., Aon Baltic);
other companies in our group, as well as UAB cV Group and Carvertical OU, for the purposes of business administration and App development;
third-party service providers to whom you have chosen to make a payment using our App (e.g., parking service providers, filling stations, carwashes, etc.);
third parties that provide us with IT tools and services as well as electronic communications services, such as our IT and hosting service providers, app development service providers, etc.;
third-party payment service providers when you make payments using our App (e.g., Adyen);
attorneys, notaries, judicial officers, data protection officers, auditors, and tax, business, personnel management and other consultants;
courts, law enforcement institutions and other state institutions;
potential business buyers or investors, should we decide to sell the business or part of it or implement structural business changes.

Your personal data will only be disclosed to third parties if they agree to keep your information confidential, and they will only be used for the specific purpose for which we provide them. Please note that when you purchase and use third-party services through our App, you will be subject to the terms of use and privacy policy of the relevant service provider (which will differ from ours). In addition, our App may contain links to third-party websites. If you click on a link to any of these websites, please note that these websites have their own privacy policies, and that we do not accept any responsibility for these policies. We encourage you to carefully read these third-party terms of use and privacy policies.

6. TRANSFER OF DATA TO ANOTHER COUNTRY

Your personal data may be stored and processed outside the European Economic Area (EEA), in countries where different data protection rules than ours may apply. However, we will ensure that your personal data are only transferred outside the EEA when appropriate safeguards are in place. If you would like more information about these safeguards, you should contact us using the contact details provided in this Privacy Policy.

7. DATA STORAGE AND ERASURE

We make every effort to keep your data safe, and have set high levels of security and confidentiality. We will store your personal data only for as long as is necessary to fulfil the corresponding purposes set out in this Privacy Policy and to comply with our legal and regulatory obligations, after which they will be securely destroyed.

If we process your personal data based on your consent, we will store these data until you withdraw your consent. The data of yours that are processed for the purposes described in this Privacy Policy will be stored for a maximum of 10 years from the end of our contractual relationship.

You can find more detailed information about the data storage periods for the various types of services offered through the App by contacting us using the contact details provided in this Privacy Policy. Please note that we may store your personal data for longer than the periods initially set, in cases where this is necessary for the establishment, exercise or defence of legal claims or where this is required by legislation.

If you delete your account, we may continue to use your anonymised data (that do not identify you), which is aggregated with the anonymised data of other users. We use these aggregated data for the purposes of data analysis, profiling and research.

8. COOKIES

When you visit the website, cookies and other similar technologies are used to ensure the quality of the content and functionality provided. Cookies are small text files of information stored in your web browser or computer that help us recognise you as a website visitor, save your website visit history and tailor personal content to you accordingly, ensure faster and more convenient use of the website, analyse your behaviour, and thus improve the services provided.

The table below provides a detailed list of the cookies used on our website, including their functions and expiration dates.

Essential cookies help ensure the proper presentation and functionality of the website. These cookies are necessary for the proper use of the website, the basis of which is the proper performance of a contract when you visit the website, and for us to ensure the quality and security of your visit.
Functional cookies allow the website to remember your preferences, such as language, searches, previously viewed information and website login details, thus allowing for more efficient use of the website. These cookies are not essential, but they improve the quality of the website experience considerably. The basis for processing data collected with these cookies is your consent.
Analytical cookies help us count visitors to the website and monitor how you use the website, i.e. what services you look for, what accounts you visit most often, how long you visit the website. The basis for processing data collected with these cookies is your consent.
Advertising cookies help optimise and improve the effectiveness of the website’s advertising and communication, and ensure that the material presented is interesting and relevant to you. We use our own and third-party cookies to provide personalised advertising based on your browsing activity. The basis for processing data collected with these cookies is your consent.

More detailed information about the cookies used was last generated on 07-Jul-2025, according to the “Cookie script”:

Domain: .carone.app

Cookie name: _ga_NH2V9PB3F5
Purpose: This cookie is used to save the user’s session status in Google Analytics. This makes it possible to track how long users are active on the website and how they browse different pages during a single session.
Expiration period: 1 year 1 month.
Type of cookie: Functional / analytical.

Domain: .carone.app

Cookie name: _ga
Purpose: This cookie assigns a unique ID to each visitor to distinguish users. It helps analyze user behaviour, visit flows, session duration and campaign results on the website.
Expiration period: 1 year 1 month.
Type of cookie: Functional / analytical.

Domain: .carone.app

Cookie name: _fbp
Purpose: This cookie is used by Meta to display personalised ads, including real-time ad purchases from third-party advertisers.
Expiration period: 2 years 4 months.
Type of cookie: Advertising.

Domain: .carone.app

Cookie name: locale
Purpose: The cookie remembers the user’s language and location settings so that they can be restored the next time they log in to the website.
Expiration period: Session.
Type of cookie: Advertising.

9. YOUR RIGHTS

We are committed to ensuring the rights granted to natural persons by data protection legislation. Please keep in mind that these rights are not always absolute and may be subject to exceptions.

To exercise your rights, please contact us using the contact details provided in this Privacy Policy.

Right to be informed: You have the right to receive clear, transparent and easily understandable information about your rights and how we use your personal data. This is why we are providing you with the information specified in this Privacy Policy.
Right of access: You have the right to access the personal data of yours that is available to us.
Right to rectification: You have the right to ask us (and third parties whom we transfer your personal data to) to rectify your personal data if they becomes inaccurate.
Right to erasure: You have the right to ask us to erase your personal data. If personal data are erased at your request, we will only retain copies of the information that is necessary to protect our legitimate interests or those of third parties, to comply with the directions of public authorities, to resolve disputes, to eliminate problems, or to perform any contract you have concluded with us.
Right to restriction of processing: You have the right to restrict the processing of your personal data in certain circumstances, including cases where we no longer need your personal data but you want us to store them to ensure that they remain available to you for legal requirements.
Right to data portability: In certain circumstances, you have the right to obtain and reuse your personal data for your own purposes across different services.
Right to object: You have the right to object at any time to the processing of personal data relating to you based on our legitimate interests. If we can demonstrate that we have compelling legitimate grounds to process your personal data that override your interests, or if we need your personal data for the establishment, exercise or defence of legal claims, we may continue to process them. Otherwise, we must stop using the relevant personal data.
Right to withdraw consent: If you have given consent to the collection, processing and transfer of your personal data for a specific purpose, you have the right to withdraw your consent to that specific processing at any time. You can withdraw your consent by e-mailing us at info@carone.app.

10. AMENDMENTS TO THIS PRIVACY POLICY

In the future, we may amend this Privacy Policy to reflect changes in the functionality of the App or in the processing of your personal data. Any amendments to this Privacy Policy will be posted here; if the amendments are substantial or if we deem it appropriate, we will also notify you of them by push notification or by other means that we see fit. Please check back often for updates or changes.

11. COMPLAINTS

If you have any complaints regarding the processing of your personal data or other related issues, please e-mail us at info@carone.app. We would be happy to respond to any questions or complaints you may have regarding the App and our data processing activities.

If you have any objections to how we process your personal data, you always have the right to lodge a complaint with your national data protection authority. In Lithuania, this is the State Data Protection Inspectorate. You can find the contact details for the State Data Protection Inspectorate at https://vdai.lrv.lt/.