Last updated: August 2026

This Privacy Policy explains how MB Kilun (company code 307552812, registered address Lenkų g. 3-2, Vilnius, Lithuania — “we”, “us”) collects, uses and protects personal data of visitors to kilun.lt and of our bike rental clients (“you”).

1. Who we are

Data controller: MB Kilun, company code 307552812, Lenkų g. 3-2, Vilnius, Lithuania. Contact: info@kilun.lt, +370 604 73737.

2. What personal data we collect

  • Identification data: name, ID/passport or Temporary Residence Permit (TRP) number, provided when signing a rental agreement.
  • Contact data: phone number, WhatsApp number, email address.
  • Payment data: rental payment records (we do not store full card numbers; payments are made by cash or bank transfer).
  • Location data: GPS location of the rented bicycle, collected via the GPS tracker installed on the bike, for theft prevention and fleet management.
  • Communication data: messages exchanged with us via WhatsApp, email or the website contact form.
  • Website usage data: standard technical data such as IP address and browser type, collected automatically when you visit kilun.lt.

3. Why we process your data

  • To prepare and perform the bike rental agreement (identification, invoicing, deposit handling).
  • To provide GPS tracking of rented bicycles, for theft prevention, recovery of lost/stolen bikes, and fleet management.
  • To communicate with you about your rental, service, or payment via WhatsApp, phone or email.
  • To comply with legal obligations, including responding to requests from state authorities (e.g. police, State Consumer Rights Protection Authority).
  • To improve our services and website.

We process your data based on: performance of the rental agreement with you; our legitimate interest in protecting our property (GPS tracking, theft prevention) and operating our business; and compliance with legal obligations under Lithuanian and EU law.

5. GPS tracking

All rental bicycles are equipped with a GPS tracker. By signing the rental agreement you consent to GPS location tracking of the bicycle for the duration of the rental period. Location data is used solely for fleet management, theft prevention and locating a lost or stolen bicycle, and is not shared with third parties except law enforcement where legally required.

6. Who we share data with

  • State authorities, where required by law (e.g. police, State Consumer Rights Protection Authority — Valstybinė vartotojų teisių apsaugos tarnyba).
  • Service providers who support our operations (e.g. hosting, WhatsApp Business, accounting), under confidentiality obligations.
  • We do not sell your personal data to third parties.

7. How long we keep your data

Rental agreement and payment records are kept for the duration of the rental relationship and for the period required by Lithuanian accounting and tax law thereafter. GPS location history is retained only as long as necessary for fleet management and is periodically deleted.

8. Your rights

Under the EU General Data Protection Regulation (GDPR), you have the right to access, correct, or delete your personal data, to restrict or object to processing, and to data portability. To exercise these rights, contact us at info@kilun.lt.

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the State Data Protection Inspectorate of Lithuania (Valstybinė duomenų apsaugos inspekcija), L. Sapiegos g. 17, 10312 Vilnius, ada@ada.lt, www.ada.lt.

9. Cookies

Our website may use essential cookies required for the site to function. We do not use cookies for third-party advertising.

10. Contact

For any questions about this Privacy Policy or how we handle your data, contact us at info@kilun.lt or +370 604 73737.