Privacy Policy

WHO WE ARE AND HOW TO CONTACT US

Data controller contact details: Atlas Living, UAB, legal entity code: 306104119, Dariaus ir Girėno st. 21A, LT-02189 Vilnius, Lithuania, (hereinafter referred to as We, Us, Company) processes the personal data of its customers, potential customers, employees, job applicants, suppliers, partners, etc. (hereinafter – You, Your) in accordance with the provisions of laws and regulations governing the legal protection of personal data, applying the highest technical and legal protection standards and taking all necessary measures to prevent possible violations of personal data protection. This privacy policy (hereinafter referred to as the Privacy Policy) sets out the basic rules for the collection, processing, and storage of your personal data and other information related to you, the scope of your personal data, the purposes, sources, recipients, your rights as a data subject, and other important aspects of using the Company’s services. This information is important, so we hope you will read it carefully.

The term “personal data” (hereinafter referred to as personal data) used in this privacy policy means any information about you that relates to you as a natural person, a data subject whose identity is known or can be directly or indirectly determined using certain data (e.g., name, surname, personal identification number, address, telephone number, etc.).

When processing personal data, we responsibly comply with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as the GDPR) and other directly applicable legislation governing the protection of personal data, as well as the instructions of the competent authorities.

If you provide us with personal data that does not belong to you (for example, by indicating another person as the beneficiary), please inform them about this privacy policy and its content.

If the service user is a legal entity, this privacy policy applies to natural persons whose personal data is transferred to us by the legal entity. The user must comply with Article 6.2 of the Civil Code. Article 14 of the GDPR requires that data subjects (managers, beneficiaries, representatives, etc.) be informed about the transfer of their personal data to the Company.

If you have any questions about this privacy policy or requests regarding the processing of your personal data, please contact us by email at: [email protected].

 

By visiting the Company’s websites and/or using the information and/or our services contained therein, you acknowledge and agree that you have read and understood this privacy policy.

 

TO WHOM THE PRIVACY POLICY APPLIES

This privacy policy applies to our website https://atlasliving.lt/ (regardless of the device you use) and all services provided by the Company or other activities of the Company when personal data is processed.

 

WHAT PRINCIPLES DO WE FOLLOW?

When processing your personal data, we:

• comply with applicable laws and regulations, including the GDPR;
• process your personal data lawfully, fairly, and transparently;
• collect your personal data for specific, clearly defined and legitimate purposes and will not further process it in a manner incompatible with those purposes, except to the extent permitted by law;
• We will take all reasonable steps to ensure that personal data that is inaccurate or incomplete, having regard to the purposes for which it is processed, is corrected, completed, suspended or destroyed without delay;
• we will store it in a form that allows your identity to be determined for no longer than is necessary for the purposes for which the personal data is processed;
• we will not disclose or transfer personal data to third parties, except as provided for in the Privacy Policy or applicable law;
• We will ensure that your personal data is processed in such a way as to ensure adequate security of personal data by implementing appropriate technical or organizational measures, including protection against unauthorized or unlawful processing of personal data and against accidental loss, destruction, or damage. The contact details of our data protection officer are: [email protected].

 

WE COLLECT AND USE THIS INFORMATION:

1. PERSONAL DATA

When you use our Website, we may collect certain personal information about you (“Personal Data”), i.e. when you voluntarily provide such information, for example, when you use our Services, contact us with inquiries, etc. Wherever we collect Personal Data, we provide a link to this Privacy Policy.

 

2. USAGE DATA

We may also collect information that your browser sends whenever you visit our Website or when you access the Website using or through a mobile device (hereinafter referred to as Usage Data).

This Usage Data may include information such as IP addresses, browser and device type, the page you were visiting before you came to our sites, and device identifiers.

When you access the Site on or through a mobile device, this Usage Data may include information such as the type of mobile device you are using, your mobile device’s unique identifier, your mobile device’s IP address, your mobile operating system, the type of mobile internet browser you use, unique device identifiers, and other diagnostic data.

Please note that such information, which is collected passively using various technologies, cannot currently be used to identify you specifically. This Website may use such information and combine it with other information to monitor, for example, the total number of visitors to our Website, the number of visitors to each page of our Website, the domain names of visitors’ Internet service providers, and how our users use and interact with the Services.

 

3. COOKIE TRACKING DATA

We use cookies and similar tracking technologies to track activity on our Website and store certain information. For more information, please see our Cookie Policy.

 

PERSONAL DATA COLLECTED AND PROCESSED, PURPOSES AND LEGAL BASIS FOR PROCESSING PERSONAL DATA, AND CONDITIONS FOR STORING PERSONAL DATA

Purposes of data processing	Data collected and processed	Legal basis for data processing	Data retention period
To reserve an apartment	First name Last name Date of birth Address Gender Email address Phone number Country University name Faculty Study program Year of study	Data processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract (GDPR Article 3(6)(1)(b))	10 (ten) years from the date of performance of the contract
For the purposes of managing invoices and other payments, and complying with accounting rules	First and last name Last name Credit card number Bank account number	Data processing is necessary for compliance with a legal obligation to which the controller is subject (GDPR Article 2(6)(1)(c), i.e. to comply with a legal obligation (to issue or store invoices and other accounting documents, etc.).	10 (ten) years from the date of performance of the contract
For the purposes of communication via the Website, for example, to respond to a query submitted by the data subject	First and last name Email Phone	Processing is necessary in order to take steps at the request of the data subject prior to entering into a contract (Article 6(1)(b) of the GDPR)	1 (one) year from the last correspondence with the data subject
Provision of news, promotions, newsletters, product information, and event invitations (direct marketing)	Provision of news, promotions, newsletters, product information, and event invitations (direct marketing). With your explicit consent, we will use your email address and/or phone number for direct marketing purposes. When you become our customer and do not object to direct marketing related to similar services or products, we will process your email address.	Personal data for direct marketing purposes is processed in accordance with Article 6(1)(a) of the GDPR, i.e. with your consent, or in accordance with Article 6(1)(f) of the GDPR, i.e. on the basis of our legitimate interest in offering you goods and/or services similar to those you have purchased from us and in obtaining your feedback on the goods and/or services you have purchased.	3 years after you ordered or purchased our product or service

 

We use personal data for various purposes specified in this privacy policy. If you provide Personal Data for a specific reason, we may use the Personal Data for the reason for which it was provided. For example, if you contact us by email, we will use the Personal Data you provide to respond to your inquiry or resolve your issue. Similarly, if you provide Personal Data to access the Services, we will use your Personal Data to provide you with access to those services and to monitor your use of them. We and our subsidiaries and affiliates (collectively, “Affiliates”) may also use your Personal Data and other non-personally identifiable information collected through the Site to help us improve the content and functionality of the Site, better understand our users, and improve the Services. We and the Affiliated Companies may use this information to communicate with you about the Services.

 

DO YOU HAVE TO GIVE US YOUR PERSONAL DATA?

 

Keep in mind that to use our Services, you have to give us the personal data mentioned above.

 

WHERE DO WE GET YOUR PERSONAL DATA (SOURCE OF DATA)?

We obtain data directly from you, i.e. when you submit your Personal Data via our Website.

 

DATA TRANSFER

The information you provide to us, including Personal Data, may be transferred to and stored on computers located outside your state, province, country or other governmental jurisdiction where the data protection laws may differ from those in your jurisdiction. By voluntarily providing us with Personal Data, you consent to our use of it in accordance with this Privacy Policy.

Please note that we do not share your Personal Data with others without your consent, except for the following purposes:

1. Other people who work for us (service providers)

We may use certain trusted third parties (such as customer service and IT service providers, accounting service providers) to help us improve our Website. These third parties may only access the information to perform tasks on our behalf in accordance with this privacy policy, and we remain responsible for how they handle your information under our instructions.

2. Affiliated Companies

We may also share your Personal Data with our Affiliated Companies for the purposes of this Privacy Policy. We engage third parties who act as Data Processors and Sub-Processors to process the personal data we collect from you. Such companies do so under written instructions, a GDPR data processing agreement, are bound by confidentiality obligations, and are required to implement appropriate technical and organizational measures to ensure data security. They may, among other things, be involved in the fulfillment of your order, the processing of your payment details, and the provision of support services. By submitting your personal data, you consent to such transfer, storage, or processing. We will take all reasonable steps to ensure that your data is treated securely and in accordance with this privacy policy.

3. Business transfer

 

As we develop our business, we may sell or buy companies or assets. In the event of a sale, merger, reorganization, liquidation, or similar event, personal data may be part of the transferred assets.

4. Law and order

We may disclose your information to third parties if we determine that such disclosure is reasonably necessary to: a) comply with the law; b) to protect any person from death or serious bodily injury; c) to prevent fraud or abuse of us or our users; or d) to protect our property rights.

We do not transfer your Personal Data to a third party or international organization, i.e. outside the European Union, except where required by law, by the courts, or where necessary for one of the purposes set out in this Policy.

 

RIGHTS OF DATA SUBJECTS

With regard to the provision of your Personal Data via our Website and in accordance with the GDPR, you have the following rights:

– Right of access – you have the right to request copies of your Personal Data from us.

– Right to rectification – you have the right to request that we correct any Personal Data that you believe is inaccurate. You also have the right to ask us to complete information which you believe is incomplete.

– Right to erasure – in certain circumstances, you have the right to ask us to erase your personal information.

– Right to restrict processing – In certain circumstances, you have the right to request that we restrict the processing of your personal information.

– Right to object to processing – In certain circumstances, you have the right to object to our processing of your personal information.

– Right to data portability – In certain circumstances, you have the right to request that we transfer the personal information you have provided to another organization or to you.

– Right to object to data processing when the processing is based on legitimate interests. You have the right to object to the processing of personal data when the personal data is processed based on our legitimate interests, but if we have important and legitimate reasons, we will process your data without your consent. To exercise this right, please contact us at [email protected].

– The right to withdraw your consent. You have the right to withdraw your consent to the processing of your personal data at any time when your personal data is processed on the basis of consent. The withdrawal of consent does not affect the lawfulness of data processing based on consent before its withdrawal. To exercise this right, please contact us at [email protected]

If you believe that the Company is processing your personal data in violation of legal requirements, you have the right to lodge a complaint with the State Data Protection Inspectorate (VDAI) at the following address: L. Sapiegos g. 17, 10312 Vilnius, Lithuania, email: [email protected]; tel.: (8 5) 271 28 04, 279 1445, website: https://vdai.lrv.lt/lt/. In all cases, we recommend that you contact us before submitting a complaint to the SDPA so that we can resolve the situation amicably.

 

SOCIAL NETWORKS

When you visit social networks, your personal data is processed by the specific social network, and we begin processing your personal data when you visit ATLAS co-living social networks. By using various social media channels, we want to introduce you to our range of services/products and exchange ideas and opinions on topics that are important to you.

Your personal data provided on social media is processed for the following purposes:

• to communicate with visitors to our social networks;
• to respond to visitor inquiries;
• to obtain statistical information;
• to conduct customer surveys, marketing campaigns, market analysis, lotteries, competitions, or similar promotions or events;
• if necessary, to defend the legitimate interests of the Company before authorities and in other cases.

Unless otherwise specified, the legal basis for data processing is Article 6(1)(f) of the GDPR. Our legitimate interests are to be able to respond to your messages or questions and analyze our accessibility on social networks, as well as to present our products and services. If you wish to enter into a contractual relationship with us at your request, the legal basis for such data processing is Article 6(1)(b) of the GDPR.

 

If we intend to process your personal data for any other purpose not mentioned above, we will notify you before such processing.

Our social media pages are managed by specific social networks, so when you visit them, your personal data is processed in accordance with the privacy policies of those social networks. On some social networks, depending on the social network’s policy, the purposes and scope of data processing, we are considered joint data controllers.

We currently use the following social networks:

FB: ATLAS living

Linkedin: ATLAS living

Instagram:  ATLAS living

 

Name of social network and its privacy policy	Personal data we process	Personal data that we process as joint controllers
Facebook You can read their privacy policy by clicking on this link:  https://www.facebook.com/policy.php	Your Facebook username when you comment, react to a post, share posts, write messages to us, your activity on our website, such as your page views, duration statistics, query and comment information, etc.	We use statistical information (visits to our website, range of contributions, visits and average video transmission duration, information about the countries and cities from which our visitors come, age range, gender). We receive anonymous statistics from Facebook through their service. The data controller agreement can be found here:  https://www.facebook.com/legal/terms/page_controller_addendum].
Instagram You can read their privacy policy by clicking on this link:  https://help.instagram.com/519522125107875/?helpref=uf_share	Your Instagram username when you comment, react to a post, share posts, share content in your stories, send us messages, your activity on our website, such as your page views, duration statistics, query and comment information, etc.	We use statistical information (visits to our website, range of contributions, visits and average video transmission duration, information about the countries and cities from which our visitors come, age, gender). We receive anonymous statistics from Instagram through their service. The data controller agreement can be found here: https://help.instagram.com/494561080557017/?helpref=hc_fnav .
LinkedIn You can read their privacy policy by clicking on this link:  https://www.linkedin.com/legal/privacy-policy	Your LinkedIn username when you comment, react to a post, share posts, write us messages, your location as indicated in your personal account, your activity on our website, such as your page views, duration statistics, information about queries, comments, etc.	We use statistical information (number of visits to our website, range of contributions, visits and average video transmission duration, information about the countries and cities from which our visitors come, age, gender). We receive anonymous statistics from LinkedIn through their service. The data controller agreement can be found here:  https://www.linkedin.com/legal/l/dpa

 

VIDEO DATA PROCESSING

When you visit our premises, we will process your image video data in accordance with the terms set out in this privacy notice: [2025.10.06].

 

CHANGES

We may update our privacy policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page.

You are advised to review this Privacy Policy periodically for any changes. This Privacy Policy was last updated on the date indicated above. If you continue to use the Website after any changes or revisions to this Privacy Policy, you agree to be bound by the terms of the revised Privacy Policy.