Privacy policy

This privacy policy explains how UAB Hanse Trailer (the "Company", "we") processes personal data when you use the website www.htl.lt: when you browse it, send us a message, an enquiry or a request, book a wash, subscribe to vehicle alerts or apply for a job. Last updated: 13 October 2026.

Who we are

UAB Hanse Trailer
Company code: 111687917
VAT code: LT116879113
Registered office: Liepkalnio g. 200F, LT-13242 Vilnius, Lithuania
E-mail: info@htl.lt, phone +370 5 203 4807

Transport quotes and job applications for HT Logistics are handled by our partner company UAB HT Logistics (company code 305439449, Liepkalnio g. 200F, Vilnius, hello@htl.lt) under the same rules.

If you have a question about your data, or notice a discrepancy in this policy or a security gap on our website, write to info@htl.lt.

What we process and why

Messages, enquiries and requests

The contact form, the vehicle enquiry, the rent and transport quote forms and the workshop, spare-parts and warranty forms send us what you enter in them: your name, company, phone number and/or e-mail address, how you want us to answer (phone, WhatsApp or e-mail), your country, your message and the details of the request (for example the vehicle you ask about, the rental period, the route and the cargo, your vehicle and its problem, part numbers or a VIN). Consignors who use their personal page to ask us to change a price or withdraw a vehicle send their request in the same way.

We use this data to answer you and to prepare an offer or a job: the legal basis is taking steps at your request before a contract and the performance of a contract (Article 6(1)(b) GDPR) and, for representatives of companies, our legitimate interest in communicating with our business customers (Article 6(1)(f)). Each request goes to the e-mail box of the department concerned and is recorded in our database, so that no request is lost. If you give an e-mail address, you receive a copy of what you sent.

Files you attach

You can attach photos, videos or PDF documents to the workshop, spare-parts and warranty forms. Files are uploaded when you choose them and are kept on our server outside the public website; files that are not sent with a form are deleted automatically. We remove location and camera data (EXIF, GPS) from JPEG and PNG photos; HEIC photos, videos and PDF files are kept as you send them. Our staff open the files through links that are valid for 30 days.

Wash bookings

To book a wash we ask for the vehicle type, the services, the date and time, the number plate, the driver's name, a phone number and an e-mail address. A company that has an account with us is found by its company code, and we show only its name. A new company gives its name, company code, VAT code and address and confirms the phone number or e-mail address it entered with a one-time code, valid for 10 minutes; its customer record is created in our accounting system after payment.

Card payments are processed by Klix, the payment service of AS Citadele banka: we do not see or store card details, only the result of the payment. We send the booking confirmation by e-mail (for a booking paid later by invoice, also to the company's registered e-mail address, so that the company sees every booking made in its name), issue the invoice in our accounting system and may contact the driver by phone or SMS about the wash. Legal bases: the contract (Article 6(1)(b)), our obligation to keep accounting records (Article 6(1)(c)) and, for the copy to the company, our legitimate interest in preventing bookings in another company's name (Article 6(1)(f)).

With every online booking we record the IP address it was sent from, the browser, a random identifier that a cookie keeps on the device (htl_wc_dev), so that the bookings made from one device can be linked, and whether a vehicle has been booked on that company's account before, so that the wash team can check an unexpected vehicle at the gate. The legal basis is our legitimate interest in preventing bookings in another company's name (Article 6(1)(f)).

The booking form is protected by Google reCAPTCHA Enterprise, which assesses how the form is used to tell people from automated programs (our legitimate interest in preventing abuse, Article 6(1)(f)). Google's privacy policy and terms of service apply to it.

Vehicle alerts

You can ask us to e-mail you the vehicles that match a search. We store your e-mail address, the search, how often you want the e-mails, the language and which vehicles we have already sent you. The alert starts only after you confirm it through the link in the first e-mail (the link works for 7 days), and every e-mail has a link that stops the alert at once. One address can have up to five alerts. The legal basis is your consent (Article 6(1)(a)), which you can withdraw at any time.

If you also give a WhatsApp number, we keep it with the alert for the WhatsApp alerts we are preparing and use it for nothing else. The link at the end of every e-mail also lets you change how often you receive them.

Pages for consignors

Customers whose vehicles we sell on consignment receive a personal link to a page with their vehicles, prices, views and sales. The page opens only through that link and is not indexed by search engines; please do not share the link. The legal basis is the contract (Article 6(1)(b)).

Usage statistics

We count how often vehicle pages are viewed, how often visitors tap to call, message or save a vehicle, and which spare-part numbers are looked for in the stock check. These figures are stored without names, contact details or cookies. To tell repeated checks apart we keep only a one-way scrambled (hashed) form of the IP address, which we do not turn back into the address. Search engine robots and other automated visits are not counted. The legal basis is our legitimate interest in knowing which vehicles and parts are in demand (Article 6(1)(f)).

The website also keeps a record of how it is used: which pages are opened, with their full address, which of their features are used (for example a filter, the photos, a quick preview, a contact button or a step of a form) and what you search for on it, together with the IP address and the browser identification (user agent) of the visit, the address of the page you came from, the type of page, the language, the kind of device (phone, tablet or computer), where the visit came from and your answer in the cookie banner. A random number made when a page opens links the steps of that one page view; it is not stored on your device. The record uses no cookies and holds no name or contact details, and nothing you type into a form. The legal basis is our legitimate interest in knowing which parts of the website serve our customers and in keeping the website secure (Article 6(1)(f)).

Where a visit came from

While you browse, your browser keeps for the current session where your visit came from (for example a search engine, an advertising campaign and its click identifier, or a link on another website) and the first page you opened. If you send a form, this information is sent with it, so that we can tell which of our channels bring enquiries (legitimate interest, Article 6(1)(f)).

Security and spam protection

To protect the forms against spam and abuse we use a hidden field that people do not fill in, check how quickly a form is sent and limit how many forms one address can send per hour. We record the IP address a form or booking is sent from, to trace abuse; where we only need to tell repeated submissions apart, we keep just its hashed form. Like every website, our web server keeps technical access logs (IP address, time, page, browser), and the website logs its errors, payments and submitted forms; we use these logs to keep the website secure and working (legitimate interest, Article 6(1)(f)).

Website assistant

Our website assistant answers questions about our vehicles and services and prepares forms and wash bookings for you to check and send. It is a computer program: its answers are written by an AI language model, it never sends, books or pays anything for you, and our staff do not answer in it. We process what you type to it, the page you are on, the cards it shows you, a random identifier kept in a cookie (__Host-htl_asst) and a scrambled form of your IP address, which we use to limit how often the assistant can be used from one address and to find your conversations when you ask us to erase them. For representatives of companies we do this on our legitimate interest in serving business customers (Article 6(1)(f)); otherwise as steps you ask for before a contract (Article 6(1)(b)). An authorised person at HTL may read conversations to check that the answers are correct and to stop abuse. If you then send a form or a booking the assistant prepared, we link it to the conversation, so that we know the assistant helped. When you use the assistant on a device that booked a wash before, the vehicle type and services of that booking are sent with your message — never the plate, driver, phone, e-mail or company code. We do not use your conversations for advertising or to make decisions about you. Please do not enter passwords, payment card numbers or personal codes. If you give us details of other people, such as a driver, please tell them about this policy. The assistant is meant for business customers and not for children. You can clear all your conversations from your device in the assistant at any time: you will no longer see them, but HTL keeps them for up to 12 months to check and improve the answers. To have them erased earlier, write to info@htl.lt with the date and your first question; without the cookie we cannot tell which conversations are yours.

You can also speak to the assistant: your words become text that you check before you send it. When your browser turns speech into text itself, it may send your voice to its maker (for example Google or Apple) under that maker's terms, unless it does this on your device; HTL receives no recording from it. Otherwise your recording is sent through us to the recipients named below for the assistant (OpenRouter, Inc. in the USA under the standard contractual clauses, and Google Cloud in the European Union) only to turn it into text; we do not keep it. When you press Listen, your browser reads the answer aloud with its own voice; some browsers send the text to their maker for this.

Who receives the data

• our employees who handle your request, and UAB HT Logistics for transport requests and its job applications;
• Microsoft Ireland Operations Ltd (Microsoft 365), which runs our e-mail;
• Google Ireland Limited: Google Analytics 4, Google Ads, Google Tag Manager and reCAPTCHA Enterprise, and YouTube only when you play a video on a vehicle page;
• Meta Platforms Ireland Limited: the Meta Pixel, only with your consent;
• WhatsApp Ireland Limited, when you choose WhatsApp for our reply or write to us on WhatsApp;
• AS Citadele banka (Klix) for card payments;
• mobile network operators that deliver the SMS messages we send from our own SMS gateway;
• courier companies that deliver spare parts, and companies that maintain our IT systems;
• OpenRouter, Inc., which passes the website assistant's requests to the AI model, in the USA under the standard contractual clauses approved by the European Commission, and Google Cloud, which runs the model for OpenRouter in the European Union; they process the requests under their own terms, and we do not control how they store or use this data;
• state authorities, where the law requires it.

The website and our business systems run on our own servers in a data centre in Vilnius, Lithuania. Google, Microsoft and WhatsApp may process data in the USA; such transfers take place under the EU-U.S. Data Privacy Framework, under which these companies are certified, and the standard contractual clauses approved by the European Commission. OpenRouter, which passes the website assistant's requests to the AI model, receives them in the USA, as stated in its entry above; the model itself runs in the European Union.

How long we keep data

Your rights

You have the right:

• to know whether we process your data and to receive a copy of it;
• to have inaccurate data corrected and incomplete data completed;
• to have your data erased, for example when it is no longer needed;
• to have the processing of your data restricted;
• to object to processing based on our legitimate interest;
• to withdraw your consent at any time (vehicle alerts, cookies) without affecting the processing before the withdrawal;
• to receive the data you gave us in a machine-readable format and to have it transferred to another controller;
• to lodge a complaint with the State Data Protection Inspectorate (L. Sapiegos g. 17, LT-10312 Vilnius, vdai.lrv.lt).

Send your request to info@htl.lt or by post to Liepkalnio g. 200F, LT-13242 Vilnius. We may ask you to confirm your identity, and we reply within one month.

Cookies and data stored in your browser

What are cookies?

A cookie is a small text file that a website saves on your computer or mobile device when you visit it. Cookies are widely used to make websites work, or work more efficiently, and to provide information to the owners of the site.

How do we use cookies?

Strictly necessary cookies keep the website working and your forms safe; they need no consent. Statistics and marketing cookies are set only after you click "Accept all" in the cookie banner. Your choice is stored in your browser, and you can change it at any time with the "Cookie settings" link at the bottom of every page.

Google Analytics 4 and Google Ads

We use Google Tag Manager to load Google Analytics 4, which shows how the website is used, and Google Ads, which measures which advertisements bring visitors and enquiries. They are provided by Google Ireland Limited and Google LLC. With your consent they set the cookies listed below. If you decline, they set no cookies and send Google only signals without identifiers (for example that a page was viewed), which Google uses to estimate statistics in aggregate. Google Analytics 4 does not store IP addresses. Data may be transferred to the USA under the EU-U.S. Data Privacy Framework.

Meta Pixel

We use the Meta Pixel of Meta Platforms Ireland Limited to measure which of our Facebook and Instagram adverts and posts bring visitors and enquiries, and to show our adverts on Facebook and Instagram to people who have visited this website. It is loaded only after you click "Accept all", and then sets the cookies listed below. Meta also processes this data under its own privacy policy and may link it to your Facebook or Instagram account.

Matomo

We also use Matomo, a web analytics system that runs on our own server; the data it collects is not shared with anyone. Matomo is loaded only after you have given consent.

YouTube

Vehicle videos are embedded from youtube-nocookie.com only when you press play; until then no connection to YouTube is made.

OpenStreetMap

The map of our rent partner workshops loads its map images from OpenStreetMap (OpenStreetMap Foundation, United Kingdom) when you scroll to it; your browser then connects to their servers, which see your IP address. It sets no cookies. When a search in the partner list finds no workshop, or you use "Find on the map", our server looks the words up as a place at the Photon service (komoot GmbH, Germany) and, if Photon does not know it, at OpenStreetMap's Nominatim service: only the words you typed are sent, not your IP address.

List of cookies

Some things the website keeps only in your browser's storage, and does not send to us: your cookie choice, the vehicles you saved or chose to compare, your recent searches, your list view settings and the time of your last visit (to mark new vehicles), and unsent form drafts, which are deleted when you close the browser tab. The source of your visit is kept there too for the current session; it reaches us only with a form you send (see "Where a visit came from"). It also keeps whether you have seen the website assistant's first notice and, for the current tab only, a note that a form was filled in by the assistant.

The wash booking page also keeps your last booking there (company code, vehicle, services, number plate, driver, phone and e-mail address) to fill it in again next time; "Not you?" deletes it.

How to manage cookies

You can delete the cookies already saved on your device, and most browsers let you:

• see which cookies are saved and delete them one by one;
• block third-party cookies;
• block cookies from particular websites;
• block all cookies;
• delete all cookies when you close the browser.

If you delete cookies, your settings are deleted too, and if you block all cookies, many websites, ours included, will not work properly.

More information about cookies, Clearing cache and cookies

Job candidates

This part describes how we process the data of people who apply for jobs at the Company. Applications for HT Logistics jobs (the careers page) go to hello@htl.lt and are handled by UAB HT Logistics under the same rules.

I. Which personal data of job candidates do we process, and why?

1.1. To select a suitable candidate for a vacant position, we collect the following personal data of candidates:

• name and surname;
• e-mail address and/or telephone number;
• information about the candidate's work experience (employers, periods of employment, positions, responsibilities and/or achievements);
• information about the candidate's education and qualifications;
• information about language skills and other competences required for the position;
• the summary and results of the interview, and the feedback of the person who conducted the selection;
• other information the candidate provides voluntarily in a CV, cover letter or other application documents (for example recommendations or references), which is processed in the same way as the data we ask for.

Special categories of personal data (for example information about health) are collected only where this is necessary for the selection for a specific position, and only to the extent permitted by law.

After informing the candidate, the Company may ask a former employer about the candidate's qualifications, professional abilities and qualities; it asks the current employer only with the candidate's consent.

1.2. To administer the candidate database, we collect the same data, together with the place of residence, the desired salary, the possible start of employment, the team applied to and the dates of the interviews.

II. On what basis do we collect this data and for how long do we keep it?

2.1. To select a suitable candidate for a vacant position we collect data with the candidate's consent, given by submitting the application documents (Article 6(1)(a) GDPR), and on the basis of our legitimate interest in selecting a suitable candidate (Article 6(1)(f)). We keep this data for 3 months from the end of the selection.

2.2. To administer the candidate database we collect data with the candidate's consent (Article 6(1)(a)) and keep it for 3 years from the consent (or from the moment the data is submitted, if that is later). The candidate may withdraw this consent at any time by writing to info@htl.lt.

III. Where do we obtain candidates' personal data?

• directly from the candidates, when they send a CV, cover letter or other application document to our e-mail;
• from the Lithuanian Employment Service, recruitment agencies, job portals and professional social networks (for example LinkedIn). In these cases we presume that the candidate has been informed about the processing of their data and its transfer to us and has given consent to the provider concerned.

IV. To whom do we disclose candidates' personal data?

Candidates' data may be provided to state supervisory and law-enforcement authorities only where the law requires it, or to secure or defend the Company's rights. Access to it may also be given to companies that maintain our e-mail and servers and to companies that provide recruitment services to us.

V. Rights of job candidates

Job candidates have the rights listed in "Your rights" above, including the right to have their data transferred from the candidate database to another controller.

VI. How we handle requests

Requests should be sent in writing to info@htl.lt or by post to Liepkalnio g. 200F, LT-13242 Vilnius. We may ask for an identity document to confirm who you are, and we reply within 30 calendar days of receiving the request and all documents needed to answer it.

Changes to this policy

We update this policy when our website or the way we process data changes. The date at the top shows when it was last updated.