XC Plan

Privacy & Cookie Policy

Effective Date: August 18, 2025

Last Updated: August 18, 2025

MB Kauno studija (“Company,” “we,” “our,” or “us”) values your privacy. This Privacy & Cookie Policy explains how we collect, use, disclose, and safeguard your information when you use our SaaS product. It also explains how we use cookies and similar technologies. By accessing or using the service, you agree to the terms of this Privacy & Cookie Policy.

1. Information We Collect

When you use the service, we may collect the following information:

  • Account Information: username, first name, last name, email address, and avatar picture.
  • Usage Data: IP address (as may appear in server logs), browser type, operating system, and usage statistics.
  • User Content: maps and positions you create, including any data or information you choose to make public.

2. Lawful Basis for Processing (GDPR)

Under the General Data Protection Regulation (GDPR), we rely on the following legal bases for processing your personal data:

  • Performance of a Contract: To provide the service, including account management and map creation.
  • Legitimate Interests: To improve our service, maintain security, and conduct analytics.
  • Consent: For optional features, cookies, and communications where you provide explicit consent.
  • Legal Obligation: To comply with applicable laws and regulations.

3. How We Use Your Information

We may use the information we collect for the following purposes:

  • To provide, operate, and improve the Service.
  • To manage your account and enable features such as map creation and public sharing.
  • To communicate with you, including sending service updates, announcements, and security notices.
  • For analytics, research, and business purposes, including improving our product and user experience.
  • To ensure compliance with our Terms of Service and applicable laws.

4. Public Sharing

The Service allows you to create and share maps (including positions) publicly. Any information you choose to make public will be accessible by others and may be viewed, used, or shared by third parties outside of our control. You should only share content that you are comfortable making publicly available.

5. Cookies & Tracking

We use cookies and similar tracking technologies to operate and improve the Service.

  • Essential Cookies: Necessary for the service to function (e.g., login, security).
  • Analytics Cookies: We use Google Analytics to collect information about how users interact with the service, such as pages visited, time spent, and device/browser information. This helps us analyze and improve the service.
  • Third-Party Map Services: We use Mapbox to provide map display and related features in the service. When you interact with maps, certain information (such as IP address, browser details, device type, and map usage data) may be transmitted directly to Mapbox. Mapbox may use this information for analytics, performance optimization, and service improvements. For more details, please review the Mapbox Privacy Policy.
  • Consent Management: When required by law, we will request your consent before placing non-essential cookies on your device. You can withdraw your consent or adjust your preferences at any time via your browser settings or cookie banner.
  • Opt-Out: You can opt out of Google Analytics tracking by using the Google Analytics opt-out browser add-on.

For more details on how Google processes data, please visit Google’s Privacy Policy.

6. Data Retention and Deletion

  • If you request deletion of your account, we will delete your personal identifiers (such as name, email, and avatar).
  • Certain anonymized data (e.g., aggregated usage metrics, map-related data without identifiers) may be retained for analytics and operational purposes.
  • We reserve the right to retain and use anonymized data for any lawful purpose.

7. Disclosure of Information

We may disclose your information in the following circumstances:

  • With Your Consent: If you explicitly consent to sharing.
  • Legal Requirements: If required by law, regulation, or legal process.
  • Business Transfers: In the event of a merger, acquisition, or sale of assets.
  • Service Providers: With trusted third-party vendors who help us operate and improve the Service, including Google Analytics (analytics services) and Mapbox (map rendering and geolocation services).
  • Third-Party Data Sources: The service integrates aviation-related data provided by OpenAIP. While we do not share personal data with OpenAIP, users should be aware that some map and aviation information originates from this third party. For more information, please review the OpenAIP Terms and Privacy Policy.

8. Data Security

We implement reasonable administrative, technical, and physical safeguards to protect your information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. International Data Transfers

Your information may be transferred to and processed in countries outside the European Economic Area (EEA). In such cases, we ensure that appropriate safeguards (such as Standard Contractual Clauses approved by the European Commission) are in place to protect your personal data.

10. Your GDPR Rights

Under GDPR, you have the following rights regarding your personal data:

  • Right of Access – to request a copy of the personal data we hold about you.
  • Right to Rectification – to request correction of inaccurate or incomplete data.
  • Right to Erasure (“Right to be Forgotten”) – to request deletion of your data.
  • Right to Restrict Processing – to request limits on how we process your data.
  • Right to Data Portability – to receive your data in a structured, commonly used format.
  • Right to Object – to object to processing based on legitimate interests.
  • Right to Withdraw Consent – if we rely on consent, you may withdraw it at any time.

To exercise these rights, please contact us at info@kaunostudija.lt.

11. Children’s Privacy

Our Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware of such collection, we will take steps to delete the data promptly.

12. Changes to This Policy

We may update this Privacy & Cookie Policy from time to time. Any changes will be effective immediately upon posting the revised policy on the service. Your continued use of the service after changes are posted constitutes your acceptance of the updated policy.

13. Contact Us

If you have questions or concerns about this Privacy & Cookie Policy or wish to exercise your GDPR rights, please contact us at:

MB Kauno studija

Company code: 304076105

VAT code: LT100009572314

M. ValanÄŤiaus g. 11-2, LT-44275 Kaunas, Lithuania

Email: info@kaunostudija.lt