Privacy Policy

Effective from: 2020-04-01
Website: www.xenonled.eu
Data controller: UAB Automobilių šviesos specialistai

1. General Information

This Privacy Policy explains how we, UAB Automobilių šviesos specialistai (referred to as “Company,” “we,” “us,” or “our”), collect, use, and protect your personal data when you visit our website, place orders, send inquiries, or use our services.

We respect your privacy and are committed to protecting your data in line with the General Data Protection Regulation (GDPR) and other applicable laws. By using this website, you confirm that you have read and understood this policy.

2. Data Controller Contact Details

UAB Automobilių šviesos specialistai
Company code: 302627467
Address: Liubčios g. 15, LT-14310 Vilnius, Lithuania
Email: [email protected]
Phone: +370 684 55266

If you have any questions or want to exercise your privacy rights, please contact us using the details above.

3. What Data We Collect

Depending on how you use our website, we may collect the following personal data:

- Identification data: name, surname, email, phone number, IP address
- Payment data: bank account number, payment info (processed by payment providers, not stored by us)
- Delivery data: address, recipient name and contact details
- Purchase history: ordered items, order dates, totals, returns
- Communication data: messages, feedback, inquiries
- Technical data: IP, browser type, device info, session time, browsing history (via cookies)

4. Why and How We Use Your Data

We process your personal data only for specific and lawful reasons, in line with GDPR. Below are the main purposes and legal grounds:

Purpose of Use	Legal Basis
Order processing and fulfillment	Contract performance (GDPR Art. 6.1.b)
Payment and billing administration	Contract performance
Product delivery and customer contact	Contract performance
Accounting and legal compliance	Legal obligation
Website functionality and maintenance	Legitimate interest (Art. 6.1.f)
Website analytics (e.g. Google Analytics)	Legitimate interest
Marketing (newsletters, ads)	Your consent (Art. 6.1.a)
Replies to questions, complaints, support	Contract performance & legitimate interest

We use only the minimum data required for each activity. You can withdraw your consent for marketing at any time.

To handle returns and refunds, we may use your name, contact details, and bank account info, based on the original order data. These are processed only as needed and stored according to the terms listed in this policy.

5. Who We Share Data With

We do not share your personal data with third parties, except in the following cases:

- Payment processors: Paysera – for handling payments (check their privacy policy)
- Delivery partners: LP Express, DPD, Venipak, DHL and other – to deliver your order
- Authorities: when required by law

All partners have signed data processing agreements to ensure your data is protected.

6. Cookies

We use cookies to improve your experience and site performance. Cookies collect technical info about your browsing.

Cookie categories used:

- Essential cookies – needed for the website to work (e.g., session ID)
- Statistics cookies – for analytics:
  - Google Analytics (_ga, _gid)
- Marketing cookies – for personalized ads:
  - Facebook Pixel, Google Ads (_fbp, _gcl_au)

You can choose which cookies to allow. Essential cookies are always active.

7. Data Retention Periods

We keep your personal data only as long as needed:

- Order data – 5 years after your last order
- Accounting documents – 10 years (legal requirement)
- Marketing – until you unsubscribe
- Cookies – up to 2 years, depending on type
- Technical data – up to 1 year

After the retention period ends, data is safely deleted.

8. Your Rights

Under GDPR, you have the right to:

- Know what data we collect about you
- Correct inaccurate or incomplete data
- Ask to delete your data (“right to be forgotten”)
- Restrict how we use your data in certain cases
- Object to data use (e.g., for marketing)
- Transfer your data to another provider
- Withdraw your consent at any time (e.g., for newsletters)
- File a complaint with the State Data Protection Inspectorate

9. Data Security

We take all necessary technical and organizational steps to protect your data from unauthorized access, disclosure, or loss.

Security measures we use:

- SSL encryption
- Access control in our systems
- Regular security updates
- “Wordfence” website protection
- Two-factor authentication (2FA) for admin accounts
- Secure servers located in the EU