Privacy policy

1. Who is responsible for your data

The controller of your personal data is UAB „Vilainių autopaslaugos“, company code 305257592, address Tuopų g. 14, Vilainiai, Kėdainiai district, LT-58105.

• general email: info@vilainiuautopaslaugos.lt;
• repair bookings email: uzsakymai@vilainiuautopaslaugos.lt;
• telephone: +370 657 72525.

2. What data we may process

Depending on how you use the website, we may process:

• your name, telephone number and an email address that you provide voluntarily;
• the type of vehicle and a description of the fault or requested service;
• correspondence, calls and information related to handling your enquiry;
• contract, completed work, invoice and payment information once you become a customer;
• technical information automatically recorded by the server or security measures, such as IP address, request time, browser and device information;
• cookie and browser local-storage choices.

Please do not submit health information, identity documents, financial login details or other sensitive information that is not necessary for a repair enquiry.

3. Purposes and legal bases for processing

4. Contact and repair enquiry form

The contact form asks for your name, telephone number, vehicle type and a short description of the enquiry. Your email address is optional if we can contact you by telephone.

Data submitted through the form is not stored in the website database. It is sent to the email inbox used for repair bookings. Copies of emails may be retained by the email service and in its backups according to the provider’s settings.

The checkbox in the form confirms that you have read this privacy policy. Data needed to answer your enquiry is primarily processed on the basis of steps taken before entering into a contract or performance of a contract rather than solely on consent.

5. Cookies and browser local storage

Necessary technologies are used to provide core website functions and save your choices. Functional, analytics or marketing technologies may only be enabled according to your choices. You can change or withdraw your choices at any time by clicking “Cookie settings” in the footer.

Change cookie settings

6. Interactive map and external links

Interactive map

The interactive OpenStreetMap map on the contact page is loaded only after you allow functional technologies. When the map is loaded, your browser connects to external servers used for the Leaflet library and OpenStreetMap infrastructure. These providers may receive your IP address, browser and device information, request time, referring address and requested map-tile information. OpenStreetMap Foundation processes this information under its privacy policy.

Google Maps and Facebook

The website contains ordinary links to Google Maps navigation and the company’s Facebook page. Merely displaying these links does not load these services. Data is transferred to the relevant service provider only when you click a link and open its website or application, at which point Google’s or Meta’s privacy terms apply.

7. Who may receive your data

Data may be accessed only by people and service providers where necessary for the purposes described above:

• authorised employees or service providers of UAB „Vilainių autopaslaugos“;
• website hosting, domain, email, backup, security and IT maintenance providers;
• accounting, audit, legal or debt-administration providers where necessary;
• public authorities and other persons where disclosure is required by law;
• providers of external features when you choose to use the relevant service.

We do not sell personal data or disclose it to third parties for their own direct marketing purposes.

8. Transfers outside the European Economic Area

Some external service providers may use infrastructure outside the European Economic Area. Where personal data is transferred to a country for which the European Commission has not adopted an adequacy decision, the relevant provider must rely on another lawful transfer mechanism, such as the European Commission’s standard contractual clauses. The most detailed information about a provider’s transfers is available in that provider’s privacy policy.

9. How long we retain data

• enquiries that do not result in an order: generally up to 12 months after the last communication, unless the data is needed for longer to establish, exercise or defend a legal claim;
• order and service data: during performance of the contract and afterwards for as long as necessary for warranty, accounting, tax or potential legal-claim purposes;
• accounting documents: for the period required by applicable law;
• server and security logs: for a limited period determined by hosting and security providers;
• cookie choices: up to 6 months or until they are changed or cleared.

10. Your rights

Subject to the conditions set out in the GDPR, you may:

• receive information about the processing of your data and access your personal data;
• request correction of inaccurate or completion of incomplete data;
• request deletion or restriction of processing where there is a legal basis to do so;
• object to processing based on legitimate interests;
• receive data you provided in a structured, commonly used and machine-readable format where the right to data portability applies;
• withdraw consent to non-essential technologies at any time without affecting the lawfulness of processing carried out before withdrawal;
• lodge a complaint with the Lithuanian State Data Protection Inspectorate: vdai.lrv.lt.

To exercise your rights, contact info@vilainiuautopaslaugos.lt. To protect your information, we may reasonably ask you to verify your identity before acting on a request.

11. Automated decisions and direct marketing

We do not use data submitted through the website to make decisions based solely on automated processing that produce legal or similarly significant effects. We do not use contact-form data for newsletters or direct marketing without a separate lawful basis.

12. Data security

We apply reasonable technical and organisational measures designed to protect personal data against unauthorised access, alteration, loss or disclosure. Access to received enquiries is limited to people who need it for their work. However, no method of transmitting information over the internet can guarantee absolute security.

13. Changes to this policy

This policy may be updated when website functions, service providers, processing activities or legal requirements change. The latest version is published on this page with the date of the most recent update.