Privacy policy
How we handle your personal data when you use Užvalkalai.lt and buy our products.
Updated 2026-06-15. Prepared on the basis of the EU GDPR and Lithuanian legislation; the final text should be agreed with a lawyer.
Data controller
Čiužinių centras, MB · VAT number LT100013361419 · Vilnius, Lietuva · info@uzvalkalai.lt.
What data we process, why, and on what legal basis
| Purpose | Data | Legal basis (GDPR Art. 6) | Retention |
|---|---|---|---|
| Order fulfilment and delivery | name, address, email, phone, order contents | performance of a contract (Art. 6(1)(b)) and legal obligation for accounting (Art. 6(1)(c)) | for the period set by accounting legislation [UNVERIFIED - exact term to be specified] |
| Email enquiries | email, message content | legitimate interest in responding (Art. 6(1)(f)) | until the enquiry is resolved |
| Website traffic analysis | aggregated browsing data (Matomo - cookieless, IP anonymised) | legitimate interest in assessing website use (Art. 6(1)(f)) | according to Matomo settings [UNVERIFIED] |
For analytics we use self-hosted Matomo. We do not use "Google Analytics" or the "Facebook" pixel.
Recipients and transfers
Data is processed by our staff and, as far as necessary to fulfil an order, by service providers (e.g. courier, payment provider, hosting provider) acting as data processors (GDPR Art. 28). We do not knowingly transfer personal data to third countries outside the EU/EEA; if any service provider were to do so, the safeguards of GDPR Chapter V apply. [UNVERIFIED - list of processors to be specified].
Your rights
Under the GDPR (Art. 15-22) you have the right to access your data, to rectify, erase, restrict or object to its processing, and the right to data portability. Contact us at info@uzvalkalai.lt. You also have the right to lodge a complaint with the State Data Protection Inspectorate (VDAI, vdai.lrv.lt).
Legal basis and note
This policy is based on: the EU General Data Protection Regulation (EU) 2016/679 (in particular Art. 6 and 13) - eur-lex.europa.eu/eli/reg/2016/679/oj - and Lithuanian personal-data protection legislation (e-seimas.lrs.lt). This is a draft document; a final review by a lawyer is recommended. We do not claim "full compliance".