Privacy Policy

Last update date: 2025-04-04

 I. BASIC CONCEPTS

1. The Company is the Personal Data Controller - UAB "ITBS" , company code 300582781, registered office address Žirmūnų g. 70, 09124 Vilnius, Vilnius, telephone number: +37069934014 is the administrator of the Online Shop.
2. Customer - a natural person - a customer of the Company (including visitors to the website) whose personal data is processed by the Company in accordance with this Privacy Policy, the General Data Protection Regulation (GDPR), the Law on Legal Protection of Personal Data of the Republic of Lithuania and other legal acts establishing the rules of personal data processing.
3. Online shop - Company's online shop at autobeta.lt .
4. "Services" means all services provided by the Company.
5. Personal data means any information relating to a natural person - the Data Subject - whose identity is known or can be established, directly or indirectly, by reference to data such as a personal identification number, one or more physical, physiological, psychological, economic, cultural or social characteristics specific to that person.
6. Processing of personal data means any operation performed on personal data, such as collection, recording, accumulation, storage, classification, grouping, aggregation, alteration (addition or correction), communication, disclosure, use, logical and/or arithmetical operations, retrieval, dissemination, destruction, or any other operation or set of operations.
7. Partner - a legal entity that provides services to the Company in connection with the Company's activities, or sells goods to the Company, or conducts joint projects with the Company, including, but not limited to, marketing campaigns, joint sales campaigns, loyalty programmes, etc., in the media, on websites, in the Online Shop.
8. Cookies are small text files that are stored in the browser of your device (computer, mobile phone, tablet, etc.) when you browse websites. They allow the online shop to "remember" your actions and preferences (e.g. your registration name, language, font size and other display options) for a certain period of time, without you having to re-enter them each time you visit the website or browse through its various pages. Cookies also help us to collect statistical information about the traffic to our online shop. Cookies are only saved if you confirm your consent in a pop-up message on the website, except for cookies that are necessary to maintain the functionality of the e-shop and to provide our services.
9. Direct marketing means the activity of offering goods or services to persons by post, telephone or other direct means and/or seeking their opinion on the goods or services offered.
10. Privacy Policy - this document sets out the principles and rules for the processing of Personal Data when using the services of the Online Shop.
11. Account - the basic login details of a person to the Online Shop, consisting of one email address and a Password.
12. Password means a unique combination of numbers, letters, or numbers and letters or other symbols created by the Customer and used to log into the Customer's account in the Online Shop.

II. GENERAL PROVISIONS

   13. By creating an account in the Online Shop, the Customer authorises the Company to carry out all Personal Data processing activities within the scope and for the purposes set out in this Privacy Policy.

   14. The Company processes Personal Data in accordance with the following principles:
14.1. personal data is collected for specified and legitimate purposes;
14.2 Personal Data is processed accurately, fairly and lawfully;
14.3 Personal Data is adequate and limited to the extent necessary for its collection and further processing;
14.4. inaccurate Personal Data is rectified;
14.5. Personal Data shall be kept in a form which permits the identification of the Customer for no longer than is necessary for the purposes for which the Personal Data was collected and processed.
14.6 All information concerning Personal Data is confidential;
14.7. the Customer's Personal Data and personal information shall not be used for any unlawful purpose.

1. Before placing an order, the Customer must familiarize themselves with this Privacy Policy and click on the "I have read and agree" button. If the Customer does not agree with any part of the Privacy Policy or the Privacy Policy, in such case the Customer must not place the order and not purchase the product in the Online Shop.
2. The Privacy Policy is available at any time in the Online Shop. The Privacy Policy may be amended, supplemented or updated at the discretion of the Company or in the event of a change in the legislation governing the processing of personal data. The new version of the Privacy Policy shall be published in the Online Shop and shall come into force from the date of publication. The Customer must always pay attention to the date of updating the Privacy Policy, which is published in the left corner of this document.
3. The Customer may place an order in the Online Shop without registering, or through his/her Account after registering in the Online Shop.
4. During the first registration to the Online Shop, when creating an Account, the Customer must provide his/her email address and create a secure Password and provide accurate Personal Data to the Online Shop. The Customer is responsible for their correctness.
5. When using the Services, as well as when making purchases in the Online Shop, regardless of whether the Customer has a registered account or purchases without registration, the Customer must always provide the Online Shop with the correct Personal Data and is responsible for its accuracy.
6. The Customer has the right to amend and supplement the Personal Data in the Account, to delete the Account, or to contact the Online Shop at any time in order to correct inaccurate data or to cancel the Account.
7. The Customer shall not disclose the Password to third parties and shall keep it secure.
   
   

III. COLLECTION, USE, CORRECTION AND STORAGE OF PERSONAL DATA

1. The Company respects the right to privacy of each Customer. The Customer's Personal Data (name, surname, email address, telephone number, delivery address, payment details (bank account number, method of payment, etc.), purchase history, delivery address) are collected and processed for the following purposes:
   22.1. for the purpose of electronic commerce (when registering an account in the Online Shop), the following Personal Data is processed: name, surname, IP address, delivery address, purchase history (types of goods purchased, amounts spent), telephone number. The processing of personal data for the purpose set out in this point is carried out in accordance with Article 6(1)(b) of the Regulation, i.e. for the purpose of concluding and performing a contract. Retention period - once an account has been created, the data will be stored for 2 years from the last visit to the account.
   22.1.1 When you place an order in the Online Shop without creating an account, it is necessary to provide the Company with the personal data that is necessary for the execution of the order. Personal data provided when ordering goods without an account in the Online Shop will not be stored in the customer database as a customer account. Such data will only be stored and processed together with the order and the documents related to that order. The processing of personal data for the purposes set out in this paragraph is carried out in accordance with Article 6(1)(b) of the Regulation, i.e. for the purpose of concluding and performing a contract. Retention period for purchases without an account - personal data will not be retained for the purpose of ordering the goods for longer than the purposes of the processing require. Data retention period of 2 years or until the data subject requests to stop the processing of his/her data
   22.3. for direct marketing purposes, the following Personal Data will be processed: name, surname, mobile phone number, email address. For the purpose of direct marketing, your data will be processed on the basis of Article 6(1)(a) of the Regulation, i.e. on the basis of your consent, for a period of 10 years from the date on which your consent is obtained, after which it will be deleted or a new consent will be obtained and the processing will continue. The processing of the customer's personal data shall not exceed 3 years from the last active action (e.g. purchase, newsletter opening). After this period, the Customer's Personal Data will be deleted after the Customer has been informed of this. The fact of obtaining the Customer's consent will be kept as evidence for the duration of the consent and for 1 year after the end of the processing of the data referred to in the consent. In this case, the personal data will not be processed for the purpose of direct marketing and the fact of obtaining consent will be processed for the purpose of asserting, exercising or defending legal claims against the Company.
   22.4 For the purpose of administering electronic enquiries, the following Personal Data shall be processed: name, surname, address, gender, telephone number, e-mail address. This personal data will be processed in accordance with Article 6(1)(b) of the Regulation, i.e. for the purpose of entering into and performance of a contract; and in accordance with Article 6(1)(c) of the Regulation, i.e. for the performance of a legal obligation. This personal data will be processed by the Company until the enquiry has been dealt with and will be kept for 3 months from the date of the enquiry or the execution of the contract (in the case of an enquiry relating to the execution of a contract) for a period of 10 years, together with the contract and any other documents (i.e. the contract and the accounting records).

1. Both when registering for the first time in the Online Shop and when placing each order, the Customer may consent to the processing of his/her Personal Data (name, surname, telephone number , e-mail address) for the purpose of Direct Marketing. After consenting to the processing of his/her Personal Data for the purpose of Direct Marketing, as well as to the receipt of Direct Marketing communications (e-newsletters with offers, SMS text messages, quality of service surveys), if the Customer no longer wishes to do so at a later date, he/she shall inform the Company by e-mail to the following address: [....] or by phone [...] or by sending a message to Žirmūnų g. 70, Vilnius, the Company will no longer process his Personal Data for the purpose of Direct Marketing and will not send any e-newsletters, except for the information related to the Client's specific order.
2. The Customer also has the opportunity to exercise his/her right to object to the processing of the Customer's Personal Data for the purpose of Direct Marketing by clicking on the relevant link in each email sent.
3. As a Data Subject, the Client has the following rights:
• receive information from the Company about the processing of the Customer's Personal Data, to have access to his/her Personal Data and how it is processed;
• to obtain information from the Company as to the sources and nature of the Customer's personal data collected, the purposes for which it is processed, and the recipients to whom it is provided and to whom it has been provided for at least the last 1 (one) year;
• to request rectification, destruction of the Client's Personal Data or to suspend, with the exception of storage, the processing of his/her Personal Data where the Personal Data is processed in violation of the provisions of the Law on the Legal Protection of Personal Data of the Republic of Lithuania and other laws.
• Object to the processing of the Customer's personal data, unless the processing is carried out for a legitimate interest pursued by us or by a third party to whom the personal data is provided and the Customer's interests are not overriding
• Request the restriction of the Company's processing of personal data;
• Request that the personal data processed, if processed by automated means, be transmitted by the Company to another party, if this is technically feasible;
• lodge a complaint about the processing of personal data with the State Data Protection Inspectorate.
4. In order to exercise the Customer's rights as a Data Subject as set out in Clause 25, please contact us at [email protected]
5. In order for the Company to be able to accept and exercise the data subject rights requested by the Client, you must confirm your identity by one of the following methods when submitting a request: (i) by submitting the request by post or by courier - by enclosing a copy of a valid identity document certified in accordance with the procedure established by law; (ii) by submitting the request electronically - by confirming it by electronic means of communication that allow for the proper identification of the person (e.g., by a mobile signature, a qualified electronic signature or similar).
6. Upon receipt of your request regarding the exercise of the data subject's rights, the Company will provide you with a response without delay, but no later than within 1 (one) month from the date of the request. This period may be extended by a further month if necessary, depending on the complexity and number of requests. You will be informed of such extension in the first month. The information you request will be provided free of charge. However, if the Company sees that your requests are manifestly unfounded or disproportionate, in particular because of their repetitive content, it has the right to charge you a reasonable fee (i.e. to request reimbursement of administrative costs) or to refuse to act on such a request.
7. The answer will be provided in the way you choose in your request. If you do not specify in your request the method by which you wish to receive the reply, the Company will send you the reply in the same way in which the request was made.
8. The Client's Personal Data is not disclosed to third parties, except in the following cases:
   30.1. when the Customer's consent is obtained as set out in this Privacy Policy;
   30.2. when Personal Data is provided to Partners providing services to the Company in connection with the Company's activities for the purposes of electronic commerce;
   30.3. to Partners belonging to the same group of companies located in a Member State of the European Union for IT solutions, financial/accounting;
   30.4. to the competent authorities in the cases stipulated by the laws and regulations of the Republic of Lithuania.

1. The Company does not collect special categories of data about the Customer.
2. The Company shall implement organisational and technical measures to protect Personal Data against accidental or unlawful destruction, alteration, disclosure, as well as against any other unlawful processing. The level of Personal Data protection measures applied by the Company complies with the legal requirements of the Republic of Lithuania. The Customer's personal data is encrypted from the moment of its authorization in the Online Shop. The purchase procedure is carried out through the https:// protocol. Access to Personal Data is restricted to persons authorised by the Company.
3. In cases where it is necessary, pursuant to the instructions of the competent authorities and/or the Customer's Personal Data may have been used in the course of an illegal activity, or there are reasonable suspicions of identity theft for which the competent law enforcement authorities are conducting a pre-trial investigation, or there are other legitimate grounds or purposes, the Customer's Personal Data will be stored on the Company's servers for a longer period of time than provided for in this Privacy Policy.
4. The e-shop offers a variety of electronic payment systems for banks and payment platforms.
5. The Customer uses third party services to pay for the goods. The e-shop is not responsible for the quality and actions of these services.
6. The Company receives personal data from the Data Subject itself, i.e. the Customer, the payment service provider.
7. The Company does not transfer Customer Data outside the European Economic Area (European Union, Liechtenstein, Norway). The Company does not transfer Customer Data to international organisations.
8. In order for the Company to be able to offer the Customer a full range of services in the Online Shop, information (Cookies) is stored on the Customer's computer (device), which is used to identify the Customer as a previous user of , to collect statistics on the Online Shop's traffic, information about the shopping cart. The Customer may delete some or all of the Cookies at any time, as described in the link to the information table on Cookies on the website.
9. The cookies used in the Online Shop are described in the table below:

IV. OTHER PROVISIONS

   40. The Company has the right to amend, supplement the Privacy Policy in whole or in part. Amendments or changes to the Privacy Policy shall come into force from the date of their publication, i.e. from the date on which they are published in the Online Shop.
   41. If you have any questions about the processing of your personal data, we will be pleased to respond or to provide you with any additional information we may disclose. You can always contact us by email at [email protected] or by phone at +37069934014