This privacy policy applies to all personal data that you provide to us and that we collect and process when you use UAB "GFK Industries", company code 305668622, registered address V. Sirokomlės g. 58, 13260 Nemėžis, Vilnius district, Lithuania (hereinafter – eStore or Data Controller), owned and operated online store vautosport.pro

1. Data Controller and Contacts

Data Controller: UAB "GFK Industries"
Company code: 305668622
Address: V. Sirokomlės g. 58, 13260 Nemėžis, Vilnius district, Lithuania
Email: info@vautosport.pro
Phone: +370 681 44777

For questions regarding personal data processing, contact us at the specified email address or phone number.

2. What personal data is collected and processed

• 2.1. Identification data: name, surname, email address;
• 2.2. Contact data: phone number, delivery address;
• 2.3. Account data: username, encrypted password;
• 2.4. Order data: purchase history, product choices;
• 2.5. Payment data: payment method (excluding bank card details, which are processed by payment service providers);
• 2.6. Technical data: IP address, browser type, cookies;
• 2.7. Behavioral data: website usage statistics, viewed products.

3. Purposes and legal bases for personal data processing

4. Data collection methods

• 4.1. Directly from you: registration, order, contact forms;
• 4.2. Automatically: cookies, website analytics tools;
• 4.3. From third parties: social networks (if you use login through them);
• 4.4. From publicly available sources: if necessary for contract performance.

5. Use of cookies

• 5.1. Essential cookies - These cookies are essential for the website to function and cannot be disabled. They are usually set only in response to your actions.
• 5.2. Analytics cookies - Help us understand how visitors use the website by collecting and reporting information anonymously.
• 5.3. Marketing cookies - Used to display advertisements that match your interests. You can manage these cookie settings.

Cookie management: You can manage cookie settings in your browser settings or on our website's cookie management tool.

6. Data retention periods

• 6.1. Account data: while account is active + 1 year after last login;
• 6.2. Order data: 10 years (accounting requirements);
• 6.3. Marketing data: until you withdraw consent;
• 6.4. Analytics data: 26 months;
• 6.5. Cookies: from 1 day to 2 years (depending on type).

7. Data subject rights

Under GDPR you have the following rights:

• 7.1. Right to information - receive information about data processing;
• 7.2. Right of access - access your processed personal data;
• 7.3. Right to rectification - correct inaccurate data;
• 7.4. Right to erasure ("right to be forgotten") - delete data;
• 7.5. Right to restrict processing - temporarily suspend data processing;
• 7.6. Right to data portability - receive data in structured format;
• 7.7. Right to object - object to data processing;
• 7.8. Right to withdraw consent - withdraw given consent at any time.

How to exercise rights: Contact us by email info@vautosport.pro or in writing at the specified address. We will respond within 30 days.

8. Data transfer to third parties

• 8.1. Service providers in Lithuania/EU:
  • Delivery service providers (DPD, Omniva, LP Express);
  • Payment service providers (Montonio, banks);
  • IT service providers (hosting, security);
  • Marketing service providers (email sending).
• 8.2. Transfer outside EU: If we use services outside the EU (e.g., Google Analytics, Facebook), data is transferred only with appropriate safeguards (standard contractual clauses, adequacy decisions).
• 8.3. Legal requirements: Data may be transferred to government authorities if required by law.

9. Data security

We implement the following security measures:

• 9.1. Technical measures: SSL encryption, secure servers, firewalls;
• 9.2. Organizational measures: access control, employee training;
• 9.3. Data breach notification: we will report breaches within 72 hours to the supervisory authority.

10. Automated decision-making

We currently do not use automated decision-making, including profiling, that would have legal effects.

11. Other provisions

• 11.1. Privacy policy changes: we reserve the right to change this policy. We will inform about significant changes by email or on the website;
• 11.2. Dispute resolution: disputes are resolved through negotiations, and if no agreement is reached - in the courts of the Republic of Lithuania;
• 11.3. Filing complaints: you have the right to file a complaint with the State Data Protection Inspectorate (ada.lt).

Privacy policy last updated: June 2025.