Version 1.0, 18 August 2026 Effective from the date of publication on www.autoamera.lt.
1. Controller
The controller of your personal data is:
UAB Autoamera Company number 301306654 VAT number LT100004181018 Registered office: Vingio g. 39-13, LT-95218 Klaipėda, Lithuania Business and shop address: Šilutės pl. 5A, LT-91109 Klaipėda, Lithuania Telephone +370 673 99229 Email Deividas@autoamera.lt
This Policy explains how we process data relating to visitors, buyers, customer representatives and persons contacting us through www.autoamera.lt.
2. Processing activities
| Activity |
Data |
Purpose |
Legal basis |
Retention |
| Orders and performance | name, email, telephone, billing and delivery address, goods, price, payment and delivery status, communications | accept and fulfil orders, deliver and refund | contract steps and performance; legal obligations | active order data for performance and guarantee periods; data in accounting records for 10 years unless the law requires another period |
| Customer account | name, email, password hash, addresses, order history and settings | provide a voluntary account and its functions | contract performance; customer's request | while active; after 3 years of inactivity a warning is sent and the account is removed after 30 days without a response, excluding records retained separately by law |
| Payment | method, amount, currency, transaction identifier and status, data received from the payment institution | receive and reconcile payment; prevent fraud | contract; legal obligation; legitimate security interests | accounting records for 10 years; technical payment and anti-fraud data for 3 years unless required for a dispute or lawful investigation |
| Delivery | recipient, address / locker / bus station, telephone and shipment number | deliver and track goods | contract performance | 2 years after delivery, or longer where needed for an unresolved claim, guarantee or legal obligation |
| Invoices and accounting | customer or company identity, number, VAT number, address, order and payment information | issue and retain accounting documents | legal obligation | 10 years unless the law in force requires another period |
| Enquiries, VIN and parts selection | name, contacts, message, VIN, vehicle information, part codes and correspondence | respond, check fitment and prepare an offer | pre-contract steps at the person's request; legitimate service and evidence interests | 2 years after the last communication; longer where it becomes part of an order or guarantee file |
| Returns, guarantee and complaints | contacts, order, claim, VIN / installation or diagnostics, photographs and resolution | exercise consumer rights, examine claims and establish or defend legal claims | legal obligation; contract; legitimate interests | while the matter is handled and 5 years after final resolution; longer only for an ongoing dispute or legal requirement |
| Approved B2B deferred payment | company and representative, agreement and order history, credit limit and administrative decision | approve deferred payment and manage debt | contract; legitimate credit-risk interests | during the relationship and 10 years after full settlement unless law requires otherwise |
| Website security | IP, time, URL, browser and device data, login and security events | protect the website and accounts and investigate incidents | legitimate IT-security interests; legal obligation where applicable | ordinary logs for 90 days; incident records during the investigation and up to 5 years afterwards where needed for claims |
| Analytics and online advertising | cookie identifiers, IP and technical data, pages, interactions, purchase or conversion data | measure site use and advertising results and manage Google Ads and Meta advertising | consent | the duration of each cookie in the Cookie Policy or until consent is withdrawn |
We do not request card PINs or online-banking passwords. Do not send full card details, passwords, unnecessary identity-document copies or other sensitive information through the contact form.
UAB Autoamera currently does not record telephone calls, conduct CCTV monitoring in the shop or send email newsletters. If any activity is introduced, a lawful basis and appropriate notice will be established before it begins and this Policy will be updated.
3. Required and voluntary data
Fields marked as required in checkout are needed to form and perform the contract. Without them we cannot accept or fulfil the order. Creating an account and any marketing consent are voluntary. Refusing marketing consent does not affect the ability to purchase.
4. Recipients and processors
Where necessary, data may be provided to:
- online-store, server, backup and IT-maintenance providers acting on our instructions;
- the payment service provider identified during checkout, including Paysera when offered, and banks participating in the transaction; the provider's identity and privacy information are displayed during checkout;
- the courier, parcel-locker operator or bus-parcel provider selected by UAB Autoamera for the particular order;
- providers of accounting systems, audit, legal and debt-administration services where necessary and lawful;
- public authorities, courts and law enforcement where required or necessary for legal claims;
- Google Ireland Limited, Meta Platforms Ireland Limited and recipients used by them, only following the relevant analytics or marketing consent described in the Cookie Policy.
We enter into GDPR-compliant arrangements with processors and provide only the data necessary for their task.
5. Transfers outside the EEA
Google and Meta services may make data accessible or transfer it outside the European Economic Area, including to the United States. Where a provider processes data outside the EEA, we require a lawful transfer mechanism, such as an applicable European Commission adequacy decision or Standard Contractual Clauses and, where needed, supplementary measures. Current provider transfer information is available in the provider privacy documents linked from the Cookie Policy.
6. Automated decisions
The decision to grant deferred-payment status is made by UAB Autoamera administration and not solely by an automated system. If processing producing legal or similarly significant effects were introduced, this Policy would be updated and applicable rights provided.
7. Direct marketing
7.1. We do not currently send email newsletters. If introduced, messages would be sent only on a valid legal basis. Consent would not be bundled with mandatory acceptance of the Terms or pre-selected.
7.2. Analytics and marketing cookie consent can be withdrawn through “Cookie settings”. If newsletters were introduced, consent could also be withdrawn via the link in each email or by contacting Deividas@autoamera.lt. Withdrawal does not affect processing carried out lawfully before withdrawal.
8. Cookies
Necessary, preference, analytics and marketing cookies, their duration and consent controls are described in the Cookie Policy. Non-essential cookies are used only after the corresponding consent.
9. Your rights
Where applicable, you may:
- obtain information and access your data;
- correct inaccurate or incomplete data;
- request erasure;
- restrict processing;
- object to processing based on legitimate interests;
- receive data you supplied in a structured format and transmit it;
- withdraw consent at any time;
- not be subject to a solely automated decision producing legal or similarly significant effects, where this right applies;
- lodge a complaint with a supervisory authority.
Send requests to Deividas@autoamera.lt or Šilutės pl. 5A, LT-91109 Klaipėda, Lithuania. We may request proportionate information to verify identity but do not retain an identity-document copy without a lawful basis. Requests are handled within GDPR time limits.
Supervisory authority: State Data Protection Inspectorate (VDAI), L. Sapiegos g. 17, 10312 Vilnius, Lithuania, vdai.lrv.lt.
10. Security and breaches
We use organisational and technical measures intended to protect data from unlawful destruction, loss, alteration, disclosure or access. Access is limited to job necessity. If a breach occurs, we assess the risk and notify VDAI and affected persons where required.
11. Children's data
The store is not directed at persons unable under applicable law to enter the relevant contract independently. We do not knowingly conduct profiled marketing directed at children.
12. Changes
The current version and effective date are published. Material changes are explained by an appropriate notice where required or significantly impactful. Previous versions are retained so we can establish what information applied.
