Privacy Policy

1. Who controls your data?

The controller is MB “PS Vilnius”, company code 304744241, Dariaus ir Girėno g. 20, LT-02188 Vilnius, Lithuania. Email: info@slapukas.lt; phone: +370 670 60651.

This policy covers personal data of slapukas.lt visitors, customers and company representatives. We receive data from you, through your use of the website and, where needed for an order, from payment or delivery providers.

2. What we process and why

• Orders and delivery: name, contact details, delivery and billing information, ordered products and payment status. Basis: entering into and performing a contract (GDPR Article 6(1)(b)). Without required information, we cannot fulfil your order.
• Accounting: invoice and transaction information. Basis: legal obligation (c).
• Enquiries, claims and accounts: contact details, correspondence, information you provide and account data if you use an account. Basis: contract, legal obligations or our legitimate interest in responding and protecting our rights, depending on the circumstances (b, c or f).
• Security: technical information such as IP address, browser details and activity logs. Basis: our legitimate interest in protecting the website and preventing abuse (f).
• Newsletters and optional tracking: email address, subscription and consent records and, depending on the tools selected, browsing and interaction data. Basis: consent (a).

3. Newsletters and offers

By subscribing, you agree to receive news and offers from MB “PS Vilnius” at the email address provided. Subscription is not required to purchase. You can unsubscribe through the link in an email or by contacting us. Withdrawal does not affect the lawfulness of processing before withdrawal.

Order-related messages are sent to fulfil your order, independently of newsletter subscription.

4. Cookies and similar technologies

Cookies are small data files stored in your browser. Tracking pixels and similar technologies may serve related purposes.

• Essential technologies support the basket, login, security and functions you request.
• Analytics technologies help assess traffic and website use.
• Marketing technologies measure advertising results and tailor offers.

Optional technologies require prior consent. Browsing, purchasing or reading this policy does not constitute that consent. You can delete or block cookies in your browser; blocking essential cookies may affect functionality. For consent and data processing enquiries, contact info@slapukas.lt.

5. Service providers and recipients

Information necessary for your order is shared with the selected payment and delivery providers. IT, platform, accounting and other service providers support the website and customer service. Information is provided to competent authorities where required by law.

The following services are used or configured on the website:

• Verskis / UAB EVISPA – e-commerce platform.
• Omnisend – newsletters and marketing forms; Smartsupp – chat.
• Google – Analytics, Tag Manager, Ads, reCAPTCHA and Google sign-in when you select that function.
• Meta Pixel – advertising measurement; Microsoft Clarity – website usage analysis; Xandr / AppNexus – remarketing.

The data involved depends on the function used and service settings. Analytics and advertising tools may process online identifiers, device and browsing information. Embedded third-party content may transmit technical information to its provider.

6. How long we retain data

Retention depends on the purpose and applicable legal obligations:

• VAT invoices are retained for 10 years from issue.
• Order and correspondence data is retained as needed to fulfil obligations, handle enquiries and establish, exercise or defend legal claims. The period depends on the document and applicable time limits.
• Account information is retained while the account is used. After deletion, records needed for accounting or legal claims may be kept separately.
• Marketing data is used until consent is withdrawn or it is no longer needed for that purpose. A minimal opt-out record may be retained to prevent further marketing.
• Technical records and cookie lifetimes depend on their function and provider settings. Contact us for a specific retention period.

7. Transfers outside the EEA

Some providers may process data outside the European Economic Area. Such transfers require a GDPR basis, such as a European Commission adequacy decision or standard contractual clauses and, where needed, additional safeguards. You may request details of safeguards applicable to a specific transfer by email.

8. Your rights and how to contact us

Subject to legal conditions, you can access and rectify your data, request erasure or restriction, exercise data portability, object to processing based on legitimate interests and withdraw consent. You can object to direct marketing at any time.

Send requests to info@slapukas.lt. Where necessary, we will request proportionate information to verify identity and prevent disclosure to another person. We will respond within the procedures and time limits required by law. Erasure does not cover records we must retain by law.

You may also complain to the Lithuanian State Data Protection Inspectorate or the EU supervisory authority where you live or work.

9. Policy updates

The current version and update date are published on this page. We will communicate material changes appropriately. A policy update does not itself constitute consent to new processing purposes.