Last updated: 3 September 2025

Data Controller

Owner name: vygeja.lt
Address: Lentvario g. 1, Vilnius, Lithuania
Company code: 122021560
VAT code: LT100000031215
Phone: +370 620 73994
Email: info@vygeja.lt

1. Scope and purpose of the Policy

This Privacy Policy explains how vygeja.lt lt (“we”, “us”, “our”, “ours”) collects, uses, protects, stores, discloses and secures personal data when you use our website vygeja.lt, contact us, make enquiries, make purchases, subscribe to our newsletters, apply for a job, or otherwise communicate with us, whether or not via the internet.

2. What personal data we may collect

• Identity and contact details: name, surname, company name, job title, postal address, email address, telephone number.
• Transaction data: order history, invoices, delivery and payment information.
• Content of communications: correspondence, inquiry and support messages, contact form records.
• Technical and usage data: IP address, browser and device information, operating system, pages visited, timestamps, referrer URLs, cookies and similar technologies.
• Marketing and preferences data: consents, subscription status, marketing preferences.
• Other data: any information you provide voluntarily (e.g. CV, project specifications, attachments).

3. Lawful basis for processing personal data (EUSBSD / GDPR)

• Contract performance – where the data is required for the performance of a contract (e.g. order fulfilment).
• Consent – where processing is based on your explicit consent (e.g. for marketing newsletters). You can withdraw your consent at any time.
• Legal obligation – where processing is required by legal requirements (e.g. accounting, tax).
• Legitimate interest – e.g. service improvements, fraud prevention, website security or direct B2B communications, always balancing your rights and freedoms.

4. Purposes of data use

• Order fulfilment, delivery, invoicing and customer service.
• For managing and authenticating user accounts (if applicable).
• Communicating about products, services, order status and technical support.
• Site and service performance, security and improvements (including analytics and troubleshooting).
• For marketing and advertising, if you have given your consent (or if permitted by law).
• Meeting legal and regulatory obligations and resolving disputes.

5. Cookies and similar technologies

Our website may use cookies and similar technologies to provide functionality, identify user preferences, enable e-commerce features and collect analytical data. Cookies may be essential, performance/analytical, functional or marketing. You can manage cookies through your browser settings and through any cookie management tool shown on the website.

6. Third parties and data processors

We may share data with service providers acting on our behalf (e.g. hosting services, payment providers, couriers, email and marketing platforms, accountants, legal advisors). We enter into contracts with these data processors to ensure adequate data protection. Third parties that we integrate into the website may collect data in accordance with their own privacy policies (e.g. analytics tools, mapping services).

7. International data transfer

Data may sometimes be processed or stored outside the European Economic Area (EEA). In such cases, we provide appropriate safeguards (e.g. standard contractual clauses approved by the European Commission or other legitimate transfer mechanisms) as required by applicable law.

8. Data retention (retention periods)

We will only retain personal data for as long as necessary for the purposes in question and as required by law (e.g. for accounting purposes). Examples:

• Bookkeeping/accounting files: the amount of time required by tax and accounting requirements.
• Customer service records: adequate time needed to support and resolve queries.
• Marketing data: stored until you withdraw consent or unsubscribe.

We will set specific retention periods in accordance with legislation and internal procedures.

9. Data protection (security)

We have appropriate technical and organisational measures in place to protect personal data against unauthorised access, loss, alteration or disclosure. This includes secure servers, access control, encryption of data in transit (HTTPS) and periodic security checks. While we make every effort to ensure security, we cannot guarantee 100% protection; we will act on possible privacy breaches in accordance with applicable law.

10. Your rights (for EEA residents)

If you are resident in the EEA, you have the following rights:

• Right of access – to find out if we are processing your data and to receive a copy of it.
• Right of rectification – to have inaccurate or incomplete data rectified.
• Right to erasure (“right to be forgotten”) – to request the erasure of data in certain cases.
• The right to restrict processing – to require restriction of processing in certain cases.
• The right to data portability – to receive the data in a structured, commonly used format and (if technically feasible) to transfer the data to another controller.
• Right to object – to object to processing, including in direct marketing cases.
• Withdrawal of consent – to withdraw your consent at any time (this will not affect the lawfulness of the processing carried out prior to withdrawal).

For implementation or questions, please send your requests to info@vygeja.lt or at the address/telephone number provided. We may verify requests to protect your identity.

11. Policy changes

We may update this Privacy Policy to reflect changes in legislation, technology or business developments. The “Last Updated” date at the top of the Policy will indicate the last time it was changed. We will announce material changes by notice or, where appropriate, by direct notification.

12. Contact

Manager’s contacts: info@vygeja.lt – +370 620 73994 – Lentvario g. 1, Vilnius.