1. General Information

This Privacy Policy explains how UAB “Autopasaulis ir Ko” collects, uses, stores and discloses personal data when you visit the modelis.lt website and online store, create an account, place an order, or contact us regarding goods, services, returns, warranties, complaints or other matters.

Data Controller: UAB “Autopasaulis ir Ko”

• Company registration number: 124603164
• VAT number: LT246031610
• Registered office: Prūdiškių g. 19A, Prūdiškės, Vilnius District, Lithuania
• Business and correspondence address: Žirmūnų g. 139, LT-09120 Vilnius, Lithuania
• Telephone: +370 699 39438
• Email for privacy matters: modelis.eu@gmail.com

This Policy applies to information relating to natural persons. A company name, registration number or general business contact details are not personal data in themselves; however, the name, personal contact details and other information relating to an identifiable employee or representative of a legal entity are processed in accordance with this Policy.

2. Personal Data We Process

Depending on how you use modelis.lt, we may process the following categories of personal data:

• Identity and contact data: name, surname, telephone number, email address, delivery address and billing address.
• Company representative data: the representative’s name, surname, position and contact details, together with company details where a purchase is made on behalf of a business.
• Account data: login name or email address, password stored in a protected form, account settings, address book and order history.
• Order and contract data: selected goods or services, quantities, prices, discounts, order number, delivery method, payment method and status, invoices and other purchase document information.
• Payment data: payment method, amount, date, status and payment reference or identifier. We do not receive full payment card details or PayPal login credentials; these are processed by the selected payment service provider under its own terms.
• Delivery data: recipient’s name, address, postcode, telephone number, email address, shipment number and delivery status.
• Customer service and communication data: emails, contact form contents, records of communications, documents, photographs, video material and other information you submit in connection with an enquiry.
• Return, withdrawal, warranty and complaint data: order and product information, the request and its date, information about the condition of the goods, return and resolution details and, where necessary for a refund, a bank account number.
• Direct marketing data: email address, consent or objection record, preferences, the source and date of consent, newsletter delivery and unsubscribe information.
• Technical and usage data: IP address, date and time of access, browser and device information, pages viewed, session and cart identifiers, language and currency choices, login and security log information.

Please do not send special-category personal data, a personal identification number, a copy of an identity document or other excessive information unless we have expressly requested it and it is necessary to meet a specific legal requirement.

3. Sources of Personal Data

We normally obtain personal data:

• directly from you when you register, make a purchase, complete a form, subscribe to a newsletter or contact us;
• automatically from your device and browser when you use the website;
• from payment service providers, in the form of payment status and information necessary to reconcile the payment;
• from delivery service providers, in the form of shipment status, proof of delivery or information about an unsuccessful delivery;
• from manufacturers, suppliers or authorised repair centres where necessary to assess a warranty case;
• from public registers or other lawful sources where necessary to verify a business or its representative, comply with a legal obligation or establish, exercise or defend legal claims.

4. Purposes and Legal Bases for Processing

4.1. Account Creation and Administration

We process data so that you can create an account, save delivery addresses, view order history and use account functions. The legal basis is entering into and performing a contract or taking steps at your request before entering into a contract. For account and website security, we also rely on our legitimate interest in preventing unauthorised use.

4.2. Accepting, Paying for, Fulfilling and Delivering Orders

We process data to receive and confirm an order, receive payment, prepare goods, hand them to the delivery service provider, inform you about order progress and perform the contract. The legal basis is entering into and performing a contract.

4.3. Custom Orders and Services

We process drawings, files, measurements, text, technical specifications, contact details and order information supplied by you in order to assess, agree, manufacture and deliver a customised product or service. The legal basis is taking steps before entering into a contract and performing the contract.

4.4. Accounting, Tax and Legal Obligations

We process order, invoice, payment and other mandatory data in order to comply with accounting, tax, consumer protection, product safety and other legal obligations. The legal basis is compliance with a legal obligation applicable to the Controller.

4.5. Returns, Withdrawal, Warranty and Complaints

We process data to receive and assess a request, communicate with you, organise a return or inspection, make a decision, arrange repair, replacement or refund, and retain evidence of the resolution. The legal bases are performance of a contract, compliance with a legal obligation, and our legitimate interest in establishing, exercising or defending legal claims.

4.6. Customer Service and Communications

We process your contact details and the content of communications to answer questions, provide information about goods, compatibility, services or orders, and resolve problems. The legal basis depends on the enquiry: taking steps before entering into a contract, performance of a contract, or our legitimate interest in properly administering customer enquiries.

4.7. Fraud Prevention and Security of the Website and Information Systems

We may process technical, login, order and payment-status data to identify unusual or unlawful activity, protect accounts, the website, employees, customers and property, investigate incidents and maintain system operation. The legal basis is our legitimate interest in ensuring the secure and reliable operation of the online store and, where applicable, compliance with a legal obligation.

4.8. Direct Marketing and Newsletters

We send newsletters and promotional communications by electronic means after obtaining clear prior consent, except where the law permits us to offer our own similar goods or services to an existing customer and the customer was given a clear, free and easy opportunity to object both when the contact details were collected and in every communication.

Consent to marketing is not required to place an order. You may withdraw consent at any time by using the unsubscribe link in an email or by writing to modelis.eu@gmail.com. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

5. Cookies and Similar Technologies

The website uses strictly necessary cookies and similar technologies required for the shopping cart, session, login, language or currency selection, fraud prevention and secure website operation. Such technologies are used to the extent necessary to provide a service requested by you or for our legitimate interest in maintaining the security and operation of the website.

Analytics, personalisation or marketing cookies, where enabled on the website and not strictly necessary under applicable law, are used only after obtaining your consent. You may change or withdraw consent in the cookie settings where that function is provided. You may also delete or block cookies in your browser; however, disabling necessary cookies may prevent parts of the website from functioning.

Specific information about the cookies used, their providers, purposes and lifetimes must be provided in the website’s cookie notice or cookie settings.

6. Recipients of Personal Data

We disclose personal data only to the extent necessary for a specific purpose and only to recipients having a lawful basis to receive it:

• payment service providers, banks and PayPal where the relevant payment method is selected;
• selected couriers, postal operators, parcel-terminal operators and other delivery service providers;
• website hosting, server, backup, email, IT maintenance and cybersecurity service providers;
• accounting, audit, legal and debt-administration service providers where their services are required;
• manufacturers, suppliers, warranty service providers or authorised repair centres where necessary to assess a specific warranty case;
• public authorities, courts, law-enforcement or supervisory authorities where disclosure is required by law or a lawful request;
• another business entity in connection with a reorganisation or a transfer of all or part of the business, subject to applicable data-protection safeguards.

Service providers acting as our processors receive only the data necessary for their services and are required to process it under our instructions and confidentiality and security obligations. Where a payment, delivery or other service provider acts as an independent controller, its processing is additionally governed by its own privacy policy.

We do not sell personal data.

7. Transfers Outside the European Economic Area

We seek to process personal data within the European Economic Area. If a selected service provider processes data in a country outside the European Economic Area, the transfer is made only where a lawful transfer mechanism is available, such as a European Commission adequacy decision, Standard Contractual Clauses or another applicable safeguard.

You may request information about safeguards applicable to a specific transfer by emailing modelis.eu@gmail.com. Copies of documents may be provided with commercial secrets or other persons’ data removed.

8. Retention Periods

We retain personal data no longer than necessary for the relevant purpose, although certain data must be kept longer to comply with legal obligations or protect legal claims. We apply the following main periods and criteria:

• Order, contract, payment and accounting records: for the period required by law, normally 10 years from the relevant document or the end of the relevant financial year.
• Account data: while the account is active or until deletion at your request. Additional profile data in an inactive account may be deleted or anonymised after 5 years of inactivity; however, order data and information subject to legal retention duties are retained separately for the applicable longer period.
• Uncompleted order or abandoned-cart data: normally up to 3 months, unless the data are needed for a security incident, dispute or another lawful reason.
• Enquiries and communications: normally for 2 years after the final response; where correspondence relates to a contract, complaint or dispute, it is retained for the period applicable to the related contract or dispute.
• Return, warranty and complaint data: for the duration of the procedure and normally for 3 years after final resolution; longer where a dispute is ongoing or the data are needed to establish, exercise or defend a legal claim.
• Direct marketing data: until consent is withdrawn or an objection is made. Evidence of consent, withdrawal and suppression may be retained for a further 3 years to demonstrate compliance and ensure that marketing is not sent to a person who has opted out.
• Technical and security logs: normally for up to 12 months; in the event of an incident, suspected fraud or a dispute, until the investigation or legal procedure is completed.
• Cookies: until the relevant cookie expires or until you delete it or withdraw consent. Specific periods must be stated in the cookie notice or settings.

At the end of the applicable retention period, data are deleted, securely destroyed or irreversibly anonymised, unless retention is extended by law, an authority’s instruction, an ongoing dispute or a lawful claim.

9. Your Rights

Subject to the applicable conditions, you have the right to:

• receive information about the processing of your personal data;
• access personal data we hold about you and obtain a copy;
• have inaccurate data corrected and incomplete data completed;
• request erasure where the legal conditions are met;
• request restriction of processing;
• receive data you supplied in a structured, commonly used and machine-readable format and, where technically feasible, have it transmitted to another controller;
• object, on grounds relating to your particular situation, to processing based on legitimate interests;
• object to direct marketing at any time, after which we will no longer use your data for that purpose;
• withdraw consent at any time where processing is based on consent;
• lodge a complaint with the State Data Protection Inspectorate.

These rights are not absolute. For example, we cannot erase data that we are required to retain under accounting or other laws, or data necessary to establish, exercise or defend legal claims.

10. How to Submit a Data-Protection Request

You may submit a request:

• by email to modelis.eu@gmail.com;
• by post or in person, by prior arrangement, at Žirmūnų g. 139, LT-09120 Vilnius, Lithuania.

Please state which right you wish to exercise and provide information that enables us to identify you and locate the relevant data. If we have reasonable doubts concerning the identity of the person making the request, we may ask for additional information. We will request only what is necessary to verify identity.

We will respond without undue delay and in any event within one month of receiving the request. Taking into account the complexity and number of requests, we may extend that period by a further two months, informing you of the extension and reasons within the first month.

Requests are normally handled free of charge. Where a request is manifestly unfounded or excessive, in particular because it is repetitive, we may, where permitted by law, charge a reasonable administrative fee or refuse to act, explaining the reasons.

11. Complaint to the Supervisory Authority

If you believe that your personal data are being processed unlawfully, we invite you first to contact us at modelis.eu@gmail.com so that we can investigate the matter.

You also have the right to lodge a complaint with:

State Data Protection Inspectorate of the Republic of Lithuania
L. Sapiegos St. 17, LT-10312 Vilnius, Lithuania
Email: ada@ada.lt
Website: https://vdai.lrv.lt/en/

12. Automated Decision-Making and Profiling

We do not make decisions based solely on automated processing that produce legal or similarly significant effects for you. Ordinary automated functions, such as shopping-cart operation, order-status notices, payment verification or security filters, may be used, but a disputed or significant decision can be reviewed by a person.

13. Data Security

We apply technical and organisational measures appropriate to the nature of our operations, the amount of data and the risks, designed to protect personal data against unlawful or accidental destruction, loss, alteration, disclosure or access. Access is provided only to employees and service providers who need it to perform their functions.

No information system can guarantee absolute security. You must also protect your account credentials, avoid reusing the same password on different websites and notify us without delay if you suspect unauthorised use of your account.

14. Mandatory Data and Consequences of Not Providing It

To fulfil an order, you must provide at least the information marked as mandatory in the order or registration form. Without delivery, contact, billing or payment data, we may be unable to enter into or perform the contract, deliver goods, issue a document or assess a request.

Providing data for newsletters or other direct marketing is optional and does not affect your ability to make a purchase.

15. Changes to This Policy

We may update this Privacy Policy when laws, website functions, service providers or processing activities change. The latest version is published on modelis.lt. Where appropriate, we will give additional notice of material changes.

Privacy Policy version: 20 July 2026.