Legal
Privacy policy
This policy explains which personal data we process on this website, why, and what rights you have.
Last updated: [[PLACEHOLDER: date after legal review]]
Controller
UAB Nauja oda eshop, A. Goštauto g. 8-215, LT-01108 Vilnius, Lithuania, company code 306079160. Contact: speps.group@protonmail.com.
Data we process and why
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Answering your message (contact form or e-mail) | Name, e-mail address, message | Steps at your request before a contract, or legitimate interest in answering enquiries (Art. 6(1)(b) and (f) GDPR) | 3 years after the last exchange |
| Protecting the contact form against spam (Cloudflare Turnstile security check) | IP address, technical browser and device data | Legitimate interest in keeping the form free of automated abuse (Art. 6(1)(f) GDPR) | [[PLACEHOLDER: Turnstile retention per Cloudflare documentation]] |
| Operating and securing the website | IP address, technical logs | Legitimate interest (Art. 6(1)(f) GDPR) | 12 months at most |
| Remembering your age confirmation and cookie choice | Two settings on your device: in local or session storage (these stay in your browser), or as a last resort in a first-party cookie, which your browser sends with each request to this website; we do not store or evaluate it (see Cookies) | Strictly necessary for the service you request | Local storage: until you delete it. Session storage: until you close the browser. Cookie: 12 months |
This website does not use analytics, advertising cookies or tracking tools. A cookie is only set as a fallback when your browser blocks local and session storage. Giving us your data is voluntary, but without your name, e-mail address and message we cannot answer your enquiry. We do not use automated decision-making.
Recipients and processors
- Hosting, security check (Turnstile) and forwarding of contact form messages: Cloudflare, Inc., USA.
- E-mail mailbox that receives your message: Proton AG, Switzerland.
These providers act only on our instructions. Transfers to the USA rely on the EU-US Data Privacy Framework or on the European Commission's Standard Contractual Clauses. Switzerland is covered by an adequacy decision of the European Commission.
Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and objection, and you can withdraw a consent at any time. The withdrawal applies from that moment on. Write to speps.group@protonmail.com.
You can also lodge a complaint with the Lithuanian State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija) or with the data protection authority of your country.
Cookies and local storage
See the Cookie policy.
Changes
We may update this policy. The date at the top shows the current version.