Personal data protection
Privacy policy
This policy explains how UAB Proliuks collects, uses and stores the data of visitors to the Dovanų krautuvė website, clients and persons submitting enquiries.
Updated 30 October 2026
2. Which personal data we process
- Contact and identity data: first name, surname, company name, e-mail address, phone number.
- Enquiry and project data: recipients, occasion, quantity, budget, preferred deadline, delivery city or number of addresses, message and other information you provide.
- Order and communication data: selected products and their variants, enquiry or order number, correspondence, data required for delivery.
- Account data: login and account information when you decide to create an account.
- Marketing preferences: newsletter subscription and the consents you have given or withdrawn.
- Technical data: IP address, browser and device information, server logs, security events and essential cookie identifiers and, with your consent, analytics cookie identifiers and website usage data.
Please do not provide special categories of data in forms and messages, for example health, biometric or political opinion data, unless they are necessary for your specific request.
3. Purposes of data processing and legal bases
| Purpose | Data processed | Legal basis |
|---|---|---|
| Responding to an enquiry, preparing a proposal and agreeing to a gift project | Contact, company and project data, correspondence | Conclusion of a contract or steps at your request before concluding a contract; legitimate interest in managing business communication |
| Fulfilling an order, personalisation, assembly and delivery | Order, contact, delivery and payment accounting data | Performance of a contract and compliance with legal obligations |
| Administering the account and the enquiry basket | Account, login, basket and preference data | Performance of a contract; legitimate interest in ensuring the service works |
| Analysing how the website is used (Google Analytics) | Website usage and technical data, analytics cookie identifiers | Your consent, which you may withdraw at any time |
| Sending newsletters and offers | E-mail address, subscription and consent data | Your consent, which you may withdraw at any time |
| Ensuring website security, protecting against spam and abuse | Technical data, server logs, security events | Legitimate interest in ensuring the security of systems, users and the business |
| Complying with accounting, tax and other legal requirements | Order, invoice and accounting data | Legal obligation |
When we process data based on legitimate interest, we assess that our interests do not override your rights and reasonable expectations. You have the right to object to such processing.
4. To whom we may transfer data
We transfer to service providers only as much information as is necessary to provide the specific service. These may be:
- website hosting, IT maintenance, e-mail and security service providers;
- accounting and professional service providers, where necessary to fulfil an order or legal obligations;
- manufacturers, personalisation, packaging, courier and logistics partners;
- Google as the analytics service provider (Google Analytics), only with your consent;
- translation service providers: Google (in the English catalogue, Google Translate receives the text of the page being displayed, your IP address and browser information, see the Cookie Policy) and DeepL (receives only a search phrase entered in English, to translate it into Lithuanian);
- public authorities, where we are required by law to provide data.
Service providers process data according to our instructions or as independent controllers where their obligations are set by law. If a service provider were to process data outside the European Economic Area, we would apply the transfer safeguards provided for by the GDPR.
5. How long do we keep data
- enquiries that did not become an order are usually kept for up to 2 years from the last communication;
- order, accounting and contractual data are kept for the duration of the contract and afterwards for the period set by law;
- newsletter data are kept until consent is withdrawn or the subscription becomes inactive;
- technical and security logs are kept only as long as necessary for security and incident investigation;
- cookie durations are given in the Cookie policy.
Where data are needed to establish, exercise or defend a legal claim, we may keep them longer until that need no longer exists.
6. Data security
We apply organisational and technical measures to protect data from unauthorised access, loss, alteration or disclosure. We grant access only to those employees and service providers who need it to perform their functions.
7. Your rights
In the cases provided for by the GDPR, you have the right to access your data, to request their rectification or erasure, to restrict processing, to receive your data in a portable format, to object to processing and to withdraw consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
Submit your request by e-mail to info@dovanukrautuve.lt. We will respond within the period set by law. If you believe your data are being processed improperly, you may also lodge a complaint with the State Data Protection Inspectorate.
8. Automated decisions and changes to the policy
We do not make decisions that would have legal or similarly significant effects on you solely by automated means. We may update the policy when our services, the technologies used or the law change. The latest version is always published on this page.