Privacy policy

1. Data controller

• Name: Akvavista (owner Viktoras Peleckis)
• Address: Jakstonių g. 11, LT-11320 Vilnius, Lithuania
• Phone: +370 621 17712
• Email: viktoras.pel@gmail.com
• For any questions related to personal data, contact us at viktoras.pel@gmail.com.

2. What data we collect

• Request and order data: name, email, phone, city, preferred date, and the text you submit.
• Invoice data: payer details, issued invoices and payment history.
• Correspondence: content of emails and messages.
• Technical data: essential cookies and system records ensuring website security.

3. Purposes and legal bases

• Handling requests and providing services — performance of a contract or steps prior to entering into a contract (GDPR Art. 6(1)(b)).
• Invoicing and accounting — legal obligation (GDPR Art. 6(1)(c)).
• Website security and operation — legitimate interest (GDPR Art. 6(1)(f)).
• Newsletter (once enabled) — your consent (GDPR Art. 6(1)(a)), which you may withdraw at any time.

4. How long we keep data

• Requests that did not become orders — no longer than 2 years after our last contact.
• Contracts, invoices and accounting documents — up to 10 years as required by Lithuanian tax and accounting legislation.
• Correspondence — up to 2 years after the end of cooperation, unless longer statutory periods apply.

5. Data sharing

We do not sell your data or pass it to others for their own use. Data may be processed by providers who help run the website and our business: the hosting and database platform, a payment provider (once online payments are enabled) and an email provider. These providers act only on our instructions and under data protection obligations.

Data may be disclosed to law enforcement or other state institutions only in cases established by law.

6. Your rights

Send requests to exercise your rights to viktoras.pel@gmail.com. We will respond within 30 days.

• access your personal data and receive a copy;
• have inaccurate or incomplete data rectified;
• have data erased (the “right to be forgotten”) where no other lawful ground for keeping it exists;
• request restriction of processing or object to processing;
• receive data in a structured, commonly used format (data portability);
• withdraw consent at any time (where processing is based on consent);
• lodge a complaint with the State Data Protection Inspectorate (www.ada.lt) if you believe your rights have been infringed.

7. Cookies

For the cookies used on the Website, see the “Cookie policy” section.

8. Data security

The Website uses encrypted communication (HTTPS), access to the admin area is restricted and logged, and the database is protected. Where necessary, we apply additional organisational and technical measures to protect your data from loss or unauthorised access.

9. Changes to this policy

This privacy policy may be updated. The current version is always published on this page with its revision date.