Privacy Policy

This Privacy Policy explains how UAB Elart (“UAB Elart”, “we”, “us”, “our”) collects, uses, discloses and protects your personal data when you visit our websites, contact us, purchase our products or otherwise interact with us. We are committed to protecting your privacy and processing your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”), the UK GDPR and applicable national data protection laws.

By using our website or providing your personal data to us, you acknowledge that you have read this Privacy Policy. If you do not agree with this Policy, you should not use our website or otherwise provide your personal data to us.

1. Data Controller

The data controller responsible for your personal data is:

UAB Elart
Eisiskiu pl. 36,
02184 Vilnius,
Lithuania.
Company code: 305172932
VAT code: LT100012429517

If you have any questions about this Privacy Policy or our processing of your personal data, you can contact us at:

Email: info@elartcom.eu
Phone: +370 610 18011

2. Changes to this Privacy Policy

We may update this Privacy Policy from time to time, for example to reflect changes in law or in our processing activities. The updated version will be published on our website and will take effect from the date of publication. We encourage you to review this page regularly for the latest information on our privacy practices.

3. How We Collect Personal Data

We collect personal data about you in several ways, including:

• When you contact us directly through our website, by email, by phone or by fax to request information about our products or services.
• When you create an account or profile on our website.
• When you purchase products or services from us (online or offline).
• When you subscribe to our newsletter, electronic catalog (E-Cat) or other marketing communications.
• When you participate in our events, surveys, campaigns or promotions.
• When we receive your details from third parties with your permission (for example business partners, distributors, or lead providers).
• Automatically, when you browse our websites, through cookies and similar technologies (see our Cookie Policy).

If you provide personal data about another person, you must ensure that the person has been informed about this Privacy Policy and that you have the right to share their data with us.

Our services are not intended for children under 16 years of age. If you are under 16, please do not provide us with your personal data unless you have permission from your parent or guardian.

4. Types of Personal Data We May Collect

4.1 Contact and Identification Data

• First and last name
• Company name and position (for business customers)
• Billing and delivery address
• Phone numbers
• Email address
• Account login details (such as username and password)

4.2 Order, Sales and Service Data

• Details of products and services you have purchased or requested
• Payment and transaction information (we do not store full card details; these are processed by secure payment providers)
• Delivery details, including tracking information
• Communications related to orders, warranties, complaints or claims

4.3 Interests and Marketing Preferences

• Information you give us about your interests, including vehicle types or product categories you are interested in
• Your preferences regarding how we contact you (email, phone, etc.)

4.4 Website and Communication Usage Data

• Information about how you use our websites, such as pages viewed, time spent, links clicked
• Technical data including IP address, browser type and version, device identifiers, operating system and platform
• Information about whether you open, read or forward our emails
• Information collected through cookies and similar technologies; more details are provided in our Cookie Policy

4.5 Other Information You Provide

• Any other personal data that you choose to provide us in your communications, requests or feedback

5. Purposes and Legal Bases for Processing

We process your personal data only when we have a legal basis to do so under EU and UK data protection law. Depending on the context, we may process your personal data for one or more of the following purposes and legal bases:

5.1 To Manage Our Relationship with You and Perform Contracts

We use your personal data to:

• Process and deliver your orders, including managing payments, fees and charges, and arranging shipping.
• Provide customer support and respond to your enquiries, requests or complaints.
• Manage your account or profile.
• Provide warranty services and handle returns and claims.

Legal basis: Processing is necessary for the performance of a contract with you or to take steps at your request prior to entering into a contract.

5.2 Customer Support, Marketing and Communications

We use your personal data to:

• Provide you with information about our products, services, offers and events.
• Send newsletters, technical documentation, updates and marketing communications, where permitted by law.
• Personalise our communications and offers based on your interests and previous interactions with us (profiling for marketing segmentation).

Legal basis: Your consent (where required, for example for email marketing to consumers), or our legitimate interests in promoting and growing our business and keeping customers informed about our products and services, provided that your rights and freedoms do not override those interests. You can object to direct marketing at any time (see Section 11).

5.3 Website Operation, Safety and Improvement

We use personal data and usage information to:

• Operate, maintain and improve our websites, products and services.
• Ensure security, prevent fraud and abuse, and protect our rights, systems and customers.
• Perform analytics and statistics about the use of our website and services.

Legal basis: Our legitimate interests in operating secure and efficient services and improving our business.

5.4 Quality Assurance, Research and Development

We may use de-identified or aggregated information to test and enhance our products, services and processes, including autoparts catalog accuracy and availability.

Legal basis: Our legitimate interests in improving the quality, safety and performance of our products and services. Where reasonably possible, we anonymise or pseudonymise your data for these purposes.

5.5 Compliance with Legal Obligations and Protection of Rights

We may process your personal data to:

• Comply with applicable laws, regulatory requirements, accounting and tax obligations.
• Respond to lawful requests from law enforcement, courts or public authorities.
• Establish, exercise or defend legal claims.

Legal basis: Compliance with a legal obligation; or our legitimate interests in protecting our rights and defending against claims.

6. Marketing Communications

Where you have consented, or where we are otherwise permitted by law, we may use your contact details to send you newsletters, offers and information about our products and services that may be of interest to you.

You can withdraw your consent or opt out of marketing at any time by:

• Clicking the “unsubscribe” link in any marketing email; or
• Contacting us at info@elartcom.eu or by phone.

Even if you opt out of marketing, we may still send you non-marketing communications such as order confirmations, service messages, safety notices and information about your account.

7. Cookies and Similar Technologies

We use cookies and similar technologies on our websites to enable essential functions, understand how visitors use our site, and improve our services. Some cookies are necessary for the website to function, while others are used for analytics or marketing.

For detailed information about the cookies we use, the purposes for which we use them and how you can manage your cookie preferences, please refer to our separate Cookie Policy.

8. Sharing Your Personal Data

We do not sell or rent your personal data. We may share your personal data with the following categories of recipients, only where necessary and with appropriate safeguards:

• Service providers and business partners, such as IT and hosting providers, payment processors, logistics and delivery companies, marketing agencies, and event organisers that process personal data on our behalf and only according to our instructions.
• Professional advisers, such as lawyers, auditors and insurers, where necessary in the course of professional services.
• Public authorities and law enforcement, where we are required to do so by law or in order to protect our rights or the rights of others.
• Other third parties in connection with a business transaction, such as a merger, sale or restructuring, where permitted by law and subject to confidentiality obligations.

Where we share your personal data with third parties, we require them to protect your personal data, use it only for the purpose for which it was provided and comply with applicable data protection laws.

9. International Transfers

Because UAB Elart operates and serves customers worldwide, your personal data may be accessed from or transferred to countries outside the European Economic Area (EEA) and the United Kingdom, where data protection laws may differ.

Whenever we transfer personal data to a country outside the EEA or the UK, we ensure that an adequate level of protection is provided, for example by using:

• Countries recognised by the European Commission or UK authorities as providing an adequate level of data protection; or
• Standard contractual clauses or other appropriate safeguards approved by the European Commission or UK authorities.

10. How We Protect Your Personal Data

We use a combination of technical and organisational measures to protect your personal data against unauthorised access, loss, misuse, alteration or disclosure. These measures include, for example:

• Restricting access to personal data to authorised personnel on a “need to know” basis.
• Using encryption for data in transit and, where appropriate, at rest.
• Using firewalls and intrusion detection systems to protect our IT infrastructure.
• Maintaining secure backup systems and business continuity procedures.
• Regular monitoring and testing of our security measures.

Where we have given you or where you have chosen a password to access certain parts of our website or services, you are responsible for keeping this password confidential. Please do not share your password with anyone and use a strong, unique password.

11. Data Retention

We keep your personal data only for as long as necessary for the purposes for which it was collected, for other legitimate related purposes (for example to comply with legal, accounting or reporting requirements), or as required by law.

Retention periods may vary depending on the type of data and purpose of processing. For example:

• Contract and order data: kept for the duration of your relationship with us and for a period afterwards (typically the limitation period for legal claims, plus a reasonable additional period).
• Marketing data: kept until you withdraw your consent or object to marketing, or after a period of inactivity, after which we may delete or anonymise it.
• Legal, tax and accounting data: kept for the retention period required by applicable law.

When personal data is no longer needed, we will either securely delete it or irreversibly anonymise it.

12. Your Rights

Under the GDPR and applicable data protection laws, you have a number of rights regarding your personal data. Subject to certain conditions and limitations, you have the right to:

• Access your personal data and obtain a copy of the data we hold about you.
• Rectification – have inaccurate or incomplete data corrected.
• Erasure (“right to be forgotten”) – request the deletion of your personal data where there is no good reason for us to continue processing it.
• Restriction – request that we restrict the processing of your personal data in certain circumstances.
• Data portability – receive your personal data in a structured, commonly used and machine-readable format and have it transmitted to another controller where technically feasible.
• Object – object to the processing of your personal data based on our legitimate interests, including profiling, and to object at any time to processing for direct marketing purposes.
• Withdraw consent – where processing is based on your consent, withdraw your consent at any time, without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, please contact us using the details in Section 1. We may need to verify your identity before acting on your request.

You also have the right to lodge a complaint with a supervisory authority, in particular in the EU or EEA Member State or in the UK where you live, work or where you consider your rights have been infringed. For Lithuania, the supervisory authority is the State Data Protection Inspectorate.

13. Children’s Privacy

Our products and services are not intended for children under 16 years of age and we do not knowingly collect personal data from children under 16. If we become aware that we have collected personal data from a child under 16 without appropriate consent, we will take steps to delete such data as soon as possible.

14. How to Contact Us

If you have any questions, comments or requests about this Privacy Policy or our processing of your personal data, or if you wish to exercise your privacy rights, you can contact us at:

UAB Elart
Eisiskiu pl. 36,
02184 Vilnius,
Lithuania.
Email: info@elartcom.eu
Phone: +370 610 18011