1. Data Controller
This website is owned and operated by:
By using efix.lt, you agree to this privacy policy. If you do not agree, please discontinue use of the website.
2. Data We Collect
We only collect data necessary for website operation and service delivery:
🖥️Automatically collected data
- ›IP address (anonymised)
- ›Browser type and version
- ›Operating system type
- ›Pages visited and timestamps
- ›Referral source
- ›Session duration and interactions
📝Data you provide directly
- ›Name and surname (in contact forms)
- ›Email address
- ›Phone number
- ›Message content (live chat, emails)
- ›Delivery address (for shop orders)
🛒Online shop data
- ›Browsing history (stored in your browser only)
- ›Wishlist contents (stored in your browser only)
- ›Cart contents (stored in your browser only)
- ›Order data (name, phone, email, address)
3. How We Use Your Data
We use your data solely for the following purposes:
| Purpose | Legal basis |
|---|---|
| Ensuring website functionality | Legitimate interest |
| Processing orders and delivery | Contract performance |
| Responding to enquiries and live chat | Contract performance |
| Website analytics and improvement | Legitimate interest |
| Security monitoring (anti-fraud) | Legitimate interest |
| Marketing emails (with consent only) | Consent |
5. Third-Party Services
We use the following third-party services that may collect data according to their own privacy policies:
Google Analytics 4
Website traffic analytics. Collects anonymous data about visitor behaviour.
Privacy policy: policies.google.com/privacy
Google Maps
Interactive maps on the locations page. May collect location data in your browser.
Privacy policy: policies.google.com/privacy
Forcetop / BTP
Online shop product catalogue and stock management. Order data is passed for order processing.
Privacy policy: btp.link
Paysera / Banks
Payment processing. We do not store card details — they are processed directly by payment providers.
Privacy policy: www.paysera.lt/v2/en-GB/privacy-policy
6. Data Retention & Security
Your data is stored on servers within the EU / EEA. We apply appropriate technical and organisational measures to ensure data security:
- ›SSL/TLS encryption — all data is transmitted over an encrypted connection (HTTPS).
- ›Access control — only authorised staff can access personal data.
- ›Regular backups — data is backed up for security purposes.
- ›Order data — retained for 5 years from the last interaction.
- ›Invoices — retained for 10 years under Lithuanian accounting law.
- ›Server logs — retained for 90 days, then automatically deleted.
- ›Marketing data — until consent is withdrawn or 5 years from last contact.
7. Your Rights
Under GDPR you have the following rights, which you can exercise by contacting us at info@efix.lt:
Right of access
You have the right to obtain confirmation of whether we process your data, and if so, to receive a copy of it.
Right to rectification
If your data is inaccurate or incomplete, you can request that it be corrected.
Right to erasure
You can request deletion of your data when it is no longer necessary, or was processed unlawfully. This does not apply where we are legally required to retain it.
Right to restriction
You can request restriction of processing while accuracy is verified or an objection is being resolved.
Right to portability
You can receive data you provided to us in a structured, machine-readable format and transfer it to another controller.
Right to object
You can object to processing for direct marketing purposes at any time.
Right to withdraw consent
Where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of prior processing.
8. Minors
efix.lt is not intended for persons under 16 years of age. We do not knowingly collect personal data from children. If we become aware that a child has submitted data to us, we will delete it promptly.
If you are a parent or guardian and believe your child has provided us with personal data, please contact us at info@efix.lt.
9. Policy Changes
We may update this privacy policy if legislation changes or our data processing practices evolve. We will notify you of material changes on this page with an updated date.
Continued use of the website after changes are published constitutes your acknowledgement of the updated policy.
10. Contact
For questions and requests regarding personal data:
Supervisory Authority
If unsatisfied with our response, you may contact the State Data Protection Inspectorate (VDAI): L. Sapiegos g. 17, Vilnius · ada@ada.lt · +370 5 279 14 45 · vdai.lrv.lt
Version. This privacy policy came into effect on 1 January 2025. Previous versions are available on request.