Close

Welcome you to autokrat.lt
Wishlist (0)
0

Privacy Policy

Home (EN) / Privacy Policy

Last updated: 15 August 2025

This Privacy Policy explains how Autokrat, UAB (“Autokrat“, “we“, “us“, or “our“) collects, uses, shares and protects your personal data when you visit https://autokrat.lt/ (the “Website“), contact us, book or receive our car service and repair services, or otherwise interact with us. It also explains your rights under applicable laws, including the General Data Protection Regulation (EU) 2016/679 (GDPR), the Law on Legal Protection of Personal Data of the Republic of Lithuania, and other relevant EU and Lithuanian legislation.

If you have any questions, please contact us using the details in the Contact Us section below.

1. Controller

Autokrat, UAB
Registered office: Laisvės al. 85E-5, LT-44297 Kaunas, Lithuania
Website: https://autokrat.lt/
Telephone: +370 608 76130
Contact form: https://autokrat.lt/en/contacts/

We have not appointed a Data Protection Officer. For all privacy-related questions, please use the contact details above.

2. Scope & definitions

  • Personal data means any information relating to an identified or identifiable natural person.
  • Processing means any operation performed on personal data.
  • Services means vehicle diagnostics, maintenance, and repair services provided by Autokrat, as well as online enquiries and bookings.
  • EEA means the European Economic Area.

This Policy applies to processing performed by us as the controller, including processing carried out on our Website and in our service locations.

3. What data we collect

We collect and process the following categories of personal data, as applicable:

  1. Identity and contact data – name, surname, phone number, e‑mail address, preferred language, town/city.
  2. Vehicle data – make/model, registration plate, VIN, mileage, service history, warranty/recall information, photos of vehicle damage (where provided).
  3. Booking and service data – chosen services, requested date/time, messages you provide, authorisations/approvals, communications.
  4. Billing and transaction data – invoicing details (e.g. company name, VAT number), payment status, method of payment (we do not store full card details if you pay by card through a payment provider).
  5. Website & technical data – IP address, device identifiers, browser type, operating system, referral URL, pages viewed, interactions, cookie identifiers and consent preferences.
  6. Marketing preferences – your opt‑in/opt‑out choices for e‑mail, SMS, phone calls or other channels.
  7. Recruitment data (if you apply for a job) – CV/resume, cover letter, work history, qualifications, references, and any other information you submit.

We may collect data directly from you, from your use of the Website, from publicly available sources (e.g., vehicle registries to the extent lawful), and from third parties (e.g., insurers, parts suppliers, warranty providers, or payment processors) when they are involved in providing the Services or where you ask us to coordinate with them.

4. Purposes and legal bases

We process personal data for the following purposes and on the legal bases indicated:

  • Providing and performing the Services (diagnostics, repair, maintenance, customer support), including contacting you about your booking and service status; legal basis: performance of a contract or steps at your request prior to entering into a contract (GDPR Art. 6(1)(b)).
  • Quotations and customer enquiries; legal basis: performance of a contract / legitimate interests to respond to requests (Art. 6(1)(b), 6(1)(f)).
  • Billing, accounting and tax compliance; legal basis: legal obligation (Art. 6(1)(c)).
  • Website operation, security and fraud prevention (e.g., preventing misuse, ensuring network security, incident logging); legal basis: legitimate interests (Art. 6(1)(f)).
  • Analytics and service improvement (e.g., understanding how our Website is used); legal basis: consent where required for non‑essential cookies/identifiers (Art. 6(1)(a)) and/or legitimate interests where appropriate (e.g., aggregated statistics with no non‑essential tracking).
  • Marketing communications (e.g., offers about our services), only where permitted; legal basis: consent (Art. 6(1)(a)) or legitimate interests for existing customers under applicable e‑privacy rules with an easy opt‑out (Art. 6(1)(f)).
  • Recruitment; legal basis: consent and/or steps prior to entering into an employment contract (Art. 6(1)(a), 6(1)(b)).
  • Establishing, exercising or defending legal claims; legal basis: legitimate interests (Art. 6(1)(f)).

Where we rely on consent, you can withdraw it at any time (see Section 10) without affecting the lawfulness of processing before withdrawal.

5. Cookies and similar technologies

We use cookies and similar technologies on our Website. Non‑essential cookies (e.g., analytics/advertising cookies from Google products and Clickio consent tools) are used only with your consent collected via our Consent Management Platform (CMP). For details about types of cookies, retention periods and how to manage your choices, see our separate Cookie Policy.

We support IAB TCF v2.2 and Google’s EU User Consent Policy. Where applicable, we implement Google Consent Mode to respect your choices.

6. Sharing of personal data

We may share your personal data with:

  • Service providers / processors acting on our behalf (e.g., Website hosting and IT, consent management (Clickio CMP), analytics and measurement (Google services), communications tools, payment processors, accountants, secure document storage, security providers). We ensure data processing agreements are in place.
  • Business partners involved in providing services to your vehicle (e.g., parts suppliers, tyre partners, insurers, warranty and roadside assistance partners), where necessary to perform the Services you request.
  • Public authorities and regulators where required by law or to defend our legal rights (e.g., tax authorities, law enforcement, courts).
  • Professional advisers (lawyers, auditors) under confidentiality obligations.

We do not sell your personal data.

7. International data transfers

Some recipients (e.g., certain Google entities) may be located outside the EEA. Where we transfer personal data outside the EEA, we will ensure appropriate safeguards under GDPR Chapter V, such as European Commission Standard Contractual Clauses (SCCs) and supplementary measures where necessary.

8. Retention

We keep personal data only for as long as necessary for the purposes stated, including to comply with legal obligations.

Indicative retention periods:

  • Service & booking records: typically 8–10 years after the end of the calendar year of the service (to meet Lithuanian accounting/tax limitation periods);
  • Vehicle service history: as long as reasonably needed to provide after‑service support and with your vehicle relationship;
  • Invoices and accounting documents: as required by Lithuanian law (generally 10 years);
  • Marketing data: until you withdraw consent or opt‑out;
  • Recruitment data: generally 6 months from the end of the recruitment process unless you consent to a longer period;
  • Website analytics identifiers: see Cookie Policy for cookie‑specific lifetimes.

Where feasible, we will anonymise or aggregate data for analytics and retain non‑identifiable information.

9. Your rights

Subject to conditions under the GDPR, you have the right to:

  • Access your personal data and obtain a copy;
  • Rectify inaccurate or incomplete data;
  • Erase your data (right to be forgotten);
  • Restrict processing;
  • Object to processing based on legitimate interests and to direct marketing;
  • Data portability for data you provided to us, processed by automated means and based on consent or contract;
  • Withdraw consent at any time (for example, via our CMP for cookies or via unsubscribe for marketing).

You also have the right to lodge a complaint with the State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija):
L. Sapiegos g. 17, 10312 Vilnius, Lithuania
Tel.: +370 5 271 2804
E‑mail: [email protected]
Website: https://vdai.lrv.lt/

We would appreciate the chance to address your concerns before you approach the authority.

10. How to manage your choices

  • Cookies & online tracking: use the cookie banner / preferences panel on our Website to consent, refuse, or change settings at any time. Your choices will be respected by our CMP and, where implemented, by Google Consent Mode. You can also adjust your browser settings to block or delete cookies.
  • Marketing communications: use the unsubscribe link in our e‑mails or contact us via the details below.

11. Security

We implement appropriate technical and organisational measures to protect personal data (including access controls, encryption in transit where appropriate, least‑privilege access, regular updates, and staff confidentiality). However, no method of transmission or storage is 100% secure.

12. Children

Our Services are intended for adults. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will take appropriate steps.

13. Changes to this Policy

We may update this Privacy Policy from time to time (for example, to reflect changes in law or our processing). We will post the updated version on this page and indicate the “Last updated” date above. Significant changes may be notified via the Website or by direct communication where appropriate.

14. Contact us

For questions or to exercise your rights, please contact:
Autokrat, UAB
Laisvės al. 85E-5, LT-44297 Kaunas, Lithuania
Tel.: +370 608 76130
Contact form: https://autokrat.lt/en/contacts/

Back to Top