BAITERA.LT Privacy Policy

Version effective from: 2026-08-10

1. General Provisions

1.1. This privacy policy (the Policy) explains how MB "Baitera", company code 307179345, VAT payer code LT100018343317, registered office address Raudondvario pl. 147, LT-47192 Kaunas, Lithuania (the Data Controller or we), processes personal data in the BAITERA.LT online store (www.baitera.lt) and in the physical store at Marvelės g. 108, Kaunas.

1.2. We process personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR), the Law on Legal Protection of Personal Data of the Republic of Lithuania, the Law on Electronic Communications of the Republic of Lithuania and other applicable legal acts.

1.3. This Policy applies to all persons who visit BAITERA.LT, register on it, purchase goods, submit enquiries, leave reviews or otherwise use our services (you or the data subject).

1.4. By using BAITERA.LT and providing us with your personal data, you acknowledge this Policy. If you do not agree with the terms of the Policy, please do not use BAITERA.LT services that require personal data processing.

1.5. Data Controller contacts for personal data matters: email info@baitera.lt, phone +370 659 88499, correspondence address Raudondvario pl. 147, LT-47192 Kaunas, Lithuania.

2. What Data We Process, for What Purposes and on What Legal Basis

2.1. The main purposes of personal data processing, categories of processed data and legal bases are listed below:

Purpose	Processed data	Legal basis
Order fulfilment and contract conclusion	Name, surname, email, phone, delivery address, order and payment data, purchase history; for representatives of legal entities - data of the represented company	Performance of a contract (GDPR Art. 6(1)(b))
Account administration	Registration data (name, surname, email, phone, password in encrypted form), account activity and order history	Performance of a contract (GDPR Art. 6(1)(b))
Accounting and tax obligations	Invoice and payment data	Compliance with a legal obligation (GDPR Art. 6(1)(c))
Direct marketing (newsletters, offers)	Email, name, phone, if provided	Your consent (GDPR Art. 6(1)(a)); for existing customers regarding similar goods - legitimate interest with the option to opt out at any time
Handling enquiries and complaints	Name, contact details, enquiry content and correspondence history	Performance of a contract and/or legitimate interest (GDPR Art. 6(1)(b), (f))
Publishing product reviews and verifying their authenticity	Name, surname, email, phone, data confirming the purchase, review content	Consent and legitimate interest (GDPR Art. 6(1)(a), (f))
Warranty obligations and defence of legal claims	Order, product, correspondence and claim data	Compliance with a legal obligation and legitimate interest (GDPR Art. 6(1)(c), (f))
Ensuring BAITERA.LT operation and statistics (cookies)	IP address, browser and device data, browsing behaviour on BAITERA.LT	For necessary cookies - legitimate interest; for others - your consent

2.2. Mandatory data, without which we cannot fulfil the order, is marked in the order form. Providing other data is voluntary.

2.3. We do not collect or knowingly process data of persons younger than 14 years old. Minors aged 14 to 18 may use BAITERA.LT only with the consent of their parents or guardians, except for exceptions provided by law.

2.4. BAITERA.LT does not carry out automated decision-making that produces legal effects for you, including profiling, and does not individualise prices for individual buyers.

3. Data Retention Periods

3.1. We retain personal data no longer than necessary to achieve the purposes for which it is processed, or for as long as required by law:

order and contract data - 5 years from order fulfilment, for limitation period and legal claim defence purposes;
accounting documents - 10 years, as required by Lithuanian law;
account data - while the account is active and for 2 years after the last login, or until account deletion at your request;
direct marketing data - while your consent is valid, but no longer than 3 years from giving consent or from the last active action, unless you renew the consent;
enquiry and complaint data - 2 years from the completion of the enquiry review, and in case of a dispute, until its final resolution;
cookie data - for the validity period of the specific cookie indicated in the cookie list.

3.2. After the retention period ends, the data is deleted or reliably anonymised.

4. Who We Share Your Data With

4.1. We may transfer your data only where there is a lawful basis to the following recipients:

courier and parcel services, such as DPD, LP Express, Omniva and Venipak, for delivery of goods: name, surname, address, phone, email;
payment service providers and banks - to process payments;
leasing or consumer credit companies - when you choose instalment purchase. In such cases, the credit company processes your data as an independent data controller under its own privacy policy;
IT, website hosting, email and marketing platform service providers - acting as data processors under agreements requiring them to ensure data security;
accounting, audit and legal service providers;
state and supervisory authorities - where required by law or necessary to bring or defend our legal claims.

4.2. Personal data is processed within the European Union / European Economic Area. If individual service providers process data outside the EEA, transfer is carried out only after ensuring appropriate safeguards under Chapter V of the GDPR, such as an adequacy decision by the European Commission or standard contractual clauses.

4.3. We do not sell your personal data or provide it to third parties for their own marketing purposes.

5. Cookies

5.1. BAITERA.LT uses cookies - small text files stored on your device. We use the following categories of cookies:

necessary cookies - required for website operation, shopping cart, login and security; they are stored without consent on the basis of legitimate interest;
analytical, or statistical, cookies - help us understand how visitors use the website; used only with your consent;
marketing, or targeting, cookies - used to display personalised advertising; used only with your consent.

5.2. You can give, withdraw or change consent for optional cookies at any time through the cookie settings management tool on the website. You can also delete or block cookies in your browser settings. If you refuse some cookies, certain website functions may work in a limited way.

5.3. A detailed list of cookies used, including name, purpose, validity period and provider, is published in the BAITERA.LT cookie policy or cookie settings tool.

6. Your Rights

6.1. As a data subject, you have the following rights under the GDPR:

the right to know, or be informed, about the processing of your personal data and to access your processed data (GDPR Art. 15);
the right to request correction of inaccurate data or completion of incomplete data (GDPR Art. 16);
the right to request deletion of data, or the "right to be forgotten", where data is no longer needed, consent has been withdrawn or data is processed unlawfully (GDPR Art. 17);
the right to restrict data processing (GDPR Art. 18);
the right to data portability - to receive your data in a structured, machine-readable format (GDPR Art. 20);
the right to object to processing based on legitimate interest, including direct marketing (GDPR Art. 21);
the right to withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

6.2. You can unsubscribe from newsletters at any time by clicking the unsubscribe link in each newsletter or by writing to us at info@baitera.lt.

6.3. You can submit a request to exercise your rights by email at info@baitera.lt or in writing to Raudondvario pl. 147, LT-47192 Kaunas, Lithuania. To protect your data from unlawful disclosure, we may ask you to confirm your identity. We will reply no later than within 1 month from receiving the request; due to the complexity or number of requests, this period may be extended by another 2 months, and we will inform you about this.

6.4. If you believe your rights have been violated, you have the right to lodge a complaint with the State Data Protection Inspectorate: L. Sapiegos g. 17, 10312 Vilnius, email ada@ada.lt, www.vdai.lrv.lt. We always invite you to contact us first, and we will seek to resolve all questions in good faith.

7. Data Security

7.1. We implement appropriate technical and organisational measures to protect personal data from accidental or unlawful destruction, loss, alteration, disclosure or access: we use encrypted (SSL/TLS) connection, store passwords in encrypted form, grant access to data only to employees and service providers who need it to perform their functions, and require them to maintain confidentiality.

7.2. If a personal data breach occurs that poses a high risk to your rights and freedoms, we will inform you and the State Data Protection Inspectorate in accordance with the GDPR.

8. Final Provisions

8.1. This Policy may be updated if laws change or if our data processing changes. The current version of the Policy is always published on BAITERA.LT; in case of material changes, we will inform you additionally, for example by a notice on the website or by email.

8.2. This Policy is an integral part of the BAITERA.LT purchase-sale rules. The Policy is governed by the law of the Republic of Lithuania.

8.3. For all matters related to personal data, please contact: MB "Baitera", email info@baitera.lt, phone +370 659 88499, Raudondvario pl. 147, LT-47192 Kaunas, Lithuania.