Privacy Policy

UAB Vin Motors is a Lithuanian premium used-car dealer based in Vilnius, serving customers across the European Union through our website at vinmotors.lt. This privacy policy explains what personal data we collect when you contact us or use our site, how we use that information, and which rights you can exercise under the EU General Data Protection Regulation (GDPR).

Data Controller

The controller responsible for your personal data is:

• UAB Vin Motors
• Kelpių g. 37, Avižieniai, Vilnius district 14184, Lithuania
• Email: [email protected]
• Phone: +370 662 76235

If you have any questions about this policy or wish to exercise any of your rights, please contact us using the details above.

What Data We Collect

We only collect the personal data we need to respond to your enquiries, complete a vehicle sale or delivery, and keep our website secure. Specifically, we may collect:

• Contact form submissions: your name, email address, phone number and the content of your message.
• Vehicle inquiry submissions: the same contact details together with the ID or reference of the vehicle you are interested in.
• Sell-your-car submissions: your contact details plus the details and photographs of the vehicle you wish to sell.
• Delivery order submissions: your contact details plus the pickup and delivery address information needed to arrange transport.
• Analytics data: anonymised usage information collected by Google Analytics 4, only if you accept analytics cookies through our consent banner.
• Server logs: your IP address, browser user-agent, the request path and a timestamp, retained for 30 days for security and abuse-prevention purposes.

We do not collect special category data (such as health, biometric or political information) and we do not buy personal data from third parties.

Why We Collect It and Our Legal Basis

Under Article 6 of the GDPR, we rely on the following legal bases for processing your data:

• Contact and inquiry forms: legitimate interest (Art. 6(1)(f)) in answering your questions, and pre-contractual measures at your request (Art. 6(1)(b)) when you are considering buying, selling or transporting a vehicle.
• Google Analytics 4: your consent (Art. 6(1)(a)), given through the cookie banner. You can withdraw consent at any time.
• Server logs: legitimate interest (Art. 6(1)(f)) in keeping the website secure, stable and protected from misuse.
• Sales and warranty documentation: legal obligation (Art. 6(1)(c)) under Lithuanian tax, accounting and consumer-protection law.

Third-Party Processors

We use a small number of carefully selected service providers to operate the site and communicate with you. Each of them processes your data on our behalf under a data processing agreement.

• Resend (transactional email delivery for contact and inquiry responses), based in the EU.
• Google Analytics (Google LLC, United States), used only with your consent. Transfers rely on Standard Contractual Clauses (SCCs) and the EU-US Data Privacy Framework.
• Hostinger (web hosting), based in the EU.
• SpinCRM (internal vehicle inventory and customer management system), based in the EU.
• Cloudflare (CDN and DDoS protection), based in the United States. Transfers rely on SCCs and the EU-US Data Privacy Framework.

We do not sell or rent your personal data to anyone.

How Long We Keep Your Data

We keep personal data only as long as we need it for the purposes described above:

• Contact and inquiry form data: up to 12 months, unless an active customer relationship continues, in which case we keep the relevant data for the duration of that relationship.
• Server logs: 30 days.
• Google Analytics 4 data: 14 months (Google's default retention period).
• Sales, accounting and warranty documentation: 10 years, as required by Lithuanian tax and commercial law.

Once a retention period ends, your data is securely deleted or anonymised.

Your Rights Under GDPR

If you are based in the EU or EEA, you have the following rights regarding your personal data:

• Right of access (Art. 15): request a copy of the personal data we hold about you.
• Right to rectification (Art. 16): ask us to correct inaccurate or incomplete data.
• Right to erasure (Art. 17): ask us to delete your data, also known as the right to be forgotten.
• Right to restriction of processing (Art. 18): ask us to limit how we use your data in certain situations.
• Right to data portability (Art. 20): receive your data in a structured, commonly used, machine-readable format.
• Right to object (Art. 21): object to processing based on legitimate interests, including direct marketing.
• Right to withdraw consent: where processing is based on consent (for example, analytics cookies), you can withdraw it at any time without affecting the lawfulness of earlier processing.

To exercise any of these rights, please email [email protected]. We will respond within 30 days, as required by the GDPR.

You also have the right to lodge a complaint with a supervisory authority. In Lithuania this is the State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija, VDAI), available at ada.lt. If you live in another EU or EEA country, you may contact your local supervisory authority instead.

Cookies

We use a small number of cookies to make the website work and to understand how it is used.

• Essential cookies: required for core site functionality, such as remembering your language preference and securing form submissions. These do not require consent.
• Analytics cookies: set by Google Analytics 4 to measure visits and improve the site. These are only loaded after you accept them via the cookie banner.
• No advertising or cross-site tracking cookies are used on this site.

You can change or withdraw your cookie choices at any time by clearing your browser cookies for vinmotors.lt and reloading the page.

International Data Transfers

Most of our processing takes place within the EU. However, Google Analytics and Cloudflare may transfer limited technical and analytics data to servers in the United States. Such transfers are protected by the European Commission's Standard Contractual Clauses and the EU-US Data Privacy Framework, which provide an equivalent level of protection to that guaranteed in the EU.

Children's Privacy

Our website and services are aimed at adults interested in purchasing, selling or transporting vehicles. We do not knowingly collect personal data from children under the age of 16. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

How to Contact Us and Exercise Your Rights

For any privacy-related request, including access, rectification, deletion or objections, please contact us at:

• Email: [email protected]
• Phone: +370 662 76235
• Post: UAB Vin Motors, Kelpių g. 37, Avižieniai, Vilnius district 14184, Lithuania

We may ask you to confirm your identity before responding, to ensure your data is not shared with anyone else.

Updates to This Policy

We may update this privacy policy from time to time to reflect changes in our services, technology or legal requirements. When we make material changes, we will update the "Last updated" date below and, where appropriate, notify you through our website or by email.

Last updated: 27 June 2026.