Privacy policy

1. Who is responsible for your personal data?

The website kompmeistras.lt is administered, and personal data is processed for the purposes described in this policy, by MB Kmvle:

Company code: 307529094

VAT number: LT100019502419

Registered address: Buivydiškių g. 12-32, LT-07194 Vilnius

Service and correspondence address: Savanorių pr. 40, LT-03121 Vilnius

Email: vlad.jevd@gmail.com

Telephone: +370 673 21132.

This privacy policy explains what personal data we process when you visit our website, submit an enquiry, communicate with us or use our computer repair and other services.

We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (the GDPR) and applicable legislation of the Republic of Lithuania. Simply visiting the website or reading this policy does not constitute consent to data processing where separate consent is required.

2. What personal data do we process?

When you contact us. We process the telephone number, email address, name if you provide it, device model, problem description and other information you provide through the contact form, by email, by telephone or when visiting the workshop.

When you order services. Depending on the order, we process the customer's first and last name, contact details, information about the device handed over, its model and serial number, faults, agreed and completed work, payment and warranty service. We process an address when it is needed for a technician's visit, device delivery or preparation of documents.

When we prepare accounting documents. We process data required for invoicing and accounting, including the buyer's details, information about services or goods, amounts and payment details. Where the customer is a legal entity, we may process its representative's first and last name, position and work contact details.

When you visit the website. The IP address, visit time, technical browser and device data, and request and error logs may be processed. Where analytics or advertising technologies are used, additional data is processed according to your choices, as explained in section 5 of this policy.

We generally receive data directly from you. Where your representative or a company's representative contacts us, we may receive the data needed for the order from that representative.

Please do not include a personal identification number, payment card security code, online banking login details, passwords or other information that is not needed to consider your enquiry in the contact form.

3. For what purposes and on what legal bases do we process data?

To handle service enquiries and fulfil orders. We use data to provide advice, agree the scope and price of work, carry out diagnostics and repairs, provide updates on progress and return the device. The legal basis is performance of a contract or taking steps at your request before entering into a contract: Article 6(1)(b) of the GDPR.

For accounting and other legal obligations. We use data to issue invoices, account for payments, retain mandatory documents and comply with lawful requests from authorities. The legal basis is Article 6(1)(c) of the GDPR.

For security, communication and protection of rights. We process data to protect the website against abuse, handle general enquiries, maintain contact with company representatives and, where necessary, establish or defend legal claims. The legal basis is our legitimate interests under Article 6(1)(f) of the GDPR, taking your rights and interests into account.

For purposes based on consent. Where we use non-essential analytics or advertising technologies, we process personal data with your consent under Article 6(1)(a) of the GDPR.

Submitting an enquiry or ordering a service does not mean consenting to receive advertising messages. We send messages needed for an order, such as information about an agreed price or when a device is ready for collection, for the purpose of providing the service.

If you do not provide data necessary for a response, provision of a service or preparation of mandatory documents, we may be unable to carry out the relevant action. You are not required to provide optional data.

4. How do we handle data on a device being repaired?

By default, we do not delete customer data on the device and endeavour to preserve it. We delete data only at the customer's express request or after agreeing the action in advance where it is necessary for the agreed work.

During diagnostics, software installation, data recovery, transfer or other work, access to information on the device is given only to those carrying out the work and only to the extent necessary for the specific task. We do not deliberately view personal files, photographs or correspondence unrelated to the task, or use them for other purposes.

If access to the device requires login details, we agree this individually. Where technically possible, we recommend creating a temporary user account. Login details provided for repair are used only for the agreed work and are deleted when access is no longer required.

Data is copied onto our storage media only where this forms part of an agreed service or is a necessary technical action agreed with you. Such copies are not intended for permanent storage of your files. The procedure for deleting them is set out in section 8.

Where, on a business customer's instructions, we process personal data under that customer's control as a data processor, the conditions of processing, instructions and the parties' responsibilities are set out in a separate data processing agreement.

5. Cookies and similar technologies

Cookies are small data files stored in your browser or on your device. The website may also use similar technologies to remember preferences or assess interactions with the website.

Essential cookies are used for functions without which we could not properly provide the service you request, such as website security or saving your cookie preferences. They do not require separate consent.

Analytics cookies help us understand how visitors use the website and evaluate its operation. Advertising cookies help measure advertising results, such as whether an enquiry was submitted after an advertisement was clicked.

Non-essential analytics and advertising technologies are activated only with your consent. You can refuse them and continue using the website's main functions.

You can change or withdraw consent at any time using the “Cookie settings” link on the website. Refusing non-essential cookies must be as easy as accepting them.

The names of specific cookies and other technologies used, their providers, purposes and lifetimes are provided in the cookie settings panel or in the cookie list accompanying this policy.

6. Who may receive the data?

We transfer personal data only when, and only to the extent, necessary for the specific purpose.

Depending on the services used, website hosting, IT infrastructure, security and email service providers may receive data. Banks and payment service providers also process data when payments are made. If you choose device delivery, the contact and address details required for delivery may be shared with the courier.

If you consent to the relevant website technologies, providers of analytics, advertising measurement or embedded third-party content may receive data.

Service providers processing data on our behalf must comply with the requirements of data processing agreements. Some recipients, such as banks or public authorities, process data as independent data controllers.

Data may also be provided to courts, supervisory or law enforcement authorities where there is a legal basis, and to legal advisers where necessary to resolve a specific dispute or protect our rights.

7. Is data transferred outside the European Economic Area?

When using international service providers, some data may be processed outside the European Economic Area, including in the United States of America.

Such transfers are permitted only in accordance with the conditions laid down in the GDPR: on the basis of an applicable European Commission adequacy decision or other appropriate safeguards, such as standard contractual clauses and, where necessary, supplementary safeguards.

For information about safeguards applicable to a specific data transfer or the possibility of obtaining a copy, you can contact us at vlad.jevd@gmail.com.

8. How long do we retain data?

The data retention period depends on its purpose and applicable legal requirements.

The retention periods for contracts, service acceptance documents and VAT invoices are based on applicable document retention requirements.

If a dispute arises, an investigation is conducted or another mandatory retention obligation applies, we may retain the relevant data for longer, but only for as long as necessary for the relevant procedure and fulfilment of legal requirements.

When the retention period expires and no other lawful basis remains, the data is deleted or irreversibly anonymised.

Deleting temporary copies from our storage media does not mean deleting data from the device returned to you.

9. How do we protect data?

We apply technical and organisational security measures appropriate to the nature of the data and the risks: we restrict access, establish employee confidentiality obligations and protect the devices and information systems used for our work.

Access to personal data is given only to those who need it to perform specific duties. We review security measures in light of the technologies used and emerging risks.

10. What rights do you have?

In the cases and under the conditions set out in the GDPR, you have the right to access your data and obtain a copy, request correction of inaccurate data, erasure or restriction of processing.

You may also object to processing based on legitimate interests for reasons relating to your particular situation. You may exercise the right to data portability where data is processed by automated means and the processing is based on consent or a contract.

Where we process data based on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

These rights are not absolute. For example, we cannot delete documents we are required by law to retain.

You may submit a request by email to vlad.jevd@gmail.com or in writing to our correspondence address. Where there are reasonable doubts about your identity, we may request only the additional information necessary to confirm it.

We respond to a request without undue delay and no later than one month after receiving it. Taking into account the complexity and number of requests, this period may be extended by a further two months; we will inform you of the extension and its reasons within the first month.

When providing repair services, we do not make decisions based solely on automated data processing that would produce legal or similarly significant effects for you.

11. Where can you lodge a complaint?

If you believe your personal data is being processed improperly, you may contact us or lodge a complaint with the State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija):

Address: L. Sapiegos g. 17, LT-10312 Vilnius

Email: ada@ada.lt

Website: vdai.lrv.lt.

Contacting us is not a prerequisite for lodging a complaint with the supervisory authority.

12. Links to other websites and changes to this policy

The website may contain links to third-party websites, such as maps or review platforms. After following a link to another website, its privacy policy applies to the data processing carried out there.

We may update this policy when legal requirements, the technologies used or data processing procedures change. The latest version and its date are published on this page. Where changes require new consent, we request it separately.

For all questions about personal data processing, you can contact us at vlad.jevd@gmail.com.