Privacy Policy
Data Controller
The data controller responsible for your personal data is UAB "FurniOks", registered at Rinkuškių g. 50, LT-41180, Biržų r., Lithuania (company registration number: 301673668, VAT: LT100014449613). For any data protection inquiries, contact us at [email protected].
Data Collection
We collect information that you provide directly to us, including name, email address, postal address, phone number, and any other information you choose to provide.
Legal Basis for Processing
We process your personal data under the following legal bases pursuant to GDPR Article 6: (a) your consent — for marketing communications and non-essential cookies; (b) performance of a contract — to fulfil furniture orders and provide requested services; (c) compliance with legal obligations — for tax records, invoicing, and regulatory requirements; (d) legitimate interests — for improving our services, website analytics, and fraud prevention, where such interests are not overridden by your rights.
How We Use Your Data
We use the information we collect to provide, maintain, and improve our services, to communicate with you, and to comply with legal obligations.
Data Sharing and Disclosure
We do not sell your personal information. We may share your information with service providers, business partners, or when required by law.
Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected: contact form submissions are retained for 36 months; web analytics data for 26 months; email communication records for 60 months; financial and accounting records for 84 months (7 years) as required by Lithuanian tax law; and legal documents for 120 months (10 years). After the applicable retention period, data is securely deleted or anonymized.
Your Rights Under GDPR
Under the General Data Protection Regulation (Articles 15–22), you have the following rights regarding your personal data: the right of access — to obtain confirmation of whether your data is being processed and to receive a copy; the right to rectification — to have inaccurate data corrected; the right to erasure ('right to be forgotten') — to request deletion of your data when it is no longer necessary; the right to restriction of processing — to limit how we use your data; the right to data portability — to receive your data in a structured, machine-readable format; and the right to object — to object to processing based on legitimate interests or for direct marketing. To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
Right to Lodge a Complaint
If you believe that our processing of your personal data infringes the GDPR, you have the right to lodge a complaint with a supervisory authority. Our lead supervisory authority is the State Data Protection Inspectorate of the Republic of Lithuania (Valstybinė duomenų apsaugos inspekcija, VDAI), L. Sapiegos g. 17, 10312 Vilnius, Lithuania, website: vdai.lrv.lt, email: [email protected].
Contact Us
If you have any questions about this Privacy Policy, please contact us at [email protected] or through our contact page.