Home appliances
Electronics
For pets
Computer equipment
Mobile devices
Home and interior
Plumbing and bathroom equipment
Sports, leisure and travel
For children
Privacy policy
This document is prepared in accordance with the EU General Data Protection Regulation (GDPR) — Regulation (EU) 2016/679. Data controller: Dosata, MB, company code 305604609, address Draugystės st. 17-1, LT-51229 Kaunas, email[email protected].
1. What data we collect
We only collect personal data that is necessary for the provision of services or that you provide voluntarily.
| Data category | Examples | Method of collection |
|---|---|---|
| Identification data | Name, surname | Registration / order |
| Contact details | Email, phone no., address | Registration / order |
| Payment details | Payment confirmation (card details are not stored) | At the time of payment |
| Usage data | IP address, browser, pages, time | Automatically (cookies) |
| Marketing data | Email subscriptions, consents | Voluntarily |
| Communication data | Messages to the help desk | During contact |
2. How we use your data
| Purpose | Legal basis (GDPR) |
|---|---|
| Fulfillment of orders, delivery, return | Execution of the contract (Article 6(1)(b)) |
| Account management | Execution of the contract (Article 6(1)(b)) |
| VAT invoicing | Legal obligation (Article 6(1)(c)) |
| Fraud prevention, security | Legitimate interest (Article 6(1)(f)) |
| Website performance analysis (Google Analytics) | Consent (Article 6(1)(a)) |
| Promotional ads (Meta, Google Ads) | Consent (Article 6(1)(a)) |
| Newsletter and marketing emails | Consent (Article 6(1)(a)) |
| Dispute resolution, legal claims | Legal obligation (Article 6(1)(c)) |
3. Third parties and data recipients
We transfer your data only to the extent necessary for the provision of services:
- Delivery service providers— Omniva, DPD, LP Express (delivery address details)
- Payment intermediaries— electronic banking systems of banks, Visa/Mastercard networks, Inbank (by installments)
- Google LLC— Google Analytics (analysis), Google Ads (advertising), Google Pay; data may be transferred to the US under Standard Contractual Clauses (SCC)
- Meta Platforms Ireland Ltd.— Meta Pixel (advertising, Facebook, Instagram); data may be transferred to the US under the SCC
- Email service provider— for sending the newsletter (email address)
- Hosting / IT service providers— server infrastructure, technical maintenance
- State institutions— at the request of legal acts (e.g. VMI, courts)
Payment platform — Maksekeskus AS
In the e-shop, payments are processed by usingmakecommerce.lta platform whose managerMaksekeskus AS(Liivalaia 45, Tallinn 10145, Estonia, reg. no.: 12268475), therefore your personal information, required for payment execution and confirmation, will be transferred to Maksekeskus AS.
Data transfers to the US (Google, Meta) are carried out in accordance with the EU–US Data Privacy Framework (DPF) or Standard Contractual Clauses (SCC) approved by the European Commission.
4. Cookies and Tracking Technologies
We use cookies and similar technologies. See our Cookie Policy for details. You can manage cookies at any time through the cookie settings center at the bottom of the site.
| Type | Examples | Purpose |
|---|---|---|
| Necessary | Session, Cart, CSRF | Site Operation |
| Analytics | Google Analytics (_ga, _gid) | Usage statistics |
| Marketing | Meta Pixel (_fbp), Google Ads | Targeted advertising |
| Functional | Language settings, wishlist | Convenience |
5. Data storage terms
| Data category | Storage term | Legal basis |
|---|---|---|
| Order and invoice data | 10 years | Accounting Law |
| Account details | Until account deletion + 1 year | Contractual |
| Marketing Consents | Until withdrawal of consent + 3 years | Legal obligation |
| Newsletter data | Until consent is withdrawn | Consent |
| Analytics cookies | Up to 26 months | Consent |
| Correspondence with support | 3 years | Legitimate interest |
6. Your rights
You have the following rights under the GDPR, which you can exercise by contacting us by email[email protected]:
Right of access
You can receive information about your personal data processed.
✏️ Right to rectification
You can request correction of inaccurate or incomplete data.
Right to erasure
You can request the deletion of data when it is no longer needed or when you withdraw consent.
Right to restriction of processing
You can request the restriction of data processing in certain cases.
📦 Right to portability
You can receive your data in a structured, commonly used format.
Right to object
You can object to the processing of your data for marketing purposes at any time.
We will respond to your requestswithin 30 calendar days. If you are not satisfied with the answer, you have the right to file a complaintFor the State Data Protection Inspectorate (VDAI): vdai.lrv.lt, tel. +370 5 279 1445.
7. Marketing communication
Newsletter and marketing emails. We only send emails with your consent. You can opt out at any time:
- By clicking "Unsubscribe" in each email
- In your account under "Notification settings"
- By contacting us by email[email protected]
The waiver takes effect on5 working days. Transactional emails (order confirmations, delivery notices) are sent regardless of marketing consent — they are necessary for the execution of the contract.
8. Children's data
Our platform is not intended for persons under the age of 16. If we inadvertently collect a minor's data, we delete it immediately. If you believe that a minor has registered, please contact us.
9. Data security
- All data transfer connections are encrypted with the SSL/TLS protocol
- Payment card data is not stored in our systems — it is processed only by certified payment intermediaries
- Access to data is restricted to employees on a need-to-know basis
- Regular security audits are conducted
- In the event of a data breach, we will inform VDAI within 72 hours and affected persons without unreasonable delay
10. Policy Changes
We may change this policy. We will inform you about essential changes by email or by a clear notice on the website at least 14 days before the changes take effect. The new version takes effect from the specified date.
11. Contacts and complaints
Data controller: Dosata, MB, company code 305604609
Address:Draugystės st. 17-1, LT-51229 Kaunas, Lithuania
Email: [email protected]
Phone: +370 688 08877
You can submit complaints about data processingState Data Protection Inspectorate:
vdai.lrv.lt| L. Sapiegos str. 17, Vilnius | tel. +370 5 279 1445