Effective from 1 January 2026.
This policy explains what personal data we collect when you shop at itpartner.lt or browse the website, what we use it for and what rights you have.
Who is responsible for your data?
The data controller is UAB IT Partner, company code 302430427, V. Krėvės pr. 49, 49438 Kaunas, Lithuania. For questions about personal data, contact us by email at [email protected] or by phone at +370 616 27033.
What data do we collect and why?
To fulfil your order. When you place an order, we collect your first and last name, email address, phone number and delivery address, and, when buying on behalf of a company, the company name, company code and VAT code. We also keep the order details: products, prices, delivery method, payment status and your notes. This data is needed to conclude and perform the contract (GDPR Art. 6(1)(b)). Without it we could not fulfil your order.
For invoices and accounting. We include order and buyer details on the VAT invoice and keep them in our accounting records, as required by law (GDPR Art. 6(1)(c)).
For returns, claims and questions. When you write to us, return a product or report a defect, we process your messages, the photos you send and the related order details. We do this to perform the contract, meet our legal obligations and defend our legitimate interests (GDPR Art. 6(1)(b), (c) and (f)).
For security and fraud prevention. We store your IP address and browser details with the order, and the server keeps access logs for a short time. We do this based on our legitimate interest in protecting the store and its customers from fraud (GDPR Art. 6(1)(f)).
For website statistics (only with your consent). We use Google Analytics to see how the website is used: which pages are visited, where visitors come from, which devices they use, and which products are viewed, added to the cart and bought. We also record with the order where you came to the website from (e.g. a search engine or an ad). This uses statistics cookies, and Google receives your IP address and browser details.
For marketing (only with your consent). We use Google Ads to measure which of our ads bring in buyers. This uses marketing cookies, and Google receives information about the visit and the purchase.
We process statistics and marketing data only with your consent (GDPR Art. 6(1)(a)). You can withdraw your consent at any time by clicking “Cookie settings” at the bottom of the website.
We do not receive your card details or bank login details: these are handled by Paysera and your bank.
We do not send newsletters or advertising emails. We contact you by email or phone only about your order, your enquiries or your claims.
Who do we share data with?
We share data only with those who need it to fulfil your order or run our business:
- the courier service – your name, delivery address, phone number and email address, so that it can deliver your parcel;
- the payment service provider Paysera (UAB Paysera LT) – the order number, amount and contact details, so that you can pay;
- IT service providers (website hosting and email), whose servers store the data;
- Google Ireland Limited – statistics and marketing data, if you consent;
- public authorities – when required by law.
Data may be transferred outside the European Economic Area (EEA) only in compliance with the GDPR, on the basis of European Commission adequacy decisions or by applying other safeguards provided for in the GDPR. You can get information about the safeguards applied by contacting us.
How long do we keep data?
- Unpaid, failed and cancelled orders are deleted after 60 days.
- Completed orders are kept for 30 months from their completion, and longer only where the law requires it or where it is necessary to bring or defend legal claims. When the retention period ends, the data are deleted.
- Invoices are kept for 10 years, as required by the rules on keeping accounting records.
- Correspondence with you is kept as long as the order it relates to.
- Statistics data is kept in Google Analytics for 14 months.
Cookies
The website uses three kinds of cookies:
- Necessary cookies remember your chosen language (1 year), your shopping cart (up to 2 days) and your cookie choice (12 months). The website would not work without them, so they do not require consent.
- Statistics cookies (Google Analytics and order source) distinguish visitors and their visits. Google Analytics cookies last up to 2 years, the order source cookies until the end of the browsing session.
- Marketing cookies (Google Ads) measure the results of our ads. They last up to 90 days.
We use statistics and marketing cookies only with your consent. On your first visit, you can allow them, accept only the necessary ones, or choose for yourself. You can change your choice at any time by clicking “Cookie settings” at the bottom of the website. You can also delete or block cookies in your browser settings, but the shopping cart may then not work.
When paying for your order, you go to the Paysera page, where the Paysera privacy policy applies.
What are your rights?
You have the right to:
- access your data and get a copy of it;
- ask us to correct inaccurate data;
- ask us to delete your data if it is no longer needed or there is no basis for processing it (except data we must keep by law);
- ask us to restrict the processing of your data;
- object to processing based on our legitimate interest;
- receive the data you provided in a structured, machine-readable format and, where applicable, to transfer it to another data controller;
- withdraw your consent at any time.
To exercise these rights, write to [email protected]. We will reply to your request no later than within one month. In complex cases this period may be extended as provided by law, and we will let you know if it is. Before providing data, we may ask you to confirm that the request comes from you.
If you believe your data is being processed unlawfully, you can lodge a complaint with the State Data Protection Inspectorate (L. Sapiegos g. 17, LT-10312 Vilnius, vdai.lrv.lt).
How do we protect data?
The website uses an encrypted connection (HTTPS), and only the staff who handle orders have access to order data.
Changes to this policy
We may update this policy. The current version is always published on this page, with its effective date shown at the top.
If you have any questions, write to [email protected].