AUTU.lt

Privacy Policy

This Privacy Policy explains how the autu.lt portal (the "Portal") collects, uses and protects your personal data, and what rights you have. We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and the laws of the Republic of Lithuania.

1. Data controller

The controller of your personal data is UAB "Modernex", registered address Chemijos g. 27C-62, LT-51331 Kaunas, Lithuania ("we"). For questions about personal data write to [email protected].

2. What data we collect

  • Account data: name or company name, email address, phone number, password (stored only in hashed form, we cannot read it), account status and settings (e.g. notification preferences).

  • Dealer (business) data: company name, company code, address, contact details, logo, profile description.

  • Listing data: listing text, photos, price, vehicle details, location, contact phone.

  • Communication data: messages sent to other users through the Portal, reports about listings, messages sent through the contact form.

  • Account activity data: favourite listings, saved searches, reviews you submit.

  • Payment data: orders, amounts paid, payment date and status, invoice data. We do not receive or store bank card or online banking credentials; they are handled by the payment service provider.

  • Technical and statistics data: pages visited, language, device type, referring website, technical errors. For our own visitor statistics we use a daily anonymised identifier derived from the IP address and browser data; the IP address itself is not stored in these statistics. We also use Google Analytics (see section 8).

3. Why we use data and on what basis

  • Creating your account and providing the Portal's services (registration, posting and showing listings, messages, favourites and saved searches) – performance of a contract (GDPR Art. 6(1)(b)).

  • Payment, invoicing and accounting – performance of a contract and legal obligation (Art. 6(1)(b) and (c)).

  • Service notifications (confirmations, messages, listing expiry, password reset, saved-search alerts) – performance of a contract and your choices in account settings.

  • News and offers by email – only with your consent (Art. 6(1)(a)), which you can withdraw at any time in account settings.

  • Security, fraud prevention, moderation and enforcing the terms – our legitimate interest in keeping the platform safe (Art. 6(1)(f)).

  • Portal statistics and improvement – our legitimate interest in understanding how the Portal is used (Art. 6(1)(f)); Google Tag Manager and Google Analytics cookies and similar technologies are used only with your consent (Art. 6(1)(a)).

  • Defending legal claims and responding to authorities – legal obligation and legitimate interest.

We do not make decisions that produce legal effects for you based solely on automated processing.

4. What others can see

When you publish a listing, the information in it (vehicle details, photos, price, location, contact phone and the seller's name or company name) becomes publicly visible to all Portal visitors and may also appear in search engines. Include only data you want to make public. Your email address is not shown to other users; messages are delivered through the Portal.

5. Who we share data with

We disclose data only as far as necessary and do not pass personal data to anyone except in the cases below:

  • Service providers (processors): hosting and server providers, a network and security provider (Cloudflare), email delivery providers, payment providers (e.g. Paysera, Stripe). They process data only on our instructions and under contracts.

  • Google: Google Tag Manager (tag management), Google Analytics (visitor statistics) and Google Search Console (monitoring how the site appears in search) are provided by Google Ireland Limited (and Google LLC). Google Analytics receives your browser and Portal-usage data (e.g. IP address, device information, pages visited) only if you consent to statistics cookies. Google Search Console shows us aggregated search data about the site and does not pass your personal data to us.

  • Other users: information in listings and messages as described above.

  • Public authorities, law enforcement and courts where required by law or necessary to defend our rights.

  • Accounting, legal or audit providers under confidentiality obligations.

We do not sell data and do not use advertising or profiling networks.

6. Transfers outside the EU / EEA

Some service providers (e.g. Google, network or payment providers) may process data outside the European Economic Area. In that case we ensure the safeguards required by the GDPR, such as the European Commission's standard contractual clauses or an adequacy decision.

7. How long we keep data

  • Account data – while the account is active; after deletion we remove or anonymise data, except what we must or may lawfully retain.

  • Listings – while the listing is active; after expiry or removal data may be kept for a limited time for security and dispute-resolution purposes.

  • Accounting and payment documents (invoices, orders) – 10 years or as long as Lithuanian accounting law requires.

  • Messages and reports – as long as necessary to provide the service and handle possible disputes or investigations.

  • Visitor statistics – anonymised, for a limited period needed for analysis; Google Analytics data for the retention period set in it.

  • Consent-based data – until consent is withdrawn.

When the period ends we delete or irreversibly anonymise the data.

8. Cookies and statistics

The Portal uses the following kinds of cookies:

  • Necessary – a login session cookie, a language-choice cookie and a cookie recording your cookie choice. They are needed for the Portal to work and do not require consent.

  • Statistics – Google Tag Manager (a tag-management tool) and Google Analytics cookies and similar technologies that help us understand how visitors use the Portal (pages visited, visit length, traffic sources). They are used only if you choose "Accept" in the cookie banner. If you choose necessary cookies only, we do not use statistics cookies.

You can change your choice at any time by deleting this site's cookies in your browser, after which the cookie banner will be shown again. You can also delete or block cookies in your browser settings, but some features (such as logging in) may then stop working. You can also opt out of Google Analytics tracking using Google's browser add-on. We do not use advertising or profiling cookies.

9. Your rights

You have the right to:

  • find out whether we process your data and access it;

  • have inaccurate data corrected or incomplete data completed;

  • have data erased ("right to be forgotten") where there is a legal basis;

  • restrict processing;

  • object to processing based on our legitimate interest;

  • data portability (receive your data in a structured, commonly used format) where we process it on the basis of consent or a contract by automated means;

  • withdraw consent at any time, without affecting the lawfulness of earlier processing.

You can view and change much of your data yourself in account settings. Otherwise write to [email protected]; we will reply within 1 month. We may ask you to verify your identity before acting on a request.

10. Data security

We apply appropriate organisational and technical measures: encrypted connections (HTTPS), password storage only in hashed form, access restricted by role, and network protection. No system is completely secure, so we recommend using a unique password and not sharing it. We will notify you of a data breach that endangers your rights as required by law.

11. Children

The Portal is intended for people aged 18 and over. We do not knowingly collect data from minors. If you believe a minor has given us data, contact us and we will remove it.

12. Changes

We may update this policy when our activities or the law change. The new version is published on this page.

13. Complaints

If you believe your data is processed in breach of the law, please contact us first at [email protected].