ScaffShop privacy and cookie policy
1. Who handles your data
The controller for www.scaffshop.lt is MB “Arisima”, legal entity code 305968185, registered office at Perkūnkiemio g. 19, LT-12120 Vilnius, Lithuania. Contact address: Danės g. 15, LT-92117 Klaipėda, Lithuania. For privacy enquiries, email info@scaffshop.lt or call +370 678 34 889.
This policy explains how we handle the personal data of website visitors, people making enquiries, buyers and company representatives. Merely browsing or reading this policy does not constitute consent to non-essential cookies or a newsletter subscription.
2. What we collect and why
- Enquiries and quotations. Your name, email, telephone number, company, role if provided and correspondence. We use these to respond, advise and prepare quotations. The basis is steps taken at your request before entering into a contract; for company representatives, our legitimate interest in maintaining business communications and serving the company.
- Orders, delivery and accounting. Buyer and recipient contact details, addresses, invoice details, ordered products, payment and delivery information. The bases are contract performance, statutory accounting obligations and our legitimate interest in administering a business customer’s order.
- Guarantees and claims. Order details, correspondence and photos you provide of a problem. The bases are contractual and legal obligations and our legitimate interest in resolving disputes and defending claims.
- Website security and operation. IP address, browser and device information, request and security-event data. Our legitimate interest is keeping the site operational and preventing spam, fraud and unauthorised access. Essential technical functions may use cookies.
- Subscriptions and non-essential technologies. If you separately subscribe to a newsletter or agree to non-essential cookies, we process the relevant contact, choice and browsing data on the basis of that consent. An enquiry or purchase alone is not consent to a newsletter subscription.
Data comes from you, your company, the person arranging an order or delivery, and the website’s technical tools. Please do not send unnecessary identity documents, health information or other sensitive data. Without details needed for an enquiry or delivery, we may be unable to respond or fulfil an order.
3. Who may receive data
Where necessary for the relevant purpose, we use hosting, IT support, security, email, customer and order management, accounting and delivery providers. We also disclose information to authorities where legally required and to advisers where necessary for legal claims. Partners receive no more information than their task requires.
The site uses Google reCAPTCHA protection, MailerLite subscription and Meta/Facebook marketing integrations. Their use and non-essential technology choices are described below. Social media and WhatsApp links take you to the relevant provider’s environment, where its privacy rules also apply.
If a provider processes data outside the European Economic Area, a GDPR transfer mechanism must apply, such as a European Commission adequacy decision or standard contractual clauses and, where needed, additional safeguards. You can ask us for information about the safeguards applicable to a particular recipient.
4. How long we keep data
- Enquiry data is kept while the enquiry and reasonable related communications remain active, and afterwards only as necessary to evidence agreements, complaints or legal claims.
- Order and accounting records are retained for their applicable statutory periods. Guarantee and dispute records are retained while the matter is being resolved and the relevant claim periods apply.
- Subscription data is retained until consent is withdrawn or the subscription ends. Evidence of consent or opt-out may be retained as necessary to demonstrate compliance and protect rights.
- Security records are retained according to the incident and time needed to investigate it; backups follow their renewal cycle. Unnecessary data is deleted or anonymised where no other lawful retention basis exists.
The exact period depends on the record type, contract and legal obligation. Contact us for the retention period or criteria applicable to your data.
5. Your rights
Subject to the GDPR’s conditions, you may request access, correction, deletion, restriction and portability of data, and object to processing based on legitimate interests. You can object to direct marketing and withdraw consent at any time. Withdrawal does not affect the lawfulness of earlier processing.
Email info@scaffshop.lt. We verify identity only as necessary to fulfil a request securely. We normally respond within one month; where the law permits an extension for a complex request, we explain the extension and reasons within that period. You may complain to Lithuania’s State Data Protection Inspectorate or seek a court remedy.
6. Cookies and similar technologies
Cookies and similar tools remember choices, provide technical functions or enable additional services. Non-essential cookies require your choice. Browsing, scrolling or closing a window does not constitute consent.
- Essential. Security, session operation, language and privacy choices. The Complianz tool records consent status; the configured choice lifetime is up to 365 days. Essential functions cannot be switched off through the consent tool.
- Statistics. Where an analytics service is used, it must require the relevant category choice unless it lawfully operates without consent.
- Marketing and external services. Meta/Facebook tools may use browsing and device identifiers to measure advertising. MailerLite provides subscription forms. Google reCAPTCHA protects against automated requests and may send technical data to Google. These non-essential integrations are managed through consent controls; declining may make external content or its associated function unavailable.
Duration depends on purpose: session cookies end when the browser closes, preference cookies last until their set expiry or deletion, and third-party technology durations are determined by the relevant provider. Provider information: Google, Meta and MailerLite.
7. Changing your choices
The cookie dialogue lets you accept, reject or choose categories. To change them later, use the website’s “Manage consent” control (“Tvarkyti sutikimą” in Lithuanian), adjust categories and save. You can also remove previously stored cookies through your browser settings. This does not remove a separate lawful basis for processing, such as the obligation to retain an invoice.
8. Policy changes
We update this policy and its date when website functions or processing change. Where new processing requires consent, changing the policy does not replace that consent.
