PRIVACY POLICY

WHAT IS THIS PRIVACY POLICY FOR?

This privacy policy (hereinafter - Privacy Policy) is intended for all visitors of the Website www.bmwautoparts.net (hereinafter - Website), UAB„Krasta Auto Vilnius“(hereinafter – Krasta auto, Krasta or We) service recipients, purchasers of goods, persons who have taken active steps on Krasta auto social media accounts, and for persons who have agreed to receive Krasta auto marketing material, as well as for persons participating in events. The Privacy Policy sets out the basic rules for the processing of personal data and defines the conditions that the above individuals must comply with.
We care about your privacy, therefore We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 of the European Parliament and the Council (hereinafter - the Regulation), the Law on the Legal Protection of Personal Data and other personal data protection legislation. Be sure to take the time to review the Privacy Policy, and if you have any questions, please do not hesitate to contact us at given contacts.
When you visit our Website and (or) purchase Krasta auto product and (or) service, take active steps on Krasta auto social media accounts, participate in our events or agree to be contacted by Krasta auto and (or) provide marketing material, We will consider that you have read and became acquainted with this Privacy Policy.

ABOUT US

We are Your personal data controller (hereinafter – Krasta or Data Controller) - UAB „Krasta Auto Vilnius“ (legal entity code 302693894, registration address Ozo g. 10A, 08200, Vilnius), that processes your personal data on the basis of established purposes and means. Data about the company is collected and processed in the Register of Legal Entities of SE Center of Registers.
If you have any questions or complaints about the processing of personal data, you can contact us by e-mail support@bmwautoparts.net. You also have the option to register your request by phone +370 5 2740440.

WHAT IS PERSONAL DATA?

Personal data is any information collected about you by us that may be used to identify you and is stored electronically or otherwise.
Personal data includes any information, including your name, surname, address, telephone number, e-mail, IP address, vehicle VIN number that Krasta auto collects about you for the purposes specified in this Privacy Policy or in your separate consent or agreement with Krasta auto.
This data also includes your personal information available in the public domain, which We access when you contact us on social media or after taking active steps on Krasta auto social media accounts.
We aim to provide you with as much information as possible about how We use such personal data so that when you submit it to Krasta auto you know how it will be used.

HOW AND WHY WE COLLECT AND USE YOUR PERSONAL DATA

Krasta auto requires your personal data, which can be collected in the ways described below. The Privacy Policy sets out what you can expect when a company collects personal data on:

  • website visitors;

  • social media users who contact Krasta auto in any way through Krasta auto social media accounts or participate actively in social media;

  • persons who have contacted us;

  • persons who register an account in the e-shop on our Website;

  • persons who purchase the goods We sell in the e-shop of the Website without registration;

  • persons who agree to receive our marketing materials.

Our Websites’ visitors

When you visit this Website, data about your browsing on the Website, etc., is collected using cookies. 
Krasta uses the necessary/technical cookies to ensure the proper functioning of the Website and (or) other third-party cookies in order to improve your browsing experience (i.e. to take into account your needs, to continuously improve the Website and to make offers that suit your interests). 
Data using cookies and similar technologies related to Internet browsing, etc. are collected (processed) in accordance with Article 6 (1) (a) of the Regulation, i.e. with your consent (except for necessary cookies). You can find more information about cookies in the Cookie Policy of the Website.

Social media

All information you provide to us when communicating with us on social media (including messages, use of the Like and Follow fields, and other communications) is managed by Krasta together with the specific social network manager (on the social network platform).
We process your personal data provided in the social network account in accordance with Article 6 (1) (a) of the Regulation, i.e. with your consent.
We process the personal data provided by you until the moment of the withdrawal of your consent (i.e. deletion of the provided personal data from the account), but not longer than until the deletion of the Company’s account. We note that personal data will be processed on the platform of the social network manager, therefore the exact terms and conditions of processing are determined by the platform manager. In this regard, We recommend that you read the privacy notices of third parties and (or) contact service providers directly if you have any questions about how they use your personal data.

Personal data collected by contacting us

Contacts are provided on our Website, where you can contact us to purchase the goods We offer, take advantage of our services or consult us on issues that concern you. We will accept, review and respond to all your messages. 
If you contact us by e-mail, We will process the following data about you: your name, surname, e-mail and the text of the correspondence and (or) attached documents. This data will be processed for the administration of your requests and (or) preparation for the conclusion of the contract, execution of the contract. The communication with you will be handled until the full examination of the request and stored for 3 months from the date of the examination or full performance of the contract and stored for 10 years, together with the contract and other documents (i.e. contract and accounting documents).
If you contact us by telephone (before recording the conversation, the data subject is informed about the recording and purpose of the conversation), if you agree, the conversation will be recorded, if you do not agree, please use other means of communication. Phone calls are recorded to ensure quality consulting of people and objective handling of complaints. The following data is saved when recording a phone call: the phone number you are calling from, the call record. Such information is stored for 6 months, after which it is destroyed. 
All personal data you provide when communicating with us is used only for the purposes specified above and to view messages and to administer (manage) communication flows and provide you with a response. We will process the personal data in accordance with Article 6 (1) (a) of the Regulation, i.e. your consent, which you express by contacting us by e-mail and (or) by continuing the telephone conversation. If the communication is intended for concluding and (or) executing the agreement concluded with you, then We will process personal data in accordance with Article 6 (1) (b) of the Regulation, i.e. for the purpose of concluding and (or) performing a contract concluded with the data subject.
Please note that We may need to contact you by mail, e-mail or telephone, so be sure to notify us of any changes to your personal information.

Personal data collected when registering in the e-shop

If you decide to register in our e-shop (www.bmwautoparts.net), We will ask you to fill in your personal data requested in the registration form and (or) account. Such data includes your name, surname, e-mail, telephone number, delivery address (entered when ordering goods) and information about the represented company (if you use the e-shop as a representative of a legal entity and not as a natural person (consumer)). You can also register via Facebook or Google+ accounts (in this case We will handle your name, surname, e-mail, profile photo). The above mentioned personal data will be used for the creation and administration of your account, and We will process them in accordance with Article 6 (1) (a) of the Regulation, i.e. your consent, which you express by voluntarily registering your account.
Please note that this e-shop is intended for the purchase of goods offered by us (i.e. for the conclusion of a distance purchase-sale contract). Therefore, by registering an account in the e-shop, you agree that We would store in the e-shop the personal data you provide in order to facilitate your shopping experience in the e-shop. Your account in the e-shop will be stored until the date of revocation of consent (i.e. deletion of the account), but not longer than 3 years from the moment of the last login to the account (evidence of orders placed is not deleted together with the account).
It should be noted that an account is not necessary in order to purchase goods in the e-shop, you can do so without registration.

Personal data collected when buying in the e-shop

If you decide to purchase the goods offered in the e-shop (i.e. conclude a distant purchase-sale contract), We will ask you to fill in your personal data requested in the purchase form. Regardless of whether you purchase without a registered account or with an account, We will process the following personal data: name, surname, e-mail, telephone number, delivery address, payment details and (or) information about the represented company (when an invoice is required). The mentioned personal data will be used to conclude and execute a distant purchase-sale contract of goods (i.e. to sell the ordered goods). We will process this personal information in accordance with Article 6 (1) (b) of the Regulation, i.e. to conclude a contract with you and perform it, as Well as Article 6 (1) (c) of the Regulation, i.e. We are subject to a legal obligation to keep contracts and accounting documents and Article 6 (f) of the Regulation, i.e. our legitimate interest in asserting and (or) defending our legal claims (when applicable).
It should be noted that We have to keep orders (i.e. distant purchase-sale contracts) and documents confirming payment for 10 years from the date of full performance of the agreement.

Personal data collected when ordering direct marketing

If you agree to subscribe or otherwise receive our newsletter, We will use your e-mail and (or) telephone number for general and (or) individual marketing (e.g. about goods, services, discounts, offers, competitions, events, news, surveys and other news) by e-mail, post, telephone, SMS and We will contact you for these purposes. The information collected will only be used for sending direct marketing.
When submitting common marketing offers, you will be sent general information that We will share with all our customers.

By providing individualized marketing offers, you may be assigned to the corresponding Data Controller customer category according to your interest (by e-mail, telephone, browsing the Website or otherwise) in specific our services and (or) goods and their acquisition history, participation in our surveys, competitions and events, as well as other features of a similar nature. However, please note that such assignment of you to one or another customer category (profiling) will not in any way have legal consequences for you and (or) will not have a significant impact in a similar way. In these cases, general content information will only be sent to the appropriate category of our customers.
We may contact you without your consent in order to receive direct marketing when Krasta goods or services are offered (similar goods/services) or opinions on goods/services are requested. In the latter case, We provide an easy-to-implement option to disagree with receiving some types of notifications, i.e. to refuse getting such marketing at first contact (e.g. by selecting a link in an e-mail that you no longer wish to receive such notifications and (or) express your disagreement in other ways).
We may pass your e-mail address to third parties providing specialized services (data processors) only in order to send you a newsletter.
It should be noted that personal data collected for the purpose of direct marketing will be processed in an active database for 3 years, but not longer than the validity of your consent. If you wish to cancel the consent given and (or) express the disagreement, you can do so notifying by e-mail. Email support@bmwautoparts.net or clicking on the link at the bottom of the received newsletter.

TRANSMISSION OF PERSONAL DATA

Your personal data is transferred to ensure the uninterrupted continuity of our activity and the proper provision of services and delivery of goods, therefore We may disclose/transfer information about you to our employees, managers, intermediaries, suppliers, subcontractors, distributors, service providers (IT service providers, debt collection, marketing companies, etc.) or our other partners, provided that such transfer is necessary to achieve the purposes set out in the Privacy Policy.
In certain circumstances, We may be required to transfer personal data when:

  • We must disclose information in accordance with the law, including when We must disclose personal data to the tax administrator and law enforcement authorities for the purposes of crime prevention and detection;
  • We must disclose personal data due to legal proceedings or for the purpose of obtaining legal advice, or disclosure of personal data is necessary to establish, enforce or defend our rights;
  • the information must be disclosed in order to protect our interests or the interests of third parties (e.g. to prevent fraud);
  • information must be disclosed to protect your vital interests (e.g., if you feel unwell on our premises and We have to seek medical attention);
  • the information must be disclosed to a third party that provides data processing services on our behalf, i.e. to the data processors. In such circumstances, We undertake to take measures to ensure that data processors protect personal data in the same way as We protect them and to notify you of any changes to this privacy statement;
  • the information must be disclosed to a potential purchaser of our company’s assets or organization.

ENSURING THE SECURITY OF PERSONAL DATA

We understand that you provide us with your personal data in good faith and that you expect it to be protected. For this reason, We take the security of your personal data seriously. This means that in order to properly protect your personal data in our systems, We take appropriate internal security measures:

  • We ensure strict access control and restrict access to data to those who need to know it;
  • access to personal data is protected by an appropriate level of passwords;
  • We enter into confidentiality agreements with persons who have access to your data;
  • We monitor access to personal data;
  • We have implemented other organizational and technical security measures.

YOUR RIGHTS

You, as a data subject, have the following rights: (1) to request access to your personal data and to receive a copy of it; (2) request the correction or restriction of inaccurate or incomplete personal data; (3) request the deletion of excessive or unlawfully processed personal data; (4) request the transfer of your personal data in a structured, computer-readable format; (5) not to consent to the processing of his or her personal data and the right to withdraw his or her consent when the processing is based on the data subject's consent (pursuant to Article 6 (1) (a) of the Regulation); (6) to submit a complaint to the State Data Protection Inspectorate (SDPI). 

Right to access your personal data

We want you to fully understand how We use your personal data and not experience any inconvenience as a result. You can find out if We process any of your personal data. If We process your personal data, you have the right to access it and receive a copy. 

Right to rectify your personal data and (or) restrict their use

We strive to ensure that all personal data We process is complete and accurate, and that you do not experience any inconvenience due to its inaccuracy. Therefore, if you notice that We use incomplete and (or) inaccurate personal data about you, you can notify us that We would correct them, but in this case We may ask you to confirm this information. 
Also, you may request that We restrict the use of your personal data for a period of time when: (1) you need to verify the accuracy of your personal data (upon claiming the accuracy of the data); (2) the processing (collection, use) of your personal data is illegal, but you decide not to request the deletion of the data; (3) your personal data is no longer necessary for a specific purpose, but may be necessary to establish, enforce or defend a legal claim; (4) it is necessary to determine whether We have a more important legal basis to continue to process your personal data (after you have exercised your right to object to the processing of your personal data).
If We see that We use incomplete and (or) manifestly incorrect personal data, We may (on our own initiative) restrict their use and (or) request the correction of such data.

Right to delete your personal data

We strive to ensure that your personal data is processed lawfully and not to collect and (or) use your excessive personal data. Therefore, you can request that We delete your personal data. However, such right is not absolute, therefore We will only be able to delete your data if: (1) the personal data are no longer necessary for the purposes for which they Were collected or otherwise processed; (2) You have cancelled your consent to the processing of personal data and We have no other legal basis for the processing of such personal data; (3) You have expressed an objection (disagreement) to the processing of your personal data and there are no overriding legitimate reasons to process such data; (4) Your personal data has been processed unlawfully; (5) such personal data must be deleted (i.e. may not be collected, used or stored) in accordance with our legal obligations under the law.

Right to transfer your personal data

We aim to give you control over your personal data and to ensure the free movement of personal data. Therefore, you may request that the personal data you provide, which is processed by automated means, be provided to you in a structured, commonly used and computer-readable format and (or) transferred to another data controller (when technically possible). This right is also not absolute and can only be exercised if: (1) such processing of personal data is based on consent (pursuant to Article 6 (1) (a), Article 9 (2) (a) of the Regulation) or by contract (pursuant to Article 6 (1) (b) of the Regulation); (2) where the exercise of this right does not adversely affect the rights and freedoms of others.

Right to object to the processing of personal data and (or) to withdraw your consent

We aim to give you control over your personal information. Therefore, you may at any time express your objection (disagreement) to the processing of your specific personal data when such processing is carried out in accordance with our legitimate interest (pursuant to Article 6 (1) (f) of the Regulation), including profiling in accordance with those provisions. Nevertheless, We may continue to process this personal data if We can prove that this data is processed for compelling legitimate reasons that take precedence over your (data subject's) interests, rights and freedoms, or to assert, enforce or defend legal claims.
When your personal data is processed for direct marketing purposes, you have the right at any time to object to the processing of personal data relating to you for such marketing purposes, including profiling insofar as it relates to such direct marketing. In this case, We will no longer process your personal data for direct marketing purposes. 
Also, when your personal data is processed on the basis of your consent (pursuant to Article 6 (1) (a) of the Regulation, or Article 9 (2) (a) of the Regulation), you may at any time revoke your consent to such processing of personal data. 

Right to lodge a complaint with the supervisory authority (SDPI)

We always strive to answer your questions and (or) solve problems arising from the processing of personal data and to find the most suitable solution for both parties, therefore, if you have any questions and (or) complaints about our personal data protection, contact us directly by e-mail: support@bmwautoparts.net, or phone: +370 5 2740440. If you do not agree with the answers provided by us and (or) the proposed solutions and continue to believe that the processing of personal data related to you violates the applicable legal acts, you have the right to submit a complaint to the State Data Protection Inspectorate (e-mail: ada@ada.lt).

EXERCISING YOUR RIGHTS

You may exercise the above mentioned rights in the following ways: (1) by submitting a written request to us in person (at the Krasta shop), by post and (or) through a representative or at the address: Ozo g. 10A, 08200, Vilnius; (2) by submitting a request to us by electronic means of communication, i.e. by e-mail: support@bmwautoparts.net.  
In order for us to accept and exercise the rights of the data subject you request, you must confirm your identity in one of the following ways when submitting a request:

  • by submitting a request to the Krasta shop employee - together with a valid identity document;
  • by submitting a request by post or courier - together with a copy of a valid identity document approved in accordance with the procedure established by legal acts;
  • by submitting a request electronically - by confirming it by electronic means of communication that allow proper identification of the person (e.g. by a mobile signature, a qualified electronic signature, etc.).

Upon receipt of your request for the exercise of data subjects’ rights, We will provide you with an answer immediately, but no later than within 1 month from the date of the request. This period may be extended by a further 1 month, if necessary, depending on the complexity and number of requests. You will be notified of such an extension in the first month. The information you request will be provided free of charge. However, if We see that your requests are manifestly unfounded or disproportionate, in particular due to their repetitive content, We reserve the right to charge a reasonable fee for this (i.e. to claim administrative costs) or to refuse to act on such your request.
The answer will be provided in the manner chosen in your request. If you do not specify in the request the way in which you wish to receive a reply, the reply will be sent to you in the same way as the request.

FINAL PROVISIONS

We hope you understand that it is very difficult to discuss all possible ways of collecting and using personal data in this short report. Nevertheless, We strive to provide the clearest and most complete information possible and undertake to update this Privacy Notice as personal data processing processes change. 
If you have any questions about the use of your personal data, We will be happy to answer them or provide any additional information We may disclose. You can always contact us by e-mail support@bmwautoparts.net or by phone: +370 5 2740440. 
We reserve the right to amend this Privacy Policy in whole or in part. You will not be notified of any changes to the Privacy Policy, i.e. an updated version of the Privacy Policy will be published on the Website. Therefore, We recommend and encourage you to periodically visit our Website to review the latest version of the Privacy Policy.


Last update: 06-2020

Need Help?
+370 612 48219
I-V (9:00 - 18:00)
contact us »
Allow us 2 business hours to respond.

VIN - vehicle identification number. You can find it on your vehicle registration document.

It's enough to provide last 7 symbols, letters are case-insensitive.