The website www.retrorysys.lt is owned and operated by Retro Rysys, who acts as the data controller of your personal data.

We have adopted this Privacy Policy, which determines how we process the information collected by www.retrorysys.lt, and provides the reasons why we must collect certain personal data about you.

Therefore, you must read this Privacy Policy before using the www.retrorysys.lt website.

We care deeply about your personal data and undertake to guarantee its confidentiality, integrity, and security in accordance with the EU General Data Protection Regulation (GDPR) and applicable laws of the Republic of Lithuania.

Personal Information We Collect

Device Information: When you visit www.retrorysys.lt, we automatically collect certain information about your device, including information about your web browser, IP address, time zone, and some of the cookies installed on your device. Additionally, as you browse the Site, we collect information about the individual web pages or products you view, what websites or search terms referred you to the Site, and how you interact with the Site.

Order and Account Information: Moreover, we collect personal data you explicitly provide to us during checkout or account registration to be able to fulfill our purchase agreement. This includes, but is not limited to:

First and Last Name
Delivery and Billing Address
Email Address
Telephone Number
Payment/Transaction details

Legal Grounds and Why We Process Your Data

Our top priority is customer data security, and, as such, we process your data only under valid legal grounds:

1. Performance of a Contract: Processing your name, contact information, address, and payment details is strictly necessary to fulfill your orders, handle shipments, and process payments.
2. Legal Obligation: We process and retain transaction details to comply with statutory accounting and tax regulations.
3. Consent: We process your email address for marketing purposes (such as newsletters) only if you have given us explicit consent to do so.
4. Legitimate Interest: Automatically-collected Device Information is used to maintain website security, identify potential cases of abuse, and establish anonymous statistical information regarding website usage.

You can visit the website without telling us who you are or revealing any information by which someone could identify you as a specific individual. If, however, you wish to use some of the website’s features, receive our newsletter, or fill out a contact form, you may choose to provide personal data to us. If you choose not to provide mandatory data, you may not be able to complete a purchase or take advantage of certain website features.

Sharing Data with Third-Party Providers

To fulfill your orders and operate our storefront, we share specific personal data with trusted third-party service providers who act as data processors on our behalf:

Payment Processing: Financial transactions are securely handled by our payment gateway partner, Paysera. We do not store or have access to your full credit card or bank login details on our servers.

Shipping and Delivery: Your name, delivery address, email, and phone number are shared with our logistics partners (e.g., Omniva, DPD, or registered postal services) solely for shipping execution and delivery tracking updates.

International Data Transfers
To run our website infrastructure, some service providers (such as hosting or e-commerce tools) may process or transfer data outside of the European Economic Area (EEA), including to Canada and the United States. We ensure that any such transfers are protected by appropriate safeguards, such as EU Standard Contractual Clauses (SCCs) or adequacy decisions.

Data Retention

Personal data collected during a purchase will be securely stored in our systems for up to 10 years to comply with statutory accounting, legal defense, and tax obligations under Lithuanian law. Standard browsing, analytical, or device data is retained only as long as necessary for security and optimization purposes.

Your Rights Under the GDPR

If you are located within the European Union, you have the following rights related to your personal data:

• The right to be informed about how your data is used.
• The right of access to the personal data we hold about you.
• The right to rectification (to correct inaccurate or incomplete data).
• The right to erasure (“the right to be forgotten”) under certain conditions.
• The right to restrict processing of your data.
• The right to data portability (to receive your data in a structured, machine-readable format).
• The right to object to processing based on legitimate interests or direct marketing.
• Rights in relation to automated decision-making and profiling.

If you wish to exercise any of these rights, please contact us using the contact information below.

Furthermore, you have the right to lodge a complaint regarding our processing of your personal data with your local supervisory authority.
In Lithuania, this is the State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija – VDAI, L. Sapiegos g. 17, Vilnius, info@vdai.lt).

Links to Other Websites

Our website may contain links to other websites that are not owned or controlled by us. Please be aware that we are not responsible for the privacy practices of such other websites or third parties. We encourage you to read the privacy statements of each website that may collect personal information.

Information Security

We secure the information you provide on computer servers in a controlled, secure environment, protected from unauthorized access, use, or disclosure. We maintain reasonable administrative, technical, and physical safeguards to protect against unauthorized access, modification, and disclosure of personal data in our custody. However, no data transmission over the Internet or wireless network can be guaranteed to be 100% secure.

Legal Disclosure

We will disclose any information we collect, use, or receive if required or permitted by law, such as to comply with a subpoena, court order, or similar legal process, and when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a legitimate government request.

Contact Information

If you would like to contact us to understand more about this Policy, or wish to contact us concerning any matter relating to individual rights and your Personal Information, you may send an email to contact@retrorysys.com.