Privacy Policy

1. Data controller

The controller of your personal data is Evzona, MB, legal entity code 307787098, Lithuania.

For any questions related to personal data processing, contact us at info@evzona.lt or +370 625 18789.

2. What personal data we process

• Order data: first and last name, email address, phone number, delivery address (city, address, postal code), ordered products and order amount.
• Enquiry data: name, email address and the content of your message when you use the contact form, email or phone.
• Technical data: IP address, browser type and time of visit — recorded automatically in our hosting provider's server logs for security and operational purposes.

3. Purposes and legal bases

• Fulfilling and delivering orders and related communication — performance of a contract (Art. 6(1)(b) GDPR).
• Accounting records — compliance with a legal obligation (Art. 6(1)(c) GDPR).
• Responding to enquiries and consultations — our legitimate interest in answering those who contact us (Art. 6(1)(f) GDPR).
• Website security and operation — our legitimate interest (Art. 6(1)(f) GDPR).
• Direct marketing (newsletters) — only with your separate consent (Art. 6(1)(a) GDPR); we currently do not send newsletters.

4. Retention periods

• Order and accounting data — 10 years from the transaction (as required by Lithuanian accounting legislation).
• Enquiry data — up to 12 months after the enquiry is resolved.
• Server log technical data — up to 12 months.
• After the retention period, data is deleted or anonymised.

5. Data recipients

We may share your data only to the extent necessary to provide our services, with the following recipients:

• Our hosting provider Vercel Inc. (USA) — to operate the website.
• Courier and parcel services — to deliver orders.
• Payment service providers and banks — to process payments.
• Accounting service providers — to fulfil legal obligations.
• Public authorities — where required by law.

6. Transfers outside the EU/EEA

The website is hosted by Vercel Inc. (USA). Transfers to the USA are based on the EU-U.S. Data Privacy Framework and/or Standard Contractual Clauses approved by the European Commission, ensuring an adequate level of data protection.

7. Your rights

Under the GDPR you have the right to:

• access your personal data and obtain a copy;
• have inaccurate data rectified;
• have your data erased (“right to be forgotten”);
• restrict processing;
• receive your data in a structured format (data portability);
• object to processing based on legitimate interest;
• withdraw consent at any time (without affecting the lawfulness of processing before withdrawal).

8. Exercising your rights

To exercise your rights, contact us at info@evzona.lt. We will respond within 30 calendar days.

If you believe your data is processed unlawfully, you may lodge a complaint with the Lithuanian State Data Protection Inspectorate (L. Sapiegos g. 17, 10312 Vilnius, ada@ada.lt, vdai.lrv.lt).

9. Cookies and local storage

The website does not use any marketing, analytics or tracking cookies, so no cookie consent is requested. Only strictly necessary browser storage is used, without which the site could not function:

• evzona-cart-v1 (localStorage) — your cart contents; stored in your browser until you delete it.
• evzona-pending-order, evzona-paid-order (sessionStorage) — order payment flow; deleted when you close the browser tab.
• These entries are stored only on your device and are not transmitted to us or third parties.
• If we introduce analytics or marketing tools in the future, we will ask for your consent first.

10. Final provisions

We may update this privacy policy — the current version is always published on this page with the date of the last update.