The last update: 2023-10-31.

Privacy Policy

1. What does this Privacy Policy mean?

In this privacy policy (hereinafter referred to as the Privacy Policy), we provide you with information on how UAB GBY (hereinafter – Gby) processes your personal data obtained when:

  • You visit the website www.gby.lt (hereinafter - the Website);
  • Gby provides services to you;
  • You perform active actions on Gby social media accounts;
  • You register on our website and log in to your account;
  • Gby conducts direct marketing;
  • You participate in Gby job vacancy selections;
  • You submit inquiries to us.

Hereinafter, all specified persons whose data is processed by Gby are referred to as Clients. The Privacy Policy also establishes certain duties of Clients that must be observed when visiting the Website.

2. About UAB GBY

UAB GBY, legal entity code 179435940, registered office at Pramonės g. 30-4, LT-72320 Tauragė. Data about the company is collected and stored in the Register of Legal Entities of the Republic of Lithuania. For data protection questions, please contact us by email at info@gby.lt.

3. What is personal data?

Personal data is any information collected by Gby about a Client that can be used to identify the Client's identity and is stored electronically or otherwise.

Personal data includes any information, including the Client's name, surname, address, and IP address, which Gby collects about Clients for the purposes specified in this Privacy Policy or in a separate consent or agreement with Gby.

This data also includes Client personal information available in the public space, which Gby accesses when the Client contacts Gby via social media or performs active actions on Gby social media accounts.

4. How do we collect your data?

How we collect your data depends on the services we provide to you or the nature of our cooperation.

Gby processes data:

  • Received directly from the data subject (You), e.g., when you send us inquiries or messages to specified contacts, sign cooperation agreements with us, send us your CV when applying for vacancies, fill out forms, register in our information systems, provide your email address to receive newsletters, etc.;
  • Generated when you use our services, e.g., when you use our network and services, i.e., make phone calls, send SMS messages, browse the internet, visit our websites, etc.;
  • Received from other sources, e.g., when there is a basis, from other institutions or companies, i.e., publicly available registers, insurance companies, etc.

5. Personal data processed when providing services

Purpose of data processingPersonal data processedData processing periodBasis for data processing
Conclusion of a purchase-sale agreement with clientsName, surname, personal identification number, residential address, other data necessary for issuing an invoice (e.g., copy of ID document if paying in cash)10 years after the end of the contractContract
GDPR Art. 6(1)(b)
Conclusion of a lease agreement with clientsName, surname, address, date of birth, phone number, driver's license number, driving experience.
When concluding a contract with a legal entity – details of the responsible person – name, surname, phone number, position held in the company, and a copy of the driver's license.
10 years after the end of the contractContract
GDPR Art. 6(1)(b)
Provision of services using a company account (used only after concluding a lease agreement)Name, surname, data, contract detailsData stored for 10 years from the client's last login to the client account or the day of the client's last purchase.Contract
GDPR Art. 6(1)(b)
Consent
GDPR Art. 6(1)(a)
Debt administration/recoveryName, surname, phone number, email address, address, amount of debt, circumstances of debt formation, circumstances of debt coverage.Until full debt coverage and 10 years after this period.Legitimate interest
GDPR Art. 6(1)(f)

6. Direct marketing

Purpose of data processingPersonal data processedData processing periodBasis for data processing
Sending offers, newsletters, and advertisements to clientsName, surname, phone number, email address.2 years after the end of the contractConsent
GDPR Art. 6(1)(a)
Law on Electronic Communications Art. 81(1)

You have the right to opt-out of receiving direct marketing communications at any time by contacting us via email at info@gby.lt.

If you are our active Client and have not objected to receiving Gby direct marketing communications, we will send you communications via email regarding goods or services similar to those provided to you based on our legitimate interest.

7. Personal offers

Purpose of data processingPersonal data processedData processing periodBasis for data processing
Providing personalized offers based on data submitted by the clientName, surname, phone number, email address, address, frequency of service usage, duration of concluded contract, etc.1 year after receiving consentConsent
GDPR Art. 6(1)(a)

You have the right to opt-out of receiving personal offers at any time by contacting us via email at info@gby.lt.

8. Participation in Recruitment for Vacant Positions

Purpose of data processingPersonal data processedData Retention
Period
Legal Basis for
Data
Processing
Recruitment for
vacant positions
Name, surname, telephone number, e-mail address, education, information about
the Candidate’s employment history (previous/current employers), candidate’s job
title, nature of work, brief description of duties, other information provided by the
job candidate in their CV or cover letter (date of birth, residential address, etc.),
publicly disclosed candidate data
1 year and 6 months
after the recruitment
process ends
Consent
GDPR Article 6
(1)(a)

9. Handling of inquiries, reports, and complaints

Purpose of data processingPersonal data processedData processing periodBasis for data processing
Handling inquiries via emailYour name, surname, email address, and correspondence text.1 year from the resolution of the inquiryConsent and Contract
GDPR Art. 6(1)(a) and (b)
Receiving inquiries by phonePhone number from which you are calling, recording of the phone conversation, call metadata – duration, time.30 daysConsent and Contract
GDPR Art. 6(1)(a) and (b)

All personal data you provide when communicating with us is used only for the purposes indicated above and to review messages and administer/manage communication flows.

We undertake not to use your personal data in any publications without your explicit consent in a way that would make it possible to identify your personal identity.

10. Cookies

A cookie is a small file consisting of letters and numbers that, with your consent, we save to your browser or your computer's hard drive. We use different cookies for different purposes. Cookies also help us distinguish you from other website users, thus ensuring a more pleasant website experience and allowing us to improve the website.

Most browsers allow you to reject all cookies, and some browsers offer the option to reject only third-party cookies. So you can take advantage of these opportunities. However, please note that blocking all cookies will have a negative impact on the use of the Website, and without cookies, you will not be able to use all services provided on the Website.

We use the following cookies:

  • Strictly necessary cookies. These cookies are necessary for the Website to function. The basis for data processed by such cookies is the proper execution of the contract when the Client visits the Website, and for Gby to ensure the quality and security of the visit. These can be cookies that, for example, allow the Client to log in and access protected areas of the Website, use the shopping cart function, or other services.
  • Analytical and/or performance cookies. These cookies allow Gby to recognize and count website visitors and monitor how visitors move around the Website when using it. This helps Gby improve the website's performance, for example, ensuring that users can easily find what they are looking for. The basis for processing data collected by these cookies is Client consent.
  • Functional cookies. These cookies are used to recognize Clients when they return to the Website so that Gby can tailor the presented content to Client needs and remember information relevant to Clients. The basis for processing data collected by these cookies is Client consent.

Detailed description of cookies:

Cookie NamePurpose/GoalCreation MomentExpiryType
cclistRecords the client's choice regarding cookiesUpon confirming Cookie selection in the table1 yearNecessary
_ga [2x]Registers a unique ID used to generate statistical data on how the visitor uses the website. 2 yearsAnalytical
_gatUsed by Google Analytics to throttle request rate. 1 dayAnalytical
_gidRegisters a unique ID used to generate statistical data on how the visitor uses the website. 1 dayAnalytical
_gcl_auUsed by Google AdSense to experiment with advertisement efficiency across websites using their services. 3 monthsAnalytical
_fbpUsed for Facebook advertising. 3 monthsAnalytical

11. Social Media Tools

The Website provides links to our accounts on social media tools. Currently, we have the following accounts:

We recommend reading third-party privacy notices and contacting service providers directly if you have any questions about how they use your personal data.

12. Data Disclosure

We may disclose information about you to:

  • Our professional advisors, auditors;
  • Notaries, if the contract concluded with you requires a notarial form;
  • Bailiffs, entities providing legal and/or debt recovery services;
  • Entities taking over the right of claim to debt;
  • Joint debtor data file processors;
  • Companies providing data center, hosting, cloud, website administration and related services, companies creating, providing, supporting and developing software, companies providing IT infrastructure services, companies providing communication services;
  • Companies providing advertising and marketing services;
  • Companies providing archiving, physical and/or electronic security, asset management and/or other business services;
  • State institutions according to the procedure established by law: State Tax Inspectorate, Center of Registers, Sodra, Labor Exchange, etc.;
  • Law enforcement institutions upon their request or on our initiative if there are suspicions that a criminal act has been committed, as well as courts and other dispute resolution institutions;
  • Tax administrators.

Your personal data will not be transferred to a third country and/or international organization. Except for cases provided for in this Privacy Policy, we do not provide your personal data to any third parties.

The list of recipients or categories of recipients specified in the Privacy Policy may change, so if you wish to be informed about changes in the recipients of your personal data, please notify us by email at info@gby.lt, indicating "I wish to receive information about the change of recipients of my personal data, name, surname".

13. Security of Your Personal Data

Your personal data will be processed in accordance with the requirements established by the General Data Protection Regulation, the Law on Legal Protection of Personal Data of the Republic of Lithuania, and other legal acts. When processing your personal data, we implement organizational and technical measures that ensure the protection of personal data from accidental or unlawful destruction, alteration, disclosure, as well as from any other unlawful processing.

14. Your Rights

In this section, we provide information about your rights related to our processing of your personal data and cases when you can exercise these rights. If you want more information about your rights or to exercise them, contact us at this email address: info@gby.lt.

Gby will provide you with information about the actions taken upon receipt of your request regarding the exercise of your rights without undue delay, but no later than within 1 (one) month of receiving the request. Depending on the complexity of the request and the number of requests received, the mentioned period may be extended for another 2 (two) months. In this case, we will inform you within 1 (one) month of receiving the request about such extension and its reasons.

Gby will refuse to implement your rights only in cases provided for by legal acts.

  • Right to withdraw consent. If you have provided us with explicit consent for the processing of your data, you can withdraw it at any time at this email address info@gby.lt.
  • Right to access your data. We aim for you to fully understand how we use your personal data and not experience any inconvenience because of it. You can contact us at any time and ask if we process any of your personal data. If we store or use your personal data in any way, you have the right to access it. To do this, submit a written request to us at this email address info@gby.lt, confirm your identity, and when submitting such a request, observe the principles of fairness and reasonableness.
  • Right to request more information. If you have any questions about the use of your personal data, we will be happy to answer them or provide all additional information that we can disclose. If you have any specific questions or did not understand the information provided, contact us by email at info@gby.lt.

15. Additional Rights

Below we provide information about additional rights you have, which you can exercise following the procedure described below.

  • You have the right to request us to correct any inaccuracies in available data. In this case, we may ask you to confirm the corrected information.
  • You have the right to request us to delete your personal data. This right is implemented in cases provided for in Article 17 of the General Data Protection Regulation (EU) 2016/679.
  • You have the right to request us to restrict the processing of your personal data or not to process them:
    • i. for the period needed to verify the accuracy of your personal data when you submit claims regarding data accuracy;
    • ii. when our collection, storage, or use of your personal data is unlawful, but you decide not to request deletion of data;
    • iii. when we no longer need your personal data, but you need them to establish, exercise, or defend a legal claim;
    • iv. for the period needed to determine if we have a more important legal basis to continue processing your personal data if you have exercised your right to object to the processing of personal data.
  • You have the right to data portability regarding data we received from you with your consent or for contract conclusion purposes. If you exercise this right, we will transfer a copy of the data provided by you upon your request.
  • You have the right to object to our use of your personal data:
    • i. when we use such data to ensure our legitimate interests, but do not have a more important legal basis to continue using your personal data; or
    • ii. at any time when we use your personal data to send newsletters or for direct marketing purposes. In this case, the data will no longer be used for these purposes, but it may be used for other legitimate purposes.

16. Complaints

If you believe that your rights as a personal data subject are and/or may be violated, please immediately contact us with a complaint at the email address info@gby.lt. We assure you that only upon receiving your complaint, we will contact you within a reasonable period and inform you about the progress of the complaint investigation, and later about the result.

If the investigation results do not satisfy you, we inform you that you may submit a complaint to the supervisory authority - the State Data Protection Inspectorate (contacts www.ada.lt).

17. Liability

You are responsible for ensuring that the data provided to us is accurate, correct, and complete. If the data you provided changes, you must immediately inform us by changing the relevant data in the registration form or, if the data is not specified in the registration form, by informing us via email. We will in no case be liable for damage incurred by you because you indicated incorrect or incomplete personal data or did not inform us when they changed.

18. Changes to the Privacy Policy

We may update or change this Privacy Policy at any time. Such updated or changed Privacy Policy will take effect from its publication on our Website. You should check it occasionally to ensure that you are satisfied with the current version of the Privacy Policy.

After updating the Privacy Policy, we will inform you about what we consider to be essential changes by publishing them on the Website. If you log in to the Website after such notification is published, you agree to the new requirements specified in the update. You can check the "Update Date" indicated at the bottom to find out when the Privacy Notice was last updated.

The last update of the Privacy Policy was made on 2023-10-31.

© 2025 GBY Group. All rights reserved.