Privacy Policy
-
UAB “Obamas” respects your privacy. This policy explains which personal data we process when you visit www.obamas.lt, make a purchase, create an account, contact us or subscribe to our newsletter.
We process personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable legislation.
1. Data controller and contact details
UAB “Obamas”
Company registration number: 304431741
Address: Rudmenos g. 5-5, LT-52193 Kaunas, Lithuania
Email: sales@obamas.lt
Telephone: +370 647 02838You can use these contact details for questions about personal data processing and to exercise your rights.
2. Personal data we process
Depending on the services you use, we process:
- Contact details: first name, surname, telephone number and email address.
- Purchase and delivery details: delivery and billing addresses, ordered products, order number, amount, payment status, delivery information and purchase history. For purchases made on behalf of a company, we process the company and representative details necessary for invoicing.
- Account details: registration information, data required for signing in and preferences saved in your account.
- Correspondence: information about enquiries, requests, complaints, returns and warranty services, together with any attachments you provide.
- Preference and consent records: newsletter subscriptions, consent and withdrawal records, and cookie preferences.
- Technical data: IP address, browser and device information, and login and website operation logs, where collected by the systems in use.
Please do not include unnecessary personal data in enquiries or attachments if it is not needed to resolve your request.
3. Processing purposes and legal bases
- Receiving and fulfilling orders: we use data to confirm orders, administer payments, deliver goods and provide order-related information. The legal basis is entering into and performing a contract (Article 6(1)(b) GDPR).
- Accounting and compliance with legal obligations: we use data to issue invoices, retain accounting records and fulfil statutory obligations. The legal basis is compliance with a legal obligation (Article 6(1)(c) GDPR).
- Account administration: we use data to provide the account functions you request. The legal basis is performance of a contract (Article 6(1)(b) GDPR).
- Customer service, returns and warranties: we use data to respond to enquiries and fulfil contractual and statutory obligations. Depending on the nature of the request, the legal basis is taking steps before entering into a contract, performing a contract, complying with a legal obligation or our legitimate interest in providing appropriate customer service.
- Newsletters: we use data to send the news and offers you subscribe to. The legal basis is your consent (Article 6(1)(a) GDPR).
- Website security and protection of legal rights: we use data to detect misuse, investigate incidents, maintain system operation and establish, exercise or defend legal claims. The legal basis is our legitimate interest in protecting our business, systems and customers (Article 6(1)(f) GDPR).
- Optional analytics and personalised advertising: if these tools are used and you choose to enable them, we process data for the purposes specified in the cookie preferences, based on your consent.
Messages necessary to fulfil an order, such as order confirmations or delivery updates, are not newsletters.
4. Whether you must provide personal data
Order forms and other forms indicate which information is required. If you do not provide the data necessary for an order, we may be unable to enter into a contract, deliver the goods or issue an invoice.
Newsletter subscriptions and consent to non-essential cookies are voluntary. Refusing them does not prevent you from making purchases.
5. Sources of personal data
We receive data directly from you when you place an order, register, send an enquiry or select services. Technical data may be collected automatically when you use the website. We also receive information necessary to fulfil orders, such as payment or delivery status, from payment and delivery service providers.
If you provide another recipient’s details when ordering, provide only the information necessary for delivery and inform that person about this privacy policy.
6. Who receives personal data
To the extent necessary to provide a particular service or fulfil an obligation, data may be disclosed to:
- couriers, parcel locker operators and other delivery service providers;
- banks and payment service providers;
- e-commerce platform, website hosting, IT maintenance and security service providers;
- email and newsletter service providers;
- accounting, legal and other necessary professional service providers;
- warranty service partners where necessary to handle a specific request;
- public authorities where disclosure is required by law.
Service providers processing data on our behalf must comply with data protection requirements and our instructions. Some recipients, such as banks, also process data as independent controllers under their own privacy policies.
7. Transfers outside the European Economic Area
Transfers of personal data outside the European Economic Area, including access to data from third countries, are permitted only in accordance with GDPR requirements. Depending on the recipient and country, transfers may rely on a European Commission adequacy decision or other appropriate safeguards, such as standard contractual clauses and, where necessary, supplementary measures.
For information about the specific recipients of your data, destination countries, applicable safeguards and how to obtain a copy of those safeguards, contact sales@obamas.lt.
8. How long we retain personal data
We do not retain personal data indefinitely. Retention depends on the purpose of processing, legal obligations and the need to establish or defend legal claims.
- Accounting records are retained for the period required by law for the relevant document category. This period does not automatically apply to all account or browsing data.
- Order data is retained to fulfil orders and administer returns and warranty obligations. Afterwards, we retain only the data necessary to comply with legal obligations or establish or defend potential claims, taking account of applicable limitation periods.
- Account data is retained to provide the account service. After an account is deleted, order data or other information that must be retained on another lawful basis may be kept separately.
- Enquiries and correspondence are retained to resolve the matter. If correspondence concerns an order, warranty or dispute, the necessary parts may be retained for the period required to fulfil the relevant obligations or defend claims.
- Newsletter data is used until consent is withdrawn or the subscription ends. Afterwards, we may retain the minimum information necessary to ensure that no further advertising is sent and to demonstrate when consent was given or withdrawn.
- Technical and security logs are retained for as long as reasonably necessary to identify and investigate faults and incidents. Records relating to a specific incident may be retained until the investigation or dispute is concluded.
- Cookie data retention depends on the lifetime and purpose of each cookie. Information about the cookies in use is provided in the cookie settings.
Once there is no longer a lawful basis for retention, data is deleted or anonymised. You can request information about the retention period applicable to your particular data by emailing sales@obamas.lt.
9. Newsletters and withdrawal of consent
By subscribing to our newsletter, you consent to the use of your email address to send news, promotions and offers.
You may unsubscribe at any time using the unsubscribe link in the newsletter or by emailing sales@obamas.lt. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
10. Cookies
Essential cookies support website functions, such as the shopping cart, login and saving your privacy preferences.
Non-essential analytics and marketing cookies are used only with your consent where required by law. You may refuse them or change your preferences later.
Cookie information and preferences are available on the cookie settings page. You can also manage cookies through your browser. Disabling essential cookies may prevent some shop functions from working.
11. Your rights
Subject to the conditions set out in the GDPR, you have the right to:
- find out whether we process your personal data, access it and obtain a copy;
- request correction of inaccurate data or completion of incomplete data;
- request deletion where there is no longer a lawful basis for retaining the data;
- request restriction of processing;
- object to processing based on legitimate interests on grounds relating to your particular situation;
- object at any time to processing for direct marketing purposes;
- receive portable data where the conditions for data portability apply;
- withdraw consent where processing is based on consent;
- benefit from GDPR safeguards concerning solely automated decision-making where it produces legal or similarly significant effects.
These rights are not absolute. For example, we cannot delete documents that we are legally required to retain.
12. How to submit a request
Email sales@obamas.lt. State which right you wish to exercise and provide information enabling us to identify the relevant data. If we have reasonable doubts about your identity, we may request additional information necessary to verify it.
We respond without undue delay and no later than one month after receiving your request. Depending on the complexity and number of requests, this period may be extended by a further two months. We will inform you of any extension and the reasons for it within the first month.
Requests are generally handled free of charge. A fee or refusal to act is permitted only in the circumstances provided for by the GDPR.
13. Complaints
If you believe your data is being processed improperly, you may contact us. You also have the right to lodge a complaint with the Lithuanian State Data Protection Inspectorate at vdai.lrv.lt or another competent data protection supervisory authority.
14. Policy updates
We update this policy when our services, data processing activities or applicable legislation change. We communicate significant changes in an appropriate manner. If a new use of data requires consent, we request it separately.
Last updated: 17 September 2026.
