How UAB „BERNITIS“ processes your data on jaukuma.lt
This privacy policy explains what data we collect when you visit www.jaukuma.lt, on what basis we process it, who we share it with, and what rights you have. It is prepared in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR).
Video surveillance in our shops is covered separately in our video surveillance notice.
1. Data Controller
The controller of your personal data is:
- Legal name
- UAB „BERNITIS“
- Trading as
- Studija „Jaukuma“
- Company code
- 304867991
- VAT number
- LT100012440316
- Registered office
- Smalinės g. 5-4, LT-06226 Vilnius, Lithuania
- Telephone
- +370 674 67480
- [email protected]
For any question about the processing of personal data, contact:
- [email protected]
- Telephone
- +370 674 67480
2. What data we process on this website
2.1. Website analytics
We measure website traffic with Umami, an open-source analytics tool that we host and maintain ourselves on our own server in Lithuania. Umami uses no cookies and does not store your IP address: your IP is used only at the moment of the visit to derive a one-off anonymous identifier and an approximate location, and is not retained.
| Data collected | Example |
|---|---|
| Page viewed and its title | /kontaktai/ |
| Date, time and duration of the visit | 2026-09-12 14:20, 51 s |
| Referring source | google.com |
| Browser, operating system, device type | Chrome, iOS, mobile |
| Browser language | lt |
| Approximate location — country and city | Lithuania, Vilnius |
| Interaction events — what was clicked on the page | phone number, map link, social icon, language switch |
Interaction events record only that a given link was clicked, and the page it was clicked on. We do not record who you called, what you wrote, or what you did afterwards — that happens outside our website.
This data is aggregated and does not allow us to identify you. We do not combine it with any other information and do not use it for ad targeting, profiling or automated decision-making.
2.2. Website delivery and security
The website is hosted and delivered through Cloudflare infrastructure. Cloudflare processes technical request data (IP address, browser type, request time) so that the site is reachable, loads quickly and is protected against cyber attacks. This is a necessary technical function without which the website would not operate.
2.3. Embedded video (YouTube)
The home page contains a video embedded from YouTube (Google Ireland Limited). The video does not load automatically — until you play it, no data is transmitted to Google, and the cover frame is served from our own server. By clicking the play button you consent to Google receiving your IP address and placing cookies on your device in accordance with the Google Privacy Policy. You can withdraw this consent at any time by not playing the video or by clearing your browser cookies.
2.4. When you contact us
When you email us, call us or message us via Facebook Messenger, we process the contact details you provide and the content of the correspondence to the extent needed to answer your enquiry. Messages sent through social networks are additionally subject to the privacy terms of the network operator (Meta Platforms Ireland Limited).
The website has no order or registration forms and we do not collect data for newsletters.
3. Legal bases
| Processing | Basis |
|---|---|
| Website analytics | GDPR Art. 6(1)(f) — legitimate interest in understanding how our website is used and improving it |
| Website delivery and security | GDPR Art. 6(1)(f) — legitimate interest in keeping the service running and secure |
| Embedded YouTube video | GDPR Art. 6(1)(a) — your consent (given by clicking the play button) |
| Answering your enquiry | GDPR Art. 6(1)(b) or (f) — steps taken at your request prior to a contract, or legitimate interest in communicating with customers |
4. Cookies
This website sets no cookies of its own. Analytics is collected without cookies, and there are no ordering or login functions. For that reason we do not show you a cookie consent banner.
Cookies may be set only in two cases:
- Cloudflare — technical, strictly necessary security cookies (e.g.
__cf_bm) used to distinguish humans from automated bots; - YouTube — only if you choose to play the video (see 2.3).
You can delete or block any cookies in your browser settings.
5. Retention periods
| Data | Period |
|---|---|
| Website analytics | 14 months from the visit |
| Email and message correspondence | up to 2 years from last contact, unless law requires longer |
| Cloudflare technical logs | per Cloudflare’s retention (typically up to 30 days) |
Once the period expires the data is deleted or anonymised.
6. Recipients
We do not sell your data and do not share it with third parties for marketing purposes. Data may be processed only by the following processors engaged by us, and only on our instructions:
- Cloudflare, Inc. — website hosting, content delivery and protection;
- Google Ireland Limited — rendering the YouTube video (only with your consent) and email services;
- Meta Platforms Ireland Limited — if you contact us via Messenger, Facebook or Instagram.
The Umami analytics tool is maintained by us — that data is not transferred to any third party.
Data may also be disclosed to law enforcement or supervisory authorities where required by law.
7. Transfers outside the EEA
The operations of Cloudflare, Inc. and Google involve processing outside the European Economic Area. Such transfers are made on the basis of Standard Contractual Clauses approved by the European Commission (GDPR Art. 46(2)(c)) and the EU–U.S. Data Privacy Framework.
8. Your rights
You have the right to:
- access your data and obtain a copy of it;
- rectify inaccurate data;
- erase data (“right to be forgotten”) where it is no longer needed for the purpose for which it was collected, or where you withdraw consent;
- restrict processing;
- object to processing based on our legitimate interest — including website analytics;
- data portability, where processing is based on consent or a contract;
- withdraw consent at any time where processing is based on consent. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
Please note: because our analytics is anonymous and we do not store your IP address, in most cases we cannot identify you within that analytics data (GDPR Art. 11). In such cases we will not be able to fulfil a request for access to specific records, but you can always object to further processing.
9. How to exercise your rights
Contact us at [email protected] or in writing at the registered office address above. State which right you wish to exercise and provide information allowing us to establish your identity. We will respond no later than within one month of receiving the request; in complex cases this may be extended by a further two months, and we will inform you if so.
10. Complaint to the supervisory authority
If you believe we process your data in breach of the law, please contact us first. If our response does not satisfy you, you have the right to lodge a complaint with the State Data Protection Inspectorate of Lithuania (L. Sapiegos g. 17, 10312 Vilnius, email [email protected], vdai.lrv.lt).
11. Links to other websites
The website contains links to Google Maps, Facebook, Instagram and Messenger. By following them you leave our website — we are not responsible for the content or privacy practices of those sites. We recommend reviewing their privacy terms.
12. Changes to this policy
We may update this policy if our activities or the law change. The current version is always published on this page.
Last updated: 2026-09-12.