Privacy policy
Last updated: 29 September 2026
This policy explains how MB PIANOLITA processes personal data when you visit this website, send an enquiry or order our services.
1. Data controller
The data controller is MB PIANOLITA, company code 305734093, Laisvės pr. 78B-157, LT-05263 Vilnius, Lithuania.
- Email: info@pianolita.lt or pianinupervezimas@gmail.com
- Telephone: +370 600 09990, +370 679 53327
2. What data we process and why
| Purpose | Data | Legal basis |
|---|---|---|
| Replying to enquiries and preparing an offer | Name, email address, telephone number, collection and delivery addresses, preferred date, load and access details, attached photos and any other information you provide voluntarily. | Steps taken at your request before entering into a contract or performance of a contract (Article 6(1)(b) GDPR); our legitimate interest in managing correspondence and legal claims (Article 6(1)(f) GDPR). |
| Providing ordered services and meeting legal obligations | Contact details, collection and delivery locations, order, payment and accounting information. | Performance of a contract (Article 6(1)(b) GDPR) and compliance with a legal obligation (Article 6(1)(c) GDPR). |
| Keeping the website and forms secure | IP address, request time, requested URL, browser and device information, reCAPTCHA interaction signals, error and security logs. | Our legitimate interest in system security, diagnosing faults and preventing automated abuse (Article 6(1)(f) GDPR). |
| Remembering website preferences | Selected language, cookie consent status and accessibility preferences. | Our legitimate interest in providing a functional and accessible website (Article 6(1)(f) GDPR). |
| Measuring Google Ads performance | Online identifiers, IP address, browser and device data, pages visited and advertising click or interaction data. | Your consent (Article 6(1)(a) GDPR). The Google Ads tag is not loaded before consent. |
The contact and service enquiry forms send submitted data and selected photos to us by email. They do not create a separate database of enquiries within WordPress. Required fields are identified in the form; without them we may be unable to respond.
3. Sources of data
We receive data directly from you when you use the contact or service enquiry form, email or telephone us, or order a service. Technical data is received automatically when your browser connects to the website. Advertising measurement data is collected only after you enable advertising cookies.
4. Cookies and similar technologies
Details of essential and optional cookies, their lifetimes and how to change your choice are provided in our Cookie policy. Accessibility preferences are stored only in your browser’s local storage until you reset them or clear browser data.
In the production website, Google reCAPTCHA v2 protects the contact and service enquiry forms from spam and automated abuse. When a protected form is opened, reCAPTCHA may process your IP address, browser and device information and interaction signals, and may set the essential _GRECAPTCHA cookie. This protection is not used for advertising profiles and operates independently of your advertising-cookie choice.
5. Recipients
Website hosting, IT maintenance and email service providers may process data on our behalf where needed to provide their services. Data may also be disclosed to accounting or legal advisers and competent public authorities where required by law.
Google provides the reCAPTCHA form-security service and processes its data only to provide and maintain the service and support security, threat detection and protection. If you consent to advertising cookies, Google group companies also receive Google Ads measurement data. Following a Facebook link takes you to a separate platform which processes data under its own terms. We do not sell personal data.
6. Transfers outside the EEA
When reCAPTCHA is used and, with your consent, when Google Ads is enabled, some data may be processed outside the European Economic Area. Applicable safeguards include the European Commission adequacy decision under the EU-US Data Privacy Framework or Standard Contractual Clauses. The official reCAPTCHA FAQ explains the service’s security purpose and essential cookie; further information about Google’s data handling is available in the Google Privacy Policy.
7. Retention
- Enquiries and correspondence are normally retained for up to 2 years after the last communication, unless they form part of a contract or are needed for a legal claim.
- Contracts, service and accounting records are retained for the periods required by law.
- Server access and security logs are normally retained for up to 30 days and in backups for no longer than 12 months.
- Cookie and local storage periods are set out in the Cookie policy.
At the end of the relevant period, data is deleted or irreversibly anonymised unless the law requires further retention.
8. Your rights
Where provided by the GDPR, you may request access, rectification, erasure or restriction, object to processing based on legitimate interests, receive data you provided in a structured format and, where applicable, transmit it to another controller. You may withdraw consent at any time without affecting processing carried out before withdrawal.
Contact us using the details above to exercise your rights. We respond within the GDPR time limits and may reasonably need to verify your identity. You may also lodge a complaint with the Lithuanian State Data Protection Inspectorate or the supervisory authority in your country.
9. Automated decisions and security
We do not use website data to make solely automated decisions that produce legal or similarly significant effects. We apply reasonable technical and organisational safeguards, although no internet transmission or storage method can eliminate every risk.
10. Changes
We may update this policy when website functions or legal requirements change. The current version and its date are always published on this page.
