PRIVACY POLICY

1. INTRODUCTION AND DATA CONTROLLER

The data controller is UAB ONTEX, company code 300521554, VAT code LT100002578719 (hereinafter – ONTEX). For personal data protection matters, you can contact us by filling out the contact form on the website or by phone at +370 610 33155.

This privacy policy applies to persons who use ONTEX services or visit the website www.ontex.lt. It has been prepared in accordance with GDPR and other legislation of the Republic of Lithuania and the European Union.

By using the services or continuing to browse the website, the data subject confirms that they have read this Privacy Policy, understand its provisions, and agree to comply with it.

2. PRINCIPLES OF PERSONAL DATA PROCESSING

ONTEX collects and processes personal data in accordance with GDPR and other legislation of the Republic of Lithuania regulating the processing of personal data.

The scope of personal data processed depends on the services ordered or used and on the information a person provides when ordering and/or using services, visiting or registering on the website.

Data is processed only where there is a lawful basis for processing: to ensure the provision of services (performance of a contract); with the person's consent; where relevant legislation obliges ONTEX to process personal data; or where it is necessary for ONTEX's legitimate interests.

ONTEX seeks to ensure that personal data is processed accurately, fairly, and lawfully, only for the purposes for which it was collected, in compliance with the clear and transparent data processing principles and requirements set out in legislation.

3. SOURCES OF PERSONAL DATA

Personal data is obtained directly from the data subject, who provides it when requesting a service, filling in an enquiry form on the website, or signing a service provision agreement.

Data is also obtained from the State Enterprise Registrų Centras real estate register, but only with the consent of the real estate owner to check information about the property they own.

Data may also be generated when a person uses the services — for example, by phone call, SMS or email, ordering services, or visiting the website.

A person is not obliged to provide personal data, but certain services may not be provided if the necessary data is not submitted.

4. PURPOSES OF PERSONAL DATA PROCESSING AND RETENTION PERIODS

ONTEX processes personal data for the following purposes, applying a separate retention period proportional to each purpose:

a) Conclusion of real estate transactions and property valuation. Data processed: name, surname, personal code, identity document number, contact details (email, phone number), a copy or scan/photo of the identity document or residence permit in the Republic of Lithuania; information on whether the person is a politically exposed person (under Article 14(3) of the Law on the Prevention of Money Laundering and Terrorist Financing of the Republic of Lithuania); information about the beneficial owner of the transaction. This data, in accordance with the requirements of the Law on the Prevention of Money Laundering and Terrorist Financing of the Republic of Lithuania, is retained for 8 years from the end of the business relationship with the client or from the date of execution of a one-off transaction (this period may be adjusted according to the current version of the law).

b) Analysis of website traffic statistics. Data processed: IP address, browsing date and time. This data is retained for no longer than the lifetime of the relevant cookie (see the table in section 8), but no longer than 26 months.

c) Direct marketing and sending other information. Data processed: name, surname, email address, phone number. This data is processed only with the person's consent and is retained until the person withdraws consent. The person has the right to opt out of direct marketing messages at any time, free of charge and without giving a reason — this can be done via the method indicated in each message or by filling out the contact form on the website.

5. PROVIDING DATA TO OTHER PARTIES

ONTEX does not provide the data it processes to third parties without the prior consent of the data subject, except as required by law. For the purpose of concluding a real estate transaction, at the client's request, data may be transferred to a notary, lawyer, or court.

6. DATA PROCESSORS

Data may be processed on behalf of ONTEX by processors providing real estate brokerage, accounting, website hosting, data center and/or server rental, marketing, and customer relationship management system services.

Processors may process personal data only according to ONTEX's instructions and only to the extent necessary to fulfil contractual obligations. ONTEX seeks to ensure that the processors it engages have implemented appropriate organizational and technical security measures and maintain the confidentiality of personal data.

7. TRANSFER OF DATA OUTSIDE THE EUROPEAN ECONOMIC AREA

To analyze website traffic statistics, ONTEX uses the Google Analytics tool, whose service provider may process data on servers located outside the European Economic Area (EEA), including the United States. Such data transfers are made ensuring the safeguards provided for in Chapter V of the GDPR — i.e. based on the Standard Contractual Clauses approved by the European Commission and/or the participation of the relevant data recipient in the EU-U.S. Data Privacy Framework, where applicable.

8. COOKIES

The UAB ONTEX website uses cookies to distinguish between website visitors, ensure a better browsing experience, and improve the website itself. Cookies are small text files stored in the user's browser or device with the person's consent.

On the first visit to the website, the visitor is shown a cookie consent banner. Essential cookies are always used, as the website could not function properly without them. Analytics and other non-essential cookies are enabled only with the visitor's clear consent. Consent can be withdrawn at any time by changing browser settings or in the website's cookie settings.

A person may delete or block cookies by selecting the appropriate browser settings. Note that blocking essential cookies may cause problems using the website's features. Information on managing cookies can be found in browser help pages (Google Chrome, Mozilla Firefox, Microsoft Edge).

The UAB ONTEX website may contain links to third-party websites. UAB ONTEX is not responsible for the content of such websites or the privacy principles applied there — it is recommended to review their privacy policy separately.

9. RIGHTS OF DATA SUBJECTS

Data subjects have the following rights: a) to be informed about the processing of their personal data; b) to access their processed personal data and learn how it is processed — i.e. to receive information about the retention period, security measures applied, data sources, processing purposes, and recipients; c) to request the correction of inaccurate or the completion of incomplete personal data; d) to request the erasure of personal data or the suspension of processing operations (except storage) where data is processed in breach of legal requirements; e) to object to the processing of their personal data where it is carried out for a legitimate interest, if the data subject's interests prevail; f) to request the restriction of personal data processing operations; g) to data portability — that data processed by automated means be transmitted to another controller, where technically feasible; h) to lodge a complaint with the State Data Protection Inspectorate (L. Sapiegos g. 17, 10312 Vilnius, www.vdai.lrv.lt) if they consider that their data is being processed unlawfully.

Having verified their identity, a data subject may submit a written request to ONTEX to exercise their rights in person, by post, via courier, or by email. ONTEX, having received such a request, provides a reply no later than 20 calendar days from the date of receipt of the request.

A request may be submitted in the following ways: by phone at +370 610 33155 or +370 618 33155; by filling out the contact form on the website.

10. ENSURING DATA SECURITY

ONTEX implements appropriate organizational and technical data security measures designed to protect personal data from accidental or unlawful destruction, alteration, disclosure, and any other unlawful processing.

11. STATISTICS

Website visitor statistics are analyzed using the Google Analytics tool, in accordance with the conditions set out in sections 7 and 8 of this Privacy Policy.

12. FINAL PROVISIONS

ONTEX reserves the right to amend this Privacy Policy at its discretion. Amendments take effect from the date they are published on the website www.ontex.lt, and the current version date is always indicated at the top of this document.

Technical settings of this website

The contact form uses the ONTEXSESSID session cookie and, when enabled, Cloudflare Turnstile. Abuse prevention counters expire after 24 hours and are removed on the next request. The website does not store enquiry contents in a database; enquiries are sent to the ONTEX email address. Google Analytics, if configured, loads only after choosing Accept. Your preference is stored in the browser for 180 days and can be changed using Cookie settings.