Privacy Policy & Cookies

1. Data controller

UAB Štara (trading as ADS Auto Parts), registered in Lithuania, address: Europos prospektas 122, LT-46351 Kaunas, Lithuania.

Contact for privacy and general questions: [email protected], phone +370 679 75249.

2. Data we collect

• Account & login: email, password (stored hashed), name, company details, VAT number if provided, address, phone, country.
• Orders & payments: buyer details, shipping address, order contents, payment method (card data is processed by payment providers — we do not store full card numbers).
• Correspondence: messages you send via contact forms or email.
• Technical data: IP address, device/browser type, session identifiers, cookies (see Cookies section).

3. Purposes and legal bases

We process personal data for:

• Performance of a contract (GDPR Art. 6(1)(b)) — account, orders, delivery, invoicing, customer support.
• Legitimate interests (GDPR Art. 6(1)(f)) — security, fraud prevention, and analytics where applicable and proportionate.
• Consent (GDPR Art. 6(1)(a)) — where required (e.g. non-essential cookies, marketing email if separately opted in).
• Legal obligation (GDPR Art. 6(1)(c)) — accounting and tax records as required by law.

4. Retention

We keep data only as long as necessary for the purposes above. Order and account data may be retained for the duration of the contractual relationship and as required by Lithuanian/EU law (e.g. accounting retention). After that, data is deleted or anonymised where permitted.

5. Recipients and processors

We may share data with trusted processors who help us operate the shop: payment providers (e.g. Stripe, PayPal), shipping partners, email and hosting/cloud providers. We use appropriate contracts under GDPR. Transfers outside the EEA rely on standard contractual clauses or other approved mechanisms.

6. Your rights

You have the right to:

• information about processing;
• access and receive a copy of your data;
• rectification of inaccurate data;
• erasure (“right to be forgotten”) where applicable;
• restriction or objection in certain cases;
• data portability where processing is automated and based on consent or contract;
• object to direct marketing where applicable.

Send requests to [email protected]. We respond within one month unless extended as allowed by law.

You may lodge a complaint with the Lithuanian State Data Protection Inspectorate (VDAI): vdai.lrv.lt.

7. Cookies

Essential cookies are needed for the site to work (session, cart, secure login). Non-essential cookies (analytics, marketing) are only used if you consent via the cookie banner.

You can change your choice anytime using the “Cookie settings” link in the site footer.

8. Security

We apply appropriate technical and organisational measures (including HTTPS, access controls, and secure payment flows). No online transmission is 100% risk-free.

9. Changes

We may update this policy. Material changes will be posted on this page (and emailed where required). Continued use after updates may constitute acknowledgement unless stricter consent is required by law.