Skip to content

Privacy policy

Effective from 27 October 2026.

This policy explains which personal data we process when you visit paradox.lt and use its forms, why we do it, and your rights under the General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) and Lithuanian law.

Data controller

UAB "Paradox distribution centre", company code 125719780, VAT code LT257197811, registered office Baltų pr. 145, LT-47125 Kaunas, Lithuania.

For questions about personal data and requests to exercise your rights, write to sintas@pdc.lt or call +370 620 55140.

What data we process and why

Contact and wholesale enquiry forms. Name, email address, phone number, company, customer type, product of interest, message text, the site language and the time you gave consent. We use this data only to answer your enquiry and make an offer. Legal basis: your consent (Article 6(1)(a) GDPR) and steps taken at your request before entering into a contract (point (b)).

Technical support form. In addition to the above: device model, serial number, problem description and the photos you upload, plus the ticket's status history. We use this data to solve your technical problem and handle warranty matters. Legal basis: performance of a contract and steps at your request (point (b)) and our legitimate interest in serving customers properly (point (f)). Please don't show identity documents, passwords or other unnecessary personal data in photos.

Help chat. We record the question typed, the page it was asked on, the answers shown and your rating (👍 or 👎). The chat doesn't ask for your name, email or anything identifying you, so please don't type such details into a question. The purpose is to improve the answers. Legal basis: our legitimate interest (point (f)).

Protection against abuse. To prevent abuse of the forms and the password field, we briefly keep an encrypted, shortened fragment of the IP address that cannot identify you. Our hosting provider keeps technical request logs (IP address, time, browser) for a short time. Legal basis: legitimate interest in keeping the site secure (point (f)).

We don't use the data for direct marketing, don't sell it, and make no decisions based solely on automated processing or profiling.

How long we keep data

  • Contact and wholesale enquiry data: 2 years from the last correspondence, or, if a contract is concluded, as long as accounting and other laws require.
  • Technical support data and photos: 3 years from closing the ticket, so we can look into recurring faults and warranty matters.
  • Help chat questions: 90 days, after which they are deleted automatically.
  • Abuse protection data: no longer than 24 hours.

If you withdraw consent or validly ask for erasure, we delete the data sooner, unless the law requires us to keep it.

Who receives the data

Only our staff who need it for their work process the data. We use the following service providers (processors), who process data only on our instructions:

  • Vercel Inc. – website hosting and storage of uploaded photos;
  • MongoDB, Inc. (MongoDB Atlas) – database;
  • an email service provider – sending form notifications and confirmations.

We may also disclose data to public authorities where the law requires it.

Transfers outside the EU

Some service providers are based in the United States. In such cases data is transferred only with the safeguards the GDPR provides: the European Commission's adequacy decision on the EU-US Data Privacy Framework or standard contractual clauses approved by the European Commission.

Cookies and third-party content

The site uses no analytics, advertising or tracking cookies. Only strictly necessary cookies are used: the admin panel login cookie and the Paradox Lab password cookie (kept for 30 days). They need no consent.

The map on the contact page is loaded from OpenStreetMap servers, so your browser sends them your IP address. The YouTube video loads only when you click to play it, through youtube-nocookie.com; Google's privacy policy then applies.

Your rights

Under the GDPR you have the right to:

  • access your personal data and get a copy;
  • have inaccurate data corrected;
  • have data erased ("right to be forgotten");
  • restrict processing;
  • data portability;
  • object to processing based on legitimate interest;
  • withdraw consent at any time, without affecting the lawfulness of processing before the withdrawal.

Send your request to sintas@pdc.lt. We reply within one month at the latest and may ask you to confirm your identity if needed.

If you believe your data is processed unlawfully, you may lodge a complaint with the State Data Protection Inspectorate of Lithuania (L. Sapiegos g. 17, LT-10312 Vilnius, email ada@ada.lt, vdai.lrv.lt).

Data security

The site runs only over encrypted HTTPS, access to data is given only to authorised staff with personal logins, and the forms are protected against automated abuse.

Changes to this policy

We may update this policy when our processing or the law changes. The current version is always published on this page with its effective date.