This Privacy Policy sets out and explains how UAB Cervus Aureus collects, uses, stores, and protects personal data obtained from visitors and users of the website www.cervusaureus.lt.
When processing personal data, we comply with the General Data Protection Regulation (EU) 2016/679 (GDPR), the Republic of Lithuania Law on Legal Protection of Personal Data, the Republic of Lithuania Law on Electronic Communications, and other applicable legal acts.
1. Data Controller
Your personal data controller is:
Company name: UAB Cervus Aureus
Company code: 302443691
VAT identification number: LT100004961014
Registered office address: Pumpurų g. 23, Reivyčių k., Mažeikių r., Lithuania
Head of the company: Linas Pakamanis, Director
Website: www.cervusaureus.lt
Contact email for data protection matters: info@cervusaureus.lt
Contact telephone number: +370 687 50022
2. Purposes, Legal Grounds, and Categories of Personal Data Processed
We collect only those personal data that are necessary to achieve specific, legitimate, and clearly defined purposes:
| Processing purpose | Personal data collected | Legal basis |
| Administration of inquiries and lead management (responding to requests, preparation of commercial offers, communication) | Name, email address, telephone number, message content / requested service or product, date and time of correspondence. | Article 6(1)(b) of the GDPR (performance of a contract or taking steps prior to entering into a contract) or Article 6(1)(f) (our legitimate interest in responding promptly to inquiries and developing business relations). |
| Direct marketing (sending newsletters, special offers, and company updates) | Name (if provided), email address. | Article 6(1)(a) of the GDPR (your explicit, freely given prior consent). |
| Website traffic analysis and functional optimization | Anonymized IP address, visit duration, viewed pages, device and browser type, traffic source. | Article 6(1)(a) of the GDPR (your consent to analytical cookies) or Article 6(1)(f) (our legitimate interest in ensuring website security and stability). |
| Evaluation and optimization of advertising campaigns (Remarketing) | Browsing behavior on the website, conversion events, unique cookie identifiers. | Article 6(1)(a) of the GDPR (your explicit prior consent to marketing cookies). |
Important regarding direct marketing:
You have the right to withdraw your consent to receive newsletters at any time and without any negative consequences:
- By clicking the unsubscribe link at the bottom of any received email newsletter;
- By sending a free-form request via email to info@cervusaureus.lt.
Upon receipt of your withdrawal, your email address will immediately cease to be used for direct marketing purposes.
3. Data Retention Periods
We store your personal data no longer than necessary to fulfill the purposes of processing or as required by applicable laws of the Republic of Lithuania:
- Inquiry and lead data: stored for 2 years from the date of the last contact (if no service or sales contract is concluded). If a contract is concluded, data is retained in accordance with statutory accounting and archiving periods (up to 10 years).
- Direct marketing data: stored for 3 years from the date consent was obtained or until consent is withdrawn.
- Cookie data: stored depending on the cookie type (session cookies are deleted upon closing the browser; persistent cookies are stored from several days up to 2 years, as specified in the cookie settings).
Upon expiry of the retention period, personal data is securely destroyed or irreversibly anonymized.
4. Data Transfers to Third Parties and Outside the EEA
Your data is never sold, rented, or transferred to third parties for consideration. Data may only be disclosed to trusted service providers (data processors) who provide services to UAB Cervus Aureus:
- Hosting and cloud server infrastructure providers;
- Newsletter and email distribution platform providers;
- IT maintenance, system administration, and website technical support partners;
- Analytics and online advertising service providers (Google LLC).
All data processors are obligated to ensure adequate technical and organizational security measures and process data strictly according to our instructions.
Data transfer to third countries (e.g., the United States):
Tools provided by Google LLC used on the website may transfer certain technical and browsing data to servers located in the United States. Such transfers are conducted lawfully based on:
- The EU-U.S. Data Privacy Framework, under which Google LLC is certified; or
- Standard Contractual Clauses (SCCs) adopted by the European Commission.
5. Cookies and Tracking Technologies
The website www.cervusaureus.lt uses cookies – small text files saved on your device when you visit the site.
Cookie Categories:
- Essential (technical) cookies: ensure proper functioning, security, and core features of the website. Your prior consent is not required for these cookies, as they are based on legitimate interest.
- Analytical cookies: allow us to count visits and traffic sources to measure and improve website performance. These cookies are set only with your prior consent.
- Marketing (targeting) cookies: used to deliver relevant ads, monitor ad campaign performance, and perform remarketing. These cookies are set only with your prior consent.
External tools utilized on the website:
- Google Tag Manager (GTM): a tag management system enabling centralized deployment of scripts. It does not collect personal data itself nor does it set cookies directly, but it triggers other tags according to your consent choices.
- Google Analytics (GA4): a web analytics tool used to analyze visitor traffic and behavior. IP address anonymization is enabled, preventing direct identification of visitors.
- Google Search Console: a technical monitoring tool used to evaluate website visibility in search results and resolve indexing issues. It does not directly collect visitor personal data.
- Google Ads (Conversion Tracking & Remarketing): helps track actions taken by users after interacting with an ad and display targeted advertisements across the Google network to previous website visitors.
Visitors may review, change, or withdraw their cookie consent at any time via the cookie settings banner or by adjusting browser settings.
6. Rights of the Data Subject
Under the GDPR, you as a data subject have the following rights:
- Right of access: to obtain confirmation as to whether your personal data is being processed, and to receive information about its processing and recipients.
- Right to rectification: to request correction of inaccurate or completion of incomplete personal data.
- Right to erasure (“right to be forgotten”): to request the deletion of your personal data when it is no longer necessary, where consent has been withdrawn, or where processing is unlawful (unless statutory retention obligations apply).
- Right to restriction of processing: to request the restriction of data processing under circumstances established by the GDPR.
- Right to data portability: to receive the personal data provided in a structured, commonly used, and machine-readable format, or request its transfer to another controller (where technically feasible).
- Right to object: to object at any time to the processing of personal data based on legitimate interests.
- Right to withdraw consent: to withdraw your consent at any time (e.g., for newsletters or cookies) without affecting the lawfulness of processing based on consent before its withdrawal.
To exercise your rights, please contact us by email at: info@cervusaureus.lt. We will respond to your request no later than within 30 calendar days.
If you believe that your personal data is being processed in breach of applicable regulations, you have the right to lodge a complaint with the supervisory authority:
State Data Protection Inspectorate (VDAI)
L. Sapiegos g. 17, 10312 Vilnius, Lithuania
Email: ada@ada.lt | Website: vdai.lrv.lt
We encourage you to contact us first at infa@cervusaureus.lt or by phone at +370 687 50022 so that we can promptly and amicably resolve any questions or concerns.
7. Changes to the Privacy Policy
UAB Cervus Aureus reserves the right to update or amend this Privacy Policy at any time to reflect changes in legal requirements, technology, or business operations.
The updated version takes effect immediately upon publication on www.cervusaureus.lt.
Last updated: 2026 October 30.