This privacy policy (hereinafter — the Privacy Policy) explains how UAB "Stateta" ("Stateta" or "we"), a legal entity registered and operating under the laws of the Republic of Lithuania, with legal entity code 150040692 and registered address at Ulonų g. 2-1, LT-62156 Alytus, Lithuania, acting as the controller of your personal data and the administrator of the website www.stateta.lt (hereinafter — the Website), processes your personal data when you provide it to Us.
When processing personal data, Stateta follows and complies with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (hereinafter — the GDPR), the Law on Legal Protection of Personal Data of the Republic of Lithuania, and other applicable legislation governing the protection of personal data.
By using the Website, you confirm that you have read and familiarized yourself with this Privacy Policy and the purposes, methods, and procedures for processing your personal data set out in it.
What principles do we follow when processing personal data?
When processing your personal data, we:
- will comply with the requirements of applicable and relevant legislation, including the GDPR;
- will process your personal data lawfully, fairly, and transparently;
- will collect your personal data for specified, explicit, and legitimate purposes and will not further process it in a manner incompatible with those purposes, except to the extent permitted by law;
- will take all reasonable steps to ensure that personal data which is inaccurate or incomplete, having regard to the purposes for which it is processed, is promptly corrected, supplemented, or its processing suspended or the data erased;
- will keep it in a form which permits identification of you for no longer than is necessary for the purposes for which the personal data is processed;
- will not disclose personal data to third parties or make it public, except in cases specified in the Privacy Policy or in applicable legislation;
- will ensure that your personal data is processed in a manner that, through the application of appropriate technical or organizational measures, ensures adequate security of personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage.
Processing of your personal data
Stateta processes the personal data listed below for the following purposes:
1. To contact you after you fill out a form on the Website
- Data categories
- First name; last name; email address; the text of your message/inquiry.
- Legal basis for processing
- We process this data: – at the request of the data subject prior to entering into a contract (GDPR Art. 6(1)(b)); – where processing is necessary for the performance of a contract to which the data subject is party.
- Retention period
- For as long as the contract is in effect, if one is concluded, and for 10 years after its termination. If the data subject did not conclude a contract, the information provided in the inquiry is stored for 6 months.
- Obtained from
- You.
- Shared with
- Service providers (e.g. companies providing IT, data storage, or website administration services).
2. To respond to your inquiries submitted by email or phone
- Data categories
- First name; last name; email address; phone number; content of the email (e.g. letter or conversation details); other information you provided.
- Legal basis for processing
- Depending on the specific circumstances, personal data may be processed on the following grounds: – At the request of the data subject prior to entering into a contract (GDPR Art. 6(1)(b)); – Our legitimate interests (GDPR Art. 6(1)(f)).
- Retention period
- Inquiry data is stored for 24 months from the end of communication, unless it relates to a contractual relationship — in which case longer retention periods apply.
- Obtained from
- You.
- Shared with
- Service providers (e.g. providers of IT, communication, or customer service systems).
3. For the conclusion and performance of the fuel card agreement
- Data categories
- First name; last name; personal identification number; residential address; email address; phone number; bank account number; information about concluded agreements; billing and payment data.
- Legal basis for processing
- We process this data: – for the conclusion and performance of the contract (GDPR Art. 6(1)(b)); – to comply with legal obligations applicable to us (GDPR Art. 6(1)(c)).
- Retention period
- For the term of the contract and 10 years after its termination (in accordance with accounting and tax legislation requirements).
- Obtained from
- You.
- Shared with
- Accounting service providers; IT system providers; payment service providers; state institutions (where required by law).
4. To ensure the operation and functionality of the mobile application
- Data categories
- First name; last name; contact details; login credentials; app usage data; device identification data; location data (if permission is granted); cookies and similar technology data.
- Legal basis for processing
- We process this data: – for the conclusion and performance of the contract (GDPR Art. 6(1)(b)); – your consent (GDPR Art. 6(1)(a)), where applicable (e.g. for location, cookies); – our legitimate interests in ensuring the app's operation and security (GDPR Art. 6(1)(f)).
- Retention period
- For as long as you use the app and 2 years after your last activity, unless otherwise provided by law.
- Obtained from
- You; your device.
- Shared with
- IT service providers; analytics and advertising service providers; cloud service providers.
5. For video surveillance purposes (on station premises)
- Data categories
- Video footage; image of the person; vehicle data (e.g. license plate number).
- Legal basis for processing
- Our legitimate interests in ensuring the safety of property and individuals (GDPR Art. 6(1)(f)).
- Retention period
- Up to 30 days, except where the data is needed for an incident investigation — in which case it is stored until the investigation concludes.
- Obtained from
- Video surveillance systems.
- Shared with
- Law enforcement authorities; video surveillance service providers.
6. For direct marketing purposes (including profiling)
- Data categories
- First name; last name; email address.
- Legal basis for processing
- Your consent (GDPR Art. 6(1)(a)).
- Retention period
- Personal data is processed for as long as the data subject's consent remains valid, but no longer than 2 (two) years.
- Obtained from
- You.
- Shared with
- Companies providing direct marketing services; companies providing data storage services.
7. For candidate recruitment purposes
- Data categories
- First name; last name; email address.
- Legal basis for processing
- – Conclusion and performance of a contract (GDPR Art. 6(1)(b)); or – Our legitimate interests (GDPR Art. 6(1)(f)).
- Retention period
- Data is stored for 4 months after the contract with the selected candidate is signed; if you provided consent, we will store the data for 3 years from the date it was received.
- Obtained from
- You.
- Shared with
- We may disclose data to companies providing recruitment services.
8. For website administration and management purposes, i.e. to improve and develop the Website operated by Stateta and offer Website visitors better, more tailored, and personalized services
- Data categories
- IP address; type of web browser used; number of visits; Website pages viewed; time spent on the Website; the online source from which the data subject arrived; information about the device used; language; country; internet service provider, etc.
- Legal basis for processing
- Data subject's consent (GDPR Art. 6(1)(a)) (for non-essential cookies).
- Retention period
- The retention period for personal data depends on the validity period of the specific cookie, so personal data is stored for the periods indicated for each cookie in Stateta's Website cookie policy, unless the data subject withdraws their consent to cookies earlier. See the "Cookies" section of this Privacy Policy for more information.
- Obtained from
- You.
- Shared with
- Companies providing data storage services; companies performing web browsing/activity analysis and providing related services; companies providing advertising and marketing services; companies developing, providing, supporting, and maintaining software; Google Inc.
To whom may we transfer your personal data
We inform you that we do not transfer or otherwise disclose your personal data to third parties, except in the cases specified below:
- if you have given your consent;
- to our intermediaries, service providers, and credit institutions, if reasonably necessary for the purposes specified in this Privacy Policy;
- to data processors who process your personal data on our instructions and for the purposes we have determined and specified in this Privacy Policy (e.g. IT and server service providers);
- to law enforcement and/or judicial authorities, agencies, and/or other data recipients to whom data must be transferred under legal requirements or in order to protect our rights and interests.
Where Stateta transfers data to data processors, Stateta requires those data processors to process the transferred data exclusively in accordance with Stateta's instructions, for the purposes determined by Stateta, and based on this Privacy Policy, personal data protection laws, and the data processing agreements concluded between Stateta and the data processors.
On a lawful basis and for a legitimate purpose, Stateta may transfer your personal data to entities located outside the European Economic Area (EEA) (e.g. if Stateta's data processors or personal data recipients are established outside the EEA). Where personal data is transferred from the EEA to countries that the European Commission does not recognize as ensuring an adequate level of personal data protection, Stateta takes all appropriate measures to protect your personal data (e.g. bases the transfer of personal data on standard contractual clauses approved by the European Commission).
What rights do you have as a data subject?
As a data subject, you have the following rights:
- The right to be informed about Stateta's processing of personal data. You have the right to obtain information about the personal data being processed, the sources of the personal data, the purposes and legal bases of processing, the retention period, and the recipients or processors of the data, your rights as a data subject, and other relevant information.
- The right to access your personal data processed by Stateta. You have the right to access your personal data being processed and to obtain a copy of it.
- The right to request rectification of your personal data processed by Stateta. You have the right to request the correction of inaccurate or incorrect personal data processed by Stateta.
- The right to withdraw consent. You have the right to withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
- The right to request erasure of data. You have the right to request the erasure of your personal data if (i) it is no longer necessary for the purpose for which it was collected; (ii) you have withdrawn consent to the processing of your personal data, where processing was based on your consent; (iii) we process your personal data based on legitimate interest and you object to such processing and there are no overriding legitimate grounds for processing; (iv) we are required to erase your personal data in order to comply with a legal obligation applicable to us; or (v) your personal data has been processed unlawfully.
- The right to restrict processing. You have the right to restrict Stateta's processing of your personal data: (i) if you contest the accuracy of the data, while Stateta carries out a related verification; (ii) if your personal data has been processed unlawfully but you do not want it erased; (iii) if your personal data is no longer needed for the purpose for which it was collected, but you need it to establish, exercise, or defend legal claims; (iv) if you have objected to processing, as described below, pending verification of whether Stateta's legitimate grounds override yours.
- The right to object to processing. You have the right to object to Stateta processing your personal data for direct marketing purposes, and to object to your personal data being processed for public interest purposes or Stateta's legitimate interests, unless those interests override the reasons for your objection.
- The right to data portability. You have the right to receive the personal data you provided to us, or to request that such data be transmitted to another controller in a structured, commonly used, and machine-readable format, where the processing of your personal data is based on your consent or on a contract between us and is carried out by automated means.
- The right to lodge a complaint. If you believe your rights have been violated, you may contact Us by email at [email protected] or (and) lodge a complaint with a supervisory authority. In Lithuania, the supervisory authority is the State Data Protection Inspectorate (L. Sapiegos g. 17, LT-10312 Vilnius, email: [email protected]); you can find the supervisory authorities of other countries you may contact based on your place of residence or Stateta's place of business here.
You may exercise your rights by contacting Stateta by email at [email protected]. Before exercising your right(s), Stateta may ask you to provide proof of identity.
Stateta hereby informs you that the exercise of the above rights may depend on the specific conditions for exercising that right set out in applicable legislation; therefore, on specific grounds established by law, Stateta has the right to refuse, by a reasoned written response, to fulfil your request to exercise a particular right.
Upon receiving your request, Stateta undertakes to fulfil your right, or to refuse to do so by a reasoned written response, as soon as possible, but in any event no later than one month from the date of receipt of your request. Stateta has the right to charge a reasonable fee if your requests are manifestly unfounded, repetitive, or excessive.
Ensuring the security of your personal data
Stateta processes your personal data responsibly and securely, taking into account the personal data security requirements set out in legislation. When determining personal data processing measures, as well as during processing, Stateta implements the technical and organizational data protection measures required by law to protect the personal data being processed from accidental or unlawful destruction, damage, alteration, loss, disclosure, and any other unlawful processing. The security measures for personal data and their level are determined based on the risks arising from the processing of personal data.
Among other things, Stateta employees who have access to personal data are made aware of personal data protection requirements and ensure full confidentiality of the personal data processed.
Cookies
Stateta hereby informs you that cookies are used on the website.
Cookies are small text files sent to the device of every person visiting the website, from which the website is accessed, and temporarily stored on that device.
The information collected by cookies helps identify the website visitor, retain a browsing history, and tailor content accordingly. The information collected by cookies allows us to make browsing more convenient for you, offer you attractive proposals, and learn more about visitor behavior, analyze trends, and improve the website, customer service, and the services We provide.
By visiting the website, you may express your consent through active action if you wish to use cookies. If you do not give consent to the use of cookies, cookies that are not essential for the operation of the website or are not exclusively technical in nature will not be placed on your device.
We inform you that you may also manage and/or delete cookies according to your preferences by selecting a cookie management tool on the website. You can also choose, in the settings of your browser ("Microsoft Edge", "Safari", "Firefox", "Chrome", etc.), which cookies you want to accept and which to reject. You can delete all cookies already present on your device, and in most browsers you can set cookies not to be placed at all. The location of these settings depends on the browser you use.
You may withdraw your consent to use cookies at any time by changing your settings and deleting stored cookies. If you choose to delete cookies, please remember that all set preferences will also be removed, and the website may not function, or may not function properly. For these reasons, we do not recommend disabling cookies while using the website.
To learn more about cookies and how to manage or remove them, you may visit: www.allaboutcookies.org.
On the website We use the cookies indicated below:
| Cookie category | Cookie name | Description |
|---|---|---|
| Statistics | _ga | Google Analytics cookie used to distinguish one visitor from another and collect website traffic statistics. Typically valid for up to 2 years. |
| Statistics | _ga_D0F4HSM707 | Google Analytics 4 cookie for a specific data stream. Used to measure visitor sessions, page views, and interactions on the website, and to compile analytical reports. |
| Statistics | _ga_T0L6LH8QHL | Google Analytics 4 cookie for a specific data stream. Used to analyze visitor behavior on the website, session statistics, and reports. |
| Statistics | _gid | Google Analytics cookie used to distinguish visitors and collect statistical information about page views. |
| Statistics | _gat | Google Analytics cookie used to limit request frequency and manage analytics requests so that the service functions stably. |
| Marketing | _gcl_au | Google Ads / Google Tag cookie used to measure the effectiveness of advertising campaigns and conversions, for example to determine whether a user took an action on the website after clicking an ad. |
| Necessary | cookielawinfo-checkbox-necessary | Cookie consent tool cookie that stores the user's choice regarding necessary cookies. Required so that the website remembers consent settings. |
| Necessary / Functional | cookielawinfo-checkbox-non-necessary | Cookie consent tool cookie that stores the user's choice regarding non-essential cookies, e.g. analytics or marketing. |
| Functional | wp-settings-1 | WordPress cookie that stores the administration interface or editing environment settings of a logged-in user. Applies only to logged-in users. |
| Functional | wp-settings-time-1 | WordPress cookie used together with wp-settings-1; stores the time when the user's WordPress interface settings were set. Relevant only to logged-in users. |
| Marketing / Third-party | IDE | Google DoubleClick cookie used to display ads, personalize advertising, limit frequency, and measure ad effectiveness on non-Google websites. |
| Marketing / Third-party | DSID | Google advertising cookie used to recognize a logged-in Google user on non-Google websites so their ad personalization settings are respected. Valid for about 2 weeks. |
| Functional / Third-party | PREF | YouTube / Google cookie used to store the user's video player and page preferences, e.g. playback or player settings. |
| Statistics / Marketing / Third-party | VISITOR_INFO1_LIVE | YouTube cookie that may be used for analytics, advertising, and personalized recommendations based on previous views or searches. |
| Statistics / Third-party | YSC | YouTube session cookie related to the operation of embedded YouTube videos and recording user interactions with videos during the session. |
| Functional / Third-party | VISITOR_PRIVACY_METADATA | YouTube cookie used to store privacy/consent status and settings related to embedded YouTube content. |
| Functional / Statistics / Third-party | __Secure-ROLLOUT_TOKEN | YouTube cookie used for rolling out new features and measuring their impact when other identifiers cannot be used. Valid for about 6 months. |
| Security / Third-party | SID, HSID, SSID, SAPISID, APISID | Google cookies related to user authentication, account security, and protection against abuse. |
| Security / Third-party | AEC, __Secure-YEC, __Secure-YENID | Google / YouTube security cookies used to detect spam, fraud, and abuse, and to ensure the reliability of ad interactions. |
Changes to the Privacy Policy
Stateta has the right to amend the terms set out in this Privacy Policy. If the terms set out in this Privacy Policy are amended, we will publish the updated version of the Privacy Policy on the website.
The Privacy Policy was last amended and is effective as of June 25, 2026.