Privacy · GDPR

Privacy policy and cookies.

Name: UAB Grikas
Address: Voveriškių g. 4, Vėžaičiai, Klaipėdos r., 96214, LT
Telephone: +370 606 22 227

In force from 2026-08-03 Version 2.0 Data controller UAB „Grikas"

01General provisions

This privacy policy explains how UAB „Grikas” (company code 304105418, registered office Voveriškių g. 4, Vėžaičiai, Klaipėdos r., LT-96214) collects and processes personal data when you use the grikas.lt website, submit an enquiry, buy feed or become our customer.

We process data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and the Law on Legal Protection of Personal Data of the Republic of Lithuania.

02What data we collect

We collect only the data needed to answer your enquiry, fulfil your order and meet statutory requirements.

Data group	What data	Why we process it	Legal basis
Enquiry form	Name, farm or company name, email, telephone, feed of interest, quantity, message text	To answer the enquiry and provide a quotation	Consent (GDPR Art. 6(1)(a))
Order data	Name and surname or company details, delivery address, email, telephone, goods ordered	To conclude and perform the sale and purchase contract	Performance of a contract (GDPR Art. 6(1)(b))
Accounting data	Invoice and payment data	Bookkeeping and tax obligations	Legal obligation (GDPR Art. 6(1)(c))
Account data	Email, password hash, order history	To give access to the account and orders	Performance of a contract (GDPR Art. 6(1)(b))
Technical data	IP address, browser type, time of visit	Website security and protection against spam enquiries	Legitimate interest (GDPR Art. 6(1)(f))

03Where we get the data

We receive data directly from you — when you fill in the enquiry form, place an order, register an account or contact us by email or telephone. We do not buy or collect data from third-party sources.

04Who we share data with

We do not sell your data and do not pass it to third parties for marketing purposes. We disclose data only as far as it is necessary to fulfil an order:

To carriers and courier services — name, address, telephone, so that the goods can be delivered.
To payment service providers — payment initiation and confirmation data. We neither see nor store payment card data.
To accounting and IT service providers — as data processors, under written data processing agreements.
To competent authorities — where required by law.

All data processors act on our instructions and must ensure a level of data protection no lower than the GDPR requires. We do not transfer data outside the European Economic Area, except where the safeguards provided for in the GDPR apply.

05How long we keep data

We keep data no longer than is needed to achieve the purposes:

Enquiry data — 24 months from the last contact.
Order and contract data — 10 years from the end of the transaction, as required by accounting and archiving law.
Accounting documents — for the periods laid down by law.
Account data — for as long as the account is active; once it is deleted, the data is removed, except for data we are required by law to retain.

Once the retention period ends, the data is securely destroyed or anonymised.

06Cookies

On the website we use strictly necessary cookies, without which the site and the cart would not work, and analytics cookies, which we enable only with your consent given through the cookie notice. You can withdraw your consent at any time by clearing your browser storage.

Cookie	Purpose	Duration	Type
grikas.cookieConsent	Stores your cookie choice	12 months	Strictly necessary
woocommerce_cart_hash	Identifies the contents of the cart	Session	Strictly necessary
woocommerce_items_in_cart	Indicates whether there are items in the cart	Session	Strictly necessary
wp_woocommerce_session_*	Links you to your cart and order	2 days	Strictly necessary
_ga	Google Analytics — identifies a unique visitor	24 months	Analytics
_ga_<ID>	Google Analytics — session state and visit statistics	24 months	Analytics

07Your rights

You have the right to:

access your data and obtain a copy of it;
request that inaccurate data be corrected or incomplete data completed;
request erasure of your data (the „right to be forgotten”);
restrict or object to the processing of your data;
request that your data be transferred to another controller;
withdraw your consent at any time, without affecting processing carried out before the withdrawal;
lodge a complaint with the State Data Protection Inspectorate (vdai.lrv.lt).

08Data security

We apply technical and organisational measures: an encrypted HTTPS connection, data access restricted to authorised staff only, regular backups and software updates. Even so, no transmission over the internet is completely secure, so we cannot guarantee absolute protection.

09Changes to the policy

We may update this policy. In the event of material changes, we will give notice on the website’s home page. We recommend that you review this page periodically.

Data controller

UAB „Grikas”
Company code 304105418
Voveriškių g. 4, Vėžaičiai, Klaipėdos r., LT-96214
Email: info@grikas.lt
Tel. +370 606 22 227