Žymeklis

Privacy Policy

Last updated 2026-08-26.

This privacy policy explains how Žymeklis (the "Service") processes personal data when you use the online system available at zymeklis.lt. The data controller is identified in Section 8.

Note: this document is a template and must be reviewed by the data controller, and by legal counsel where needed, before being published - in particular, the exact data controller details and contact information in Section 8.

1. What data we collect

  • Account data: name, email address, company name, password (stored encrypted).
  • Client and declaration data: names and registration codes of the clients (companies) you specify, along with the related VMI declaration, i.MAS notification, and Registrų centras power-of-attorney data received at your assigned mail address.
  • Technical data: IP address, browser type, login time, and system activity logs - used for security and troubleshooting.
  • Correspondence data: your messages to us (e.g., support requests), if you contact us.

2. Purposes of processing

  • To provide the Service - account administration, sign-in, and declaration-tracking functionality.
  • To communicate with you - responding to inquiries and sending important service notices.
  • For security - preventing abuse, unauthorized access, and investigating system incidents.
  • To comply with legal obligations - when required by applicable law.

3. Legal basis

We process data under Article 6(1) of the GDPR (EU 2016/679): (a) performance of a contract with you - providing the Service; (b) legitimate interest - system security and incident prevention; (c) compliance with a legal obligation, where applicable.

4. Who we share data with

We do not sell or disclose data to third parties for marketing purposes. We may share data only with:

  • Data processors who provide us with infrastructure services (e.g., server hosting, email delivery) - they process data only under our instructions and contractual obligations.
  • Competent authorities, where required by law.

5. Retention period

We retain account and related data for as long as you use the Service, and for up to 3 years after account deletion - to the extent necessary to support potential legal claims. After deleting your account, you may request earlier deletion of your data, unless retention obligations under applicable law require otherwise.

6. Your rights

Under the GDPR, you have the right to:

  • access the data we process about you;
  • request its correction or deletion;
  • restrict or object to its processing;
  • data portability;
  • withdraw consent at any time (where processing is based on consent), without affecting the lawfulness of processing carried out before the withdrawal;
  • lodge a complaint with the State Data Protection Inspectorate (vdai.lrv.lt).

To exercise your rights, please contact us using the details below.

7. Cookies

For information about the cookies we use, see our separate cookie policy.

8. Data controller and contact

Data controller: Amsario MB, company code 308109816.

For questions about personal data processing, contact us at privatumas@zymeklis.lt.