P4Fuel | Privacy Policy

General information

UAB “Petro Pay” (hereinafter referred to as “we” or “Data Controller”) is the controller of this website. In this privacy policy, we set out and explain how your personal data is collected and further processed when you use this website. The terms set out in this privacy policy apply every time you access the content and/or service provided by us, regardless of the device (computer, mobile phone, tablet, TV, etc.) you use.

Data controller details:

PETRO PAY UAB

Legal entity code: 305653524

Kalvarijų g. 125, LT-08221 Vilnius, Lithuania

Phone: +370 627 19075

Email: info@petropay.eu

We confirm that your data will be collected in accordance with the requirements of the applicable legal acts of the European Union and the Republic of Lithuania and the instructions of the controlling authorities, all reasonable technical and administrative measures will be applied to protect the data we collect about website visitors from loss, unauthorized use and/or modification. The data controller's employees are committed in writing not to disclose or distribute information received at the workplace to third parties, including information about website/social network account visitors.

Persons under the age of 14 may not provide any personal data through our website/social media accounts. If you are a person under the age of 14, you must obtain the consent of your parents or other legal guardians before providing any personal information.

The terms used in the Rules shall be understood as defined in the General Data Protection Regulation No. 2016/679 (EU).

It is very important that you read this privacy policy carefully, as each time you visit this website, you agree to the terms described here. If you do not agree to these terms, please do not visit our website, use our content and/or services.

How do we collect information about you?

Your personal data, i.e. any information about you that allows us to identify you, is obtained in various ways:

you can provide information (personal data) yourself (by filling out a registration form online, ordering a product in our e-shop, subscribing to a newsletter, calling us);
information about you may be collected automatically (when you visit our website, social account, or use our apps);
in certain cases, we receive information about you from third parties and may collect information about you from publicly available sources (e.g., through a social network, your company's website, or otherwise).

You can provide us with your personal data directly. This usually happens in the following cases:

you register on our website;
you order a product from our e-store;
you install our apps;
you subscribe to our newsletter or other communication;
you participate in surveys.

Information about you may be collected automatically. This usually happens when:

you submit requests through the registration system or our social media accounts;
you use the website (data is collected using cookies and similar technologies. You can find more information about the cookies we use below);
you make public posts on social media platforms that we follow.

To the extent permitted by applicable law, we may receive information about you from third parties. This may include information provided by our partners, marketing agencies, information from your publicly available profiles (Linkedin, Facebook, Twitter, Instagram). We may combine information we receive about you from your own, public and commercial sources with other information we receive from or about you.

We may also collect information about you if a person purchasing our goods (e.g. tires) identifies you as the person who will collect the said goods.

We may collect information about you in other ways that are not covered by this Privacy Policy. If this happens, we will notify you.

What information (personal data) about you do we process?

Although we try to collect as little information about you as possible, we collect the following information to carry out our activities:

information that is necessary to provide you with our services (when ordering a product);
information you provide in surveys;
information you provide when you call us;
information about your interests and specific needs;
information necessary to identify you;
information provided to us by a customer purchasing our goods and identifying you as the person who will collect the goods;
information about the device you are using.

The information we collect directly from you will be apparent from the circumstances and context. For example:

To provide services, we process the following information about you: name, surname, place of residence, if you purchase goods from our e-shop. Also, other information that may be necessary during the provision of services, such as your phone number, e-mail address for contact in case of ordering goods.
Information about your interests and specific needs.

The information we collect automatically is typically as follows:

information about how you use our websites (Device information: i.e., IP address, operating system version and settings of the device you use to access content/products; login information: i.e., the time and duration of your session, the terms of the queries you enter on our website, and any information stored in cookies we set on your device (cookie policy is provided below); location information: i.e., your device's GPS signal or information about nearby WiFi access points and cell towers, which may be transmitted to us when you use our website content).

The information we receive from third parties or publicly available sources is usually the following:

your email address, name, surname, special needs and interests;
when our customer designates you as the person who will pick up the customer's ordered goods, we process the following information: your name, surname, and phone number.

You may choose not to provide us with certain information (e.g. information requested on a registration form or when ordering a product in an e-store), but in this case you may not be allowed to create an account on our website or order a product if the information is necessary for further service provision.

You pay for goods purchased on our website through your bank's online banking system, and then security is ensured by the bank's server, where you enter passwords and other information that only you know into the system. When paying through electronic banking, the buyer enters all data into the bank's system, so this information is not accessible to our employees.

Important: UAB Petro Pay staff will not ask you for your login details, bank card numbers, passwords or any other information, the use of which may cause you financial or any other damage, either in writing, by telephone or in any other way.

Purposes and legal basis for data processing

The information provided above is processed for the following purposes:

Providing information about tires, their installation and other related services.
To provide information related to the provision of services at your request.
For marketing purposes⃰, e.g. to deliver personalized advertisements and sponsored content and send promotional notifications, to evaluate and analyze our market, customers, products and services (including collecting your opinions on products and services, organizing customer/partner surveys, to the extent permitted by law).
To learn how people use our online services so that we can improve them and develop new content, products and services.
Defend your interests in court or other institution.
In other ways with your consent⃰.

⃰ We inform you that you have the right to refuse to receive direct marketing content from us at any time by notifying us of your decision by e-mail info@petropay.eu or by using the opt-out link in the newsletter itself.

Your personal data is processed based on one or more lawful grounds for processing:

Compliance with legal requirements;
Performance of the contract with you;
Our legitimate interests, unless your private interests are overridden;
In certain cases, your consent.

The purposes for which we process your personal data, with the relevant legal basis and the personal data processed, are set out in the following table.

Purpose	Legal basis(s)	Personal data
Providing information about tires, their installation and other related services	Performance of the contract with you Compliance with legal requirements Legitimate interests – increasing the awareness and prestige of the business.	Name, surname, place of residence, other information that may be necessary when providing services, such as your phone number or email address for contact, information about your specific needs.
At your request, provide information related to the provision of services	This information is provided to you because we have a legitimate interest in providing accurate information about our services, products, additional services, etc.	In order to respond to your inquiries by phone, email, social media, and other means, we may ask for your phone number, email address, or other contact information convenient for you.
For marketing purposes, such as to deliver personalized advertisements and sponsored content and send promotional notifications, to evaluate and analyze our market, customers, products and services (including collecting your opinions on products and services and conducting customer surveys).	If you are our client, we process your personal data for this purpose, having a legitimate interest in informing you about our services, events, news and other relevant information. If you are not our customer, you will only receive marketing information from us if we have your consent.	Name, social network account details, phone, email, address, your interests.
To learn how people use our online services so that we can improve them and develop new content, products and services.	For this purpose, we process your personal data in our legitimate interest to monitor the quality of our services, create and improve the content we provide, and ensure the security of the website.	IP address, operating system version and settings of the device you use to access content/products, the time and duration of your session, the terms of the queries you enter on our website, and any information stored in cookies we set on your device, your device's GPS signal or information about nearby WiFi access points and cell towers that may be transmitted to us when you use our website content.
Defend your interests in court or other institution	Compliance with legal requirements. Legal interest - to defend against lawsuits and claims.	Depending on the claim or lawsuit filed, all of your personal data we hold and listed in this privacy policy may be processed for this purpose.

In cases where we cannot rely on one of the legal bases set out in this table, we will ask for your consent before processing your personal data (such cases will be clear from the circumstances and context).

In cases where we process your personal data for purposes other than those specified in these rules, we will inform you of this by providing a separate notice.

To whom do we transfer your personal data?

We may transfer your personal data to:

To companies that provide services at our request,
For banks/companies that assist in settlement operations
To other responsibly selected business partners,
To other parties where required by law or necessary to protect our legitimate interests.

Companies that provide services at our request currently include: IT service providers, accounting service providers, auditors. These companies have limited access to your information and cannot use it for purposes other than providing services to us.

Responsibly selected business partners are companies involved in the provision of tire sales, installation and vehicle service services. These partners' ability to use your information is limited; they may not use this information for purposes other than the contract with us.

In order to receive direct marketing offers from UAB “Petro Pay” business partners, you will be asked for separate consent.

Other parties to whom we may disclose information about you where necessary to protect our legitimate interests include government authorities, law enforcement officers, courts, etc.

To which countries is your personal data transferred?

Sometimes we may need to transfer your personal data to other countries that may have lower data protection policies. In such cases, we would do everything in our power to ensure the security of the personal data transferred.

When the Data Controller sends your personal data to countries outside the European Economic Area, we ensure that one of the following security measures is applied:

The contract signed with the data recipient would be based on the Standard Contractual Clauses approved by the European Commission.
In the case of data transmission group companies, the rules binding on companies apply.
The data recipient would be located in a country recognized by the European Commission as applying adequate data protection standards.
Permission from the Data Protection Inspectorate.

What do we do to protect your information?

We have implemented reasonable and appropriate physical and technical measures to protect the information we collect for the purposes of providing the content/services. However, please remember that while we take reasonable steps to protect your information, no website, online transaction, computer system or wireless connection is completely secure.

How long will we store your personal data?

We will store your personal data for as long as necessary to achieve the stated purpose. Once the stated purpose has been achieved, your personal data will be deleted, except in cases where legal acts oblige us to store information for tax purposes or the data may be necessary for a pre-trial investigation, but in any case the storage period will not exceed 10 years. After this period, the data will be deleted in a way that makes it impossible to reproduce it.

Typically, personal data is stored for the following periods:

Personal data	Storage period
Payment details	10 years after the payment transaction
Personal data used for marketing	3 years from your last visit to our website
IT system records (logs)	Up to a few months
Analytics data	Typically, this data is collected automatically when you use the website and is anonymized/aggregated shortly after collection.

Your rights

The data subject whose data is processed by the Data Controller has the following rights, depending on the situation:

To know (be informed) about the processing of your data (right to know).
To be familiar with your data and how it is processed (right of access).
To request the correction or, taking into account the purposes of personal data processing, the completion of incomplete personal data of a person (right to rectification).
Have your data destroyed (right to be forgotten).
Has the right to request that the Data Controller restrict the processing of personal data for one of the legitimate reasons (right to restriction).
Has the right to data portability (right to portability).
You have the right to object at any time to the processing of your personal data where such processing is carried out for reasons of public interest or where the processing is necessary for the purposes of the legitimate interests pursued by the controller or a third party. In order for the controller to process personal data, it is the responsibility of the controller to demonstrate that the data are processed for compelling legitimate grounds which override the interests of the data subject. (right to object).
Submit a complaint to the State Data Protection Inspectorate.

We provide you with the opportunity to exercise these rights in a convenient way. You can do this by calling +370 627 19075, writing to us at info@petropay.eu, or using certain links provided at the bottom of our advertising content.

We may not create conditions for you to exercise the above rights when, in cases provided for by law, it is necessary to ensure the prevention, investigation and detection of crimes, violations of official or professional ethics, as well as the protection of the rights and freedoms of the data subject or other persons.

Your rights will be exercised after confirming your identity in person, via an electronic signature.

Your right	Certain restrictions
To know (be informed) about the processing of your data (right to know);	You have the right to receive information about the processing of your personal data in concise, plain and understandable language before the processing of your personal data begins.
To be familiar with your data and how it is processed (right of access);	This right means: - Confirmation whether we process your personal data, - Providing a list of your processed personal data - Providing the purposes and legal basis for processing your data - Confirmation of whether we send data to third countries, and if so, what security measures we have taken - Providing the source of your personal data - Information on whether profiling is applied - Provision of data retention time Once your identity has been established, we will provide you with the above information, provided that this does not violate the rights and freedoms of others.
To request the correction or, taking into account the purposes of personal data processing, the completion of incomplete personal data of a person (right to rectification);	Applies if the information we have is incomplete or inaccurate
Have your data destroyed (right to be forgotten);	Applicable if: - the information we hold is no longer necessary to achieve the stated purposes - we process data based on your consent and you withdraw your consent - we process data on the basis of legitimate interests, and, following your request, it is determined that your private interests prevail - information obtained illegally
To require the Data Controller to restrict the processing of personal data on one of the legitimate grounds (right to restriction)	This right may be exercised for a period of time while we analyze the situation, i.e.: - if you dispute the accuracy of the information - if you object to the processing of personal data when it is carried out on the basis of legitimate interests - we are using the information unlawfully, but you object to it being deleted - we no longer need the information, but you require it to be kept due to a legal dispute.
Right to data portability	This right can be exercised if you have provided your data and we process it automatically based on your consent or a contract concluded with you.
The right to disagree	This right may be exercised where such processing is carried out for reasons of public interest or where processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party. In order for the controller to process personal data, it is the responsibility of the controller to demonstrate that the data are processed for compelling legitimate grounds which override the interests of the data subject. (right to object).
Submit a complaint to the State Data Protection Inspectorate.	www.ada.lt

Cookies, beacons and similar technologies

In this Privacy Policy, we use the term “cookies” to describe cookies and other similar technologies, such as pixel tags, web beacons, and clear GIFs.

When you visit our website, we want to provide you with content and features that are tailored to your needs. This requires cookies. These are small pieces of information that are stored in your web browser. They help the Data Controller recognize you as a previous visitor to a particular website, save your browsing history and tailor the content accordingly. Cookies also help ensure the smooth operation of websites, allow you to monitor the duration and frequency of visits to websites and collect statistical information about the number of website visitors. By analyzing this data, we can improve our websites and make them more convenient for you to use.

Cookies used on our website:

Name	Period	Purpose
_ga	2 years	Used to distinguish unique users by assigning a randomly generated number.
_gat	10 minutes	Used by Google Analytics to limit data collection during high page load.
_guide	24 hours	Used to collect statistical information about website traffic
PHPSESSID / ASP.NET_SessionId	Until the website window closes	The cookie is used to implement the functionality of the website. It is deleted when the website window is closed.
Lang_code	1 year	Designed to protect language selection
fr	3 months	The Facebook cookie is for direct marketing purposes.

When you use a browser to access content we provide, you can configure your browser to accept all cookies, reject all cookies, or notify you when a cookie is being sent. Each browser is different, so if you are unsure how to change your cookie settings, please consult your browser's help menu. Your device's operating system may have additional cookie controls. If you do not want information to be collected through cookies, most browsers have a simple procedure that allows you to opt out of cookies. To learn more about how to manage cookies, visit: https://www.allaboutcookies.org/manage-cookies/.

However, please note that some services may be designed to work only with cookies, and if you disable them you will no longer be able to use them or certain parts of them.

In addition to the cookies used by the Data Controller, our websites allow certain third parties to set and access cookies on your computer. In such cases, the third party's privacy policies apply to their use of cookies.

Please note that our social media accounts are subject to the cookie policy of the respective social media.

Contact us

If you have noticed a discrepancy in these privacy rules, a security gap on our website, or have other questions related to the processing of your personal data, please contact us in one of the ways convenient for you:

PETRO PAY UAB

legal entity code: 305653524

address: Kalvarijų g. 125, LT-08221 Vilnius, Lithuania

phone: +370 627 19075