How we protect and process your data

This privacy policy explains how AutoBY (UAB „Autoby Servisas“) processes and protects customers’ personal data when handling enquiries, providing repair services and managing customer accounts.

We process data in line with the General Data Protection Regulation (GDPR / BDAR), the laws of the Republic of Lithuania and the recommendations of the State Data Protection Inspectorate.

Name, surname and, where necessary, personal identification number (in specific cases when drawing up contracts or insurance documents).

Contact data: telephone number, email address, residential or legal-entity registered address.

Vehicle information: registration number, VIN, mileage, technical condition, photographs, service history.

Payment data: invoice details, bank-transfer information (limited scope), leasing or insurance documents.

Website and MyAuto platform usage data: IP address, browser type, devices used, login times, message history.

To book visits, manage the course of repair work and provide information about completed services.

To perform contracts and legal obligations, prepare invoices and warranty documents, and control payments.

To provide customer service, inform you about the progress of work, and send reminders of maintenance, insurance or technical inspection.

To improve service quality, run statistical analysis and develop new services based on anonymised data.

To send newsletters and offers only after we have received the customer’s explicit consent.

Personal and vehicle data are stored for 10 years from the last visit, unless the law requires a longer period.

Financial documents (invoices, contracts) are stored for the statutory period — 10 years.

Newsletter consents are stored until the customer withdraws consent.

CCTV recordings at the workshop are stored for 30 days unless there is an incident or a legal dispute.

Data may be transferred to trusted partners: insurance companies, leasing firms, lawyers and IT providers, where this is necessary to provide services or perform contracts.

For warranties and manufacturers we transfer only the technical data and work history that are required.

We may transfer data to law-enforcement authorities where required by law or upon an official request.

Third parties must protect the data and use it only for the agreed purposes.

When you submit a pre-estimate request via the website or the app, you may upload photos, video and audio recordings and a text description of the problem. These data may be analysed with artificial-intelligence (AI) tools to make a preliminary assessment of the possible fault and the scope of repair.

AI is an aid only — final decisions and the official estimate are always confirmed by qualified workshop specialists.

AI analysis results and related metadata are stored for the same period as data linked to the repair order (section 4 of this policy, not shorter than the law allows).

You have the right to object to automated analysis or to ask that only a person review your request — in that case contact us using the details in section 10.

To obtain information about what data we process about you and for what purposes.

To require inaccurate or incomplete data to be corrected.

To require erasure of data (the “right to be forgotten”) where there is no legal basis to continue processing.

To restrict processing or to object to processing for direct-marketing purposes.

To receive a copy of the data in a structured, commonly used format and to transmit it to another controller.

We use encrypted communications, access control, a periodic audit process and backups.

We train staff and regularly update data-protection procedures.

User accounts may be protected with two-step authentication (optional); logins are recorded and audited.

The website uses necessary, statistical and marketing cookies. We obtain your consent before storing them.

Necessary cookies are required for the site to work; statistical cookies help analyse traffic (Google Analytics); marketing cookies allow personalised content.

You may update or withdraw consent in your browser settings or via the cookie-banner button.

If you have questions or wish to exercise your rights, write to duomenys@autoby.lt or visit our workshop at Arimų g. 18, Vilnius.

If you believe your rights have been infringed, contact the State Data Protection Inspectorate (vdai.lrv.lt).