Privacy and cookie policy

Updated 15 October 2026.

Who processes your data?

The controller for eray.lt is Ernestas Pocius, operating under the name Eray. Contact: Telšių g. 2, Plungė, Lithuania; email ernestas@eray.lt; telephone +370 689 18122. This policy covers the public website and enquiries submitted through it.

What data do we receive?

The enquiry form collects your name, a contact email or phone number, and a description of your task. The selected service or industry is included so we can understand and respond to your enquiry. We also receive information you choose to include in messages or correspondence. Please do not submit sensitive or unrelated personal data.

To deliver and protect the website, we process your IP address and may process technical request data such as time, page address and browser information. Enquiry rate limiting uses the IP address in server memory with a 10-minute validity window; this is not a cookie.

Purposes and legal bases

We use your information to answer a service enquiry, prepare a quote and arrange work. For enquiries about a contract in your own name, processing is necessary for steps at your request before a contract and its performance (GDPR Article 6(1)(b)). General enquiries and communication with company representatives rely on our legitimate interest in responding and conducting business (Article 6(1)(f)).

Technical data supports our legitimate interest in website security and preventing abuse. Where retention is required by law, we rely on a legal obligation (Article 6(1)(c)). A separate consent checkbox is not required for these purposes. We do not use enquiry data for advertising newsletters.

Recipients and international transfers

Enquiries are emailed to ernestas@eray.lt. We use Resend (Plus Five Five, Inc.) for delivery, Cloudflare for website delivery and protection, and an email service provider. These providers receive data needed for their services. We may disclose data to authorities where legally required.

Providers may process data outside the European Economic Area, including the United States. Resend states that it stores data in the US and provides EU standard contractual clauses and the EU–US Data Privacy Framework in its processing terms. You may email us to request information and copies of the safeguards applicable to transfers of your data.

Retention

We retain enquiries and correspondence for as long as needed to resolve the enquiry and complete related actions. If an enquiry becomes an order, necessary data is kept for service performance, warranty obligations and applicable statutory retention requirements. In a dispute, relevant data may be retained until the dispute and necessary legal proceedings end. Retention of technical data depends on the security purpose and provider settings.

Your rights

Subject to GDPR conditions, you may request access, correction, deletion, restriction, portability and object to processing based on legitimate interests. If processing were based on consent, you could withdraw it at any time. Send requests to ernestas@eray.lt. We normally respond within one month; a lawful extension will be explained to you.

You may complain to the Lithuanian State Data Protection Inspectorate (vdai.lrv.lt). Without the contact and enquiry information needed to reply, we cannot respond through the form; you may call us instead. We do not conduct profiling or automated decision-making producing legal or similarly significant effects on this website.

Cookies and consent

ERAY information pages do not use analytics or advertising cookies and do not save browsing events in local storage. Their language is determined by the URL. Opened applications use local storage for their records, language choice and work within the selected application.

Website infrastructure may use essential technical security cookies depending on enabled protections. Strictly necessary cookies do not require consent. If we introduce non-essential cookies or tracking technologies, we will request consent before use and provide ways to refuse and withdraw it. You can manage cookies in your browser settings.

External services and updates

Social network and other external links lead to separate services governed by their own privacy rules. Administrator sign-in through ChatGPT is a separate service and is not required for public visitors. Private repair administration data is outside the scope of this public website policy. We update this policy when website functionality or data processing changes.

Resend DPA · Cloudflare DPA · VDAI