Welcome to vistalate. This Privacy Policy details how Adveitas, UAB (“we,” “us,” or “our”) processes your personal data when you visit and interact with www.vistalate.com. This document is governed by the General Data Protection Regulation (GDPR) and the relevant privacy legislation of the Republic of Lithuania.
1. Data Controller Information
For the purposes of the GDPR, the Data Controller responsible for your personal data is:
Company: Adveitas, UAB
Registration Number: 304539496
VAT/Tax Number: LT100017548910
Registered Address: Vilkpėdės g. 20a, Vilnius, 03151 Vilniaus m. sav., Lithuania
Telephone: +370 52652532
Email: simple@vistalate.com
2. Age Restriction
Use of our website and the provision of our digital website templates are strictly restricted to individuals who are eighteen (18) years of age or older. We do not knowingly collect or process data from individuals under this age threshold. By proceeding with any transaction, you legally confirm that you meet this minimum age requirement.
3. Information We Collect and Process
We collect information strictly necessary to fulfil your order and comply with European tax and accounting laws. This includes:
- Identity and Contact Data: Name, billing address, and email address.
- Transaction Data: Details about the layout configuration presets you have purchased.
- Payment Data: All financial transactions are processed directly by Stripe. We do not retain, store, or process full credit card numbers on our servers. Stripe acts as a data processor for the facilitation of your payment, strictly adhering to international payment processing standards.
- Technical and Telemetry Data: We automatically log your IP address, browser type, operating system, and the precise timestamps of file downloads and access. The processing of this data is grounded in our legitimate interest (Article 6(1)(f) GDPR) to prevent credit card fraud, mitigate systemic risks, and ensure secure digital delivery.
4. Digital Goods Delivery and Consumer Rights
Our business operates on a strict order, delivery, and transaction-end model. We provide standardised ready-made website templates and functional components (such as HTML, CSS, or JSON format) for one-time consumption. There is zero post-delivery development or ongoing customisation provided.
Waiver of Withdrawal Right: Due to the immediate nature of digital file provision, and in strict accordance with the EU Consumer Rights Directive, by completing your purchase you expressly consent to the immediate execution of the contract and the commencement of the digital download. You formally acknowledge and agree that once the digital delivery commences, you permanently waive your 14-day right of withdrawal.
5. Data Retention Periods
We retain your personal data only for as long as is strictly necessary to fulfil the purposes for which it was collected, and in accordance with the legal frameworks of Lithuania and the European Union:
- Accounting and Tax Records: In compliance with Lithuanian accounting legislation, transaction and billing records are retained for a mandatory period of ten (10) years from the date of the transaction.
- Communication Data: Customer inquiries and related correspondence are retained for two (2) years following the resolution of the matter. Upon the expiration of these mandatory periods, your data is permanently deleted from our active systems.
6. Protection of Data
We implement industry-recognised administrative and technical measures to protect your personal information against unauthorised access or disclosure. While we employ rigorous protocols to maintain the integrity of your data, data transmission over the internet relies on continuous systemic updates, and we operate within reasonable, established industry standards.
7. Your Rights Under GDPR
Under European data protection laws, you hold the following rights concerning your personal information:
- Right of Access: You may request a copy of the personal data we hold about you.
- Right to Rectification: You may request the correction of inaccurate or incomplete data.
- Right to Erasure: You may request the deletion of your data, provided it does not conflict with our mandatory 10-year retention obligation for tax and accounting purposes.
- Right to Restrict Processing: You may request the suspension of data processing under specific conditions.
- Right to Data Portability: You may request the transfer of your data to another organisation.
To exercise any of these rights, please contact the Data Controller directly at simple@vistalate.com. We shall respond to all legitimate requests within one calendar month.
8. Amendments to This Document
We evaluate and update this Privacy Policy periodically to ensure ongoing alignment with European and Lithuanian legal frameworks. Any revisions will be published directly on this page with an updated effective date.