Privacy Policy

This Privacy Policy explains how the company operating the Hot Deals Garage brand processes personal data when you visit the website, submit a request, book auto service or use car sourcing, inspection, sales, repair, maintenance, car parts or related services.

1. Who controls your data?

Data controller:

• Geonser, UAB, company code 302949977, VAT code LT100007419411
• Workshop address: Kareivių g. 9B, Vilnius, Lithuania
• Phone: +370 677 767 19
• General email: deals@hotdealsgarage.lt, auto service email: servisas@hotdealsgarage.lt

Privacy questions may be sent to deals@hotdealsgarage.lt.

2. What data may we process?

Depending on your relationship with us, we may process:

• name, surname, company and representation details;
• phone number, email address and other contact details;
• inquiry, correspondence and documents submitted;
• vehicle make, model, year, registration number, VIN, mileage, specification and technical information;
• vehicle photographs, fault descriptions, diagnostic results, repair history and service order information;
• desired vehicle, budget, use requirements and purchase criteria;
• contracts, quotations, invoices, payment and accounting information;
• information required for vehicle handover, pickup, insurance, registration or technical inspection organisation;
• technical website data, including IP address, browser and device information, viewed pages, cookie choices and security logs;
• direct marketing choices;
• other information voluntarily provided.

Please do not send information that is not required. Hide unnecessary personal identification numbers, card details, health data and other excessive data in documents.

3.1 Inquiries and communication

We process data to answer requests, provide quotations, arrange services and request missing information.

Legal basis: steps before a contract, performance of a contract and our legitimate interest in administering requests.

3.2 Car sourcing and pre-purchase inspection

We process data to understand requirements and budget, search and assess cars, review history and documents, organise inspections, negotiation, transport, registration, insurance, contracts, reporting and handover.

Legal basis: entering into and performing a contract, legitimate interest in documenting and providing the service properly, and legal obligations where applicable.

3.3 Vehicle sales

We process data to provide information, enter into and perform a vehicle sale contract, organise payment, transfer, registration and documentation, and comply with accounting and consumer protection duties.

Legal basis: contract and legal obligation.

3.4 Auto service, diagnostics and repair

We process data to book a vehicle, create a service order, record vehicle condition and mileage, perform diagnostics, maintenance and repair, agree additional work, parts, price and deadlines, hand the vehicle back and handle quality or warranty issues.

Legal basis: contract, steps before a contract, legal obligations and legitimate interest in documenting vehicle condition and completed work.

3.5 Car parts

We process vehicle data and contact information to select compatible parts, provide an offer, organise ordering, delivery, return or warranty handling and comply with accounting duties.

Legal basis: contract, steps before a contract and legal obligation.

3.6 Accounting and legal claims

Contracts, invoices, payments and mandatory documents are processed for accounting, tax, dispute management and legal claims.

Legal basis: legal obligation and legitimate interest in establishing, exercising or defending claims.

3.7 Website operation and security

Technical data is processed to operate and secure the website, prevent abuse, identify errors and remember cookie choices.

Legal basis: legitimate interest. Non-essential analytics and marketing technologies are used only with consent.

3.8 Analytics and marketing

With consent, we may use analytics or marketing tools to understand website use, measure advertising and provide more relevant communication.

Legal basis: consent, withdrawable at any time through cookie settings.

3.9 Direct marketing

News and offers are sent only where an appropriate legal basis exists. Consent may be withdrawn at any time by using the unsubscribe option or contacting us.

4. Where do we obtain data?

• directly from you;
• from your representative or company;
• from a vehicle seller or another person involved in the service;
• from lawfully accessible registers and vehicle information sources;
• from insurers, registration, inspection, transport or other providers involved in your instruction;
• from website technologies where permitted.

5. Who may receive data?

Data may be provided, where necessary, to:

• hosting, email, IT, CMS, CRM and storage providers;
• accounting, legal, audit and debt administration providers;
• banks and payment providers;
• diagnostics, parts, transport, insurance, registration and technical inspection partners;
• a vehicle seller or buyer where required for a transaction;
• analytics and advertising providers where consent has been given;
• public authorities where legally required;
• courts, dispute bodies, insurers and representatives when protecting legal interests.

Processors may use data only under our instructions and appropriate safeguards.

6. Transfers outside the EEA

Where an IT, analytics or marketing provider processes data outside the European Economic Area, data is transferred only using a lawful mechanism, such as an adequacy decision, Standard Contractual Clauses or another GDPR safeguard.

7. Retention

We retain data only as long as required:

• unsuccessful inquiries and correspondence: generally up to 2 years after the last communication, unless longer retention is needed for claims;
• sourcing, sales, service orders and contracts: during performance and afterwards as required for accounting, warranty, claims and legal obligations;
• accounting documents: for the period required by law;
• technical service records and vehicle-condition photographs: as reasonably required for completed work, warranty and claims;
• marketing data: until consent is withdrawn or marketing ends;
• security logs: as required for security and incident investigation;
• cookies: for periods shown in the Cookie Policy and preference panel.

After the period ends, data is deleted, anonymised or lawfully archived.

8. Is data mandatory?

Fields marked as required are necessary to answer, quote or provide a service. Without them, we may be unable to proceed.

Marketing consent is optional and does not affect service provision.

9. Automated decisions

We do not make decisions based solely on automated processing that produce legal or similarly significant effects.

10. Your rights

Where applicable, you have the right to:

• receive information;
• access data;
• correct inaccurate data;
• request deletion;
• restrict processing;
• object to legitimate-interest processing;
• withdraw consent;
• receive portable data where applicable;
• lodge a complaint with the Lithuanian State Data Protection Inspectorate.

Contact deals@hotdealsgarage.lt. Identity verification may be required.

Supervisory authority: vdai.lrv.lt.

11. Security

We apply organisational and technical measures to protect data against unlawful access, loss, alteration or disclosure. Access is limited to people and providers who need it.

No system is completely risk-free. Incidents are managed under applicable legal notification procedures.

12. Photographs and publication

Vehicle photographs may be used to document work. Before public use, unnecessary identifiers are removed or appropriate permission is obtained where a person can be identified.

Registration numbers, VINs, documents and client contact details must not be published without a lawful basis.

13. Changes

We may update this policy when services, technologies or law change. The latest version is published on the website with an update date.

Last updated: 26 July 2026.