1. Who is responsible for your data
ELGRAS is the data controller for the personal data collected through this website. We manufacture bespoke joinery and carry out refurbishment and fit-out work from Kaunas, Lithuania.
For anything in this policy, including requests about your data, contact us at info@elgras.com or +370 630 37074.
2. What we collect
We only collect what you send us. There is no account to create and no tracking profile behind the site.
- Enquiry form. Your name, company, email address, phone number, the sector you selected and the message you wrote.
- Direct contact. If you email or call us, whatever you choose to include in that message, along with your email address or phone number.
- Server logs. Our hosting provider records technical data for every request: IP address, date and time, the page requested, browser and operating system. These logs are kept for security and troubleshooting.
3. Why we use it and on what basis
- To answer your enquiry and prepare a quote. Basis: steps taken at your request before entering into a contract.
- To deliver a project you have commissioned. Basis: performance of our contract with you.
- To keep records of quotes and correspondence. Basis: our legitimate interest in running the business and in being able to answer questions about past work.
- To keep the website secure. Basis: our legitimate interest in preventing abuse and diagnosing faults.
We do not use your details for marketing unless you ask us to, and we never sell them.
4. How long we keep it
Enquiries that do not lead to a project are deleted within 12 months of our last exchange. Where a project goes ahead, we keep the project correspondence and documentation for as long as the contract, accounting and warranty obligations require. Server logs are held for the period set by our hosting provider, normally a matter of weeks.
5. Who else sees it
Your data stays with us and with the service providers we need to run the business. At present those are:
- our web hosting and email provider, which stores the website and delivers enquiry messages to our inbox;
- our accountants and, where a project requires it, subcontractors working on your site, who receive only what they need to do the work;
- public authorities, where the law requires disclosure.
6. Fonts loaded from Google
This website loads its typefaces from Google Fonts. When a page opens, your browser requests those font files from Google servers, and your IP address and browser details become visible to Google in the process. If you would rather this did not happen, a browser extension that blocks external fonts will prevent the request; the site remains readable in a fallback typeface.
7. Cookies
When you first open the site, we ask whether you accept analytics cookies. Whatever you answer, we store one cookie to remember it, so the question is not repeated on every page.
- elgras_consent — necessary. Records your answer to the cookie question. Set by this website, kept for six months, readable only by us.
- Google Analytics 4 — optional. The Google tag runs on every page, but it is told to store nothing until you answer. Only after you choose “Accept all” does Google set _ga and _ga_2R0683LM40, which count visits and show which pages are read. They are kept for up to two years, and choosing “Necessary only” keeps them switched off.
We use no advertising or social media cookies, and we share nothing with advertisers. You can change your answer at any time: . Deleting the elgras_consent cookie in your browser has the same effect, and the question appears again on your next visit.
8. Your rights
Under the General Data Protection Regulation you can ask us to:
- tell you what personal data we hold about you and give you a copy;
- correct anything inaccurate or incomplete;
- delete your data where we no longer have a reason to keep it;
- restrict how we use it, or object to our use of it based on legitimate interest;
- transfer your data to you or to another provider in a machine-readable format.
Write to info@elgras.com and we will respond within one month. If you are not satisfied with our answer, you may complain to the State Data Protection Inspectorate of the Republic of Lithuania (Valstybinė duomenų apsaugos inspekcija).
9. Security
The site is served over an encrypted connection, and enquiry messages are delivered to a mailbox that only our team can access. No transmission over the internet is completely secure, so please do not send us drawings or documents you consider confidential until we have agreed how to exchange them.
10. Changes to this policy
If we change how we handle personal data, we will update this page and the date at the top of it. Where the change is significant, we will say so on the page rather than leave you to spot it.