Privacy policy

This policy explains what personal data we collect through balticmachinery.com, why, who we share it with and what your rights are. We collect as little as we can: the site has no accounts, no shop and no newsletter.

Last updated 24 October 2026.

1. Who we are

The controller of your personal data is "Birgit & Co" Ltd. / "Baltijos Technikos Centras" Ltd., a private limited company registered in the Republic of Lithuania, legal entity code 300113428, registered address Svajonės g. 28, LT-94101 Klaipėda, Lithuania.

For any question about your data or this policy, write to [email protected] or call +370 46 30 11 00.

2. What we collect and why

1. Enquiries. When you send the form on Contact, We buy or the Japanese We buy page, we receive your name, email address, telephone number and message. If you are selling an engine, we also receive its location, model, condition, your asking price and any photo you attach. We use this to answer you, prepare a quote, and buy or sell an engine with you. The legal basis is taking steps at your request before a contract (Article 6(1)(b) GDPR) and our legitimate interest in answering business enquiries (Article 6(1)(f)).
2. Emails and calls. If you contact us directly, we keep the correspondence and the contact details you give us, for the same purposes and on the same legal basis.
3. Customers. If you buy from or sell to us, we keep the details needed for the contract, delivery, invoicing and warranty (Article 6(1)(b)), and accounting records as Lithuanian law requires (Article 6(1)(c)).
4. Site statistics, only with your consent. If you allow Statistics in the cookie banner, Google Analytics, loaded through Google Tag Manager, records which pages are visited, how visitors arrive, their approximate location, device and browser, using an online identifier. We use these reports only to improve the site. The legal basis is your consent (Article 6(1)(a)); without it, neither Google Tag Manager nor Google Analytics is loaded.
5. Maps, only with your consent. The maps on Partners and Contact come from Google Maps. They load only if you allow Google Maps in the cookie banner or press "Show map". Google then receives your IP address and may set its own cookies. The legal basis is your consent (Article 6(1)(a)).
6. Technical logs. Like any website, the server that delivers our pages processes your IP address, browser details and the pages requested, to deliver the site and keep it secure. The legal basis is our legitimate interest in running a secure website (Article 6(1)(f)).

We do not use your data for automated decisions or profiling, we do not sell it, and we do not send marketing emails.

3. Cookies and similar technology

The banner shown on your first visit lets you accept or reject everything that is not strictly necessary, or choose under Cookie settings. You can change your choice at any time with the "Cookie settings" link at the bottom of every page. We ask again after 6 months.

Videos on the Media page open on YouTube. Nothing from YouTube loads on our site; once you follow a link, YouTube's own privacy policy applies.

4. Who receives your data

We share personal data only with service providers that work for us under a data processing agreement, and only as far as they need it:

1. Netlify, Inc. (USA) hosts the website and receives form submissions. Netlify checks submissions for spam with Akismet, a service of Automattic Inc.
2. Google Ireland Limited and Google LLC provide Google Tag Manager, Google Analytics and Google Maps, only with your consent as described above.
3. Our email provider, which stores the emails we exchange with you and the copies of form submissions sent to our mailbox.
4. Couriers and freight companies, when we deliver an engine or collect one from you.

We may also disclose data to public authorities when Lithuanian or EU law requires it, or to establish, exercise or defend legal claims.

5. Transfers outside the EU

Netlify and Google may process data in the United States. Both are certified under the EU-U.S. Data Privacy Framework, and we rely on that adequacy decision or on the European Commission's Standard Contractual Clauses for these transfers.

6. How long we keep it

1. Enquiries that do not lead to a sale or purchase: 3 years after our last contact, then deleted.
2. Form submissions stored with Netlify: deleted once they have reached our mailbox, and no later than 90 days.
3. Contract, invoicing and accounting records: 10 years, as required by Lithuanian accounting law.
4. Google Analytics reports: 14 months, after which Google deletes the visit-level data.
5. Your cookie choice: 6 months.

7. Your rights

Under the GDPR you may ask us for access to your data, to correct it, to delete it, to restrict its use or to receive it in a portable format, and you may object to processing based on our legitimate interest. Where we rely on your consent, you may withdraw it at any time, through Cookie settings or by writing to us; this does not affect processing done before you withdrew it.

Write to [email protected]. We reply within one month and may ask you to confirm your identity first.

If you believe we have handled your data unlawfully, you can complain to the State Data Protection Inspectorate of Lithuania (Valstybinė duomenų apsaugos inspekcija), L. Sapiegos g. 17, LT-10312 Vilnius, [email protected], vdai.lrv.lt, or to the authority in the EU country where you live.

8. Security

The site is served only over an encrypted (HTTPS) connection. Access to enquiries and customer records is limited to the staff who need them, and our service providers are bound to keep the data secure and confidential.

9. Changes to this policy

We will update this page when the site or the way we handle data changes, and show the new date at the top. If a change needs your consent, we will ask for it again through the cookie banner.