Privacy policy

Last updated: 21 October 2026

This policy explains in plain terms what personal data we collect, why we use it, who we share it with, how long we keep it and what rights you have.

1. Who handles your data

The controller of your data is:

  • MB Karališkės (brand name Carwise, carwise.lt)
  • Company code: 303126854
  • VAT code: LT100013633115
  • Address: Savanorių pr. 6-116, 03116 Vilnius, Lithuania
  • Email: paulius@carwise.lt

For any question about your data, write to paulius@carwise.lt.

We have not appointed a data protection officer, as the nature of our business does not require one.

2. What we do

Carwise buys cars to order at US auctions, sells cars from its own stock, ships cars from the USA, handles their registration and homologation in Lithuania, carries out a limited number of inspections in the USA, helps people sell their cars and works with car dealers and importers. To do this, we need some of your data.

3. What data we collect

When you fill in the inquiry questionnaire

The inquiry questionnaire is at carwise-uzklausa.netlify.app. In it you can choose one of eight types of request, such as finding and buying a car, selling your own car, or cooperation with car dealers. Depending on the request, you can give us:

  • your name;
  • phone number;
  • email address;
  • how you prefer to be contacted;
  • what car you are looking for;
  • your budget;
  • when you plan to buy or need the service;
  • where to deliver the car;
  • listing or auction lot links;
  • car details: make, model, year, VIN, mileage, location, whether it is a salvage car, whether it has been paid for, which documents you have;
  • details of a car you want to sell, and your asking price;
  • if you are asking about cooperation, your company name, country, the services you need and roughly how many cars a year;
  • any other notes;
  • a consent tick box.

When you use the “Sell your car” box

On the carwise.lt homepage you can leave a request to sell your car. We receive your name, email address or WhatsApp number, the car’s make and model, year, mileage and location, your asking price (if you give one), the page language and the consent tick box. The request is passed on by Web3Forms and arrives in our mailbox.

When you write to us or call us

When you contact us through the carwise.lt website, by email, WhatsApp or phone, we receive your contact details (such as name, phone number, email) and whatever you write or tell us.

When you use the website chatbot

The website has an AI chatbot. When you use it, your messages and the chatbot’s replies are processed. The text of your messages is sent to an AI chat service provider so that the chatbot can reply.

Please do not share sensitive information with the chatbot, such as your personal ID number, document numbers or payment card details.

When you become a customer

To perform our contract with you, we also process:

  • your name, surname and contact details;
  • the identity details or, if you buy on behalf of a company, the company details needed to buy the car, clear it through customs and register it;
  • vehicle data (such as VIN, documents, photos);
  • contracts, invoices, payment information and our correspondence with you.

If we help you sell your car, we process data about the car and about you as the seller, as far as the sale requires.

When you visit the website

The carwise.lt website runs on WordPress and is hosted by Hostinger. When you visit it, technical data may be processed, such as your IP address, browser type and time of visit.

Google Site Kit and Google Analytics are installed on the website. We only collect visitor statistics if you agree to it (see section 9, “Cookies”).

WooCommerce is installed on the website, so if you order or pay for a service through the website, we process the order and payment data.

4. Why we use your data and on what basis

For each purpose we rely on a legal basis under Article 6 of the General Data Protection Regulation (GDPR):

  • To answer your inquiry and prepare an offer. Basis: steps taken at your request before entering into a contract (GDPR Art. 6(1)(b)) and your consent (GDPR Art. 6(1)(a)).
  • To perform the contract: find and buy the car, carry out an inspection in the USA, arrange customs clearance, transport, conformity assessment and registration, help sell your car. Basis: performance of a contract (GDPR Art. 6(1)(b)).
  • To meet legal requirements: accounting and tax. Basis: legal obligation (GDPR Art. 6(1)(c)).
  • To keep the website and our services secure and to prevent fraud. Basis: legitimate interest (GDPR Art. 6(1)(f)).
  • To collect website visitor statistics (analytics cookies). Basis: your consent (GDPR Art. 6(1)(a)).

What we do not do:

  • We do not sell your data.
  • We do not use your data for marketing without your consent.
  • We do not make decisions based solely on automated processing, including profiling, that have legal or similarly significant effects on you.

5. Who we share your data with

When we buy, ship and register a car, we share your name, contact details and the identity or company details needed for the purchase, customs clearance and registration with:

  • our auction purchasing partner in the USA, when a car is bought at auction in your name;
  • a customs broker, to clear the car through customs;
  • carriers, to deliver the car;
  • homologation (conformity assessment) partners;
  • Regitra (the Lithuanian state vehicle registration enterprise), to register the car.

We also share data with public authorities where the law requires it.

We use service providers that process data on our behalf:

  • Hostinger — hosting of the carwise.lt website and email services;
  • Netlify — hosting of the inquiry questionnaire;
  • Web3Forms — forwarding inquiries by email;
  • Google — a mailbox that receives copies of inquiries (Gmail), and website visitor statistics (Google Analytics, Site Kit);
  • Anthropic — a private lead-management tool on the claude.ai platform that only Carwise can access;
  • an AI chat service provider — running the website chatbot;
  • WhatsApp (Meta) — when you message us on WhatsApp;
  • an accounting service provider (if one is used).

6. Transfers outside the European Union

When we buy a car in the USA, your data is transferred to our auction purchasing partner in the USA. Some of our service providers may also process data in the USA.

In such cases data is transferred only with the safeguards the GDPR provides for, for example where the recipient is certified under the EU-US Data Privacy Framework, where the European Commission’s standard contractual clauses have been signed, or where the transfer is necessary to perform a contract concluded at your request.

To find out more about the safeguards we use, write to paulius@carwise.lt.

7. How long we keep data

  • Inquiries that did not lead to you becoming a customer: 24 months from our last contact.
  • Contracts and related correspondence: 10 years after the contract is completed.
  • Accounting documents: 10 years, as required by Lithuanian law.
  • Chatbot logs: 24 months, unless we delete them earlier.
  • Website visitor statistics (Google Analytics): event data for 2 months, user data for 14 months.
  • Data based on consent: until you withdraw consent, unless another legal basis requires us to keep it longer.

When the period ends, we delete or anonymise the data.

8. Your rights

You have the right to:

  • know what data we hold about you and get a copy of it;
  • ask us to correct inaccurate data;
  • ask us to erase your data;
  • ask us to restrict processing;
  • receive your data in a common machine-readable format and pass it to another controller;
  • object to processing based on legitimate interest;
  • withdraw your consent at any time. This does not affect processing carried out before you withdrew it.

To use any of these rights, write to paulius@carwise.lt. We will reply within one month at the latest. We may ask you to confirm your identity.

If you believe your data is being handled improperly, you can complain to the State Data Protection Inspectorate of Lithuania (Valstybinė duomenų apsaugos inspekcija, VDAI), vdai.lrv.lt. We would still ask you to write to us first — we will try to sort it out quickly.

9. Cookies

Cookies are small files that a website stores in your browser. Strictly necessary cookies are needed for the website to work. We use analytics cookies (Google Analytics) only if you agree to it.

You can change your cookie settings in your browser.

10. Data security

We use appropriate organisational and technical measures to protect your data from unauthorised access, loss or alteration. Only people who need it for their work have access to the data.

11. Minors

Our services are intended for adults. We do not knowingly collect data from people under 18.

12. Changes to this policy

We may update this policy. The latest version is always published on carwise.lt, with the date of the last update shown at the top.