GDPR Compliant

Privacy Policy

Last updated: 15 January 2026

This Privacy Policy explains how AFKzona Group MB collects, uses and protects your personal data when you use the Mano Atliekos platform, in accordance with GDPR (EU) 2016/679 and the Law of the Republic of Lithuania on Legal Protection of Personal Data.

1. Data Controller

The controller of your personal data is:

AFKzona Group MB

Vytauto g. 71, Kretinga, LT-97141, Lithuania

Email: info@manoatliekos.lt

No Data Protection Officer (DPO) has been appointed, as the company does not meet the mandatory appointment thresholds under GDPR Article 37 (small and medium enterprise, no large-scale processing of special category data). For privacy enquiries please contact us directly at info@manoatliekos.lt.

2. Data Categories and Legal Bases

We process the following categories of personal data for the purposes and on the legal bases set out below:

Account creation and management

Data: Email address, hashed password, saved addresses, notification preferences

Legal basis: GDPR Art. 6(1)(b) — performance of a contract

Anonymous schedule lookups

Data: Location name or address (not stored), session logs

Legal basis: GDPR Art. 6(1)(f) — legitimate interest (providing the service to unauthenticated users)

Push and email notifications

Data: Email address, device notification token

Legal basis: GDPR Art. 6(1)(a) — consent (withdrawable at any time)

Support requests and mistake reports

Data: Email address, message content, technical context

Legal basis: GDPR Art. 6(1)(b) (contract performance) and Art. 6(1)(f) (legitimate interest — service quality improvement)

Essential cookie functions

Data: Session identifier, authentication state

Legal basis: GDPR Art. 6(1)(f) — legitimate interest (secure sign-in)

Analytics and functional cookies

Data: Visit statistics, UI preferences

Legal basis: GDPR Art. 6(1)(a) — consent (managed via cookie banner)

3. Recipients of Personal Data

Your data may be shared with the following third parties only to the extent necessary to deliver the service:

Hosting provider — an EU-based infrastructure company acting as a data processor under a GDPR Art. 28 data processing agreement.
Email delivery provider — used solely for transactional notifications; data is not shared for marketing purposes.
Your data is never sold, rented, or otherwise transferred to third parties for commercial gain.

Third-country transfers: No transfers outside the EEA are currently intended. Should such transfers become necessary, European Commission Standard Contractual Clauses (SCCs) under GDPR Art. 46(2)(c) will apply.

4. Data Retention

Account data (email, password, addresses, preferences)
Retained until account deletion + 1 year (backup purge cycle).
Anonymised usage logs
90 days from the date of recording.
Support and mistake-report correspondence
2 years from the last message in the thread.
Consent records (notifications, analytics)
Until consent is withdrawn + 1 year for evidentiary purposes.

5. Your Rights

Under GDPR Articles 15–22 you have the following rights:

Right of access (Art. 15) — obtain confirmation of whether your data is being processed and receive a copy.
Right to rectification (Art. 16) — correct inaccurate or complete incomplete data.
Right to erasure / "right to be forgotten" (Art. 17) — request deletion when data is no longer necessary or consent is withdrawn.
Right to restriction of processing (Art. 18) — request that processing is paused during a dispute or verification.
Right to data portability (Art. 20) — receive your data in a structured, machine-readable format (where processing is based on consent or contract).
Right to object (Art. 21) — object to processing based on legitimate interests.
Right to withdraw consent — at any time, without affecting the lawfulness of processing carried out prior to withdrawal.

Submit rights requests by email to info@manoatliekos.lt. We will respond within 30 days of receiving your request (GDPR Art. 12(3)).

6. Right to Lodge a Complaint

If you believe your data is being processed in breach of the GDPR, you have the right to lodge a complaint with the competent supervisory authority:

State Data Protection Inspectorate (VDAI)

L. Sapiegos g. 17, LT-10312 Vilnius, Lithuania

Email: ada@ada.lt

Website: www.vdai.lrv.lt

We always welcome the opportunity to resolve concerns directly — please contact us before approaching the VDAI.

7. Cookies

Mano Atliekos uses the following categories of cookies:

Essential cookies — required for secure sign-in and session management. Their use is based on legitimate interest and does not require consent.
Analytics cookies — help us understand how the platform is used so we can improve it. Only activated upon your consent.
Functional cookies — remember your preferences (e.g., language). Only activated upon your consent.

Cookie preferences can be managed via the cookie banner shown on first visit and through your browser settings.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by a prominent notice on the platform at least 14 days before they take effect. Continued use of the platform after changes take effect constitutes acknowledgement of the updated policy. The current version is always available at manoatliekos.lt/privacy.