Who handles your information?
This notice concerns cepuleauto.com and the Čepule Auto service operated under the trading name Čepule Brand Architects, Lithuanian individual-activity certificate No. 1507890. Contact: art@cepule.com, +370 600 58921, Turniškių g. 7, LT-10104 Vilnius, Lithuania. The provider page explains the remaining operator-identification check. This is a draft notice for owner and legal review.
When you browse the website
The website serves its fonts, artwork and scripts from the site itself. It does not add advertising pixels, session replay, Google Analytics or a marketing subscription. Hosting and security services necessarily receive technical request information such as IP address, requested URL, browser information and request time to deliver and protect the pages. This is separate from the contents you type into the enquiry helper.
The email enquiry helper
Name, reply email, car make/model/year, selected package and any optional asking price, advert URL or notes remain in page memory while you prepare your enquiry. The form does not upload those entries, create a server-side lead, store them in browser storage or send a message automatically. Copying or downloading saves a copy on your own device. Reloading the page clears the unsent form state.
When you send an email
Open email to send passes the draft to your chosen email app. You review and send it using your email provider. Once sent to art@cepule.com, the message and its normal email metadata are received through the business mailbox. Supply only information needed to discuss the service. Do not send identity documents, bank details, personal identity numbers or unrelated information about other people.
Purposes and legal grounds
The proposed processing record distinguishes responding to a requested quote and preparing or performing a service agreement (GDPR Article 6(1)(b)); records required by applicable accounting or other law (Article 6(1)(c)); and proportionate website security, administration and legal-claim handling (Article 6(1)(f)). Legitimate interests are secure service delivery and establishing or defending rights. No compulsory marketing consent is required to enquire. These operating purposes and grounds must be confirmed by the provider before this notice is final.
Service providers and recipients
Current services are the Sites hosting platform with Cloudflare delivery/security, and the Google-connected mailbox used for art@cepule.com. Your chosen email provider also handles a message you send. People assigned to handle your enquiry or deliver an agreed service receive only the details needed for that task. No purchaser contact, vehicle report or personal file is shared with an inspector or another provider without an appropriate purpose and agreed arrangement. The exact contracting entities, access permissions and processing agreements still need the owner’s confirmation.
International processing
Hosting, security and email services may process technical information or messages in the EEA and elsewhere. We do not claim that all data stays in Lithuania or the EU. The provider must identify the actual account entities, locations and applicable transfer arrangements before the final notice is approved. This draft does not assert that an unverified transfer mechanism or data-processing agreement is already in place.
How long information is kept
Enquiry correspondence that does not become client work is deleted within six months of the last meaningful contact, unless an active discussion, specific legal obligation or legal claim justifies keeping the relevant records longer. This is a manual retention policy, not an automatic email-deletion feature. Agreement, invoice and complaint records are kept for the applicable legal periods or a documented legal-claim need; those statutory periods still need confirmation with the provider’s accountant before final approval.
Your rights and questions
You can request access, correction, erasure, restriction or portability where applicable, and object where processing is based on legitimate interests. Where processing relies on consent, you can withdraw it without affecting earlier lawful processing. Contact art@cepule.com. Requests normally receive a response within one month, with lawful extensions explained where necessary. You can complain to Lithuania’s State Data Protection Inspectorate (VDAI) at vdai.lrv.lt. No automated decision-making with legal or similarly significant effects is implemented on this website.