Privacy
policy

Effective date: 17 September 2026

This policy explains what personal data is processed when you use this website, why, for how long, and what rights you have. It applies to the Stella Space website and to the correspondence that starts from it.

‍

1. Who is responsible for your data

The data controller is UAB Karoserija, which makes and sells Stella Space under the Stella Works® name.

• Address: Televizorių st. 4-17, 78137 Šiauliai, Lithuania
• Email: info@stellaworks.eu
• Phone: +370 686 51569

Write to the email address above about anything in this policy, or to use any of the rights described in section 8.

‍

2. What we collect, and when

We only hold personal data that you give us yourself, plus the technical data every web server needs in order to deliver a page.

1. The enquiry form

• Your name, company, email address, the country you operate in (optional) and your message.

2. The document request

• The email address you enter to receive the specification sheet and the technical drawings. The documents are sent to that address, and we receive a note that they were sent.

3. The newsletter field

• The email address you enter to receive product news and availability.

4. Correspondence

• If you email or call us, we keep the correspondence and the contact details you used.

5. Technical data

• When your browser requests a page, our hosting provider processes your IP address, the browser and device type, the page requested and the time of the request. This is used to deliver the site and to protect it against abuse. We do not combine it with anything else and we do not use it to identify you.

We do not ask for, and ask you not to send, special categories of data such as health information.

‍

3. Cookies and tracking

This website sets no cookies and uses no analytics, advertising or social media tracking. Fonts, images and video are served from our own site, so viewing a page does not send your data to any third party other than our hosting provider.

The site links to our Facebook and Instagram profiles and to Google Maps. These are ordinary links: nothing is sent to those services unless you follow one, and from then on their own privacy policies apply.

‍

4. Why we use your data, and on what legal basis

• To answer your enquiry, prepare a configuration or a quotation and, if you order, to conclude and carry out the contract: steps taken at your request before entering into a contract, and performance of that contract (Article 6(1)(b) GDPR).
• To send you the documents you asked for and to follow up on that request: performance of your request and our legitimate interest in responding to people who have shown an interest in the product (Article 6(1)(b) and (f) GDPR). You can object to a follow-up at any time and we will stop.
• To send you product news: your consent (Article 6(1)(a) GDPR), which you can withdraw at any time by replying to any newsletter or writing to info@stellaworks.eu. Withdrawing consent does not affect what was sent before.
• To keep the website available and secure: our legitimate interest in running a safe and working site (Article 6(1)(f) GDPR).
• To keep accounting and tax records where an enquiry becomes an order: a legal obligation (Article 6(1)(c) GDPR).

You are not obliged to give us any data. Without an email address, however, we cannot reply to you or send the documents.

We make no decisions about you by automated means and do no profiling.

‍

5. Who receives your data

We do not sell personal data or share it for anyone else’s marketing. It is handled by our own staff and by the service providers that process it on our behalf, under contract and on our instructions:

• Cloudflare, Inc., which hosts this website and carries the form submissions to our mailbox.
• The provider that hosts our company email, where enquiries and requests arrive and are stored.

If a sale requires it, we pass the necessary details to the parties involved in delivering it, such as carriers, and to authorities where the law requires us to.

Cloudflare operates a global network, so data may be processed outside the European Economic Area, including in the United States. Such transfers are covered by the EU–US Data Privacy Framework, under which Cloudflare is certified, and by the European Commission’s standard contractual clauses.

‍

6. How long we keep it

• Enquiries, document requests and the correspondence that follows: two years after our last contact with you.
• Newsletter addresses: until you unsubscribe or withdraw your consent.
• Where an enquiry leads to an order: contracts, invoices and the related correspondence are kept for ten years, as Lithuanian accounting and tax law requires.
• Technical data: our hosting provider keeps request logs for a short period, as a rule no more than a week, unless longer is needed to investigate an attack.

After these periods the data is deleted or made anonymous.

‍

7. How we protect it

The website is served only over an encrypted connection (HTTPS), and the forms send your data over encrypted connections to our mailbox. Access to that mailbox is limited to the people who deal with enquiries. The website itself stores none of the data you submit: it passes each submission on by email and keeps no copy.

‍

8. Your rights

Under the GDPR you have the right to:

• ask whether we hold data about you and receive a copy of it;
• have inaccurate data corrected and incomplete data completed;
• have your data erased where there is no longer a reason for us to keep it;
• have its processing restricted in the cases the law provides for;
• object to processing that is based on our legitimate interests, including any follow-up to a document request;
• receive the data you gave us in a commonly used, machine-readable format, or have it sent to another controller;
• withdraw a consent you have given, at any time.

To use any of these rights, write to info@stellaworks.eu. We may ask you to confirm your identity. We reply within one month; if a request is complex the law allows this to be extended by two further months, and we will tell you if that is the case. Exercising your rights is free of charge.

‍

9. Complaints

If you believe we have handled your data unlawfully, please tell us first so that we can put it right. You also have the right to lodge a complaint with the Lithuanian supervisory authority, the State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija), L. Sapiegos st. 17, 10312 Vilnius, Lithuania, ada@ada.lt, vdai.lrv.lt, or with the authority of the EU country where you live or work.

‍

10. Children

This website presents a commercial product to businesses. It is not directed at children and we do not knowingly collect their data.

‍

11. Changes to this policy

We update this policy when the website or the way we handle data changes. The version published on this page, with its effective date at the top, is the one in force.