Privacy policy
How UAB Angema processes the data of clients, partners, website visitors and others.
Updated 11 October 2026
1. General provisions
This privacy policy explains how UAB Angema processes personal data when we provide construction services, communicate with clients, partners and suppliers, recruit employees, and run the angema.lt website and our LinkedIn company page.
We process data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR), the Law on Legal Protection of Personal Data of the Republic of Lithuania and other legislation.
This policy does not apply to other websites we link to. We recommend reading their privacy rules.
2. Who we are
The controller of your personal data is:
- UAB Angema
- Company code 306283273
- Registered and office address: Panerių g. 51-311, Vilnius
- Email for personal data matters info@angema.lt
- Tel. +370 667 74707
3. How we obtain your personal data
- from you – when you send an enquiry, enter into a contract, send a CV or communicate with us;
- automatically – when you browse our website (see our cookie policy);
- from third parties – from clients, general contractors, subcontractors and suppliers (e.g. contact details of their employees or representatives), and from public registers.
If you provide other people’s data (e.g. your employees’), you are responsible for having the right to share it and for informing those people.
4. What personal data we process
| Purpose | Data | Retention period | Legal basis |
|---|---|---|---|
| Concluding and performing construction and service contracts | Name, position, contact details and signature of the client or its representative; contract and payment data | Term of the contract plus 10 years after it ends | Conclusion and performance of a contract, legitimate interest (GDPR Art. 6(1)(b), (f)) |
| Warranty service | Client and project data, claims and defect information | 5 years from handover; 10 years for hidden defects; 20 years for deliberately concealed defects | Legal obligation under the Civil Code (GDPR Art. 6(1)(c)) |
| Ensuring construction quality and safety | Name, company and qualifications of people working on site; induction and site log records | Until the building is accepted for use and as required by construction and health and safety law | Legal obligation under the Law on Construction, legitimate interest (GDPR Art. 6(1)(c), (f)) |
| Handling enquiries and quotes | Name, company, email, phone, content of the enquiry | Period of communication plus 1 year; if a contract is concluded – as for contract data | Steps prior to entering into a contract, legitimate interest (GDPR Art. 6(1)(b), (f)) |
| Concluding and performing subcontracting and supply contracts | Name, position and contact details of representatives and employees of subcontractors and suppliers | Term of the contract plus 10 years after it ends | Performance of a contract, legitimate interest (GDPR Art. 6(1)(b), (f)) |
| Payment administration, accounting and debt management | Company details, invoice, payment and debt data | As required by accounting and tax law; otherwise 10 years after the contract ends | Legal obligation, legitimate interest (GDPR Art. 6(1)(c), (f)) |
| Handling claims and disputes | Data of the parties to a claim or dispute, correspondence, evidence | Out of court – 3 years after closure; in court – 10 years after the judgment becomes final | Legal obligation, legitimate interest (GDPR Art. 6(1)(c), (f)) |
| Website administration | Cookies and technical data (see our cookie policy) | According to cookie expiry, no longer than 2 years | Consent, legitimate interest (GDPR Art. 6(1)(a), (f)) |
| Recruitment | Candidate data | See our candidate privacy policy | |
When the retention period ends, we delete or anonymise the data. We keep it longer only when needed for a dispute or an investigation required by law.
5. Our social media account
We have a company page on LinkedIn. When you visit, comment on or message it, you share data with both us and the platform operator. We only see what your account privacy settings allow. LinkedIn processes data in accordance with its own privacy policy.
6. Our principles
We process data lawfully, fairly and transparently, only for specific purposes and no more than necessary; we keep it accurate, store it no longer than needed and keep it secure. Only employees who need the data for their work have access to it.
7. Who we share your personal data with
We share data only as far as necessary for a specific purpose:
- data processors who provide us with services: accounting, IT and email, website hosting and enquiry form (Web3Forms), legal, debt collection and courier services. They process data only on our instructions;
- clients, general contractors and subcontractors – when necessary to carry out construction works;
- public authorities, courts and law enforcement – when required by law;
- auditors and certification bodies – when assessing our management systems (ISO 9001, 14001, 45001);
- potential acquirers of the business – in the event of a reorganisation or transfer of the business.
If data is transferred outside the European Economic Area (e.g. to Google or Web3Forms service providers in the USA), we do so only on the basis of a European Commission adequacy decision (EU–US Data Privacy Framework) or standard contractual clauses approved by the European Commission.
8. Your rights
You have the right to:
- access your personal data and obtain a copy;
- request rectification of inaccurate data or completion of incomplete data;
- request erasure of your data (the “right to be forgotten”) where there is no longer a basis for processing it;
- request restriction of processing;
- object to processing based on legitimate interest;
- receive your data in a structured, machine-readable format and transfer it to another controller;
- object to being subject to decisions based solely on automated processing. We do not use such decisions or profiling;
- withdraw your consent at any time – this does not affect the lawfulness of processing before withdrawal;
- lodge a complaint with the State Data Protection Inspectorate (L. Sapiegos g. 17, LT-10312 Vilnius, vdai.lrv.lt).
Please send requests by email to info@angema.lt. We handle requests free of charge and respond within 1 month. For complex or numerous requests, this period may be extended by a further 2 months – we will let you know if so.
Before acting on a request, we may ask you to confirm your identity. We may refuse manifestly unfounded or excessive requests, stating the reasons.
9. Direct marketing
We do not send newsletters or other marketing messages. If we start doing so in the future, it will only be with your consent and every message will include an option to unsubscribe.
10. How we protect your personal data
We apply organisational and technical measures to protect personal data against accidental or unlawful destruction, alteration, disclosure or access: we limit access to employees who need the data for their work, and use password-protected systems, antivirus software and backups. Our employees are bound by confidentiality.
11. How to contact us
For any personal data questions, email info@angema.lt or call +370 667 74707.
12. Final provisions
We may update this policy. We will announce significant changes on the website. The current version is always published on this page.
Related documents: privacy notice, candidate privacy policy, cookie policy.