Safe delivery of wooden products across Europe within 15 working days.
Read more
Last updated: 06-10-2026
This Privacy and Cookie Policy explains how UAB “Timbela ir Ko” (“Timbela”, “we”, “us” or “our”) collects and uses personal data when you visit timbela.com, purchase our products, create an account, contact us or subscribe to our marketing communications.
It also explains how we use cookies and similar technologies and how you can manage your choices.
Visiting our website or reading this policy does not, by itself, constitute consent to marketing communications or non-essential tracking.
The controller of the personal data described in this policy is:
UAB “Timbela ir Ko”
Company registration number: 135499197
Address: Veterinarų g. 48, Biruliškių k., LT-54469 Kauno r., Lithuania
Email: sale@timbela.com
Telephone: +370 689 68031
Website: www.timbela.com
You can contact us using these details with questions about your personal data or to exercise your data protection rights.
Depending on your interaction with us, we may process:
Cookie identifiers and other online identifiers may constitute personal data even when they do not directly reveal your name.
We collect information directly from you, automatically through the website and, where relevant, from payment providers, delivery partners and marketplaces through which you purchase our products.
We use your contact, order and payment-related information to process purchases, arrange delivery, provide order updates and handle returns or refunds.
The legal basis is the performance of a contract with you or taking steps at your request before entering into a contract, under Article 6(1)(b) GDPR.
Where you represent a business customer, we process your professional contact details based on our legitimate interest in managing that business relationship, under Article 6(1)(f) GDPR.
Information required to complete an order is identified during checkout. Without that information, we may be unable to process your purchase or arrange delivery.
If you create an account, we use your account information to provide and administer that service.
The legal basis is the performance of the account service agreement under Article 6(1)(b) GDPR. Protecting accounts against unauthorised access is based on our legitimate interest in maintaining security under Article 6(1)(f) GDPR.
We use relevant information to answer questions, resolve complaints, assess product issues and provide after-sales support.
Depending on the request, the legal basis is taking pre-contractual steps or performing a contract under Article 6(1)(b) GDPR, complying with consumer protection obligations under Article 6(1)(c) GDPR, or our legitimate interest in resolving disputes and establishing, exercising or defending legal claims under Article 6(1)(f) GDPR.
We process transaction and invoice information to meet applicable accounting, tax and other statutory requirements.
The legal basis is compliance with legal obligations under Article 6(1)(c) GDPR.
We use relevant technical information to investigate faults, prevent unauthorised access and detect misuse or fraud.
The legal basis is our legitimate interest in protecting our website, customers and business under Article 6(1)(f) GDPR. This does not replace any consent required for non-essential cookies or similar technologies.
With your consent, we use non-essential analytics and advertising technologies to understand website usage, improve the shopping experience, measure campaigns and personalise advertising.
The legal basis for the related personal data processing is consent under Article 6(1)(a) GDPR.
When you subscribe, we use your email address and relevant preferences to send the marketing communications you have requested.
You do not need to subscribe to purchase our products.
You can withdraw your consent at any time by using the unsubscribe link in a marketing email or contacting sale@timbela.com. Withdrawing consent does not affect processing lawfully carried out before withdrawal.
Unsubscribing from marketing does not prevent us from sending information necessary to fulfil your order, such as payment or delivery updates.
We retain appropriate consent records and limited unsubscribe information to demonstrate compliance and respect your preferences.
Where necessary for the purposes described above, we disclose relevant information to:
Providers processing personal data on our behalf are subject to appropriate contractual data protection obligations.
Some recipients, such as payment providers or marketplaces, may act as independent controllers for their own processing. Their privacy notices explain those activities.
Some service providers may process personal data outside the European Economic Area, including through remote access from another country.
Where this occurs, we use an applicable GDPR transfer mechanism, such as a European Commission adequacy decision or Standard Contractual Clauses, together with additional safeguards where necessary.
You can contact sale@timbela.com for information about the applicable safeguards and how to obtain a copy, subject to protection of confidential information and other people’s rights.
We retain personal data for the period needed for its purpose, taking account of legal obligations, warranty commitments and applicable limitation periods.
Different parts of the same order record may have different retention periods.
Where information is needed for an ongoing dispute or a specific legal obligation, we retain the necessary part until that requirement ends.
Cookies are small files stored on your device. We may also use pixels, local storage and other technologies that store information on, or access information from, your device.
These support services you request, such as maintaining a shopping basket, account authentication and remembering your cookie choices.
Consent is not required where the technology meets the legal conditions for the strictly necessary exemption.
These remember optional preferences or enable additional features. Where they are not strictly necessary, we request consent before using them.
These help us understand website visits, navigation and interactions so that we can improve the website.
These help measure advertising performance, personalise advertisements and recognise previous website visitors for remarketing.
Non-essential technologies are used only after the relevant consent has been given.
Our cookie controls allow you to accept all non-essential categories, reject them or choose categories individually. Non-essential categories are not selected in advance.
You can continue shopping without accepting non-essential tracking.
You can change or withdraw your consent through “Cookie settings” on the website www.timbela.com. Withdrawal stops the relevant consent-based tracking and does not affect processing lawfully carried out before withdrawal.
You can also delete or block cookies in your browser. Blocking all cookies may prevent essential functions, such as the shopping basket or login, from working correctly.
The register provides the name, provider, domain, purpose, category and lifetime of each cookie or similar technology, together with whether consent is required.
Google Analytics helps us analyse website usage. Google Ads technologies help measure advertising performance and support remarketing.
Depending on the enabled features and your consent choices, processing may include page views, interactions, purchase events and online identifiers.
Google Privacy Policy: https://policies.google.com/privacy
Meta technologies help measure campaign results and support personalised advertising and remarketing, subject to your consent where required.
Meta Privacy Policy: https://www.facebook.com/privacy/policy/
We use Microsoft Clarity to understand website interactions through behavioural analysis, heatmaps and session replay. Microsoft Advertising supports advertising measurement and remarketing.
Relevant data may include page views, clicks, scrolling, device information and online identifiers.
Non-essential tracking is subject to your consent. Simply visiting or continuing to browse our website does not constitute that consent.
Microsoft Privacy Statement: https://privacy.microsoft.com/privacystatement
Our website may include videos or other content supplied by third parties, such as YouTube. Loading that content may disclose information to the provider and activate its technologies.
Where consent is required, the content or associated non-essential tracking is activated only after the relevant choice has been made. The provider’s privacy notice explains its own processing.
Subject to the conditions in the GDPR, you may:
These rights are not limited to registered users or people who have left comments.
Contact sale@timbela.com to make a request. Where reasonably necessary, we may ask for proportionate information to verify your identity.
We normally respond within one month. Where permitted because of complexity or the number of requests, we may extend this by two further months and explain the extension within the first month.
Requests are generally free of charge. Any fee or refusal will be limited to circumstances allowed by the GDPR.
You may complain to the Lithuanian State Data Protection Inspectorate, https://vdai.lrv.lt, or the competent authority in your place of habitual residence, work or the alleged infringement.
We apply technical and organisational measures appropriate to the risks, including access controls and arrangements for handling security incidents.
Please protect your account credentials and contact us if you suspect unauthorised use.
We update this policy when our processing activities or applicable requirements change. The current version and its update date are published on this page.
Where a change requires new consent, updating this policy does not replace the need to obtain it.
