Privacy notice · 31 October 2026 · English

Privacy

Controller: AUROWE UAB (PVDIS). Contact: sales@pvdis.com.

Trade account registration

When you register for trade prices at pvdis.com/register/, AUROWE UAB (VAT LT100019678617), which operates PVDIS, collects your name, company, VAT number, country and business email and, if you give them, your WhatsApp number, product interests and rough quantity. We also record the page and campaign link (UTM tags) that brought you to the form and the time you sent it. Your account and access to trade prices are set up automatically when you register. We also check your VAT number automatically in the European Commission's VIES system; if the check fails or VIES is unavailable, you still get access, and the account is only marked for us to review later. We may review registrations later and close or block an account that does not belong to a trade buyer or is misused; if we do, we tell you by email and you can contact us at sales@pvdis.com. We use these details to set up your account, give you access to our prices, review the list of registered companies and answer your enquiries (steps you ask us to take before a contract, Art. 6(1)(b) GDPR, and our legitimate interest in handling trade enquiries and keeping the form free of abuse, Art. 6(1)(f) GDPR). We send you marketing offers by email or WhatsApp only if you tick the box for it on the form; you can withdraw that at any time with the link in every message or by writing to sales@pvdis.com. We contact you on WhatsApp only if you ticked the WhatsApp box. Apart from sign-in links and messages about your registration, quotes and orders, we send no automatic emails. To protect the form, we keep a shortened one-way code (hash) of your IP address, not the address itself, and your browser type, and use them for rate limiting; this hash is still personal data. If we close or block your account, we delete your details 6 months after that, except a short record (company name, VAT number and a one-way code of your email) that we keep for as long as the block applies, so the account is not simply opened again. Otherwise we keep them for up to 24 months after our last contact with you, unless you become a customer, in which case the customer-portal retention below applies. The IP hash and browser type are deleted after 12 months.

Customer portal

Once you have registered, you can sign in to the PVDIS customer portal with a one-time sign-in link sent to your registered business email. No password is stored. To run the portal, AUROWE UAB processes: your business email and registration details; a hashed copy of each sign-in link (valid 15 minutes, single use, deleted 24 hours after it expires); a session record while you are signed in (a random session ID stored in hashed form, the time of sign-in and last activity, a shortened hash of your IP address and your browser's user-agent string), which ends when you sign out or after 7 days without activity; the quote requests you send (products, number of containers, timeframe, your note) and their status; and the invoices we make available to you. We also keep security logs of sign-in attempts, quote submissions and invoice downloads, using hashed email and IP values, for 12 months. We use this data to provide the portal, handle your quote requests and orders, make your invoices available and keep the portal secure. Legal bases: performance of a contract and steps before a contract (Art. 6(1)(b) GDPR); our legitimate interest in keeping the portal secure (Art. 6(1)(f) GDPR); and our legal duty to issue and keep invoices and accounting records (Art. 6(1)(c) GDPR, under Lithuanian VAT and accounting law). We keep quote requests that do not lead to an order for 24 months after the last activity; quotes that lead to an order, and invoices, are kept with our accounting records for 10 years.

Cookies: the portal uses only cookies needed to run it, so it does not ask for cookie consent: a session cookie (keeps you signed in; ends at sign-out or after 7 days without activity), a security (anti-forgery) cookie for your session, and a language cookie that remembers the language you chose (12 months). We use no analytics or advertising cookies in the portal.

Recipients: we share portal and registration data only as needed with our hosting provider Hostinger, our email hosting, our accountant, and, for an order, the carrier and the module supplier that must handle the delivery. We do not sell your data or give it to suppliers for their own marketing.

Where the data is stored

Our website, registration and portal data are hosted by Hostinger International Ltd (61 Lordou Vironos str., 6023 Larnaca, Cyprus) on servers in Boston, Massachusetts, USA, so this data is stored in the USA. Our sales mailbox is hosted by Hostinger in France and Germany (EU). The transfer to the USA is covered by the European Commission's Standard Contractual Clauses (Decision 2021/914), which are part of Hostinger's Data Processing Addendum (hostinger.com/legal/dpa). Hostinger is not certified under the EU–U.S. Data Privacy Framework, so we rely on these clauses; some of its sub-processors in the USA, such as Cloudflare, Inc., are certified. We have assessed this transfer and keep that assessment on file. You can ask us for a copy of the safeguards at sales@pvdis.com.

Your rights

Access, correction, deletion, restriction, objection (including at any time to direct marketing) and data portability; email sales@pvdis.com. We answer within one month. You can complain to the State Data Protection Inspectorate of Lithuania (VDAI, vdai.lrv.lt).

Visit statistics

Our public pages count visits with a small cookie-free counter that runs on our own server. It sets no cookies, uses no browser storage and stores no IP address, browser details or other identifier; it keeps only daily totals of the page visited, the name of the website you came from and campaign tags (UTM) in the link. It does not run when your browser sends Do Not Track or Global Privacy Control, and it does not run in the customer portal or the P-Man game. No third-party analytics or advertising tools are used.

Update emails

If you sign up for our stock and price-list updates for installers, AUROWE UAB stores your email address, the website and language you used, the version of the consent text you agreed to, the times you signed up, confirmed or unsubscribed, and a coded form of your IP address (we do not keep the address itself). We use this only to send you the updates you asked for and to be able to show that you agreed. The legal basis is your consent (Art. 6(1)(a) GDPR).

We first send you one email with a confirmation link. Nothing else is sent until you click it. If you do not confirm within 7 days, we delete your address and the other sign-up details. Every email has a one-click unsubscribe link, and you can also write to sales@pvdis.com. After you unsubscribe we keep only a short record (email, dates, consent version) so we can prove it and make sure we do not write to you again, for up to 5 years after you unsubscribe; if you ask, we delete it sooner (we then cannot block you from being added again by mistake). The data stays on our own web hosting described above under “Where the data is stored”. We do not use a newsletter service. Only our hosting provider stores the data for us, and we never sell or share your address for anyone else’s use.

You can ask us at any time for a copy of your data (also in a reusable format), to correct it, to delete it or to limit its use, and you can withdraw your consent at any time; withdrawal does not affect emails sent before. You can also complain to a data protection authority, for example the State Data Protection Inspectorate of Lithuania (VDAI), where AUROWE UAB is registered.

P-Man game

The P-Man game, its scoreboard and update sign-ups have their own notice: pvdis.com/game/privacy.html.

LinkedIn posts

Our “From our LinkedIn” section shows post cards (text, dates, pictures and figures) from our own server. Nothing on that page loads from LinkedIn, and LinkedIn sets no cookies there. If you follow a “View on LinkedIn” link, you leave our site, and LinkedIn (LinkedIn Ireland Unlimited Company) processes your data under its own privacy policy.