Privacy policy
This policy explains how we handle personal data on cway.lt: what we collect, why, who receives it, how long we keep it, and what you can do about it. We have tried to write it in plain language.
Last updated: 27 October 2026
1. Who is responsible for your data
The data controller is SIA Conway Container Solutions filialas (the Lithuanian branch of Conway Container Solutions SIA, Latvia), company code 305693725, Eigulių g. 2, LT-03150 Vilnius, Lietuva. We belong to the Conway group, whose head company is Conway Container Solutions SIA, Uriekstes iela 18B, Ziemeļu rajons, Rīga, LV-1005, Latvia.
For any question about personal data, or to use your rights, write to sales@cway.lt or call +370 650 61953.
2. What data we use, why, and for how long
We process data under the General Data Protection Regulation (GDPR) and the Lithuanian Law on Electronic Communications. The table lists each purpose separately.
| Purpose | Data | Legal basis | How long we keep it |
|---|---|---|---|
| Answering your request (contact and price-request forms, including the price request on the “Available containers” page) | Name, phone, e-mail; if you give them: company, company code, delivery address, message, container type and quantity; the language and the page you used | Steps at your request before a contract (GDPR Art. 6(1)(b)); our legitimate interest in answering business enquiries (Art. 6(1)(f)) | Up to 24 months after your request (in the website database it is deleted automatically; we apply the same period to the copies in our e-mail, the CRM and the e-mail service). If we start doing business together: as long as needed for the contract and as long as the law requires us to keep accounting and tax records. |
| Chat assistant: answering your questions; passing your contact details to a manager | What you type in the chat; if you give them: name, phone, e-mail, company | GDPR Art. 6(1)(b) and (f) | We do not keep the chat text. Contact details you give are kept like a form request (up to 24 months). The AI provider deletes the messages after a limited time (see section 4). |
| News and offers by e-mail (only if you tick the box) | Name, e-mail, phone | Your consent (GDPR Art. 6(1)(a)); the law on electronic communications | Until you withdraw your consent (unsubscribe link in the e-mail, or write to us). We keep a record of your consent (date and source) as long as we send you messages. |
| Statistics (Google Analytics) - only if you allow it | Pages viewed and actions, approximate location, device and browser details, a random visitor ID, where you came from | Your consent (GDPR Art. 6(1)(a)); for the cookies, the law on electronic communications | Cookies: up to 2 years (see the cookie table). Data in Google Analytics: no longer than 14 months (the longest period the tool allows). |
| Marketing (Google Ads, Meta) - only if you allow it | Ad clicks and visits (ad-click ID, campaign names, landing page, time), pages viewed, the “Lead” event when you send a request; for Google Ads measurement your e-mail and phone number in hashed form; browser identifiers; the ad-click ID attached to your request may be used to tell Google Ads that your request led to a sale | Your consent (GDPR Art. 6(1)(a)); for the cookies, the law on electronic communications | Cookies: up to 90 days (Google's IDE cookie: 13 months; see the table). The ad data attached to your request is kept with the request (up to 24 months). |
| Website security and protection against abuse | IP address (kept in the server's memory for about 10 minutes to limit abuse), technical logs of our hosting provider; and, only if every other way of saving a request fails, a temporary copy of that request in the server log so that it is not lost | Our legitimate interest in keeping the website secure (GDPR Art. 6(1)(f)) | IP address in memory: about 10 minutes. The hosting provider keeps its logs only as long as needed for security and troubleshooting. |
4. The AI chat assistant
The chat window on this site is run by an AI (artificial intelligence) assistant, not by a person. It answers questions about Conway, its products and services. It can make mistakes.
What you type is sent to our AI service provider Anthropic (Anthropic PBC, USA), which creates the answers on our behalf. We do not keep the chat text. The provider deletes the messages from its systems within 30 days at the latest (unless the law or the prevention of abuse requires longer), and under its commercial terms does not use them to train its models.
Please do not type sensitive information (for example health data or card numbers) into the chat. If you give your name and a phone number or e-mail, the assistant passes them to our sales team like a form request (see section 2). The assistant does not make decisions about you that have legal effects.
You can always use the contact form or phone us instead.
5. Who receives your data
We do not sell your data. We share it only as described here.
| Recipient | Role | What for |
|---|---|---|
| Conway Container Solutions SIA (Latvia) and the Conway group's sales system (CRM) | Group company | The sales team answers your request; requests are handled across the group |
| Microsoft (Microsoft 365 / Outlook) | Service provider (processor) | Delivers your request to our sales mailboxes by e-mail |
| Railway Corporation | Processor | Hosts the website and its database (servers in the Netherlands, EU) |
| Anthropic PBC (USA) | Processor | Creates the chat assistant's answers |
| SendPulse Inc. | Processor | E-mail service: stores the contact details of people who sent a request (kept like the request itself, up to 24 months; for people who agreed to news and offers, until they withdraw consent) and the e-mails sent through it (about your request; news and offers only if you ticked the box) |
| Google (Google Ireland Limited, Google LLC) | Also uses the data for its own purposes (separate controller); for collecting data through our website we are responsible together (joint controllers) - only if you allow statistics or marketing cookies | Google Analytics and Google Ads |
| Meta (Meta Platforms Ireland Limited, Meta Platforms, Inc.) | Same - only if you allow marketing cookies | Meta Pixel (measuring ad results) |
| Authorities and advisers | When the law requires it, or to protect our rights | Courts, tax and supervisory authorities, lawyers, auditors, IT advisers |
6. Transfers outside the EU / EEA
Some of our service providers are US companies or belong to US groups (for example Anthropic, SendPulse, Google, Meta, Microsoft, Railway). The website and its database run in the European Union (the Netherlands). When data leaves the EU / EEA, we make sure it stays protected: the transfer relies on the European Commission's adequacy decision for the EU-US Data Privacy Framework (for companies certified under it) or on the Standard Contractual Clauses approved by the European Commission. You can get a copy of these safeguards by writing to sales@cway.lt.
7. Your rights
- Access: find out what data we hold about you and get a copy.
- Rectification: ask us to correct wrong data.
- Erasure: ask us to delete your data when we no longer need it or when you have withdrawn consent.
- Restriction: ask us to pause the use of your data.
- Portability: receive the data you gave us in a common format.
- Objection: object at any time to processing that is based on our legitimate interest.
- Withdraw consent at any time: cookie choices through the “Cookie settings” link; marketing e-mails through the unsubscribe link or by writing to us. Withdrawal does not affect what was done before.
To use these rights, write to sales@cway.lt. We answer within one month. We may ask you to confirm who you are.
8. Complaints
If you think we handle your data wrongly, please tell us first so that we can put it right. You also have the right to complain to a supervisory authority: the State Data Protection Inspectorate of Lithuania (Valstybinė duomenų apsaugos inspekcija, L. Sapiegos g. 17, LT-10312 Vilnius, https://vdai.lrv.lt), or the authority of the EU country where you live or work.
9. Do you have to give us your data? Automated decisions
To answer a request we need your name, phone and e-mail; without them we cannot handle the request. Everything else is optional. Statistics and marketing cookies and marketing e-mails are voluntary: the website works fully without them.
We do not take decisions about you by automated means alone that have legal or similarly significant effects. Marketing cookies (if you allow them) are used for advertising, for example to show our ads to people who visited the site; this has no legal effect on you.
10. Security
We protect your data with measures suited to the risk: encrypted connections (HTTPS), restricted access for staff, and hosting in the European Union.
11. Changes
We may update this policy. The date of the last update is shown at the top. If we change the services that use cookies, the cookie banner asks for your choice again.