Last updated: September 14, 2026Privacy Policy Last updated: September 11, 2026
This Privacy Policy explains how MB “Tempus vernum” (“we”, “us”, or “our”) collects, uses, stores, and protects your personal data when you use our ordering portal at
order.paroles.lt (hereinafter — the “Portal”), and place orders with us. We comply with the requirements of the EU General Data Protection Regulation (GDPR) and other applicable data protection laws.
- Who is the data controller? The controller of your personal data is:
- Company name: MB Tempus vernum
- Registration number: 303280927
- Legal address: J. Savickio g. 4-7, Vilnius
- Email for data inquiries: info@paroles.lt
2. What personal data do we collect? We collect only the information necessary to provide our services. This may include:
- Identity data: First name, last name, date of birth.
- Contact data: Email address, phone number.
- Delivery data: Delivery address, postal code, or the identifier of the parcel locker you select.
- Financial data: We do not collect or store your payment card details. All payments are processed through secure payment systems (e.g., SumUp, Swedbank AB, Revolut). When paying by card, we only receive the payment status and transaction number; when paying by bank transfer, we see the standard details provided by the bank.
- Company data: If you place an order on behalf of a company — the company name, registration number and VAT number. The VAT number is verified against the European Commission’s VIES database in order to establish whether the reverse charge applies to the invoice.
- Technical data: IP address, browser type, cookie information (more details in Section 8).
- Documents: Necessary for translation or for ordering additional services. For criminal record certificates this is a scan or photograph of a passport or residence permit (JPEG, PNG, HEIC or PDF, up to 8 MB per file), which the Lithuanian authorities require in order to issue the certificate.
3. Data collected through the ordering Portal
Criminal record certificates are ordered through a separate portal at order.paroles.lt. One order may cover several people (up to ten). In addition to the data listed above, we collect:
- For each person the certificate is requested for: first name and surname in Latin script as they appear in the identity document, date of birth, and the scan of the identity document.
- The country in which the certificate will be used.
- Whether the person is a citizen of the Republic of Lithuania — this determines whether the multilingual international certificate may be issued.
- An optional free-text comment, if you choose to leave one.
- If delivery of the original document is ordered: the recipient’s name, telephone number, email address, and either the postal address or the parcel locker.
What the Portal deliberately does not record: we do not store the IP address from which you confirm your order details. The Portal is closed to search engines. The secret link we send you by email does not reveal your uploaded document, telephone number or address to anyone who opens it.
4. Why do we use your data and on what basis? According to GDPR, we process your data only when there is a legal basis:
- Performance of a contract (Order processing): We need your name, address, contact details, and copies of documents to process your order, deliver it, and contact you regarding delivery (Article 6(1)(b) GDPR).
- Your consent (Marketing): If you subscribed to our newsletter, we will send you news and promotions. You can withdraw your consent at any time (Article 6(1)(a) GDPR).
- Legitimate interests (Support and improvement): To respond to your support inquiries, protect the Website against fraud, and improve service quality (Article 6(1)(f) GDPR).
5. Legal obligations: We may store order data for tax and accounting reporting as required by law (Article 6(1)(c) GDPR).
6. Who do we share your data with? We do not sell your personal data to third parties. However, to fulfill orders, we may share certain data with our trusted partners:
- Delivery services: DHL, FedEx, Lietuvos paštas / LP Express, local post, and other couriers used to send documents at your request. They receive the recipient’s name, telephone number, and either the delivery address or the parcel locker.
- Payment gateways: SumUp, Swedbank, Revolut, PayPal.
- IT service providers: Hosting and email service providers that ensure the operation of our Website and Portal. For the Portal these are: Railway (hosting of the Portal and its database), Salesforce (customer relationship management and storage of uploaded identity documents), Resend (sending order confirmations, invoices, reminders and tracking numbers), Cloudflare (daily backup copies of the order database), and Better Stack (availability monitoring — it receives no personal data at all, reading only a technical address that reports whether the Portal is operating).
- Institutions: Depending on your order – the Ministry of the Interior of Lithuania (for ordering certificates on your behalf), Civil Registry Offices of Lithuania (for ordering official records/certificates on your behalf), notaries, and the Dokobit system (for certifying translations). For orders placed on behalf of a company, the company’s VAT number is submitted to the European Commission’s VIES database for verification. The application submitted in order to obtain a criminal record certificate contains the name, surname, date of birth and country of destination of each person the certificate is requested for.
- Translators and partner agencies: To fulfill your translation order.
All our partners are obliged to observe strict security measures and comply with GDPR requirements.
7. How long do we keep your data? We store your data only for as long as necessary for the purposes outlined in this Policy:
- Order data is stored for 10 years to comply with tax legislation. This includes invoices and credit notes.
- Data for ordering certificates and records (personal documents) is stored for up to 30 working days, after which the documents are deleted automatically. For orders placed through the Portal this period runs from the date of payment; the order record itself remains, marked to show that the documents have been deleted.
- Orders that were not paid for, and orders that were cancelled, are deleted together with any uploaded documents after the same period.
- Links to an order sent by email stop working 14 days after the order is created; the link used to confirm your order details stops working after 7 days.
- Backup copies: we keep the last 30 daily copies of the Portal database. An order deleted at your request may therefore remain in a backup copy for up to 30 days after deletion, after which that copy is itself deleted. Backup copies do not contain uploaded identity documents.
- Data for marketing newsletters is retained until you unsubscribe (withdraw your consent).
8. International Data Transfers (outside the EEA) Some of our service providers (e.g., hosting, email, customer relationship management or monitoring services, including those used by the Portal) may be located outside the European Economic Area. When transferring data, we ensure that it is protected in accordance with GDPR standards (using Standard Contractual Clauses — SCCs).
9. Your Rights under GDPR You have full control over your data. You have the right to:
- Right to access: Request a copy of the data we hold about you.
- Right to rectification: Request us to correct inaccurate or incomplete data.
- Right to erasure ("Right to be forgotten"): Request deletion of your data (if we have no legal reasons to keep it, e.g., for tax purposes).
- Right to restriction of processing: Request a temporary suspension of the use of your data.
- Right to data portability: Receive your data in a structured format for transfer to another company.
- Right to withdraw consent: Opt out of newsletters at any time by clicking the "Unsubscribe" button in an email.
To exercise any of these rights, contact us at:
info@paroles.lt. If your request concerns an order placed through the Portal, please state the order number or the invoice number, which you will find in your confirmation email. We will respond to your request free of charge within 30 days. Please note that an order deleted at your request may remain in a backup copy of the database for up to 30 days, as described in Section 5. If you believe we are violating your rights, you have the right to file a complaint with the data protection supervisory authority in your country.
10. Cookies Our Website uses cookies for correct operation (e.g., preserving cart items) and analytics. You can manage cookie preferences in your browser settings. Detailed information is available in our Cookie Policy.
The ordering Portal uses only strictly necessary cookies: a single short-lived technical cookie that allows you to review and correct your contact details before payment. The Portal also stores your chosen interface language in your browser. The Portal does not use analytics or marketing cookies.
Contact Us If you have any questions regarding this Privacy Policy or how we process your data, please contact us: