Privacy policy

Who is responsible for your data?

The data controller is MB “402 Solutions”, registration number 307118399, J. Janonio g. 1-26, Gargždai, Lithuania. For privacy questions, email [email protected].

What data do we process?

When you contact us, we process your name, email address, message and any other information you choose to provide. The contact form prepares an email in your browser and opens your email app. Form contents are not submitted to our website server; we receive your message only when you send the email.

To operate and protect the website, our server and delivery services may process technical data such as your IP address, browser information, request time and the address visited. We do not ask you to provide sensitive personal data.

Why do we use data, and on what legal basis?

We use enquiry data to reply, discuss your needs and prepare to provide services. When you enquire about a contract with you, the basis is taking steps at your request before entering into a contract (GDPR Article 6(1)(b)). For other enquiries, we rely on our legitimate interest in communicating with prospective clients (Article 6(1)(f)).

We process technical data based on our legitimate interest in operating and securing the website (Article 6(1)(f)). Where the law requires us to keep data, we rely on a legal obligation (Article 6(1)(c)). We do not use this website for automated decision-making or profiling. Providing contact details is voluntary, but we need them to reply.

Cookies and browser storage

We do not use analytics or advertising trackers. If you choose a light or dark theme, we save only that preference in your browser’s local storage (localStorage). It stays on your device until you remove it by clearing the site’s data.

We deliver the website through Cloudflare. This service may use cookies or similar technologies needed for security, such as protection against automated requests.

Who may receive your data?

Our hosting, email and website security providers may access data as needed to deliver their services. We may also disclose it to authorities where required by law. We do not sell personal data.

Cloudflare may process technical data outside the European Economic Area. Its Data Processing Addendum provides GDPR safeguards for these transfers, including the European Commission’s standard contractual clauses where applicable. Contact us for more information about providers and transfer safeguards.

How long do we keep data?

We keep enquiry data while needed to handle your request and complete related correspondence. Afterwards, we retain it only as necessary to meet legal obligations or establish, exercise or defend legal claims. Technical logs are kept as needed to investigate operational problems and security incidents, subject to providers’ retention periods. Data is deleted or anonymised when no longer needed.

What are your rights?

Subject to the GDPR’s conditions, you can request access to your data, correction, deletion, restricted processing or a portable copy. You can also object to processing based on legitimate interests. If processing is based on consent, you can withdraw it at any time without affecting the lawfulness of earlier processing.

Send requests to [email protected]. We normally reply within one month. You can complain to Lithuania’s State Data Protection Inspectorate or your local supervisory authority.

If this policy changes, we will publish the updated version and date on this page.