Privacy Policy

1. General provisions

This Privacy Policy explains how Redkarin (Redkarin, UAB, company code 308091453, J. Žemgulio g. 46, LT-35239 Panevėžys, Lithuania) (“Redkarin”, “we”, “us”, “our”) collects, uses, stores and processes your personal data when you visit our website, fill out the contact form or book a consultation call.

We process personal data in accordance with the General Data Protection Regulation (GDPR) and the laws of the Republic of Lithuania.

2. What data we collect

We collect only the data we need to provide our services and handle your inquiries:

3. Purposes of processing and legal basis

We process your personal data only when we have a clear purpose and a legal basis:

Analytics and marketing tools (Google Analytics, Meta Pixel) are not active yet; they will be enabled only with your consent.

Where we process data based on your consent (GDPR Article 6(1)(a)), you can withdraw it at any time: for contact form inquiries, write to us via the contact form; for cookies, change your choice on the Cookie Policy page. If you withdraw your consent for a contact form inquiry, we will delete your inquiry. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

Your name and email address are required so we can reply to your inquiry. We do not make decisions based solely on automated processing that produce legal effects for you.

4. Data retention periods

We keep personal data no longer than necessary to achieve the stated purposes. Contract performance data is kept for the entire contractual relationship and for up to 10 years after it ends, as required by law. Contact form inquiries are kept until you withdraw your consent, and for no longer than 2 years. Consultation booking data is kept for up to 2 years, technical (server log) data for up to 12 months, Google Analytics data for 14 months, and marketing data until you withdraw your consent. To limit the rate of contact form requests, your IP address is kept only in server memory and deleted no later than 10 minutes after your last request.

5. Disclosure of data to third parties

We do not sell or publicly disclose your personal data. Data may be shared only with trusted service providers that help us run our business: website hosting (Amazon Web Services, data center in Frankfurt, Germany), content delivery and security (Cloudflare), analytics and email marketing providers, as well as Google (Google Analytics, only with your consent), Meta (Meta Pixel, only with your consent) and Calendly (consultation booking). These tools are described in more detail on the Cookie Policy page.

We sign data processing agreements with providers that process data on our behalf, ensuring the level of protection required by the GDPR. For Google Analytics, Google acts as our processor; Calendly processes booking data on our behalf under a data processing agreement.

For the collection and transmission of data through Meta Pixel, we and Meta Platforms Ireland Limited are joint controllers; this policy sets out the essence of our arrangement, and Meta carries out any further processing as an independent controller. Under our arrangement with Meta (the Controller Addendum), we are responsible for the legal basis (your consent) and for informing you, and Meta is responsible for the security of the data and for handling your rights (GDPR Articles 15 to 20) regarding the data Meta stores. You can exercise your rights with us or with Meta.

6. Transfers outside the European Economic Area

Some of our service providers (for example, Cloudflare, Google, Meta and Calendly) are based in the United States or process data there through their group companies, so your personal data may be transferred outside the European Economic Area (EEA). We host the website in an Amazon Web Services data center in the EU (Frankfurt, Germany).

Such transfers rely on the European Commission adequacy decision of July 10, 2023 on the EU-U.S. Data Privacy Framework (Commission Implementing Decision (EU) 2023/1795) where the recipient is certified under the framework. Otherwise, we rely on the standard contractual clauses approved by the European Commission (Commission Implementing Decision (EU) 2021/914) together with supplementary measures where needed.

You can obtain more information about these safeguards, and a copy of them, by writing to us via the contact form.

7. Your rights

Under the GDPR, you have the following rights regarding your personal data:

To exercise these rights, contact us via the contact form or in writing to our registered address. You also have the right to lodge a complaint with the State Data Protection Inspectorate (VDAI).

8. Data security

We apply technical and organizational measures to protect your data against unauthorized access, loss or disclosure: we transmit data over encrypted TLS connections, apply access control, use secure servers and train our staff regularly. For more details, see the Data Protection page.

9. Changes to this policy

This Privacy Policy may be updated. We will announce material changes on the website, and the latest version will always be available on this page, showing the date it was last updated.