This document explains what data of yours we process, for what purpose
and on what basis, how long we keep it, who we pass it to and what
rights you have. It is an informational document — you do not need to
“accept” it in order to use the site.
2. What data we collect
2.1. Data you provide yourself
When you fill in the contact form, write to us by email or call, we
receive: your first and last name, phone number, email address, company
name and the content of your message.
Name, email and company name are required — the company name is needed
so we can prepare a proposal addressed correctly and, if we start
working together, issue an invoice. You may leave out the phone number;
it has no bearing on whether we reply to your enquiry.
Once we begin working together, at the point of contract we also ask
for the company code, address and, where applicable, the VAT number.
We do not collect or ask for special categories of data (health,
political opinions, religious beliefs and so on). Should you provide
such data inadvertently in a free-text field, we will not process it
and will delete it.
2.2. Data collected automatically
When you visit the site the following is recorded: IP address, browser
and device type, pages visited, time of visit and the source you came
from. This data is collected through cookies (see section 6) and used
in aggregated form.
3. Purposes and legal bases
Purpose
Data
Legal basis (GDPR Art. 6(1))
Retention period
Reply to an enquiry, prepare a proposal
Name, surname, phone, email, company, message
b) steps prior to entering into a contract
12 months from the last correspondence
Perform the contract, deliver services
Contact and company data
b) performance of a contract
Term of the contract + 2 years
Issue invoices, keep accounts
Company name, code, address, VAT number, contact person
c) legal obligation
10 years (required by law)
Website operation and security
Technical data, strictly necessary cookies
f) legitimate interest in a working and secure website
Up to 12 months
Traffic analysis
Analytics cookies
a) your consent
Up to 26 months
Newsletter (if we start one)
Email, name
a) your consent
Until consent is withdrawn
What we do not do: we do not sell or trade your data.
We do not use automated decision-making or profiling. We do not send
marketing emails without separate consent. We do not use the data for
purposes other than those set out in this table.
Once the retention period ends, we destroy the data securely.
4. Who we share data with
We share data only with the service providers our business could not
run without:
Service
Provider
Server hosting
Hostinger
Email
Google Workspace (Google Ireland Ltd., Ireland)
Website analytics
Google Analytics (Google Ireland Ltd., Ireland) — only with your consent
Cookie consent management
Cookiebot (Usercentrics A/S, Denmark)
Project brief form
Typeform (Typeform SL, Spain) — only when you open it
Data processing agreements are in place with all of them — they may use
the data only for the purpose we specify and may not use it for their
own ends.
We may also pass data to state authorities where the law requires it.
Transfers outside the EU. Some providers (for example
Google) may process data outside the European Economic Area. In such
cases the transfer is based on the standard contractual clauses
approved by the European Commission or on an adequacy decision.
5. Data security
We use an encrypted connection (HTTPS), update our systems regularly
and grant access to data only to those who need it for their work.
No technical solution is entirely impenetrable. In the event of a
security breach likely to pose a high risk to your rights, we will
inform the State Data Protection Inspectorate within 72 hours and, where
required, you as well.
6. Cookies
Cookies are small files a website stores on your device.
Strictly necessary cookies are needed for the site to
work — they remember your cookie choice and keep the site secure. They
cannot be switched off, because without them the site will not work.
They are used on the basis of legitimate interest and require no
consent.
Analytics cookies show how many people visit the site
and which pages matter to them. They are used only once you consent and
are not enabled until you have given it.
Cookie
Type
Purpose
Duration
CookieConsent
Strictly necessary
Remembers your cookie choice (Cookiebot, Usercentrics A/S, Denmark)
1 month
_ga
Analytics
Distinguishes unique visitors (Google Analytics)
24 months
_ga_[ID]
Analytics
Session state (Google Analytics 4)
24 months
Typeform cookies
Third party
Set only when you open the project brief form. Placed by Typeform under their own cookie policy
up to 12 months
Consent and its withdrawal. You give consent by making
an active choice in the cookie bar. You can change or withdraw it at any
time or by
deleting cookies in your browser settings. Withdrawal does not affect
processing lawfully carried out beforehand. Your choice is remembered
for 1 month, so the banner will reappear after that period and you can
decide differently.
The portfolio and other pages may contain links to the websites of
clients and partners. Such websites have their own privacy policies,
and we are not responsible for their content or the data they collect.
Before providing your data on another website, read its privacy policy.
8. Your rights
You have the right to:
know what data of yours we process and receive a copy of it;
have inaccurate or incomplete data corrected;
have data erased where we no longer have a legal basis to keep it;
restrict processing while accuracy or lawfulness is being established;
object to processing based on legitimate interest;
port your data to another service provider in a common format;
withdraw consent at any time where processing is based on consent.
We cannot delete invoices and other accounting records earlier than
10 years — this is required by law. In other cases, if we cannot meet a
request, we will state the reason clearly.
How to exercise them: write to
hello@idowebs.lt. We will reply
within 30 calendar days at the latest. Where necessary we may ask you to
confirm your identity.
9. Complaints
If you believe we are processing your data unlawfully, write to us first
— most questions are resolved faster that way.
You also have the right to lodge a complaint with the State Data
Protection Inspectorate
(vdai.lrv.lt).
10. Children's data
Our services are intended for business. We do not knowingly collect data
from anyone under 16. If such data has reached us, write to us and we
will delete it.
11. Changes
We may update this policy. The latest version will always be on this
page, with the date of the update at the top of the document. We will
announce significant changes on the website.