This document explains what data of yours we process, for what purpose and on what basis, how long we keep it, who we pass it to and what rights you have. It is an informational document — you do not need to “accept” it in order to use the site.
2. What data we collect
2.1. Data you provide yourself
When you fill in the contact form, write to us by email or call, we receive: your first and last name, phone number, email address, company name and the content of your message.
Name, email and company name are required — the company name is needed so we can prepare a proposal addressed correctly and, if we start working together, issue an invoice. You may leave out the phone number; it has no bearing on whether we reply to your enquiry.
Once we begin working together, at the point of contract we also ask for the company code, address and, where applicable, the VAT number.
We do not collect or ask for special categories of data (health, political opinions, religious beliefs and so on). Should you provide such data inadvertently in a free-text field, we will not process it and will delete it.
2.2. Data collected automatically
When you visit the site the following is recorded: IP address, browser and device type, pages visited, time of visit and the source you came from. This data is collected through cookies (see section 6) and used in aggregated form.
3. Purposes and legal bases
Purpose
Data
Legal basis (GDPR Art. 6(1))
Retention period
Reply to an enquiry, prepare a proposal
Name, surname, phone, email, company, message
b) steps prior to entering into a contract
12 months from the last correspondence
Perform the contract, deliver services
Contact and company data
b) performance of a contract
Term of the contract + 2 years
Issue invoices, keep accounts
Company name, code, address, VAT number, contact person
c) legal obligation
10 years (required by law)
Website operation and security
Technical data, strictly necessary cookies
f) legitimate interest in a working and secure website
Up to 12 months
Traffic analysis
Analytics cookies
a) your consent
Up to 26 months
Newsletter (if we start one)
Email, name
a) your consent
Until consent is withdrawn
What we do not do: we do not sell or trade your data. We do not use automated decision-making or profiling. We do not send marketing emails without separate consent. We do not use the data for purposes other than those set out in this table.
Once the retention period ends, we destroy the data securely.
4. Who we share data with
We share data only with the service providers our business could not run without:
Service
Provider
Server hosting
Hostinger
Email
Google Workspace (Google Ireland Ltd., Ireland)
Website analytics
Google Analytics (Google Ireland Ltd., Ireland) — only with your consent
Cookie consent management
Cookiebot (Usercentrics A/S, Denmark)
Project brief form
Typeform (Typeform SL, Spain) — only when you open it
Data processing agreements are in place with all of them — they may use the data only for the purpose we specify and may not use it for their own ends.
We may also pass data to state authorities where the law requires it.
Transfers outside the EU. Some providers (for example Google) may process data outside the European Economic Area. In such cases the transfer is based on the standard contractual clauses approved by the European Commission or on an adequacy decision.
5. Data security
We use an encrypted connection (HTTPS), update our systems regularly and grant access to data only to those who need it for their work.
No technical solution is entirely impenetrable. In the event of a security breach likely to pose a high risk to your rights, we will inform the State Data Protection Inspectorate within 72 hours and, where required, you as well.
6. Cookies
Cookies are small files a website stores on your device.
Strictly necessary cookies are needed for the site to work — they remember your cookie choice and keep the site secure. They cannot be switched off, because without them the site will not work. They are used on the basis of legitimate interest and require no consent.
Analytics cookies show how many people visit the site and which pages matter to them. They are used only once you consent and are not enabled until you have given it.
Cookie
Type
Purpose
Duration
CookieConsent
Strictly necessary
Remembers your cookie choice (Cookiebot, Usercentrics A/S, Denmark)
1 month
_ga
Analytics
Distinguishes unique visitors (Google Analytics)
24 months
_ga_[ID]
Analytics
Session state (Google Analytics 4)
24 months
Typeform cookies
Third party
Set only when you open the project brief form. Placed by Typeform under their own cookie policy
up to 12 months
Consent and its withdrawal. You give consent by making an active choice in the cookie bar. You can change or withdraw it at any time or by deleting cookies in your browser settings. Withdrawal does not affect processing lawfully carried out beforehand. Your choice is remembered for 1 month, so the banner will reappear after that period and you can decide differently.
The portfolio and other pages may contain links to the websites of clients and partners. Such websites have their own privacy policies, and we are not responsible for their content or the data they collect. Before providing your data on another website, read its privacy policy.
8. Your rights
You have the right to:
know what data of yours we process and receive a copy of it;
have inaccurate or incomplete data corrected;
have data erased where we no longer have a legal basis to keep it;
restrict processing while accuracy or lawfulness is being established;
object to processing based on legitimate interest;
port your data to another service provider in a common format;
withdraw consent at any time where processing is based on consent.
We cannot delete invoices and other accounting records earlier than 10 years — this is required by law. In other cases, if we cannot meet a request, we will state the reason clearly.
How to exercise them: write to hello@idowebs.lt. We will reply within 30 calendar days at the latest. Where necessary we may ask you to confirm your identity.
9. Complaints
If you believe we are processing your data unlawfully, write to us first — most questions are resolved faster that way.
You also have the right to lodge a complaint with the State Data Protection Inspectorate (vdai.lrv.lt).
10. Children's data
Our services are intended for business. We do not knowingly collect data from anyone under 16. If such data has reached us, write to us and we will delete it.
11. Changes
We may update this policy. The latest version will always be on this page, with the date of the update at the top of the document. We will announce significant changes on the website.