Privacy Policy

1. Data controller

The data controller is MB Lprojects, company code 305646786, Lithuania. For any data protection matters contact us at info@lprojects.lt.

2. Legal framework

This privacy policy is prepared in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation, GDPR), the Lithuanian Law on Legal Protection of Personal Data, and Directive 2002/58/EC (ePrivacy).

3. Data we collect and purposes

Contact form: your name, email address, phone number (if provided), message content and attached files. Purpose – to respond to your enquiry and discuss a potential service engagement. Legal basis – steps prior to entering into a contract (Art. 6(1)(b) GDPR) and your consent (a).

Anonymous traffic statistics: page views and dates linked to an anonymous session identifier that cannot identify you. Legal basis – our legitimate interest in improving the website (f). Statistics are collected only after you opt in via the cookie panel.

4. Recipients (processors)

The website is hosted by Vercel Inc. (USA; transfers based on the EU–US Data Privacy Framework). Database – Turso. Emails are delivered via an SMTP provider (Google Workspace). These parties act as processors under contracts and may not use your data for their own purposes.

5. Retention

Enquiry data is retained no longer than 2 years after the last contact, unless an ongoing business relationship exists or the law requires it (e.g. accounting records – 10 years). Anonymous statistics are kept no longer than 12 months.

6. Data security

We apply appropriate technical and organisational measures: HTTPS/TLS encryption, JWT sessions with limited lifetime and brute-force protection, data minimisation, and authenticated access to the management dashboard.

7. Your rights

You have the right of access (Art. 15 GDPR), rectification (16), erasure (“right to be forgotten”, 17), restriction of processing (18), data portability (20), objection (21) and to withdraw consent at any time (Art. 7(3)). We respond within 30 calendar days.

8. Complaints

If you believe your rights are violated, you may lodge a complaint with the Lithuanian State Data Protection Inspectorate (www.ada.lt, da.ada@ada.lt) or a competent court.

9. Automated decision-making

We do not use automated decision-making or profiling that would produce legal effects concerning you.

10. Children's data

The website is directed at business clients and does not knowingly collect data from children (under 16).

11. Changes

We may update this policy; the current version is always published on this page with its update date.