Privacy policy
What data we collect, why, how long we keep it and what you can do about it.
This policy explains how MB „DESAmedia“ processes personal data when you use the desamedia.lt website. In short: we collect only what you provide yourself in the enquiry form, we do not track you without your consent and we do not sell your data.
This English version is a translation. In case of any discrepancy, the Lithuanian version prevails.
Who processes your data
The data controller is MB „DESAmedia“, company code 304677038, address P. Višinskio g. 34-216, LT-76352 Šiauliai, Lithuania.
For questions about personal data, email info@desamedia.lt or call +370 686 59999. No data protection officer has been appointed, as the nature of our activities does not require one.
What data we collect
The website has no registration or user accounts. Data is created in only two ways: when you fill in a form, or when the server records technical information about your visit.
| Data | Purpose | Legal basis | Retention period |
|---|---|---|---|
| Name, email address, phone number | To respond to your enquiry and continue the correspondence | Steps taken at your request prior to entering into a contract (Article 6(1)(b) GDPR) | 2 years from the last correspondence |
| Company, website address, project type, budget range, message | To assess the scope and prepare a proposal | Steps taken at your request prior to entering into a contract | 2 years from the last correspondence |
| Page from which you submitted the form | To understand which content is useful and improve the website | Legitimate interest in improving the service (Article 6(1)(f)) | Together with the enquiry |
| IP address when submitting a form | Protection against automated and repeated submissions | Legitimate interest in protecting the system | 1 hour, in temporary memory only |
| Server logs: IP address, time, URL, browser | Security and diagnosis of technical errors | Legitimate interest in keeping the website running | 6 months |
| Analytics and advertising data | Statistics and measurement of advertising results | Your consent (Article 6(1)(a)) | See the cookie table |
Our forms do not ask for, and you should not submit, special categories of personal data (such as health data or political opinions). If you send such data in a message, we will delete it.
Cookies
A cookie is a small file that a website stores in your browser. Strictly necessary cookies do not require consent: without them, forms and protection against request forgery would not work. For all other cookies we ask for your consent, and until you give it they are not set.
Categories you can control:
- Strictly necessary (always on) - Required for forms and for protection against request forgery. The website would not work without them, so they cannot be switched off.
- Analytics - Help us understand which pages are useful to visitors. The data is aggregated and is not used to identify any individual.
- Marketing - Allow us to measure advertising results and to avoid showing the same ads to people who have already contacted us.
| Cookie | Category | Purpose | Expiry |
|---|---|---|---|
| desamedia_session | Strictly necessary | Maintains the session between pages so that a completed form does not lose its data. | 2 hours |
| XSRF-TOKEN | Strictly necessary | Protection against cross-site request forgery (CSRF) when submitting forms. | 2 hours |
| desamedia_consent | Strictly necessary | Remembers your cookie choice so that you are not asked every time. | 180 days |
| _ga, _ga_* | Analytics | Google Analytics: distinguishes visitors and sessions for aggregated statistics. | up to 2 years |
| _gcl_au | Marketing | Google Ads: measures whether an ad led to an enquiry. | 90 days |
We remember your choice for 180 days and then ask again. You can change your decision at any time using the link at the bottom of the page or by deleting the site data in your browser settings.
Who we share data with
We do not sell personal data or disclose it to third parties for marketing purposes. Data is accessible only to the service providers without which the website could not operate:
- Server hosting provider - stores the database and logs. Servers are located in the European Union.
- Email service provider - enquiry notifications and correspondence pass through it.
- Google Ireland Limited (Google Analytics) - only if you have consented to analytics cookies.
A data processing agreement has been concluded with each of them. In the case of Google, data may be transferred outside the European Economic Area on the basis of the standard contractual clauses approved by the European Commission and the EU-U.S. Data Privacy Framework.
We host fonts on our own server, so your IP address is not sent to third parties when they are downloaded. The website has no social media buttons or embedded videos that would track you without your consent.
Your rights
Regarding your data, you have the right to:
- Access - obtain a copy of the data we hold about you.
- Rectification - if the data is inaccurate or has changed.
- Erasure - when the data is no longer needed for the purpose for which it was collected.
- Restriction of processing - while a dispute about the data is being resolved.
- Data portability - receive your data in a commonly used, machine-readable format.
- Object - where we rely on legitimate interest.
- Withdraw consent - at any time, without affecting the lawfulness of processing carried out before the withdrawal.
Send your request to info@desamedia.lt. We respond within 30 calendar days. If a request is complex, we may extend this period by a further two months and will inform you of the extension.
If you believe we are processing your data improperly, you have the right to lodge a complaint with the supervisory authority, the State Data Protection Inspectorate of Lithuania (Valstybinė duomenų apsaugos inspekcija, L. Sapiegos g. 17, Vilnius, vdai.lrv.lt). We would appreciate it if you contacted us first.
Security
The website runs over an encrypted HTTPS connection. The administration interface is accessible only to pre-authorised persons. The database is not accessible from the internet, and regular backups are made.
In the event of a personal data breach that poses a risk to your rights, we will notify you and the State Data Protection Inspectorate within 72 hours.
Children's data
The website is intended for business clients. We do not knowingly collect data from persons under the age of 16. If we learn that we have received such data, we will delete it.
Changes to this policy
If a new purpose of processing or a new recipient arises, we will update this policy and change the date at the top. If the changes are material, your cookie consent will be requested again.