Privacy Policy

Effective from 10 October 2026

1. Who processes your data
The data controller is UAB Indasta, company code 302716777, registered address S. Daukanto g. 19-5, LT-69430 Kazlų Rūda, Lithuania.
Contact for data protection matters: info@indasta.lt, tel. +37066610100.

2. What data we collect and why

Data	Purpose	Legal basis	Retention period
Name, email, phone number and message you provide in the contact form or by email	To respond to your enquiry and prepare a commercial offer	Steps prior to entering into a contract and legitimate interest in responding to enquiries (GDPR Art. 6(1)(b) and (f))	Up to 3 years from the last communication if no contract is concluded
Website usage data (truncated IP address, browser, device, pages visited) – “Google Analytics”	Website traffic statistics and improvement	Your consent (in the cookie banner)	Up to 14 months
Technical data for spam protection – “Google reCAPTCHA”	To protect the contact form from automated submissions	Legitimate interest (GDPR Art. 6(1)(f))	According to Google’s terms
Map data – “Google Maps”	To show our office location on a map	Your consent (the map loads only after you accept cookies)	According to Google’s terms

More information about cookies can be found in our cookie policy. You can change your consent at any time in the cookie settings.

We do not send direct marketing (newsletters) and do not share your data for this purpose.

3. Who we share data with
We share your data only to the extent necessary:
• website hosting and email service providers;
• Google Ireland Limited (“Google Analytics”, “reCAPTCHA”, “Google Maps”). Data may be transferred to the USA under the EU–U.S. Data Privacy Framework;
• public authorities – only where required by law.
We do not sell your data.

4. Your rights
You have the right to:
• access your data and obtain a copy;
• request the correction of inaccurate data;
• request the erasure of your data or restriction of its processing;
• object to processing based on legitimate interest;
• receive your data in a portable format;
• withdraw your consent at any time (this does not affect processing carried out before the withdrawal).

To exercise your rights, write to info@indasta.lt. We will reply within 1 month.

If you believe that your data is being processed unlawfully, you may lodge a complaint with the State Data Protection Inspectorate of Lithuania (L. Sapiegos g. 17, Vilnius, vdai.lrv.lt).

5. Data security
We apply technical and organisational measures to protect data against unauthorised access, loss or alteration: the website uses an encrypted HTTPS connection, and access to data is granted only to employees who need it for their work.

6. Third-party websites
Our website may contain links to other websites. We are not responsible for their privacy practices – we recommend that you read their privacy policies.

7. Changes to this policy
We may update this policy. The latest version is always published on this page together with its effective date.