Privacy policy.

Data controller

Your personal data is processed by MB “MV Projektai”, company code 305735722, VAT code LT100015164512 (“we”).

For any questions about personal data, write to hello@mvpro.lt.

What data we collect

• Enquiry data — your name, email address, company name and message content submitted through the website forms.
• Correspondence data — information you provide when writing to us by email or via Telegram.
• Contract data — contact person details, company details and invoicing information needed to provide our services.
• Technical data — IP address, browser and device information, time of visit. We collect analytics and marketing data only with your consent.

We do not request or knowingly process special categories of personal data. Please do not submit them through forms or in correspondence.

Purposes and legal bases

• Responding to enquiries and preparing proposals — steps prior to entering into a contract and legitimate interest (GDPR Art. 6(1)(b) and (f)).
• Providing services and performing contracts — performance of a contract (GDPR Art. 6(1)(b)).
• Bookkeeping — legal obligation (GDPR Art. 6(1)(c)).
• Ensuring the website works and is secure — legitimate interest (GDPR Art. 6(1)(f)).
• Analysing website traffic (Google Analytics) — your consent (GDPR Art. 6(1)(a)), which you can withdraw at any time.
• Measuring ad performance and showing relevant ads (Meta Pixel, Google ad signals) — your consent (GDPR Art. 6(1)(a)), which you can withdraw at any time.

How long we keep data

• Enquiries and correspondence — up to 12 months after the last contact if no contract is concluded.
• Contract data — for the term of the contract and 10 years after it ends.
• Accounting documents — for the period required by law (usually 10 years).
• Analytics and marketing data — no longer than stated in the Cookie policy.

When the period expires, we delete or anonymise the data.

Who we share data with

We do not sell data. We may share it only to the extent necessary with:

• IT service providers — hosting, email and form services;
• analytics and advertising service providers — Google Ireland Limited and Meta Platforms Ireland Limited (only with your consent);
• accounting and legal service providers;
• public authorities, where required by law.

We sign agreements with data processors requiring them to process data only on our instructions and to keep it secure.

Transfers outside the EEA

If a service provider processes data outside the European Economic Area, we ensure appropriate safeguards — a European Commission adequacy decision (e.g. the EU–US Data Privacy Framework) or standard contractual clauses.

Google and Meta may process some data in the United States. These providers participate in the EU–US Data Privacy Framework.

When we build solutions for clients

When building AI agents, automations or data systems for clients, we usually process their data as a data processor. In that case, the terms of processing are set out in a separate agreement with the client, and this policy applies only insofar as it does not conflict with that agreement.

Your rights

• to access your data and receive a copy of it;
• to have inaccurate data corrected;
• to have your data erased or its processing restricted;
• to object to processing based on legitimate interest;
• to receive your data in a structured format and transfer it to another controller;
• to withdraw your consent at any time.

To exercise your rights, write to hello@mvpro.lt. We will reply within one month. If you believe your rights have been infringed, you can lodge a complaint with the State Data Protection Inspectorate of Lithuania (vdai.lrv.lt).

Data security

We apply organisational and technical measures: encrypted connections, access control, restricted access rights and regular updates. Only those who need data for their work have access to it.

Changes to this policy

We may update this policy. The latest version is always published on this page, and the date of the last update is shown at the top.