Privacy Notice
How we process your personal data when you visit our website or maintain business relationships with us.
Updated 18 October 2026
This Privacy Notice explains how we process your personal data when you visit the Privacy Solutions website, submit an enquiry or communicate with us on behalf of your organisation. It describes the processing activities for which we act as the data controller. In providing our services, we may also process personal data on behalf of our clients, acting as a data processor. In such cases, the relevant client, as data controller, determines the purposes and legal bases of the processing and is responsible for providing information about that processing to data subjects.
1. Who is the controller of your personal data?
The data controller is Privacy Solutions, MB, company registration number 307083891. If you have any questions about the processing of your personal data or wish to exercise your rights, you can contact us at info@privacysolutions.net.
2. What personal data do we process and why?
Enquiries and correspondence
When you contact us through the website contact form or by email, we process your name, email address, the content of your enquiry and related correspondence. If you choose to provide them, we may also process your telephone number, organisation name or other information needed to respond to your enquiry.
We process these data to respond to enquiries and discuss potential business relationships. The legal basis is our legitimate interest in maintaining business relationships and responding to enquiries (Article 6(1)(f) of the GDPR). You need to provide contact details and the information necessary for us to consider your enquiry if you wish to receive a response. Providing other information is optional.
Business relationships with clients and partners
When entering into and performing agreements and maintaining relationships with clients, partners and suppliers, we process the names, surnames, job titles, organisation names, business contact details and business correspondence of their representatives. Where necessary, we also process signatures and information confirming their authority to represent an organisation.
These data are necessary to enter into and perform agreements, communicate and manage business relationships. We process them on the basis of our legitimate interests and those of the organisation concerned in maintaining business relationships (Article 6(1)(f) of the GDPR).
Accounting and compliance with legal obligations
We process personal data contained in invoices, payment records and other accounting documents to comply with our accounting and tax obligations (Article 6(1)(c) of the GDPR).
Data subject requests
When we receive a request concerning your personal data, we process the information provided in the request, your contact details, related correspondence and records of how the request was handled. This is necessary to comply with our obligations under the GDPR (Article 6(1)(c) of the GDPR). We also retain records of how requests were handled where necessary to demonstrate compliance or to establish, exercise or defend legal claims (Article 6(1)(f) of the GDPR).
Establishment, exercise or defence of legal claims
In the event of a dispute, we may process relevant documents and correspondence to the extent necessary for the establishment, exercise or defence of legal claims. This processing is based on our legitimate interest in protecting our rights (Article 6(1)(f) of the GDPR).
3. Where do we obtain your personal data?
In most cases, you provide your personal data directly to us. We may also receive them from the organisation you represent or from related business documents and correspondence. When you visit our website, technical data such as your IP address and information about cookies may be collected.
4. How long do we retain your personal data?
| Personal data | Retention period |
|---|---|
| Enquiries that do not lead to a business relationship | 3 months from the last correspondence concerning the enquiry. |
| Agreements and documents relating to their performance | For the duration of the agreement and for 10 years after it ends. |
| Business contact details | For as long as they are needed for the business relationship. Where contact details form part of records that must be retained, the retention period applicable to those records applies. |
| Invoices, payment records and other accounting documents evidencing business transactions | 10 years from the end of the calendar year in which the documents were created. |
| VAT invoices | 10 years from the date of issue. |
| Data subject requests and records of their handling | 2 years from the date of our final response or the decision on the request. This period is intended to preserve evidence of how the request was handled, including in the event of a complaint to a supervisory authority. Additional documents obtained solely to verify identity are deleted once they are no longer necessary. |
| Cookies | In accordance with the periods specified in Section 7. |
Where personal data are needed in connection with an ongoing dispute or legal proceedings, we may retain the relevant data for longer, for as long as necessary. At the end of the applicable retention period, we delete or anonymise the data.
5. With whom do we share personal data?
Where necessary for the purposes described in this Privacy Notice, we may disclose your personal data to service providers we engage, including providers of website hosting and administration, information technology, email, cloud services, data storage, website analytics, advertising performance measurement, protection against automated abuse and accounting services, as well as to financial institutions, legal advisers and other professional advisers.
We enter into data processing agreements with service providers that process personal data on our behalf. These agreements set out requirements concerning the processing, confidentiality and security of personal data.
We may also disclose personal data to public authorities, courts and other persons legally entitled to receive them, where required by law or necessary to protect our rights and legitimate interests.
Transfers of personal data outside the European Economic Area
When we use the services of our service providers, personal data may be transferred outside the European Economic Area (EEA) or accessed remotely from third countries.
In such cases, we transfer personal data in accordance with the GDPR, relying on a European Commission adequacy decision or applying appropriate safeguards, including standard contractual clauses adopted by the European Commission and, where necessary, supplementary safeguards.
For further information about transfers of personal data to third countries and the safeguards applied, including how to obtain a copy of the relevant safeguards, please contact us at info@privacysolutions.net.
6. How do we ensure the security of personal data?
To protect your personal data against unauthorised access, disclosure, alteration, loss or destruction, we implement appropriate technical and organisational security measures, taking into account the nature of the processing and the associated risks.
We apply access controls to personal data and ensure that only those persons who need access to perform their duties are authorised to access them.
7. Website and cookies
Cookies are small data files stored in your browser. They are used to ensure the operation and security of the website, remember your preferences and, with your consent, analyse website traffic and advertising performance.
Strictly necessary cookies and contact form security
Strictly necessary cookies are used to ensure the security of the website and contact form and to remember your cookie preferences. They are used without consent only to the extent necessary to transmit a communication or provide a service you have explicitly requested.
The contact form uses a security check to protect against automated submissions and spam. This check may involve processing your IP address, browser and device information, technical data about your interaction with the website and the results of the check. The legal basis for processing personal data to protect the website and contact form is our legitimate interest in ensuring website security and preventing abuse (Article 6(1)(f) of the GDPR).
Cookies that remember whether you have accepted or refused cookies are not themselves used to analyse website traffic or measure advertising performance.
Website analytics
With your consent, we use analytics cookies to analyse website traffic and visitor activity, including the sources of visits, pages viewed, use of the website and enquiry submissions.
For these purposes, we process cookie identifiers, browser and device information, and information about visits and activity on the website. To analyse enquiry submissions, we also use information about successful form submissions and the language of the form. We do not transmit the name, email address, telephone number or enquiry text provided in the contact form for analytics purposes.
Analytics cookies and related measurement technologies are activated only with your consent. The legal basis for processing personal data is Article 6(1)(a) of the GDPR.
Advertising performance measurement
With your separate consent, we use advertising measurement cookies to assess the effectiveness of advertising campaigns, including whether a visitor who clicked on an advertisement subsequently submitted an enquiry.
For these purposes, we process advertising click identifiers, cookie identifiers and information about the source of the visit, the advertising campaign and the enquiry submission. We do not transmit contact details or enquiry text provided in the contact form for advertising measurement purposes.
Advertising measurement cookies and related technologies are activated only with your consent. The legal basis for processing personal data is Article 6(1)(a) of the GDPR. Consent to analytics cookies alone does not constitute consent to advertising measurement cookies.
List of cookies
The website uses first-party and third-party cookies:
- First-party cookies are cookies associated with our website domain, privacysolutions.net. They may be used to ensure the operation of the website, remember your preferences, analyse website traffic or measure advertising performance.
- Third-party cookies are cookies associated with other service providers’ domains. They may be stored during your visit when services from these providers operate on our website, for example to protect the contact form against automated abuse.
First-party cookies may also be used through external service providers that receive the data collected through those cookies. The table therefore identifies the provider, whether the cookie is first-party or third-party, its purpose and its duration.
| Cookie | Provider | First-party / third-party | Category and purpose | Duration |
|---|---|---|---|---|
Crumb | Squarespace | First-party | Strictly necessary. Helps protect against cross-site request forgery. | Browsing session |
ss_performanceCookiesAllowed | Squarespace | First-party | Strictly necessary. Remembers your preference for analytics cookies. | 30 days |
ss_marketingCookiesAllowed | Squarespace | First-party | Strictly necessary. Remembers your preference for advertising cookies. | 30 days |
_GRECAPTCHA | Google reCAPTCHA | Third-party | Security. Used to detect automated abuse and protect the contact form. | 180 days |
ss_cid | Squarespace | First-party | Analytics. Helps distinguish visitors and link their visits. | Up to 2 years |
ss_cpvisit | Squarespace | First-party | Analytics. Stores information about a previous visit. | Up to 2 years |
ss_cvisit | Squarespace | First-party | Analytics. Helps identify and analyse a visit. | 30 minutes |
ss_cvr | Squarespace | First-party | Analytics. Helps link information about a visitor’s visits. | Up to 2 years |
ss_cvt | Squarespace | First-party | Analytics. Stores information about the timing of a visit. | 30 minutes |
_ga | Google Analytics 4 | First-party | Analytics. Helps distinguish visitors. | Up to 2 years¹ |
_ga_FG72N9SKR4 | Google Analytics 4 | First-party | Analytics. Maintains session state. | Up to 2 years¹ |
_gcl_au | First-party | Advertising measurement. Helps measure advertising effectiveness and conversions. | 90 days | |
_gcl_aw | Google Ads | First-party | Advertising measurement. Stores information about an advertising click so that it can be linked to a subsequent action on the website. | 90 days |
¹ A two-month retention setting applies to user-level and event-level data held by this analytics service. It does not apply to standard aggregated statistical reports. A cookie’s lifetime in your browser and the retention period for data stored in the service’s systems are not the same.
Not every cookie listed in the table is set on every visit. Their use depends on your preferences and actions, such as visiting the website after clicking on an advertisement or using the contact form.
Cookies may expire sooner because of browser restrictions or because you delete them. Depending on how a cookie operates, its lifetime may be renewed when you visit the website again.
How can you manage your cookie preferences?
On your first visit, you can accept all non-essential cookies, reject them or select individual categories. Non-essential categories are not selected by default.
You can change your cookie preferences or withdraw your consent at any time by opening the cookie preference controls at the bottom of the page and saving your updated preferences. Once you withdraw consent, the relevant non-essential measurement technologies will no longer operate. Withdrawal does not affect the lawfulness of processing carried out before your consent was withdrawn.
Refusing analytics or advertising measurement cookies does not prevent you from browsing the website or submitting an enquiry.
You can also delete or restrict cookies through your browser settings. Blocking necessary security cookies may prevent some website features from working properly.
Information about recipients of personal data and transfers outside the European Economic Area is provided in Section 5 of this Privacy Notice. Information about your rights is provided in Section 8.
8. What are your rights?
Under the General Data Protection Regulation (GDPR), you have the following rights, subject to the conditions laid down in the GDPR:
- Right to be informed about the processing of your personal data. You have the right to receive information about how and for what purposes your personal data are processed.
- Right of access. You have the right to obtain confirmation as to whether we process your personal data and, where we do, to access those data, obtain a copy and receive information about the processing.
- Right to rectification. You may request that inaccurate personal data be rectified or incomplete personal data be completed.
- Right to erasure (the “right to be forgotten”). In the circumstances provided for by the GDPR, you may request the erasure of your personal data, for example, where they are no longer necessary for the purposes for which they were collected or have been processed unlawfully. This right is not absolute: in certain cases, we may be required or entitled to retain the data.
- Right to restriction of processing. You may request the restriction of processing of your personal data, for example, where you contest their accuracy or have objected to the processing while it is being determined whether our legitimate grounds override yours.
- Right to data portability. Where personal data you have provided to us are processed by automated means on the basis of your consent or a contract with you, you have the right to receive them in a structured, commonly used and machine-readable format and transmit them to another controller.
- Right to object. Where we process your personal data on the basis of legitimate interests, you have the right to object on grounds relating to your particular situation. We will then cease processing unless we demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or unless the processing is necessary for the establishment, exercise or defence of legal claims.
- Right to withdraw consent. Where processing is based on your consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before your consent was withdrawn.
- Right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you, except in the circumstances permitted by the GDPR. We do not make such decisions.
How can you exercise your rights?
To exercise your rights or obtain further information about how your personal data are processed, please contact us at info@privacysolutions.net.
We will respond to your request without undue delay and in any event within one month of receipt. Taking into account the complexity and number of requests, this period may be extended by a further two months. We will inform you of any extension and the reasons for it within one month of receiving your request.
If we have reasonable doubts concerning your identity, we may request additional information necessary to confirm it.
Requests are handled free of charge, except where the GDPR permits a reasonable fee or refusal to act on a request that is manifestly unfounded or excessive. In such cases, we will explain the reasons for our decision.
Where can you lodge a complaint?
If you believe that your personal data are being processed in breach of applicable data protection laws, you have the right to lodge a complaint with the Lithuanian State Data Protection Inspectorate or the competent data protection supervisory authority of another EU or EEA country.
We encourage you to contact us first so that we can address any concerns promptly. Where a complaint concerns the exercise of rights under Articles 15–22 of the GDPR, you must first submit the relevant request to the data controller before lodging a complaint with the Lithuanian State Data Protection Inspectorate concerning the exercise of those rights.
9. Changes to this Privacy Notice
We update this Privacy Notice when necessary. The latest version and its date are always available on this website.