Privacy Policy
Last updated: 2026-07-23
1. Who we are
This website (nis2sprendimai.lt) is operated by UAB "StarPrus" ("we", "the Company"), providing NIS2, ISO 27001, and ISO/IEC 42001 consulting services.
Company code 302464543 · VAT code LT100005119815 · Verkių g. 42-202, Vilnius, Lithuania
Data protection contact: info@nis2sprendimai.lt
2. What data we collect
2.1. Data collected automatically (browsing)
We use Google Analytics 4 for visitor statistics (number of visits, pages viewed, approximate location, device type). This data is only collected after you give consent via the cookie banner.
2.2. Data you provide yourself
- Short self-check forms: your answers to the questions; email address is optional.
- Contact form / message: name, email, and any other information you provide in your message.
Forms are hosted by the third-party service Tally (tally.so).
3. Purpose of processing
| Data | Purpose | Legal basis |
|---|---|---|
| Analytics (GA4) | Website usage statistics, content improvement | Consent (GDPR Art. 6(1)(a)) |
| Form responses | Responding to your inquiry, offering a consultation | Consent / performance of a prospective contract (Art. 6(1)(a),(b)) |
| Email (if provided) | Following up on your result or consultation | Consent |
| Correspondence (messages, LinkedIn, email) | Responding to your question | Legitimate interest (Art. 6(1)(f)) |
4. Cookies
- Necessary cookies – required for the website to function (no consent required).
- Analytics cookies (Google Analytics) – only used after you consent via the cookie banner. You can withdraw consent at any time via the "Cookie settings" button at the bottom of the site.
5. Who we share data with
Data may be shared with the following service providers (data processors), who process data on our behalf:
- Google Ireland Limited (Google Analytics) – analytics
- Tally – form hosting
Data may be transferred outside the EU/EEA, subject to appropriate safeguards (Standard Contractual Clauses).
6. Retention period
- Analytics data: retained for up to 14 months (GA4 default setting).
- Form responses and correspondence: retained as long as necessary to handle your inquiry, or up to 3 years if we become business partners (for documentation purposes).
7. Your rights
You have the right to:
- access your data;
- request correction or deletion;
- restrict or object to processing;
- withdraw consent at any time (does not affect the lawfulness of processing before withdrawal);
- data portability;
- lodge a complaint with the State Data Protection Inspectorate (vdai.lrv.lt) or your local supervisory authority.
To exercise your rights, contact: info@nis2sprendimai.lt