Privacy Policy

Last updated: 11 August 2026

1. Who we are

The controller of your personal data is:

This privacy policy applies to the website rejben.lt and explains how we collect, use, store and otherwise process personal data, as well as what rights you have.

We have not appointed a Data Protection Officer, as our activities do not meet the criteria set out in Article 37 of the General Data Protection Regulation (GDPR). For all data protection matters, please contact us at info@rejben.eu.

2. Our principles

We process personal data in accordance with the GDPR, the Law on Legal Protection of Personal Data of the Republic of Lithuania, the Law on Electronic Communications of the Republic of Lithuania and other applicable legislation. We process only as much data as is necessary for the specific purpose and retain it no longer than required.

3. What data we process, for what purpose, on what basis and for how long

3.1. Handling enquiries and correspondence

Data: first name, surname, email address, phone number, selected service of interest, message content and any other information you provide voluntarily.

Source: contact forms on the website, email, telephone.

Purpose: to respond to your enquiry, provide a quotation, arrange a meeting.

Legal basis: Article 6(1)(b) GDPR – steps taken at your request prior to entering into a contract; where the enquiry is unrelated to a potential contract – Article 6(1)(f) GDPR (our legitimate interest in responding to incoming enquiries and maintaining communication).

Retention period: 12 months from the last correspondence if no contract is concluded. If a contract is concluded, data is retained as described in section 3.2.

3.2. Conclusion and performance of contracts

Data: first name, surname, contact details, address (where required for the project or delivery), order and payment details.

Purpose: to conclude and perform a contract, provide services, fulfil warranty obligations, maintain accounting records.

Legal basis: Article 6(1)(b) GDPR (performance of a contract) and Article 6(1)(c) GDPR (legal obligation – legislation governing accounting and document retention).

Retention period: 10 years from performance or termination of the contract, in accordance with the retention periods applicable to accounting documents.

3.3. Website operation, security and technical administration

Data: IP address, browser type and version, operating system, device type, date and time of visit, pages viewed, server event logs, language preference.

Purpose: to ensure the proper functioning and security of the website, remember your preferences, detect and prevent unlawful activity, and resolve technical faults.

Legal basis: Article 6(1)(f) GDPR (legitimate interest in ensuring the security and operation of our information systems). For strictly necessary cookies – the provisions of the Law on Electronic Communications permitting cookies that are essential for providing the service.

Retention period: server logs – up to 12 months; cookies – as set out in the tables in section 5.

3.4. Website statistics and analytics

Data: visit data, pages viewed, session duration, approximate location (city level), device and browser data, truncated IP address, unique cookie identifiers.

Tools: Google Analytics 4, deployed via Google Tag Manager.

Purpose: to understand how visitors use the website and to improve its content and structure.

Legal basis: Article 6(1)(a) GDPR – your consent, given via the cookie banner. You may withdraw your consent at any time.

Retention period: up to 14 months or until consent is withdrawn, whichever occurs first.

3.5. Marketing, advertising measurement and remarketing

Data: data about your activity on the website (pages viewed, actions taken, conversions), advertising identifiers, cookie identifiers, IP address, browser and device data.

Tools: Google Ads, Meta Pixel (Facebook, Instagram).

Purpose: to measure the performance of advertising campaigns, build audiences and show you relevant advertising on third-party platforms (remarketing).

Legal basis: Article 6(1)(a) GDPR – your consent, given via the cookie banner. You may withdraw your consent at any time.

Retention period: as set out in the tables in section 5, or until consent is withdrawn.

4. Is providing data mandatory

Providing personal data is not a legal obligation. However, if you do not provide the mandatory fields marked in the contact form (name, email address or phone number), we will be unable to contact you and respond to your enquiry. If data required to conclude a contract is not provided, the contract cannot be concluded or properly performed.

5. Cookies

Cookies are small text files placed on your device when you browse the website. They allow the website to function and remember your choices and, with your consent, to collect statistics and display relevant advertising.

5.1. Managing consent

On your first visit you are shown a cookie banner where you can choose which categories of cookies you allow. Strictly necessary cookies are used without consent, as the website could not function without them. All other cookies are set only after you give your explicit consent.

You can change or withdraw your consent at any time by clicking the cookie icon in the bottom-left corner of the screen (“Consent Preferences”). Withdrawal does not apply retroactively – it does not affect the lawfulness of processing carried out before the withdrawal.

You can also delete or block cookies in your browser settings, although some website functions may then not work correctly.

5.2. Google Consent Mode v2

Google Consent Mode v2 is implemented on this website. This means the choices you make in the cookie banner are automatically passed to Google services as consent signals. Where consent is not given, Google tags do not set cookies and process only limited, anonymised data required for general aggregated measurement.

Google Tag Manager is a tag management tool – it does not itself set any cookies or collect personal data; it only loads the tags listed below in accordance with your consent.

5.3. List of cookies used

Strictly necessary cookies

For logged-in website administrators, additional technical WordPress cookies are used (wordpress_logged_in_*, wordpress_sec_*, wp-settings-*, wp-settings-time-*) for the login session and admin interface settings. They are not set for website visitors.

Statistics (analytics) cookies – only with consent

Marketing cookies – only with consent

The list of cookies may change; up-to-date information is always available in this policy and in the cookie settings panel.

6. Who we share data with

We do not sell personal data. We may share data only with the following categories of recipients and only to the extent necessary:

• website hosting and technical maintenance providers;
• email and office software providers;
• Google Ireland Limited – Google Tag Manager, Google Analytics 4, Google Ads;
• Meta Platforms Ireland Limited – Meta Pixel;
• accounting, audit, legal and debt recovery service providers;
• carriers, installers and other partners, where necessary to fulfil an order;
• state and municipal authorities and courts, where required by law.

We conclude written data processing agreements with processors, obliging them to ensure appropriate data security and to process data only on our instructions.

7. Transfers outside the European Economic Area

When using Google and Meta services, data may in certain cases be transferred to the United States. Such transfers are carried out on the basis of:

• the European Commission’s adequacy decision on the EU–U.S. Data Privacy Framework, to which Google LLC and Meta Platforms, Inc. have self-certified; and/or
• Standard Contractual Clauses approved by the European Commission, together with supplementary safeguards.

Further information is available in these providers’ privacy policies:
policies.google.com/privacy and
facebook.com/privacy/policy.

8. Social media and external links

The website contains links to our social media profiles (Facebook, Instagram, LinkedIn, YouTube) and to the self-service system at online.rejben.eu. By clicking such a link you are taken to a website operated by a third party, where that website’s privacy terms apply. We are not responsible for the content of such websites or the data processing carried out on them, and we recommend reviewing their privacy policies.

9. Data security

We apply reasonable organisational and technical measures to protect personal data against accidental or unlawful destruction, alteration, disclosure or any other unlawful processing: encrypted data transmission (SSL/TLS), need-to-know access restrictions, a password policy, regular software updates and backups.

10. Your rights

Under the GDPR you have the following rights:

• right of access to your personal data and to information about its processing (Article 15);
• right to rectification of inaccurate data and completion of incomplete data (Article 16);
• right to erasure (“right to be forgotten”) where there is no longer a legal basis for processing (Article 17);
• right to restriction of processing (Article 18);
• right to data portability – to receive your data in a structured, machine-readable format where processing is based on consent or a contract and carried out by automated means (Article 20);
• right to object to processing based on our legitimate interest, and to object at any time to processing for direct marketing purposes (Article 21);
• right to withdraw consent at any time, without affecting the lawfulness of processing carried out before the withdrawal (Article 7(3));
• right to lodge a complaint with a supervisory authority (Article 77).

How to exercise your rights

Submit your request by email to info@rejben.eu or in writing to Liudvinavo g. 24, LT-02241 Vilnius. To protect your data, we may ask you to verify your identity. We will respond no later than one month from receipt of the request. This period may be extended by a further two months where the request is complex or where a large number of requests has been received – we will inform you of any such extension and the reasons for it.

Complaints

If you believe your rights have been infringed, we encourage you to contact us first. You also have the right to lodge a complaint with:

11. Children’s data

Our website is not intended for persons under 14 years of age. Consent-based processing of personal data in the context of information society services is permitted where the person is at least 14 years old; for younger persons, the consent of a parent or guardian is required. If we become aware that data of a younger person has been collected without such consent, we will delete it without delay.

12. Automated decision-making

We do not make decisions concerning you based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you.

13. Changes to this policy

We may update this privacy policy, for example following changes in legislation or in the tools we use. The current version is always published on this page, with its date shown at the top of the document. In case of material changes, we will notify you in a prominent manner on the website.

14. Contact

For all matters relating to personal data: