PRIVACY & COOKIE POLICY

Who is responsible for your data?

The controller of the personal data described in this policy is UAB Vilkritis, company code 124852557, Granito g. 7, LT-02300 Vilnius, Lithuania. For questions about your data or to exercise your rights, contact info@vilkritis.com.

Enquiries and customer information

When you contact us through the website or by email, we receive your name, email address, telephone number if provided, message and information about the page or form from which you contacted us. We use this information to respond, discuss your requirements and prepare an offer. We do not send advertising messages.

Contact details, addresses, order and invoice information needed to fulfil orders and keep accounting records are processed in our business management system, hosted on our own server.

Where you are a party to a contract, the legal basis is performing that contract or taking steps at your request before entering into it. We process business representatives’ contact details and correspondence on the basis of our legitimate interest in maintaining business relationships and responding to enquiries. Accounting data is also processed to meet legal obligations.

Job applications

When you send a CV, we receive your name, email address, CV and any optional message. We use these details to assess your application and contact you about employment opportunities. Assessment for a particular position is based on steps taken at your request before entering into a contract; initial assessment of an unsolicited application is based on our legitimate interest in recruiting staff.

You may separately agree to have your application retained for future recruitment. This choice is optional and does not affect consideration for the current position. You can withdraw this consent at any time by emailing info@vilkritis.com. Withdrawal does not affect processing that was lawful before it.

How long do we retain information?

Copies of enquiries held by the website are retained for one calendar year from receipt. Business emails are retained for 10 years from receipt so that we can retrieve correspondence and order history. Contract and accounting records are retained for the periods required by the applicable legislation. These are separate retention periods for different records; the general business email period does not apply to CVs.

Without consent for future recruitment, application data is retained only for the current selection process or initial assessment and is deleted when that purpose is complete. With separate consent, it is retained for future recruitment for six calendar months from receipt of the CV, or until consent is withdrawn if earlier. Longer retention is possible only where a specific legal obligation or the establishment, exercise or defence of legal claims requires it, and only to the necessary extent.

The website does not maintain a long-term CV archive: the submitted file is passed on by email and its temporary copy is removed after processing the submission. This does not automatically remove the email from the mailbox; applications received there are managed according to the recruitment retention periods above.

Cookies and your choices

Necessary cookies support website functions and remember your cookie choice. The vilkritis_consent cookie is stored for 180 days from your choice. It is used to remember whether you have accepted or rejected analytics and does not require separate consent.

Analytics is enabled only if you actively agree to it. Continuing to browse or leaving your browser settings unchanged is not consent. Rejecting analytics does not prevent you from using the enquiry or CV forms. You can change your choice through “Change cookie settings” in the website footer.

Website analytics

If you agree to analytics, Google Analytics 4 (GA4) is used to understand website visits and which pages are useful to visitors. The integration records page views and related technical information, such as browser and device information. We do not send names, email addresses, telephone numbers, messages or CV contents from the forms to Google Analytics.

The _ga and _ga_* analytics cookies are configured to last up to 730 days; their expiry may be renewed when you visit. GA4 user-level and event-level data is retained for 14 months, with the setting that resets the retention period on new activity disabled. Cookie expiry and analytics data retention are different periods. Aggregated statistical reports may remain available for longer.

Who may access the data?

Data is accessible to authorised employees who need it for their work and to service providers to the extent needed to provide their services. These include Hostinger for website hosting, Microsoft 365 for email, our business management system maintenance provider and, where you consent to analytics, Google. Service providers process data under the applicable agreements and data protection requirements.

Data may also be disclosed to authorities where required by law, or where necessary to establish, exercise or defend legal claims. We do not make your enquiries or applications publicly available.

Data security and international transfers

We apply organisational and technical measures appropriate to the nature of the data, including restricting access to people who need it for their work.

If a service provider processes data outside the European Economic Area, the transfer must have an applicable legal safeguard, such as a European Commission adequacy decision or standard contractual clauses with additional safeguards where needed. You can request information about the safeguards relevant to your data at info@vilkritis.com.

Your rights

Subject to the conditions set by law, you may access your data, request correction or erasure, restrict processing, receive your data in a transferable format, or object to processing based on legitimate interests. Where processing is based on consent, you may withdraw it. These rights are not absolute: for example, we may need to retain records to fulfil a legal obligation.

Send requests to info@vilkritis.com. We normally respond within one month of receipt. If the complexity or number of requests requires up to two additional months, we will inform you of the extension and its reasons within the first month. Where necessary, we may ask for information proportionate to verifying your identity. You also have the right to complain directly to the State Data Protection Inspectorate; contacting us first is not a requirement.

Changes to this policy

We update this policy when the way we process data or the applicable requirements change. The current version is published on this page. Last updated: 2026-09-17.