Last updated: 29 October 2026
This policy explains what personal data we process when you visit vydraga.lt or contact us, why we do it, and what rights you have. We process data under the General Data Protection Regulation (GDPR) and Lithuanian law.
1. Who we are
The controller of your data is:
- UAB VYDRAGA, company code 159630559, VAT code LT596305515
- Address: Jurbarko g. 2a, LT-47183 Kaunas, Lithuania
- Email vydraga@vydraga.lt, phone +370 699 15559
For anything about your personal data, email vydraga@vydraga.lt.
2. Inquiries by form, email or phone
Our contact forms ask for your name, email address and message. The completed form is sent to our mailbox and is not stored on the website. We also process the details you give us when you email or call us.
We use these details to answer your inquiry and, where needed, to prepare a quote. Our legal basis is:
- if you contact us as a private individual: taking steps at your request before entering into a contract (Article 6(1)(b) GDPR);
- if you contact us on behalf of a company: our legitimate interest in answering inquiries and doing business with the company you represent (Article 6(1)(f) GDPR).
Giving us your details is voluntary, but without contact details we cannot reply.
Inquiries that do not lead to an order are kept for 2 years after our last exchange. If you become our customer, we keep our correspondence while we work together and for 10 years after that, the general limitation period for claims.
If an inquiry leads to a deal, we process contract and invoice data to perform the contract (Article 6(1)(b) GDPR) and to meet our obligations under accounting and tax law (Article 6(1)(c) GDPR). We keep them for 10 years after the contract is performed or the invoice is issued.
3. Spam protection and server logs
Our forms are protected from bots by hCaptcha, a service of Intuition Machines, Inc. (USA). It starts only when you open an inquiry form or reach the form on the contacts page. hCaptcha then receives your IP address, browser and device data and data on how you use the page, and uses them to tell people from bots. Our legal basis is our legitimate interest in protecting the forms from spam and abuse (Article 6(1)(f) GDPR). The data is transferred to the USA: Intuition Machines, Inc. participates in the EU–US Data Privacy Framework, which is covered by a European Commission adequacy decision (Article 45 GDPR). See hCaptcha’s privacy policy.
When you open any page, the server automatically logs your IP address, the time, the address of the page and your browser details. We need these logs to keep the website running and secure and to investigate faults and attacks; we do not use them for statistics or advertising. Logs are kept for 30 days.
For spam protection and server logs, our legal basis is our legitimate interest in protecting the website and its forms (Article 6(1)(f) GDPR).
4. Cookies and browser storage
The website has no analytics, advertising, social media plugins, embedded maps or videos. Fonts and icons load from our own website, and the language is set by the page address (/en/ for English).
We use no cookies that require your consent, so we show no cookie banner. Only strictly necessary information is stored in your browser, which needs no consent (Article 73(4) of the Lithuanian Law on Electronic Communications):
| Name | Set by | Type | Purpose | Expires |
|---|---|---|---|---|
wpEmojiSettingsSupports |
our website (WordPress) | session storage (sessionStorage) | checks whether your browser can display emoji, so text shows correctly | when you close the browser tab |
__cf_bm |
hCaptcha (hcaptcha.com) | cookie | tells people from bots and protects the form; set only when a form is used | 30 minutes |
You can delete cookies and other site data at any time in your browser settings.
5. Who receives your data
- Telia Lietuva, AB – our website hosting and email provider, acting as our processor. Its servers are in Lithuania.
- Intuition Machines, Inc. (USA) – provider of hCaptcha, which protects the forms from bots (see section 3).
- Accounting, audit, legal and IT service providers – where needed to keep the accounts, maintain the website or defend legal claims.
- Manufacturers and suppliers – where needed to handle your inquiry or prepare a quote.
- Public authorities (such as the State Tax Inspectorate) – only where the law requires it.
We transfer data outside the European Economic Area (EEA) only where needed (for example through hCaptcha, see section 3) and only with the safeguards the GDPR provides: a European Commission adequacy decision or standard contractual clauses.
6. Your rights
You have the right to:
- find out whether and what data we hold about you, and get a copy;
- have inaccurate data corrected or incomplete data completed;
- have your data erased or its processing restricted;
- receive the data you gave us under a contract in a structured, machine-readable format and pass it to another controller.
Right to object. Where we rely on legitimate interest (company inquiries, spam protection, server logs), you can object at any time on grounds relating to your particular situation. We will then stop, unless we can show compelling legitimate grounds that override your interests, or we need the data to establish, exercise or defend legal claims.
Send requests to the email address in section 1. We reply free of charge within one month. If we are unsure who sent a request, we may ask you to confirm your identity.
7. Complaints
If you think we handle your data wrongly, we would appreciate hearing from you first so we can try to put it right. You can also complain at any time to the State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija): L. Sapiegos g. 17, 10312 Vilnius, Lithuania, email ada@ada.lt, vdai.lrv.lt.
8. Changes to this policy
We update this policy when the website or the way we process data changes. The current version is always on this page, with the date at the top.