Privacy and cookie policy

Data controller

The controller of your personal data is It ranga, MB ("IT RANGA", "we"), company code 307398232, Eitminų g. 3, LT-12113 Vilnius, Lithuania. For anything related to personal data, write to [email protected] or call +370 614 71135.

We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR), the Lithuanian Law on Legal Protection of Personal Data and the Law on Electronic Communications.

What data we process and why

The site has no registration or contact forms: you reach us by email or phone. We process only the data needed for the purposes below.

• Inquiries and correspondenceWhen you write or call, we process your name, email address, phone number, company name and the content of your inquiry. The purpose is to answer, prepare a proposal and conclude and perform a contract. The legal basis is steps prior to entering into a contract and performance of a contract (Art. 6(1)(b) GDPR) and our legitimate interest in answering inquiries (Art. 6(1)(f)). We keep correspondence while the conversation is ongoing and for no longer than 2 years after the last contact; once a contract is concluded, for its term and the statutory retention period for accounting records (10 years).
• Website statisticsOnly with your consent do we use Google Analytics 4 to understand which pages are visited, where visitors come from and which devices they use. It collects a pseudonymous visitor identifier (in a cookie), pages viewed, time and duration of the visit, approximate location at city level, browser and device type and the traffic source. The IP address is used only to derive the location and is not stored by Google Analytics. The legal basis is consent (Art. 6(1)(a) GDPR), which you can withdraw at any time. Statistics data is retained in Google Analytics for no longer than 14 months.
• Technical data and securityTo keep the site running and protected from abuse, our servers and content delivery network automatically record the IP address, the time and address of the request and the browser type. The legal basis is our legitimate interest in the security and operation of the site (Art. 6(1)(f) GDPR). These records are kept for the limited time needed to detect and investigate incidents.

Cookies and similar technologies

Cookies are small files your browser stores on your device. On your first visit we show a notice where you can accept or decline statistics cookies. Until you accept, no statistics cookies are set. You can change your choice at any time via "Cookie settings" in the footer or here:

Cookie settings

We use Google Tag Manager to manage tags. It sets no cookies itself and only loads Google Analytics according to your choice. If you decline statistics cookies, Google may receive only anonymous technical signals without cookies or identifiers (Google Consent Mode), which cannot be linked to you.

You can also delete or block cookies in your browser settings. The site works without statistics cookies.

Recipients and transfers outside the EU

We do not sell personal data or share it with third parties for marketing. It is accessed only by service providers who process it on our behalf and on our instructions:

• Google Ireland Limited (Google Analytics, Google Tag Manager) for traffic statistics. Data may be processed in the United States; Google LLC is certified under the EU-U.S. Data Privacy Framework, and the EU standard contractual clauses apply in addition.
• Cloudflare, Inc. for site protection and content delivery (CDN). It processes technical data such as IP addresses and is certified under the EU-U.S. Data Privacy Framework.
• Hosting, email and other IT providers bound by data processing agreements.
• Public authorities, only where the law requires it.

Your rights

Regarding your personal data you have the right to:

• access the data we process and obtain a copy;
• have inaccurate data corrected and incomplete data completed;
• have your data erased ("right to be forgotten");
• restrict processing;
• receive your data in a structured format and have it transferred to another controller;
• object to processing based on legitimate interest;
• withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.

Send requests to [email protected]. We reply within one month at the latest. We may ask you to confirm your identity so that data is not disclosed to anyone else.

If you believe your rights have been infringed, you can lodge a complaint with the State Data Protection Inspectorate of Lithuania (L. Sapiegos g. 17, 10312 Vilnius, [email protected], vdai.lrv.lt). We would appreciate the chance to resolve the matter with you first.

Data security

The site is served only over encrypted HTTPS. Only the people who need it for their work have access to inquiries and systems, and the systems are kept up to date. No transmission over the internet is completely secure, however, so please do not send more data by email than your inquiry requires.

Changes to this policy

We may update this policy when the services we use or the law change. The current version is always published on this page, with the update date at the top. We will announce material changes with a notice on the site.