n

1. Data Controller

n

UAB “DPU systems”, company code 302442290, registered address: Gedimino pr. 45-4, Vilnius, Lithuania (hereinafter “we”, “us” or “DPU Systems”) is the data controller responsible for your personal data collected through this website (dpu.lt).

n

Contact: kaplerisdomantas@gmail.com

nn

2. What Data We Collect

n

When you submit an enquiry or audit request form on our website, we collect the following personal data:

n

    n
  • Full name

    • n

  • Business or clinic name

    • n

  • City

    • n

  • Email address

    • n

  • Phone number (optional)

    • n

  • Message content (optional)

    • n

n

We also record the page from which the enquiry was submitted (source) and the language of your session.

nn

3. Purpose and Legal Basis for Processing

n

We process your personal data for the following purposes:

n

    n
  • Responding to your enquiry – to contact you and provide the requested information or quote. Legal basis: your consent (Art. 6(1)(a) GDPR) given by submitting the form.

    • n

  • Service delivery – if you become a client, to fulfil our contractual obligations. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).

    • n

  • Legal obligations – where required by applicable law. Legal basis: compliance with a legal obligation (Art. 6(1)(c) GDPR).

    • n

nn

4. Data Retention

n

Enquiry data submitted via forms is retained for up to 3 years from the date of submission or until you request its deletion. Client contract data is retained for the duration required by applicable Lithuanian accounting and tax law (generally 10 years).

nn

5. Data Sharing

n

We do not sell, rent or trade your personal data. Data may be shared with:

n

    n
  • Email service providers (e.g. Google Workspace) used to receive and store enquiry notifications.

    • n

  • Hosting provider – Hetzner Online GmbH (server located in EU).

    • n

  • Competent authorities if required by law.

    • n

n

All processors act under data processing agreements and process data only on our documented instructions.

nn

6. Cookies

n

Our landing pages do not set first-party cookies. Embedded services such as Google Fonts may set their own cookies. We recommend reviewing Google’s privacy policy for details.

nn

7. Your Rights

n

Under the GDPR you have the right to:

n

    n
  • Access – request a copy of your personal data we hold.

    • n

  • Rectification – request correction of inaccurate data.

    • n

  • Erasure (“right to be forgotten”) – request deletion of your data where there is no compelling reason for its continued processing.

    • n

  • Restriction – request that we restrict processing of your data.

    • n

  • Objection – object to processing based on legitimate interests.

    • n

  • Data portability – receive your data in a structured, machine-readable format.

    • n

  • Withdraw consent – at any time, without affecting the lawfulness of processing before withdrawal.

    • n

n

To exercise any of these rights, contact us at kaplerisdomantas@gmail.com. We will respond within 30 days.

n

You also have the right to lodge a complaint with the State Data Protection Inspectorate of the Republic of Lithuania (vdai.lrv.lt).

nn

8. Data Security

n

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or destruction. Data is transmitted over encrypted HTTPS connections.

nn

9. Changes to This Policy

n

We may update this Privacy Policy from time to time. The current version is always available at dpu.lt/en/privacy-policy/. Material changes will be communicated via a notice on our website.

nn

10. Effective Date

n

This Privacy Policy is effective as of 1 June 2025.

n