Privacy Policy

Last updated: 30 July 2026

This Privacy Policy explains how JSC “IT logika” (“DBOX”, “we”) collects and processes personal data when you visit this website or contact us. We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Lithuanian law.

Data controller

JSC “IT logika”
Kalnelio st. 23, Panevėžys, Lithuania
Email: info@dbox.lt
Phone: +370 665 48301

What data we collect

• Contact form data — your name or organisation, email address and the content of your message, provided voluntarily when you contact us.
• Technical data — IP address, browser type, device type, pages visited and time spent, collected only where you have consented to statistics cookies.
• Correspondence — emails and other communication you send us.

Why we process it

• To respond to your inquiry and provide the information or demonstration you requested (legitimate interest, or performance of a contract where applicable).
• To operate, secure and improve this website (legitimate interest).
• To analyse aggregated website usage (only with your consent).

Legal basis

Depending on the purpose, we rely on your consent (Art. 6(1)(a) GDPR), the performance of a contract or pre-contractual steps (Art. 6(1)(b)), our legitimate interests (Art. 6(1)(f)), or compliance with a legal obligation (Art. 6(1)(c)).

How long we keep it

Inquiry correspondence is retained for up to 2 years after our last contact, unless a longer period is required for contractual or legal reasons. Website analytics data is retained for up to 14 months. Consent records are kept for the duration of the consent and 1 year thereafter.

Sharing your data

We do not sell personal data. We may share it with service providers acting on our instructions — website hosting, email and form delivery, and analytics — under written data processing agreements. Where a provider is located outside the European Economic Area, transfers are safeguarded by the European Commission’s Standard Contractual Clauses or an adequacy decision.

Third-party content

Some pages embed video hosted by YouTube (Google Ireland Limited). Embeds use the privacy-enhanced youtube-nocookie.com domain, so YouTube does not set advertising cookies unless you interact with the player. Google may still process technical data such as your IP address in order to deliver the video. See Google’s own privacy notice for details.

Your rights

• Access a copy of the personal data we hold about you.
• Have inaccurate data corrected, or incomplete data completed.
• Have your data erased, where a legal basis for retention no longer applies.
• Restrict or object to processing based on legitimate interests.
• Receive your data in a portable, machine-readable format.
• Withdraw consent at any time, without affecting processing that already took place.

To exercise any of these rights, write to info@dbox.lt. You also have the right to lodge a complaint with the Lithuanian State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija).

Security

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss or disclosure, including encrypted transport, restricted access and regular review of our systems.

Changes

We may update this policy to reflect changes in our practices or legal requirements. The date above shows when it was last revised.