Privacy policy
In connection with Weenvo activities we process your personal data according to the provisions of Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of Personal Data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation; hereinafter: GDPR). Below we provide you with all the important information about processing personal data:
1. WHO IS THE CONTROLLER OF YOUR PERSONAL DATA?
Data Controller of your personal data is UAB Weenvo with its registered office in Vilnius, Lithuania, address: Vytauto g. 59-2a, Vilnius, LT-08122, entered into the registry of entrepreneurs conducted in Lithuania under number: 305704513.
2. HOW CAN YOU CONTACT A DATA CONTROLLER?
Contact with us is possible via:
- e-mail to the address: info@weenvo.com,
- mail, by sending a letter to the address: Vytauto g. 59-2a, Vilnius, LT-08122, Lithuania.
3. WHAT ARE LEGAL BASIS FOR PROCESSING YOUR PERSONAL DATA?
The legal basis for processing personal data varies depending on the situations described below and depends on the interaction you have with us:
|
If you visit our website |
We may process your personal data in order to: – ensuring the proper website operation, – traffic monitoring, – verification of use of the website, – displaying ads and conducting marketing activities, – possible preventing actions contrary to generally applicable laws. We save the data in particular as part of cookies and logs regarding visiting the website. This data may be your IP address or registering the actions taken on the website. The legal basis for processing the data in this manner is Article 6(1)(f) of the GDPR, enabling data processing when it is necessary for the purposes of the legitimate interests pursued by the controller or by a third party. The legitimate interests of the controller in this case is ensuring the proper operation of the website, carrying on statistics on the operation of the website and on the use of the website by its users, displaying ads, preventing fraud and law violations. |
|
If you contact us to establish cooperation between you and us or If you already are our client, service provider, subcontractor or you cooperate with us on the basis of a civil law contract |
If you contact us to establish a business cooperation, then we process your personal data in order to take actions on your request before concluding the agreement. If you already are our client, service provider or cooperate with us on the basis of a civil law contract we process your personal data in order to perform of our contract. In these cases the legal basis for processing the data in this manner is Article 6(1)(b) of GDPR, enabling data processing when it is necessary: – to take action at the request of the data subject before entering into a contract, – for conclusion of contract, – for execution of contract, to which the data subject is a party. Furthermore, we process your data in order to fulfil our legal obligations regarding concluding contracts, especially in connection with accounting and tax – on the basis of the Article 6(1)(c) of the GDPR, enabling data processing when it is necessary for compliance with a legal obligation to which the controller is subject. We also process your data in order to defend against claims and pursuing claims, which consists our legitimate interests – in that case processing of the personal data is based on the Article 6(1)(f) of GDPR which states that personal data processing is lawful if it is necessary for the purposes of the legitimate interests pursued by the controller |
|
If you are the representative of an entity interested in our services or our client or service provider – i.e. an entities which have already concluded an agreement with us |
We process your personal data in order to conclude and perform of the contract between us and our client or service provider. The legal basis for processing your personal data is the Article 6(1)(f) of GDPR which states that personal data processing is lawful if it is necessary for the purposes of the legitimate interests pursued by the controller or by a third party. The legitimate interests of the controller in this case is concluding or performing of the contract between us and our Client which requires contacting the representatives of the Client. |
| If you contact us by e-mail, letter, phone or you provide us with your contact details via our website |
We process your personal data, such as your name and surname, e-mail address, correspondence address, phone number, content of the correspondence or conversation in order to contact you and exchange messages. The legal basis for processing your personal data is the Article 6(1)(f) of GDPR enabling data processing when it is necessary for the purposes of the legitimate interests pursued by the controller or by a third party. The legitimate interests of the controller in this case are the necessity of data processing in order to contact people and providing them with a response to the submitted content. |
| If you visit our social media profiles on Facebook, Instagram, LinkedIn, TikTok, YouTube, X, follow them or react on our posts |
We process your personal data to monitor traffic and conduct marketing activities regarding our services. Within these social networks, we may target you with marketing content (display posts marked as sponsored) in accordance with the terms and conditions of the indicated platforms. We process data related to the activities of our profile on Facebook, Instagram, LinkedIn, TikTok, YouTube or X on the basis of the provision of Article 6(1)(f) of GDPR. The legitimate interest of the controller in this case is conducting statistics, marketing activities and enabling you to interact with our profiles. |
| If you subscribe to our newsletter or other e-mail marketing communication |
We process your personal data in order to send the newsletter and conduct marketing activities regarding our services. The legal basis for processing your personal data is the Article 6(1)(f) of GDPR which enabling data processing when it is necessary for the purposes of the legitimate interests pursued by the controller or by a third party. The legitimate interests of the controller in this case are conducting marketing and advertising activities. Please note that in order to present an offer using the means of electronic communication or telecommunications devices, we need to obtain your consent at first, in accordance with the requirements arising from separate provisions of law. Please check point 6 below for the details of your right to withdraw consent. |
| If you contact us to participate in a recruitment process, complete our recruitment form or send us your resume |
We process your personal data to conduct the recruitment process. Additionally, if you give us your consent, we process your personal data for the purpose of contacting you for future recruitment. The legal basis for processing your personal data as part of the ongoing recruitment process is Article 6(1)(b) of the GDPR, which allows for the processing of personal data when it is necessary to conclude a contract with the data subject. The scope of the processed data is based on the provisions of the law, which indicates the basic data that an employer may obtain during the recruitment process. In the situation where you provide other data not covered by the law, the legal basis for the processing of personal data is Article 6(1)(a) of the GDPR, which allows for the processing of personal data on the basis of the data subject’s consent. If you express a wish to participate in future recruitments, the legal basis for processing personal data is also your consent. |
4. WHO WE SHARE YOUR PERSONAL DATA WITH?
In order to properly provide our services, we use the services of certain third parties. Therefore, your personal data provided may be transferred to:
- entity providing server and hosting services,
- entity providing accounting services,
- entity providing analytical, email, marketing services, as well as managing the YouTube platform – Google Ireland Ltd. and Google LLC based in Mountain View, California,
- entity managing the Facebook and Instagram platforms, as well as Facebook Pixel analytics plug-ins – Meta Platforms Ireland Limited and Meta Platforms Inc. based in Mountain View, California,
- entity managing LinkedIn platform, as well as LinkedIn Ads analytics plug-ins – LinkedIn Ireland Unlimited Company and LinkedIn Corp. based in San Francisco, California, USA,
- entity managing TikTok platform – TikTok Technology Limited based in Ireland,
- entity managing X platform – Twitter International Unlimited Company based in Ireland,
- entities responsible for the operation of job portals where we post our employment offers,
- other subcontractors and service providers, especially in the field of IT, law firms and legal and accounting consultants, recruiters.
Due to the possibility of processing the personal data by entities such as Google, LinkedIn, Meta Platforms, TikTok Technology Limited or Twitter International Unlimited Company your personal data may be subject to the transfer outside the European Economic Area. The legal basis for transferring data outside the EEA is Data Privacy Framework (in case of Meta Platforms, Google, LinkedIn, Twitter International Unlimited Company) and Standard Contractual Clauses (in case of Tik Tok Technology Limited), approved by the European Commission.
5. HOW LONG WE KEEP YOUR PERSONAL DATA?
We try to keep your personal data for as long as we actually need it – after that time we delete it:
- If you are a visitor to our website – we process your personal data for as long as you use the website and for up to 14 months after your last visit.
- If you have established cooperation with us, bought our services and you are our client, service provider, co-worker or representative of our client or service provider – we process your personal data for 3 years after ending our business cooperation. The data processed in order to fulfil accounting and tax obligations will be processed for 6 years after the end of tax year in which the tax liability payment term has expired,
- If you contacted us by e-mail, letter, phone or provide your personal data within our website – we process your personal data for as long as our contact is ongoing and for next 3 months,
- If you subscribed to our newsletter or our marketing mailing list – we process your personal data for this purpose until you unsubscribe from our mailing list or until we finish conducting our promotional activities depending on which of these events occurs first,
- If you follow us within our social media platforms, react to our posts or contact us via our social media profiles on Facebook, Instagram, LinkedIn, TikTok, YouTube or X – we process your personal data for the duration of the interaction between you and our profile and until one year after the interaction ends,
- If you are participating in the recruitment process, in the case of processing as part of the ongoing recruitment – we process your personal data until the recruitment process is completed. However, if you have agreed to participate in future recruitment – we process your personal data for a period of up to 1 year from the moment of submission of recruitment documents.
6. WHAT ARE YOUR RIGHTS REGARDING THE PROCESSING OF YOUR PERSONAL DATA?
In relation to the processing of your personal data, you have the following rights:
| Right of access | You have the right to obtain confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, access to the personal data and the information specified in Article 15 of the GDPR. |
| Right to rectification | You can request immediate rectification of inaccurate personal data and completion of incomplete personal data. |
| Right to erasure |
You have the right to request the erasure of your personal data where one of the grounds specified in Article 17(1) of the GDPR applies. This includes situations where: – the data are no longer necessary for the purposes for which they were collected; – – you have withdrawn your consent and there is no other legal basis for the processing – you have objected to the processing and there are no overriding legitimate grounds; – the data have been unlawfully processed; – erasure is required for compliance with a legal obligation. However, your right to erasure does not apply where the processing is necessary for one of the exceptions listed in Article 17(3) of the GDPR, including: -compliance with a legal obligation; – the establishment, exercise or defence of legal claims; – freedom of expression and information. |
| Right to restriction of processing |
You can request restriction of processing if: – you contest the accuracy of the personal data – for a period enabling us to verify the accuracy of the personal data; – the processing is unlawful you oppose the erasure of the personal data and request the restriction of their use instead; – we no longer need the personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defence of legal claims; – you have objected to processing pending the verification whether our legitimate grounds override yours. |
| Right to data portability | You have the right to receive your personal data, which you have provided to us, in a structured, commonly used and machine-readable format, and to transmit those data to another controller, where the processing is based on your consent or on a contract and is carried out by automated means (Article 20 GDPR). |
| Right to lodge a complaint |
You have the right to lodge a complaint with the supervisory authority – State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija). Address: L. Sapiegos g. 17, LT-10312 Vilnius, Lithuania |
| Right to object | You have the right to object to the processing of your personal data, to the extent that the processing is based on our legitimate interest. |
| Right to withdraw the consent | If personal data is processed based on the consent, you have the right to your consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. The right to withdraw the consent also applies to the personal data processing in situations where other legal provisions require consent (e.g. in case of sending marketing messages based on the regulations of ePrivacy directive). |
7. WHAT ELSE YOU SHOULD KNOW ABOUT?
We will not process your personal data for automated decision-making based on profiling, referred to in Article 22(1) and 22(4) of GDPR.
Providing personal data in voluntary, however:
- in the case of data processing in order to conclude or perform of the contract with us failure to provide data may result in our inability to provide services,
- in the case of participation in recruitment, failure to provide the personal data may result in the inability to consider the candidate as part of the recruitment process.
COOKIE FILES
Cookies are small text files stored on your device (computer, tablet, smartphone) when you visit a website. They enable or improve the functionality of the website, help us understand how users interact with the site, and may allow us to conduct personalized marketing. Cookies may be placed directly by us (first-party cookies) or by third parties we cooperate with (third-party cookies).
What personal data may be processed?
Through cookies, we may process certain personal data such as:
- your IP address,
- information about your device or browser,
- pages visited and time spent,
- source of traffic (referral),
- your interactions with website content.
Processing of personal data via cookies is carried out in accordance with the General Data Protection Regulation (GDPR) and the Law on Electronic Communications of the Republic of Lithuania (Elektroninių ryšių įstatymas).
The following cookies can be distinguished:
Session cookies: these are stored on your device for the time that you use our website (they are deleted when you close your browser). Session cookies enable the correct use of our website. Blocking them may result in errors or prevent you from using our website.
Persistent cookies: these are stored on your device until you delete them or until they expire.
In addition, cookies are divided into the following categories:
- Technical cookies – these cookies are necessary for the proper display and operation of the website. These cookies can also detect malfunctions of the site and help to fix errors, as well as allow to verify the extent of the user’s consents to other cookies. Blocking them may cause the site to malfunction.
- Analytical and statistical cookies – these cookies enable statistics on how users use our website. Among other things, they allow us to verify website traffic, count the number of hits, measure how the website is used, and analyze what devices and browsers users are using. We use tools such as Google Analytics to conduct analytics activities. These tools may require the use of cookies.
- Marketing cookies – cookies responsible for carrying out advertising and marketing activities, in particular related to the use of Google Ads services. They also include remarketing activities, i.e. encouraging users to revisit our website. Consenting to the use of these cookies will allow us to target ads to you, based on your previous activities on our website.
- Social cookies – these are cookies associated with the social networks we use, such as Facebook, Instagram, LinkedIn, TikTok, YouTube or X. Accepting them will allow us to associate your visit to the site with our social media profiles.
We use a cookie consent banner that appears when you first visit our website. It allows you to:
Accept all cookies;
Reject non-essential cookies.
You can withdraw your consent at any time by changing your cookie settings via the banner or your browser settings.
It is possible to restrict or disable cookies within your device, using your browser settings. Web browsers allow you to disable all cookies or a portion of them (such as those from third parties). If you disable cookies in part, cookies generated by our website may be stored on your device, enabling the website to function properly. However, if the use of cookies is restricted, the use of our particular services provided may be limited and in some cases may not be possible.
Guides for managing cookies in popular browsers:
Strictly necessary cookies are used based on our legitimate interest (Article 6(1)(f) GDPR).
All other types of cookies are used only with your consent (Article 6(1)(a) GDPR and Article 73 of the Law on Electronic Communications of the Republic of Lithuania).
CHANGES TO THE PRIVACY POLICY
We reserve the right to modify or amend this Privacy Policy at its own discretion from time to time. Your continued use of our website constitutes your acceptance of those changes.
This version was last updated on 14 October 2025 and historic versions can be obtained by contacting us.