1. DATA CONTROLLER

Data is processed by: UAB “Artrosana”, Vakarinė g. 105-101, Vilnius, Lithuania, LT-06298, company registration number: 306159539, email for privacy-related inquiries: info@artrosana.lt (hereinafter – the “Company”).

2. TYPES OF DATA PROCESSED

The following personal data is collected and processed on the website:

a) Contact form data: name, email address, and message;

b) Technical data: a cookie necessary for the operation of the website – ASP.NET_SessionId (used for session identification and to ensure technical functionality).

No analytical, advertising, or profiling cookies are used.

3. PURPOSES AND LEGAL BASES FOR DATA PROCESSING

Contact form data is processed in order to respond to your inquiry and/or to prepare for potential cooperation. The legal basis is legitimate interest or steps taken prior to entering into a contract (Article 6(1)(b) and (f) of GDPR).

Technical data is processed to ensure the functionality of the website and IT security (legitimate interest).

4. COOKIES AND OTHER TECHNOLOGIES

The website uses only one technical cookie – ASP.NET_SessionId, which is necessary for the proper functioning of the website. It is not used for analytics, advertising, tracking, or profiling purposes. User consent is not required for this cookie.

5. DATA RETENTION PERIODS

Contact form data is retained for up to 12 months from the date of the last communication, unless a longer retention period is required by applicable law (e.g., if a contract is subsequently concluded).

Technical data is stored only for the duration of the session.

6. DATA RECIPIENTS AND TRANSFERS TO THIRD PARTIES

Data is not transferred to third parties for commercial purposes and is not sold.

Data may be shared with IT service providers responsible for the technical operation of the website, in compliance with applicable data protection requirements.

Data is not transferred outside the European Economic Area (EEA).

7. NO PROFILING OR AUTOMATED DECISION-MAKING

The Company does not carry out profiling, remarketing, automated generation of commercial offers, or decision-making that produces legal or similarly significant effects on individuals.

8. DATA SUBJECT RIGHTS

You have the right to:

• obtain information about your processed data;
• request correction of inaccurate data;
• request deletion of data or restriction of processing where there is a legal basis;
• object to data processing;
• lodge a complaint with the competent supervisory authority.

Requests regarding data subject rights can be submitted via email: info@artrosana.lt.

9. POLICY APPLICATION AND CHANGES

The Company may update this Privacy Policy to reflect changes in legal requirements or website functionality. The latest version is published on the website.