1. Data controller
MB Duevo, company code 308103674, registered office at Gedimino g. 22A-14, LT-44319 Kaunas, Lithuania. Email: egle@duevo.eu. Data on the company are collected and stored in the Register of Legal Entities of the Republic of Lithuania.
2. Data we process and why
Email correspondence. If you email Duevo, it processes the information in your message and attachments, such as your name, email address, organisation and role. This is used to respond, assess or provide requested services, manage the business relationship and protect legal claims. The legal basis is Article 6(1)(b) GDPR where you request pre-contractual steps or are personally a party to a contract. Otherwise, including where you represent an organisation, it is Duevo's legitimate interest under Article 6(1)(f) GDPR to answer enquiries and conduct its business.
Technical logs. The hosting infrastructure may record limited data such as an IP address, request date and time, requested page, browser identifier and response status. This is used only for website security, fault diagnosis and legal claims, based on Duevo's legitimate interests under Article 6(1)(f) GDPR.
Legal records. Contract, invoicing, accounting and tax data are processed where necessary to comply with Lithuanian law under Article 6(1)(c) GDPR.
Email data come from you or the organisation you represent; technical data come from the hosting systems. You do not have to contact Duevo, but without the information needed to understand your request, Duevo may be unable to respond or enter into a contract.
3. Recipients and international transfers
Data may be accessed, only where necessary, by providers of hosting, email, IT, accounting or legal services and by public authorities where required by law. Duevo does not sell personal data. If a provider transfers data outside the European Economic Area, the transfer is protected by an adequacy decision or appropriate safeguards under Article 46 GDPR, normally the European Commission's standard contractual clauses. Details are available by email.
4. Retention
General enquiries that do not lead to an engagement are normally kept for no more than 24 months after the last substantive exchange. Contract and related business records are kept for the relationship and then for applicable statutory retention and limitation periods. Technical logs are kept only for the shortest period reasonably necessary for security and fault diagnosis under the hosting configuration. Data may be retained longer for an active dispute, legal claim or authority request.
5. Your rights
Subject to the GDPR, you may request access, correction, deletion or restriction, receive portable data where Article 20 applies, and object to processing based on legitimate interests. Email egle@duevo.eu. Duevo may need to verify your identity and will normally respond within one month. You may also complain to the State Data Protection Inspectorate, L. Sapiegos g. 17, LT-10312 Vilnius, Lithuania, at vdai.lrv.lt.
6. Cookies and similar technologies
Current position. Duevo does not use cookies, local storage, analytics, advertising pixels, embedded media or similar technologies to store or access information on your device. A cookie-consent banner is therefore not required. Server-side security logs are not cookies. If this changes, Duevo will update this policy and obtain consent before enabling any non-essential technology.
7. Automated decisions and changes
Duevo does not use automated decision-making or profiling. This policy will be updated if the website, service providers or processing activities change. The current version and update date will remain available on duevo.eu.