top of page

Privacy Policy

In processing your personal data, we comply with the General Data Protection Regulation (EU) 2016/679 (hereinafter – “GDPR”), adopted on 27 April 2016, the Law on Legal Protection of Personal Data of the Republic of Lithuania, as well as other applicable legal acts and requirements established by supervisory authorities regarding personal data processing.

1. WHAT IS PRIVACY POLICY?

1.1. By reading this privacy policy (hereinafter – the “Privacy Policy”), you will learn how and for what purposes your personal data is processed, where it is obtained from, to whom it may be disclosed, how it is protected, and what rights you have as a data subject.

1.2. This Privacy Policy establishes the privacy rules applicable to the use of our website available at https://www.difinno.com/ (hereinafter – the “Website”) and our social media accounts at https://www.facebook.com/difinno/ and https://www.linkedin.com/company/difinno/ (hereinafter – the “Accounts”). Please note that the above-mentioned social networks have their own privacy policies, and we are not responsible for those policies or for the personal data collected by those social networks when providing their services. Before providing your personal data through these platforms or using any of their services, we recommend reviewing their privacy policies.


1.3. Please read this Privacy Policy carefully, as it applies each time you visit the Website or when we are engaged in pre-contractual or contractual relations with you. If you do not agree with this Privacy Policy, you should not continue using the Website, Services, or Accounts.


1.4. For the purposes of this Privacy Policy, the term “Personal Data” means any information that enables us to identify you directly or indirectly, such as your name, surname, email address, telephone number, location data, online identifier, information relating to your characteristics, and other personal data as defined in the GDPR.

2. WHO ARE WE?

2.1. We are DIFINNO, MB, legal entity code 306300096, email: info@difinno.com. We provide business process automation, analysis, optimization, implementation, maintenance, and related consulting services designed to help businesses operate more efficiently, save time, and reduce manual work. We are also the controller of your personal data submitted through the Website, Accounts, and/or other communication channels for the purposes of providing our services.

3. PRINCIPLES OF PERSONAL DATA PROCESSING

3.1. When processing personal data, we adhere to the following principles:


Lawfulness, Fairness and Transparency. Personal data shall be processed lawfully, fairly, and transparently in relation to the data subject.


Purpose Limitation. Personal data shall be collected for specified, explicit, and legitimate purposes and not further processed in a manner incompatible with those purposes.


Accuracy. Personal data shall be accurate and, where necessary, kept up to date. All reasonable steps shall be taken to ensure that inaccurate personal data is erased or rectified without delay.


Data Minimisation. Only personal data that is necessary for the purposes for which it is processed shall be collected.


Integrity and Confidentiality. Personal data shall be processed in a manner that ensures appropriate security, including protection against unauthorised or unlawful processing and against accidental loss, destruction, or damage, through the use of appropriate technical and organisational measures.


Storage Limitation. Personal data shall be kept in a form that permits identification of data subjects for no longer than is necessary for the purposes for which the data is processed

4. FOR WHAT PURPOSES IS YOUR PERSONAL DATA COLLECTED AND STORED?

Your Personal Data may be processed for the following purposes:


4.1. Provision of Services


Name and surname; date of birth; personal identification number; taxpayer identification number; residential address; workplace address; telephone number; email address; details of other communication channels (e.g., social media account information); correspondence data; place of work; job position held; information relating to clients’ representatives, employees, clients, and beneficial owners; other information related to pre-contractual relations or the performance of agreements concluded between you and us and the provision of Services.


We do not request or process special categories of personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, health data, or data concerning your sex life or sexual orientation unless required by law.


Personal data processed for service provision purposes is retained for 10 (ten) years after the termination of the last service agreement concluded with us, unless a longer retention period is required by applicable laws and regulations.


4.2. Direct Marketing


We may send you notifications, newsletters, offers, information about our services and events, as well as expert insights.


For direct marketing purposes, we may process the following personal data:


Name and surname; email address; telephone number; job position; any other information voluntarily provided by you.


Personal data processed for direct marketing purposes is retained for the duration of your consent or for 5 years from the date consent was granted.

 

4.3. Administration of Enquiries


We process your personal data when you contact us by: mail; completing an enquiry form on the Website; using a self-service business data reporting platform; telephone; booking a call by phone, Microsoft Teams, or another online collaboration platform; visiting our office.


For the administration of enquiries received through electronic communication channels, we may process:


Name and surname; IP address; telephone number; email address; address; workplace address; name of the represented company; any other information you provide to us.


Personal data processed for enquiry administration purposes is retained for 2 (two) years from the date the enquiry is received.


4.4. Administration of Social Media Channels


For the management and administration of our social media accounts (Facebook and LinkedIn), we collect data that you provide as a user of those platforms when: posting comments; sending messages; expressing reactions using “Like”, “Share”, and similar functions; engaging in other forms of communication.


Our current social media accounts:


„LinkedIn“ – https://www.linkedin.com/company/difinno/
„Facebook“ – https://www.facebook.com/difinno/


For social media administration purposes, we may process: information voluntarily provided by you in accordance with the privacy settings of the social media platform; your profile name; profile picture; public comments posted on our accounts; enquiries submitted to us through social media.


Please note that information on Facebook and LinkedIn is stored according to the terms and privacy policies established by the owners of those platforms and your selected privacy settings. We recommend reviewing the privacy notices of these third parties and contacting them directly if you have questions about how they use your personal data.

5. WHAT ARE COOKIES USED FOR?

5.1. When you visit the Website, information about you is collected through cookies and similar technologies. Cookies are small files temporarily stored on your device’s hard drive that allow us to recognise you during future visits to the Website, save your browsing history and preferences, personalise content, speed up searches, create a more convenient and user-friendly environment, and deliver content more efficiently and reliably. Cookies are a common practice used on websites to facilitate their operation and improve the user experience.


5.2. Information collected through cookies is used to:


a) ensure the functionality of the Website;


b) improve and develop the Website so that it better meets your needs;


c) analyse the development of services and the use of the Website;


d) deliver targeted marketing solutions.

6. WHAT TYPES OF COOKIES DO WE USE?

6.1. We use the following categories of cookies:


a) Essential (Technical) Cookies. These cookies are necessary for the operation of the Website. Your consent is not required for these cookies.


b) Functional Cookies. Although not strictly necessary for the operation of the Website, these cookies significantly improve its performance, quality, and user experience. They record your preferences and allow the Website to be tailored to your needs.


c) Analytical (Statistical) Cookies. These cookies are used to analyse visitor navigation patterns and Website usage statistics. The information collected is processed anonymously.


d) Targeting or Advertising Cookies. These cookies are used to display offers or other information that may be relevant and of interest to you.


6.2. Cookies Used on this Website:

Cookie Name
Purpose
Retention Period
Type
SSR-caching
Improves Website performance
24 hours
Essential
consent-policy
Stores cookie consent preferences
12 months
Essential
TS*
Security and fraud prevention
Session
Essential
bSession
Measures system efficiency
24 hours
Essential
fedops.logger.sessionId
Measures system efficiency and stability
12 months
Essential
_wixAB3|*
Website testing purposes
6 months
Essential
server-session-bind
Security purposes
Session
Essential
client-session-bind
Security purposes
Session
Essential
oAuthState
User authentication identification
Session
Essential
wixSession
Security and Website stability purposes
12 months
Essential
sec-fetch-unsupported
Detects browser limitations affecting Website functionality
Session
Essential
_GRECAPTCHA
Security purposes
6 months
Analytical
NID
Stores user preferences
6 months
Analytical
wixLanguage
Stores language preferences
6 months
Functional
XSRF-TOKEN
Security purposes
Session
Essential
hs
Security purposes
Session
Essential
svSession
Identifies user login session
12 months
Essential

6.3. You may withdraw your consent to the use of cookies at any time by changing your browser settings so that it no longer accepts cookies. The exact procedure depends on your operating system and browser. More information about cookies, their use, and opt-out options can be found at https://allaboutcookies.org/.


6.4. In some cases, particularly if technical or functional cookies are disabled, if you refuse cookies, or if cookies are deleted, browsing speed may be reduced, certain Website functionalities may become unavailable, and access to the Website may be restricted.

7. USE OF YOUR PERSONAL DATA FOR DIRECT MARKETING

7.1. With your explicit consent, your personal data may be used for direct marketing purposes in order to provide you with notifications, newsletters, offers, information about our services and events, as well as expert insights.


7.2. For this purpose, we process the following personal data: name and surname; company name; email address.


7.3. By granting permission for the processing of your data for direct marketing purposes, you also authorise us to contact you through the communication channels you have provided.


7.4. Even if you have given consent for the processing of your personal data for direct marketing purposes, you may withdraw that consent at any time, either entirely or partially. You may submit a withdrawal request by email to info@difinno.com. The request must clearly indicate your name, surname, and/or other registration details (if applicable). If we are unable to identify you based on the information provided, we may request additional information necessary to verify your identity.


7.5. Upon withdrawal of your consent, we will immediately cease processing your personal data for direct marketing purposes.

 

8. WITH WHOM MAY YOUR PERSONAL DATA BE SHARED?

 

8.1. Your personal data will not be disclosed or otherwise transferred to third parties without a lawful basis, nor used for purposes other than those for which it was collected. Your personal data will only be transferred in accordance with this Privacy Policy and applicable legal requirements. However, your personal data may be disclosed to third parties when required by applicable law, such as law enforcement authorities (e.g., police or supervisory authorities), or when necessary to protect our rights, interests, or the security of our clients and resources.
 

8.2. Your personal data may be shared with our partners who assist us in carrying out our activities, including: payment service providers; database software providers; database administration service providers; legal advisors; auditors; cloud service providers; business management system providers; other service providers assisting in our operations. We require all data processors to protect, process, and handle personal data with the same level of responsibility and care as we do, and only in accordance with our instructions.
 

8.3. Personal data collected from you will generally be processed within the European Union. However, it may also be transferred to or stored outside the EU. If such transfers occur, all necessary measures will be implemented to ensure that your personal data is processed securely and in compliance with this Privacy Policy, Chapter V of the GDPR, and all applicable legal requirements.

 

9. HOW DO WE PROTECT YOUR PERSONAL DATA?

9.1. We process personal data in accordance with the data security and processing requirements established by the GDPR and applicable data protection legislation of the Republic of Lithuania.


9.2. We implement appropriate technical and organisational measures to ensure that personal data transmitted, stored, or otherwise processed is protected against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or unauthorised access.

10. WHAT RIGHTS DO YOU HAVE AS A DATA SUBJECT?

10.1. When processing personal data, we comply with the GDPR and the Law on Legal Protection of Personal Data of the Republic of Lithuania. As a data subject, you have the following rights:


a) Right of Access. You have the right to request access to your personal data processed by us.


b) Right to Rectification. You have the right to request the correction of inaccurate or incomplete personal data.


c) Right to Erasure. You may request the deletion of your personal data if it is no longer necessary for the purposes for which it was collected, if the processing is unlawful, or if deletion is required to comply with a legal obligation.


d) Right to Restriction of Processing. You have the right to request that we restrict the processing of your personal data.


e) Right to Data Portability. Where personal data is collected automatically based on your consent or a contractual relationship, you may request that we provide your personal data in a structured, commonly used, and machine-readable format.


f) Right to Object. In cases provided for by law, you have the right to object to the processing of your personal data, including processing for marketing purposes.


g) Right to Withdraw Consent. Where processing is based on your consent, you may withdraw that consent at any time.


h) Right to Object Processing for Marketing Purposes. You may opt out at any time from receiving communications regarding our services or any other information that we believe may be of interest to you by contacting us. You may withdraw your consent at any time by contacting us.
 

11. YOUR OBLIGATIONS

 

11.1. You are responsible for ensuring that the information you provide is accurate, correct, and complete. If your personal data changes, you must notify us without undue delay.


11.2. We shall not be liable for any damage arising from your provision of inaccurate or incomplete personal data, or from your failure to inform us of any changes.


11.3. If you disclose personal data relating to any third party, you must ensure that they have been informed of this Privacy Policy and that you have obtained their consent to provide such data to us where required.
 

12. HOW CAN YOU OBTAIN INFORMATION OR LODGE A COMPLAINT?

 

12.1. You have the right to contact us to: submit enquiries; withdraw consent; exercise your data subject rights; lodge complaints regarding the processing of personal data.


12.2. If you wish to submit a complaint regarding our processing of personal data, please do so in writing and provide as much relevant information as possible using the contact details provided at the end of this Privacy Policy. The responsible person will review your complaint, forward it to the appropriate staff member, and inform you about the further handling of your complaint.


12.3. If you are dissatisfied with the handling of your complaint or believe that your rights under the GDPR or other applicable data protection laws have been violated, you may lodge a complaint with the supervisory authority responsible for personal data protection in Lithuania – the State Data Protection Inspectorate. More information and contact details can be found at: https://vdai.lrv.lt/en/.

13. CHANGES TO THIS PRIVACY POLICY

13.1. We may update or amend this Privacy Policy at any time. Any changes will be published on this Website.

14. HOW TO CONTACT US

14.1. All documents related to this Privacy Policy may be sent to us, and you may contact us by email at: info@difinno.com.

bottom of page