Invosec
The CoverContact UsOur Insights
Explore
NIS2

Privacy Policy

Invosec, UAB (the "Company", "we" or "us") protects your information and your privacy. We follow the requirements of the European Union General Data Protection Regulation (GDPR, Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation)), the Lithuanian Law on Legal Protection of Personal Data and other applicable laws when we collect, use and store information about you.

1. How should I read this policy?

This policy answers the most important questions you may have about how we collect, use and store information about you. This is important to you — please read it carefully. We may amend this policy from time to time. The latest version is always published on www.invosec.io and www.invosec.lt.

2. Who is responsible for protecting my information?

Invosec, UAB

  • Registration number: 307066358
  • VAT number: LT100017482611
  • Address: Vilkpėdės g. 22, LT-03151 Vilnius, Lithuania
  • E-mail: [email protected]

3. Why and which information do you collect about me?

When you contact us. If you write to us by e-mail, we process your name, e-mail address, the content of your message and any information you choose to include in it. We do this to answer your query, to discuss possible cooperation and to keep a record of our correspondence. Legal basis: our legitimate interest to communicate with people who contact us and, where the query concerns our services, steps taken at your request prior to entering into a contract.

When you visit our websites. We process technical data about your visit — IP address, browser and device type, pages viewed, time of the visit, the website you came from — and data generated by the analytics tools described in Answer 9. Analytics and behavioural data are processed only if you give your consent in the cookie banner. Data that is strictly necessary to deliver the website securely is processed on the basis of our legitimate interest to keep the website working and protected.

When you apply for a job with us. Our websites do not have a recruitment form. If you send us your CV or an application by e-mail, we process the data you choose to include in it — your name, contact details, work and education history and any other information you provide — in order to assess your application and to communicate with you about it. Legal basis: steps taken at your request prior to entering into a contract and our legitimate interest to manage recruitment.

4. Which information do I have to provide you with and why?

You do not have to provide us with any information to browse our websites. If you contact us, you have to provide the information that is necessary for us to handle your query, request or complaint. If you do not provide it, we will not be able to reply.

5. Do you share information about me?

We share information about you only where necessary and permitted by applicable laws, with:

  • providers of the analytics and website tools listed in Answer 9;
  • our hosting and infrastructure provider — Amazon Web Services (servers located in the EU, );
  • attorneys, auditors, consultants, IT and electronic communications service providers, accounting and archiving service providers that provide services to the Company;
  • courts, law enforcement and other institutions where we are required to do so by law;
  • if needed — entities acquiring or intending to acquire the Company's business.

6. Do you share information about me with someone outside the European Economic Area?

Some of the providers listed in Answer 5 are established outside the European Economic Area or may access data from outside it — in particular Google LLC (USA), Microsoft Corporation (USA) and Functional Software, Inc. (USA). Where data is transferred outside the European Economic Area, the transfer is protected by the European Commission's adequacy decision (EU–US Data Privacy Framework) or by EU Standard Contractual Clauses approved by the European Commission.

7. How long do you keep information about me?

  • Correspondence with us: 1 year from the last message.
  • Job applications sent to us by e-mail: as correspondence, 1 year from the last message.
  • Analytics data: as set by the tool — Google Analytics 4 — 14 months; Microsoft Clarity — as set by the tool; Google Tag Manager stores no analytics data of its own.
  • Data that we must keep under applicable law: for the period required by that law.

8. What can I do about my information at your company?

The GDPR and other laws give you certain rights, together with procedures for their implementation and exceptions to them. Where allowed by law, you can:

  • request confirmation whether we process data related to you and, if we do, request access to that data and related information;
  • request that inaccurate or incorrect information be corrected, or that incomplete information be supplemented;
  • request that we delete the information we hold about you if we use it unlawfully;
  • request that we restrict the processing of your information;
  • object to the collection, use and storage of your information where we process it on the basis of our legitimate interests;
  • request that data you provided to us under a contract or on the basis of your consent, and which we process by automated means, be transferred to you or to another controller;
  • withdraw any consent you have given us — this does not affect the lawfulness of processing carried out before the withdrawal;
  • lodge a complaint with a supervisory authority — in Lithuania, the State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija, www.vdai.lrv.lt) — and seek a judicial remedy.

To exercise these rights, write to us at [email protected].

9. Do you use cookies?

Yes. Cookies are small text files that are stored on your device when you visit a website.

Strictly necessary. cc_cookie — stores your cookie consent choice so that we do not ask you again on every visit. This cookie is set without your consent because the website cannot work correctly without it.

Analytics (only with your consent).

  • Google Analytics 4 — cookies _ga, _ga_*. Purpose: website usage statistics. Provider: Google Ireland Ltd.
  • Google Tag Manager — cookies _gid, _gat. Purpose: management and firing of analytics tags. Provider: Google Ireland Ltd.
  • Microsoft Clarity — cookies _clck, _clsk. Purpose: aggregated analysis of how visitors use the website (clicks, scrolling, session recordings). Provider: Microsoft Ireland Operations Ltd.

You can change or withdraw your choice at any time in the cookie settings of the website.

10. How can I manage cookies?

You can configure your browser to decline some or all cookies, or to ask for your permission before accepting them. Please note that by deleting cookies or disabling future cookies you may be unable to access certain areas or features of our websites. For information on how to adjust your browser settings, visit www.aboutcookies.org or www.allaboutcookies.org. For information about third-party cookies, please read the cookie policies of those third parties.

11. How do I contact you?

If you have any questions, comments or complaints about how we collect, use and store information about you, write to us at [email protected]. We are ready to help.