Privacy Policy
Effective Date: June 8, 2025
1. Introduction
This Privacy Policy outlines how Baltic Fert UAB (“we,” “us,” or “our”) collects, uses, processes, and protects the personal data of our clients, website visitors, and other business partners. We are committed to ensuring the security and confidentiality of your data in compliance with the General Data Protection Regulation (GDPR) (EU) 2016/679 and other applicable data protection laws.
This policy applies to data collected through our website (https://www.balticfert.com), our communication channels, and the provision of our services.
2. Data Controller
Baltic Fert UAB
I. Kanto g. 18, LT-44296 Kaunas, Lithuania
Company Code: 304443971
Email: info@balticfert.com
Phone: +370 (37) 308042
3. Personal Data We Collect and Its Purpose
We collect personal data only for specified, explicit, and legitimate purposes. The type of data we collect depends on your interaction with us.
a. When You Visit Our Website
When you browse our website, we automatically collect certain technical data to ensure functionality, security, and to analyze user experience.
- Data Collected: IP address (your device’s unique online identifier, which is anonymized before storage for analytics), browser type and version, operating system, pages visited, and timestamps of access.
- Technologies Used:
- Cookies: Small text files stored on your device. We use a consent management platform from Usercentrics to manage your preferences for non-essential cookies. See Section 10 for more details.
- Google Analytics: To understand website traffic and user behavior to improve our services. Your IP address is anonymized.
- Google Tag Manager: To manage the technical implementation of tracking scripts based on your consent choices.
- Google Fonts: To display text on our website. This may involve your IP address being sent to Google’s servers.
- Legal Basis:
- Consent (Art. 6(1)(a) GDPR): For all non-essential cookies and tracking technologies (e.g., analytics).
- Legitimate Interest (Art. 6(1)(f) GDPR): For strictly necessary cookies required for website security and functionality.
b. When You Contact Us
When you reach out via our website’s contact form, email, or phone, we collect data to respond to your inquiry.
- Data Collected: Your name, email address, phone number, company name, and any other information you provide in your message.
- Technologies Used:
- Google reCAPTCHA: Our contact forms may be protected by Google reCAPTCHA to prevent spam and automated abuse. This service analyzes hardware and software information, such as device and application data, to distinguish humans from bots. This data is processed by Google.
- Legal Basis:
- Performance of a Contract (Art. 6(1)(b) GDPR): When your inquiry is related to entering into a contract or a potential business relationship.
- Legitimate Interest (Art. 6(1)(f) GDPR): To respond to general inquiries and for business communication.
c. When You Subscribe to Our Newsletter
If you subscribe to our newsletter, we collect your information to send you updates and marketing communications.
- Data Collected: Your email address and name.
- Technologies Used:
- MailerLite: We use MailerLite as our marketing automation platform. When you subscribe, your data is transferred to MailerLite for processing in accordance with their privacy policy and terms.
- Legal Basis:
- Consent (Art. 6(1)(a) GDPR): We will only send you newsletters if you have given your explicit, opt-in consent. You can withdraw this consent at any time via the “unsubscribe” link in every email.
d. When You Interact with Embedded Content
Our website may feature embedded content, such as videos from YouTube.
- Data Collected: Interacting with this content may result in your data (such as IP address and browsing behavior) being sent directly to the third-party provider (e.g., Google for YouTube).
- Legal Basis:
- Consent (Art. 6(1)(a) GDPR): This content will only be loaded and active after you have given your consent via our cookie banner.
4. Third-Party Data Processors
We do not sell your personal data. We may share it with trusted third-party service providers (data processors) who assist us in our operations. These include:
- Google LLC: For analytics, tag management, font delivery, spam protection (reCAPTCHA), and embedded video content (YouTube).
- MailerLite: For managing our newsletter and email marketing campaigns.
- Usercentrics GmbH: For providing our cookie consent management platform.
- Website Hosting and IT Support Partners: For the technical operation and maintenance of our website and IT systems. Our hosting is located within the European Union.
We ensure all processors provide sufficient guarantees to implement appropriate technical and organizational measures in compliance with GDPR.
5. International Data Transfers
Some of our third-party providers, such as Google and MailerLite, are based outside the European Economic Area (EEA), primarily in the United States. When your data is transferred outside the EEA, we ensure it is protected by appropriate safeguards. These safeguards include:
- The EU-U.S. Data Privacy Framework, for transfers to certified U.S. companies.
- Standard Contractual Clauses (SCCs) approved by the European Commission, which contractually oblige the receiving party to protect your data to EU standards.
6. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or to comply with legal, accounting, or reporting requirements.
- Contact and Client Data: Retained for the duration of our business relationship and as required by Lithuanian law (e.g., for accounting records).
- Newsletter Subscription Data: Retained until you withdraw your consent (unsubscribe).
- Analytics Data: Retained in an aggregated and anonymized form according to Google Analytics’ standard retention periods.
7. Data Security
We have implemented appropriate technical and organizational security measures to protect your personal data from accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. These measures include SSL/TLS encryption for data transmitted to our website, access controls, and regular security assessments.
8. Your Rights Under the GDPR
As a data subject, you have the following rights regarding your personal data:
- Right to Access (Art. 15 GDPR): You can request a copy of the personal data we hold about you.
- Right to Rectification (Art. 16 GDPR): You can request the correction of inaccurate or incomplete data.
- Right to Erasure (‘Right to be Forgotten’) (Art. 17 GDPR): You can request the deletion of your data where there is no compelling reason for its continued processing.
- Right to Restrict Processing (Art. 18 GDPR): You can request to limit the processing of your data under certain conditions.
- Right to Data Portability (Art. 20 GDPR): You can request your data in a machine-readable format to transfer it to another controller.
- Right to Object (Art. 21 GDPR): You can object to processing based on legitimate interests.
- Right to Withdraw Consent (Art. 7(3) GDPR): You can withdraw your previously given consent at any time. This will not affect the lawfulness of processing before your withdrawal.
To exercise these rights, please contact us at info@balticfert.com.
You also have the right to lodge a complaint with a supervisory authority. The lead supervisory authority for Baltic Fert UAB is the Lithuanian State Data Protection Inspectorate:
State Data Protection Inspectorate of the Republic of Lithuania
L. Sapiegos str. 17, LT-10312 Vilnius, Lithuania
Email: ada@ada.lt
Website: https://vdai.lrv.lt/
9. Cookie Policy
Cookies are small text files placed on your device by websites that you visit. They are widely used to make websites work, or work more efficiently, as well as to provide information to the owners of the site.
- How We Use Cookies: We use cookies to operate our site, understand how visitors use it, and personalize your experience. We categorize cookies as follows:
- Strictly Necessary: Essential for the website to function (e.g., security, basic navigation). These do not require consent.
- Performance/Analytics: Help us understand user behavior to improve our website (e.g., Google Analytics). These require your consent.
- Functional: Allow for enhanced functionality, such as remembering your preferences. These require your consent.
- Marketing/Targeting: Used to deliver relevant content or ads (e.g., via embedded YouTube videos). These require your consent.
- Managing Your Consent: We use the Usercentrics Consent Management Platform to request, record, and manage your consent for all non-essential cookies. You can review and change your cookie preferences at any time through the cookie banner or settings link on our website.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will post the updated policy on our website and indicate the new effective date.
11. Contact Us
For any questions or concerns regarding this Privacy Policy or our data protection practices, please contact us at:
Baltic Fert UAB
Email: info@balticfert.com