Privacy Policy

This Privacy Policy explains how Jasaitis Holdings MB, operating the Dexteq brand, processes the personal data of website visitors and people who contact Dexteq or take part in its business relationships.

It also applies to people acting on behalf of an organisation, including its employees, directors, advisers and other representatives.

Jasaitis Holdings MB, company code 308139574, Laisvės al. 110, LT-44253 Kaunas, Lithuania.

Privacy enquiries: privacy@jasait.is. Website enquiries: hello@dexteq.com. Website: https://dexteq.com.

Website and security data

• IP address and technical request information
• request date and time, page visited and response status
• browser, device and operating-system information
• security checks, service diagnostics and website-error information

Enquiry and communication data

• name and email address
• company name and telephone number, if you provide them
• project or enquiry subject and message content
• submission time, delivery status and related technical information
• subsequent email, meeting and business communication

Name, email address, subject and message are required so that we can receive and assess your enquiry. Company name and telephone number are optional.

Website operation and security

Technical data are processed to deliver the website, diagnose faults and protect the website, systems and communication channels. The legal basis is the controller’s legitimate interest in operating secure and reliable services under Article 6(1)(f) GDPR.

Enquiries, projects and business relationships

Contact and communication data are processed to answer enquiries, prepare proposals, take requested steps before entering into a contract, perform contracts, deliver projects and maintain business records. Depending on the circumstances, the legal basis is Article 6(1)(b), 6(1)(c) or 6(1)(f) GDPR.

Dexteq does not use these data for automated decision-making or profiling that produces legal or similarly significant effects.

The website does not currently use advertising, behavioural tracking or marketing cookies, and no visitor analytics are enabled.

The contact form uses a short-lived, strictly necessary CSRF cookie and Cloudflare Turnstile to prevent abuse. The cookie is not used for advertising or analytics. Turnstile may process technical request, device and security information as described in Cloudflare’s applicable privacy documentation.

The hosting and security infrastructure may process technically necessary, short-lived information used to deliver requests, prevent abuse and maintain service security. If optional analytics or marketing technologies are introduced, this Policy will be updated and consent will be requested where required.

Cloudflare provides website hosting, security checks and the D1 database used to register contact enquiries. SMTP2GO processes enquiry details to send the notification email. ApostropheCMS manages published website content but does not receive public contact-form submissions in this architecture. Data may also be disclosed to professional advisers or competent authorities where required by law or necessary to protect legal claims.

Service providers receive only the information required to perform their functions and must protect it under applicable law and contractual obligations.

We seek to keep personal data within the European Economic Area. If a provider transfers data outside the EEA, the transfer must rely on a lawful mechanism and appropriate GDPR safeguards, such as an adequacy decision or standard contractual clauses.

Personal data are kept only for as long as necessary for the relevant purpose, legal obligations or the protection of legal claims.

• contact-form records in the website database – automatically deleted after 12 months
• general enquiries and email communication that do not lead to a project or continuing relationship – up to 12 months after the last meaningful communication
• project, proposal and negotiation information – for the relevant process and a reasonable period afterwards
• contractual, accounting and project records – for the period required by applicable law and ordinarily up to 10 years where necessary
• website and security logs – according to the relevant provider configuration and no longer than necessary, except for an active incident or investigation

Subject to the conditions of the GDPR, you may request information and access to your data, correction, erasure, restriction of processing, data portability where applicable, or object to processing based on legitimate interests.

To exercise your rights, email privacy@jasait.is. We may ask for information needed to verify your identity or authority to act. These rights are not absolute and may be limited by law, the rights of others or the need to protect legal claims.

If you believe your data are processed unlawfully, please contact privacy@jasait.is first. You may also lodge a complaint with the Lithuanian State Data Protection Inspectorate at L. Sapiegos g. 17, LT-10312 Vilnius, Lithuania, ada@ada.lt, https://vdai.lrv.lt, or seek a judicial remedy.

This Policy may be updated when the website, services, technologies or legal requirements change. The current version is published on this page and identified by the date above.