Legal
Privacy policy
This policy explains which personal data we collect on applied.lt and when delivering our services, for what purpose and on what legal basis we process it, how long we keep it, and what rights you have under the General Data Protection Regulation (EU) 2016/679 (GDPR) and the Lithuanian Law on Legal Protection of Personal Data.
1. Data controller
The data controller is Dirbtinio proto vizija, MB (trading as Applied AI Labs), company code 306377872, Verkių g. 39-349, LT-09109 Vilnius, Lithuania. For any question about personal data, write to labas@applied.lt. Director: Gintautas Nekrošius.
2. What we collect and why
| When | Data | Purpose | Legal basis | Retention |
|---|---|---|---|---|
| You submit the assessment request form | Full name, work email, organisation, team size, your message | To respond, schedule the call, prepare the summary and a proposal | Steps at your request prior to a contract (Art. 6(1)(b) GDPR) and our legitimate interest in answering enquiries (Art. 6(1)(f)) | 12 months after the last contact; if a contract follows, for its term and 10 years after, as accounting law requires |
| You request the checklist | Email address, date and time of consent | To send the checklist and occasionally inform you about AI training | Your consent (Art. 6(1)(a)) | Until you withdraw consent; inactive addresses are deleted after 24 months |
| You email us | The data you provide and the content of the message | To reply and continue the conversation | Legitimate interest (Art. 6(1)(f)) or pre-contractual steps (Art. 6(1)(b)) | 12 months after the last contact, unless longer is needed to perform a contract |
| You take part in training | Full name, role, organisation, attendance records, self-assessment results, certificate number | To perform the training contract and prepare the attendance log, certificates and the report to the organisation | Performance of a contract (Art. 6(1)(b)); the organisation's legal obligation to record staff AI literacy (Art. 6(1)(c), Article 4 of the EU AI Act) | 5 years after the training, so the organisation can evidence the training in an audit |
| You browse the site | Technical server logs: IP address, request time, browser type | To keep the site running and secure | Legitimate interest (Art. 6(1)(f)) | Up to 30 days in the hosting provider's systems |
Please provide work contact details only. Do not include special categories of personal data (health, political opinions and the like) in the form or in emails; we do not need them.
3. Cookies and analytics
The site sets no cookies that require your consent and uses no third-party analytics or advertising trackers. We store no identifiers in your browser. If we introduce analytics in future, we will update this policy first and, where the law requires it, ask for your consent.
4. Who we share data with
We do not sell personal data and do not pass it to third parties for marketing. The following processors help us operate, under data-processing agreements:
- Vercel Inc. (USA): hosting and form-processing infrastructure. Transfers outside the EEA rely on the European Commission's Standard Contractual Clauses and the EU-US Data Privacy Framework.
- Resend, Inc. (USA): delivery of emails triggered by the site forms, under Standard Contractual Clauses.
- Our email provider, which hosts the mailbox labas@applied.lt.
Partners involved in delivering training (trainers, lawyers) receive participant data only to the extent necessary for the specific programme and under confidentiality obligations. We disclose data to public authorities only where the law requires it.
5. Your rights
You have the right to:
- access your personal data and obtain a copy;
- have inaccurate data corrected;
- have data erased (the "right to be forgotten") where there is no longer a legal basis to keep it;
- restrict processing;
- receive your data in a structured format and have it transferred to another controller;
- object to processing based on legitimate interest;
- withdraw consent at any time (for example via the unsubscribe link in an email or by writing to us); withdrawal does not affect the lawfulness of processing before it.
Send requests to labas@applied.lt. We respond within 30 days. If you believe we process your data unlawfully, you may lodge a complaint with the State Data Protection Inspectorate of Lithuania (L. Sapiegos g. 17, Vilnius, vdai.lrv.lt), although we would ask you to contact us first.
6. How we protect data
Data is transmitted over encrypted connections (HTTPS). Access to enquiries and training records is limited to the people who need it for their work. Training exercises use only anonymised data or data approved by the organisation, and we configure AI tools so that input is not used to train models. If we become aware of a data breach, we notify the supervisory authority and, where required, the affected people within the statutory deadlines.
7. Minors
Our services are for organisations and their staff. We do not knowingly collect data from anyone under 16.
8. Changes
We may update this policy when our operations, tools or the law change. The current version is always published on this page with its effective date. Material changes will be announced by email to those whose data we process on the basis of consent.
9. Contact
Dirbtinio proto vizija, MB (Applied AI Labs) · company code 306377872 · Verkių g. 39-349, LT-09109 Vilnius, Lithuania · labas@applied.lt