Privacy & cookie policy
Last updated: 2 November 2026
This policy explains how EdenTek handles personal data: when we contact businesses about website accessibility, when you write to us, and when you visit edentekgroup.com. We keep it short and plain. If anything is unclear, email hello@edentekgroup.com.
1. Who is responsible for your data
The data controller is Rolandas Dalangauskas (trading as EdenTek), a private individual based in Tallinn, Estonia, who provides digital accessibility and quality services under the name EdenTek. EdenTek is not a registered company.
Contact for all privacy questions and requests: hello@edentekgroup.com.
We have not appointed a data protection officer, as we are not required to.
2. What data we process
- Business contact data: name, job title or role, business email address, company name and company website. We only collect contact details that are published for business purposes. We do not collect sensitive data.
- Email correspondence: the content of emails you send us or reply with, the date and time, and your email address and signature details.
- Outreach records: when we contacted you, whether you replied, and, if you opted out, your email address on our suppression list (see section 5).
- Website visits: we do not use analytics or tracking. Our hosting provider Cloudflare processes technical data needed to deliver the site securely, such as IP address, date and time, requested page, browser type (user agent) and referring page. This is used for delivery and security only, not for profiling.
3. Where the data comes from
If we have contacted you first, we found your details in public sources:
- your company's website (for example its contact or team page);
- public business registers and directories;
- public professional profile information on LinkedIn.
We review a company's public website with automated accessibility tools (such as Google Lighthouse and axe-core) to prepare a short, relevant note. These checks are about the website, not about you.
4. Why we use it and on what legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Contacting businesses by email about website accessibility services relevant to the recipient's professional role (business-to-business direct marketing) | Our legitimate interest in offering our services to businesses, Art. 6(1)(f). You can object at any time (see section 5). |
| Answering your emails and requests, preparing offers and providing services you ask for | Steps at your request before a contract and performance of a contract, Art. 6(1)(b), or our legitimate interest in replying to business correspondence, Art. 6(1)(f) |
| Keeping a suppression list so we never contact you again after you opt out | Legal obligation to respect objections, Art. 6(1)(c) together with Art. 21, and our legitimate interest, Art. 6(1)(f) |
| Delivering the website securely (Cloudflare technical processing) | Our legitimate interest in a secure, working website, Art. 6(1)(f) |
| Keeping accounting records once we work together | Legal obligation, Art. 6(1)(c) |
Where we rely on legitimate interest, we have weighed it against your interests and rights: we only use business contact details, only write about matters relevant to your company's website, keep messages short and infrequent (at most one first email and one follow-up), and make opting out simple. You can ask us for more information about this assessment.
We do not sell personal data, do not use it for advertising profiles and do not make decisions about you by automated means.
5. Business emails and how to opt out
Besides the GDPR, marketing emails are also subject to national electronic communications rules, in particular Article 69 of the Lithuanian Law on Electronic Communications and the corresponding rules in other EU countries, such as Estonia. We aim to follow these rules: we write only to business addresses about matters relevant to the recipient's role, we always say who we are, and every email gives you a free and simple way to opt out. Where the rules that apply to you require prior consent, we will not send you marketing emails without it.
You can object to our emails at any time, free of charge. Just reply "unsubscribe" (or „atsisakyti“) to any of our emails, or write to hello@edentekgroup.com. We will stop contacting you straight away and add your email address to our suppression list. The list holds only the email address, the date and the reason, so that you are not contacted again by mistake.
6. Service providers and transfers outside the EU
We use a few trusted providers who process data on our behalf under data processing agreements:
| Provider | What for | Location and safeguards |
|---|---|---|
| Google (Google Workspace) | Business email: sending, receiving and storing correspondence | Data may be processed outside the EU/EEA, covered by the EU–US Data Privacy Framework and/or Standard Contractual Clauses |
| Cloudflare (Cloudflare Pages) | Website hosting, content delivery and security | Global network; transfers covered by the EU–US Data Privacy Framework and/or Standard Contractual Clauses |
| Zoho (Zoho CRM) | Organising business contacts, correspondence history and the suppression list | Stored in Zoho's EU data centre; any access from outside the EU/EEA (for example for support) is covered by Standard Contractual Clauses |
We may also disclose data where the law requires it, for example to public authorities.
7. How long we keep data
- Contacts who do not respond: deleted no later than 12 months after collection.
- Correspondence and contacts who reply: kept as long as we are in contact, and no longer than 24 months after our last exchange, unless we work together.
- Clients: for the duration of the work, then as long as accounting and tax law requires for invoices and related records, or as needed to deal with legal claims.
- Suppression list: kept for as long as needed to honour your opt-out. Deleting it would mean we could contact you again by mistake.
- Website technical data: we keep no logs of our own; Cloudflare keeps technical logs only for a short period under its own policies.
8. Your rights
Under the GDPR you have the right to:
- access your data and get a copy of it;
- rectification of inaccurate or incomplete data;
- erasure of your data ("right to be forgotten");
- restriction of processing;
- object to processing based on legitimate interest. For direct marketing this right is absolute: we will stop;
- data portability: receive the data you gave us in a common machine-readable format, where it applies.
To use any of these rights, email hello@edentekgroup.com. It is free. We will answer within one month and may ask you to confirm your identity first, for example by writing from the address in question.
9. Complaints
We would like to hear from you first, but you can always complain to a data protection authority, in particular in the EU country where you live or work, or where you think the problem happened:
- Lithuania: State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija), vdai.lrv.lt
- Estonia: Data Protection Inspectorate (Andmekaitse Inspektsioon), aki.ee
10. Cookies and similar technologies
This site does not set any cookies and uses no analytics, advertising or tracking tools. Fonts are hosted on our own site, and nothing is loaded from third parties such as Google Fonts or social media.
We use one small item of browser storage, which is strictly necessary for a function you request:
| Name | Type | Purpose | Duration |
|---|---|---|---|
edentek_cookie_notice_dismissed | localStorage (stays on your device, never sent to us) | Remembers that you closed the cookie notice so it is not shown again. Strictly necessary and functional. | Until you clear your browser's site data |
Our hosting and security provider Cloudflare may, only when needed to protect the site (for example to tell people and bots apart during an attack), set a strictly necessary security cookie such as __cf_bm or cf_clearance. These are not used for tracking or marketing.
Because we only use strictly necessary storage, we do not ask for cookie consent. You can delete stored data at any time in your browser settings.
11. Changes to this policy
We will update this page if our practices change, and the date at the top will always show the latest version. If EdenTek becomes a registered company, this page will be updated with the company's details.