Privacy Policy
1. Who We Are
Eyereon, UAB ("Eyereon", "we", "us") is a Lithuanian electro-optical and infrared imaging company (company code 308102241), registered at Giedraičių st. 39-R53, Vilnius, Lithuania. Eyereon is the data controller for the personal data described in this policy, in accordance with Regulation (EU) 2016/679 (the "GDPR").
For any question about this policy or to exercise your rights, contact us at info@eyereon.com.
2. What Personal Data We Collect
We collect personal data in the following ways:
a) When you contact us or request a quotation. If you use the contact or quotation-request form on eyereon.com, we collect the information you submit — typically your name, email address, company name, job title/role, phone number (if provided), and the content of your message or technical request. This form is processed via Formspree (Formspree, Inc., United States), which delivers submissions to our email.
b) When you visit our website. We use analytics tools (Google Analytics and/or Google Search Console) to understand how visitors use eyereon.com — pages viewed, referring source, approximate location (derived from IP address), device/browser type, and time on site. See Section 6 (Cookies) for how this data is collected and how you can control it.
c) Basic hosting and security logs. Our website is served through Cloudflare, which automatically logs standard technical data (IP address, timestamp, requested URL, user agent) for security, performance, and abuse-prevention purposes, as is standard for any website operator.
d) If we correspond with you. If you email us directly or we exchange messages related to a quotation, order, or business relationship, we retain that correspondence, sent via Resend on our side, as part of our normal business records.
We do not knowingly collect special categories of personal data (e.g. health, biometric, or similarly sensitive data) through our website, and our website is not directed at consumers or individuals acting outside a business capacity.
3. Why We Process Your Data (Legal Basis)
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Responding to quotation requests and enquiries | Art. 6(1)(b) — steps taken prior to entering a contract, or Art. 6(1)(f) — our legitimate interest in responding to business enquiries, where you contact us on behalf of a company |
| Performing a contract (order, delivery, invoicing) | Art. 6(1)(b) — performance of a contract |
| Website analytics | Art. 6(1)(f) — legitimate interest in understanding and improving our website, or Art. 6(1)(a) — consent, where required by applicable cookie/ePrivacy rules (see Section 6) |
| Security and fraud/abuse prevention (hosting logs) | Art. 6(1)(f) — legitimate interest in keeping our website secure |
| Complying with legal obligations (e.g. export-control screening, accounting/tax records, sanctions compliance) | Art. 6(1)(c) — legal obligation |
Performing a contract (order, Art. 6(1)(b) — performance of a delivery, invoicing) contract
Website analytics Art. 6(1)(f) — legitimate interest in understanding and improving our website, or Art. 6(1)(a) — consent, where required by applicable cookie/ePrivacy rules (see Section 6)
Security and fraud/abuse Art. 6(1)(f) — legitimate interest in prevention (hosting logs) keeping our website secure
Complying with legal Art. 6(1)(c) — legal obligation obligations (e.g. export-control screening, accounting/tax records, sanctions compliance) ———————————————————————--
4. Who We Share Data With
We share personal data with a limited number of service providers ("processors") who process it on our behalf, strictly for the purposes described above:
- Formspree, Inc. (United States) — processes and forwards contact/quotation form submissions.
- Google LLC (United States) — provides website analytics and/or search-visibility tools (Google Analytics / Search Console).
- Cloudflare, Inc. (United States) — provides content delivery, security, and hosting infrastructure.
- Resend (email infrastructure provider) — delivers transactional and business correspondence email on our behalf.
We do not sell personal data. We may disclose personal data where required by law, to comply with export-control or sanctions-screening obligations, or to competent authorities upon a valid legal request.
5. International Data Transfers
Some of our service providers (Formspree, Google, Cloudflare) are based in, or process data in, the United States — a country outside the European Economic Area (EEA). Where personal data is transferred outside the EEA, we rely on the safeguards those providers make available, such as the EU Standard Contractual Clauses (SCCs) and/or the provider's participation in an applicable EU--US data transfer framework, as their basis for international transfer under GDPR Chapter V.
6. Cookies and Analytics
Our website may use cookies or similar technologies for:
- Strictly necessary purposes — required for the site to function (no consent required).
- Analytics — Google Analytics/Search Console, which may set cookies to measure site usage.
You can control or delete cookies through your browser settings at any time; blocking cookies may affect some website functionality.
7. How Long We Keep Your Data
- Quotation/contact enquiries that do not lead to a business relationship: retained for up to 12 months from the last contact, then deleted or anonymised, unless a longer period is needed to respond to an ongoing enquiry.
- Data relating to an actual customer relationship (orders, invoices, correspondence): retained for as long as required by Lithuanian accounting, tax, and export-control record-keeping law (generally 10 years from the end of the relevant financial year for accounting records), or as needed to establish, exercise, or defend legal claims.
- Website analytics data: retained per the default retention settings of the analytics tool used (configurable; typically 14–26 months for Google Analytics).
- Hosting/security logs: retained for a short operational period (typically a matter of weeks to a few months) unless needed for a security investigation.
8. Your Rights
Under the GDPR, you have the right to:
- Access the personal data we hold about you;
- Rectify inaccurate or incomplete data;
- Erase your data ("right to be forgotten"), where applicable;
- Restrict or object to processing based on legitimate interest;
- Data portability, where processing is based on consent or contract and carried out by automated means;
- Withdraw consent at any time, where processing is based on consent (e.g. analytics cookies), without affecting the lawfulness of processing before withdrawal;
- Lodge a complaint with a supervisory authority — in Lithuania, the State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija, VDAI), or the data protection authority of your own EU member state.
To exercise any of these rights, contact us at info@eyereon.com">info@eyereon.com. We may ask you to verify your identity before responding, and will respond within the timeframe required by the GDPR (generally one month).
9. Security
We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, or misuse, including relying on the security infrastructure of our hosting and processing providers (e.g. Cloudflare). No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
10. Children
Our website and services are directed at businesses and professionals, not individual consumers or children. We do not knowingly collect personal data from children.
11. Changes to This Policy
We may update this policy from time to time to reflect changes in our practices or legal requirements. The "last updated" date at the top reflects the most recent revision. Material changes will be reflected on this page.
12. Contact
Eyereon, UAB Giedraičių st. 39-R53, Vilnius, Lithuania info@eyereon.com">info@eyereon.com
Supervisory authority: State Data Protection Inspectorate of the Republic of Lithuania (Valstybinė duomenų apsaugos inspekcija, VDAI), L. Sapiegos st. 17, LT-10312 Vilnius, https://vdai.lrv.lt
← Back to home