English | Lietuviškai
Last updated: 23 September 2026
1. Who we are (data controller)
UAB „IVO“ ir ko
Company code (juridinio asmens kodas): 126339464
VAT code (PVM): LT263394610
Registered address: Sodų g. 15, Mostiškių k., Lavoriškių sen., Vilniaus r. sav., LT-15222, Lithuania
Email for privacy and general contact: hello@ivo.lt
Website: https://www.ivo.lt
We are the data controller of personal data processed through this Website in the sense of the EU General Data Protection Regulation (GDPR / BDAR).
We have not appointed a Data Protection Officer (DPO). Privacy requests go to hello@ivo.lt.
2. Scope
This notice explains how we process personal data when you:
- visit https://www.ivo.lt (including subpages such as Contact / Get a Quote);
- send a message via our contact form or email us at hello@ivo.lt.
ivo.lt is a B2B site about mattress and sleep-product OEM / private-label / wholesale manufacturing. It is not a consumer webshop and has no public user accounts, newsletter signup, or public blog comments.
A separate Cookie Policy and the Cookiebot banner / declaration describe cookies in more detail. This Privacy Policy and the Cookie Policy should be read together.
3. What data we process, why, and on what legal basis
3.1. Contact / “Get a Quote” form
Data: name, company name, email address, subject, message content; and technical data needed to deliver the form (e.g. time of submission). The form uses Google reCAPTCHA v3 to limit spam (see 3.5).
Purpose: to answer your inquiry and, where relevant, take steps toward a business relationship (quote, partnership discussion).
Legal basis:
- GDPR Art. 6(1)(b) — steps at your request prior to a contract; and/or
- Art. 6(1)(f) — our legitimate interest in handling B2B inquiries and preventing abuse.
Providing the data is voluntary, but without it we usually cannot reply meaningfully.
3.2. Email and other direct messages
Data: your email address, name/signature, and the content of the correspondence.
Purpose: to handle correspondence.
Legal basis: Art. 6(1)(b) and/or 6(1)(f) as above.
3.3. Technical / security data when browsing
Data: e.g. IP address, date and time, browser and device type, pages requested, referrer, and similar server or security logs.
Purpose: to operate, secure, and troubleshoot the Website.
Legal basis: Art. 6(1)(f) — legitimate interest in a secure and functioning website.
3.4. Cookies, analytics, and advertising tools
We use Cookiebot (Cybot A/S) as our consent management platform.
Depending on your choices in the cookie banner, Google Tag Manager (container GTM-5JWLR2G8) may load:
| Tool | ID / note | Typical purpose |
|---|---|---|
| Google Analytics 4 | G-4YH2M8GS12 | audience / usage statistics |
| Google Ads | AW-16950235480 (+ conversion tags) | advertising measurement |
| Microsoft Clarity | project t91usy8sr9 | session analytics / UX insights (may include heatmaps / session recordings) |
Necessary cookies (site + Cookiebot) are used for the Website to work and to store your consent choice.
Non-essential statistics and marketing tools are intended to run only after you allow them in Cookiebot. Our consent mode defaults deny ads/analytics storage until consent is updated.
Legal basis:
- necessary cookies — Art. 6(1)(f) / ePrivacy necessary storage;
- non-essential cookies and related tools — Art. 6(1)(a) consent. You may withdraw consent at any time via Cookiebot settings, without affecting lawfulness before withdrawal.
Exact cookie names and durations: Cookiebot declaration and Cookie Policy.
3.5. Google reCAPTCHA v3
Purpose: protect the contact form from bots and spam.
Provider: Google. Technical data (e.g. IP, device/browser signals) may be processed under Google’s terms and privacy policy.
Legal basis: Art. 6(1)(f) — legitimate interest in protecting our systems and inbox.
3.6. Google Maps on the contact page
The contact page may show a Google Maps embed and/or link for Sodų g. 15, Mostiškės. Loading the map may involve Google processing technical data.
Legal basis: Art. 6(1)(f) and/or consent where loading depends on your cookie choices.
3.7. What we do not do on this Website
We do not (via the public site) run a newsletter, public comments, consumer checkout, or visitor registration. We do not sell personal data.
4. Who receives the data (recipients / processors)
We share personal data only as needed with:
- hosting / IT / email service providers acting on our instructions;
- Cookiebot (Cybot A/S) — consent management;
- Google — Tag Manager, Analytics, Ads, Maps, reCAPTCHA (as enabled);
- Microsoft — Clarity (as enabled);
- professional advisers or public authorities when required by law.
Where providers process data outside the EEA (e.g. USA), transfers rely on appropriate safeguards such as the EU–US Data Privacy Framework and/or Standard Contractual Clauses, where applicable, together with the providers’ own documentation.
5. How long we keep data
| Category | Typical retention |
|---|---|
| Contact form / email inquiries | up to 24 months after the last meaningful contact, unless a longer period is needed for an ongoing negotiation, contract, claim, or legal duty |
| Server / security logs | according to hosting/security practice (usually shorter technical periods) |
| Cookies | as in the Cookiebot declaration, or until you clear cookies / withdraw consent |
When data is no longer needed, we delete or anonymise it.
6. Your rights
Where the GDPR applies, you may request:
- access to your data (Art. 15);
- rectification (Art. 16);
- erasure (Art. 17), where the conditions apply;
- restriction of processing (Art. 18);
- data portability (Art. 20), where applicable;
- to object to processing based on legitimate interests (Art. 21);
- to withdraw consent at any time for consent-based processing (cookies / optional tools).
To exercise rights, email hello@ivo.lt. We may ask for information needed to verify your identity. We normally respond within one month.
You may lodge a complaint with the Lithuanian supervisory authority:
Valstybinė duomenų apsaugos inspecija (VDAI)
L. Sapiegos g. 17, 10312 Vilnius, Lithuania
Website: https://vdai.lrv.lt
Email (general): ada@ada.lt
You may also contact a supervisory authority in your EU/EEA country of residence.
7. Automated decision-making
We do not make decisions based solely on automated processing (including profiling) that produce legal effects concerning you or similarly significantly affect you in the sense of GDPR Art. 22. Analytics and advertising tools may create segments or look-alike audiences only after consent and for measuring / improving the Website and ads — not for automated refusal of a contract on this site.
8. Children
The Website is aimed at business professionals. We do not knowingly collect personal data from children.
9. Security
We apply technical and organisational measures appropriate to a B2B corporate website. No transmission or storage method is completely secure.
10. Third-party links
The Website may link to other sites. Their privacy practices are their own; please read their notices.
11. Changes
We may update this Privacy Policy when our tools, processes, or the law change. The “Last updated” date will change. The current version is always on this page.
12. Contact
UAB „IVO“ ir ko
Sodų g. 15, Mostiškių k., LT-15222, Lithuania
Company code 126339464 · VAT LT263394610
hello@ivo.lt