We care about your privacy and the security of your personal data. By
implementing Regulation (EU) 2016/679 of the European Parliament and
of the Council of 27 April 2016 on the protection of natural persons
with regard to the processing of personal data and on the free
movement of such data, and repealing Directive 95/46/EC (general data
protection regulation), we ensure that transparency and fairness
regarding the processing of your personal data.
In this Privacy Policy you can get acquainted with your rights and
read up on information about the processing of your personal data.
1. Data controller & DPO
The controller of your personal data is Creditonline, UAB, legal
entity code 301867534, address Laisvės al. 82, LT-44250 Kaunas,
Lithuania, contact phone no.
+44 7494 373733
, email address:
info@creditonline.eu
.
Our data protection officer also takes care of the security of your
personal data, telephone number:
+44 7494 373733
, email address:
info@creditonline.eu
.
2. Data protection principles
We process personal data in compliance with the GDPR and applicable
Lithuanian data protection law, adhering to the following principles:
- Lawfulness, fairness & transparency: we only process data on
a valid legal basis and inform you clearly about what we do with it.
- Purpose limitation: data is collected for specified, explicit purposes
and not reused incompatibly.
- Data minimisation: we collect only what is adequate and necessary
for each purpose.
- Accuracy: we keep data accurate and up-to-date; inaccurate data
is corrected or erased without delay.
- Storage limitation: data is kept only as long as necessary for
the stated purpose.
- Integrity & confidentiality: we apply appropriate technical
and organisational measures to protect data against unauthorised access,
loss, or destruction.
What we do not collect: we do not collect or store your browsing
history on third-party websites, and we do not transfer any data from your
browsing on our website that could identify you personally.
3. Personal data we collect
We collect and process only adequate and necessary personal data. The
categories depend on how you interact with us:
- Demo system request: name, company name, email address, and other
information specified in your request, collected directly from you.
- Contact Us form: name, company name, email address, and other information
specified in your request, collected directly from you.
- Email marketing (with consent): name and email address, collected
directly from you.
- Website browsing: cookie data and technical identifiers (see
Cookies
below), collected automatically from your device.
We do not collect personal data from publicly available sources unless
you have made it available in your request.
4. Purposes & legal bases
We only process your personal data on a valid legal basis under GDPR
Art. 6:
- Responding to demo system requests: Art. 6(1)(b), pre-contractual
steps; retained until the demo is completed and the matter fully resolved,
minimum as required by law.
- Responding to Contact Us enquiries: Art. 6(1)(b), pre-contractual
steps; retained until the enquiry is fully resolved, minimum as required
by law.
- Email marketing communications: Art. 6(1)(a), consent; retained
until consent is withdrawn or you unsubscribe.
- Compliance with legal obligations: Art. 6(1)(c), legal obligation;
retained as required by applicable law.
-
Compliance with instructions from authorised state institutions:
Art. 6(1)(c), legal obligation; retained as required by applicable law.
5. Data transfers & recipients
Your personal data is not transferred to third parties except in the
following circumstances:
- IT & infrastructure service providers (hosting, CRM, email
delivery): under data processing agreements (GDPR Art. 28) and Standard
Contractual Clauses for non-EU providers.
- Marketing communication platforms: for sending newsletters only
with your consent, under data processing agreements and strict confidentiality
obligations.
- Public authorities: when required by applicable law or state institutions,
on the basis of a legal obligation (GDPR Art. 6(1)(c)).
We do not share your personal data with third parties for marketing
purposes unless you have explicitly agreed to such sharing.
Transfers outside the EU/EEA: where service providers are located
outside the EU/EEA, we ensure appropriate safeguards are in place, such
as Standard Contractual Clauses or transfers to countries covered by an
EU adequacy decision. A list of third-country recipients is available upon
request at
info@creditonline.eu
.
6. Data retention
We store your personal data only for as long as necessary to fulfil
the purpose for which it was collected, or as required by applicable
law. In practice:
- Demo request & contact form data: until the matter is fully
resolved, then deleted unless a legal obligation requires longer retention.
- Marketing data: until you withdraw consent or unsubscribe; we will
not retain it beyond that point.
- Data held under legal obligation: as specified by applicable Lithuanian
and EU legislation.
7. Your rights
Under the GDPR, you have the following rights. Each can be exercised
by emailing
info@creditonline.eu
. We will respond within 30 calendar days (extendable to 2 months
in complex cases, with notice).
- Right of access (Art. 15): obtain confirmation that we process
your data and receive a copy, together with information about purposes,
categories, recipients and retention.
- Right to rectification (Art. 16): request correction of inaccurate
or incomplete personal data we hold about you.
- Right to erasure (Art. 17): request deletion of your data where
it is no longer necessary, consent is withdrawn, or processing is unlawful.
Does not apply where we have a legal obligation to retain it.
- Right to restriction (Art. 18): limit processing to storage only,
e.g. while contesting accuracy, pending an objection decision, or for
legal claims.
- Right to data portability (Art. 20): receive your data in a structured,
machine-readable format and, where technically feasible, have it transmitted
directly to another controller.
- Right to object (Art. 21): object to processing based on legitimate
interests or carried out for direct marketing. Marketing processing stops
immediately upon objection.
- Right to withdraw consent (Art. 7(3)): withdraw consent at any
time without affecting the lawfulness of prior processing. Applies to
marketing communications.
- Right to lodge a complaint (Art. 77): lodge a complaint with the
State Data Protection Inspectorate of Lithuania if you believe your rights
have been infringed: ada@ada.lt, vdai.lrv.lt, L. Sapiegos g. 17, Vilnius.
Requests are free of charge. We may ask you to verify your identity
before processing a request to protect against unauthorised access.
8. Email marketing communications
When you submit a contact form or reach out to us directly, and where
you have given your consent, we may use your name and email address to
send you marketing communications about our products, services, and
updates.
Opting in: by submitting a contact form you may be asked to consent
to receive marketing emails. We will always provide a clear opt-in mechanism
where required by law.
Withdrawing consent: you can unsubscribe at any time via the link
in every marketing email or by contacting
info@creditonline.eu
. We will stop sending marketing communications immediately upon
receiving your request.
Automated decision-making: we do not use your personal data to make
solely automated decisions that produce legal or similarly significant effects
on you (GDPR Art. 22).
9. Cookies
When you visit our website, cookies (small text files stored on your
device) help us provide a better experience. You can manage cookie
preferences through your browser settings.
- Strictly necessary: essential for navigation, accessing secure
areas, and form functionality. Cannot be disabled.
- Performance / analytics: collect anonymised data on pages visited,
time spent, and links clicked to help us improve the website. Can be disabled.
- Functional: remember your preferences (e.g. language) for a more
personalised experience. Can be disabled.
- Advertising & social media: deliver relevant ads, limit ad
frequency, measure campaign effectiveness, and enable social media interactions.
Can be disabled.
Blocking or deleting cookies may affect certain website features. For
full details, see our Cookie Policy.
10. Policy changes
This Privacy Policy is reviewed at least once every two years. After
updating it, we will post a notice on our website informing you of
material changes. The latest version is always available at:
www.creditonline.eu/privacy-policy
.
11. Contact us
If you have any questions regarding the information provided in this
Privacy Policy, please contact us in any way convenient for you:
