Privacy notice
This notice explains what personal data we process when you visit this website, write to us or book a call, and what rights you have.
1. Who we are
Kvotaro is a brand of Cyberalert, UAB, a private limited company registered in Lithuania (company code 306426102, registered office Smolensko g. 10B, LT-03201 Vilnius). Cyberalert, UAB is the controller of the personal data described in this notice.
For anything about your personal data, write to privacy@kvotaro.com.
2. What this notice covers
It covers the websites kvotaro.com, kvotaro.lt and kvotaro.eu, and our contact with people who write to us or book a call.
It does not cover the data our clients process with the Kvotaro service. There we act as a processor: we process data only on the client's instructions under a data-processing agreement, and the client's own privacy notice applies. Under those agreements, client data is processed in the EU and is not used to train AI models.
3. Visiting the website
The website sets no cookies and uses no analytics, tracking tools, third-party fonts or scripts. We do not know who you are when you read it.
The website is delivered by Amazon Web Services (AWS) through Amazon CloudFront. To send you a page, AWS has to process your IP address and the request itself (which page, which browser). We have not switched on access logging, so we keep no record of your visit. AWS may keep security and operational logs under its own terms.
The website files are stored in Frankfurt, Germany. CloudFront delivers them from the server nearest to you, which may be outside the EU. AWS's obligations are set by its data-processing addendum, which includes the EU Standard Contractual Clauses.
Legal basis: our legitimate interest in running a website that works and is secure (Article 6(1)(f) of the General Data Protection Regulation, GDPR).
4. When you write to us
If you email us, we process your name, email address, the content of your message and anything you choose to send. Our email runs on Google Workspace.
Legal basis: our legitimate interest in answering you (Article 6(1)(f) GDPR). If you write about a possible contract, steps taken at your request before entering into it (Article 6(1)(b) GDPR).
5. When you book a call
Calls are booked through Calendly (Calendly LLC, United States). Calendly collects the details you enter (name, email address, company and your answers to its questions) and the time you choose, and passes them to us. Calendly processes this data on our behalf. Calendar invitations are sent through Google Workspace. During the call we may take notes of what we discuss.
Legal basis: steps taken at your request before entering into a contract (Article 6(1)(b) GDPR) and our legitimate interest in preparing for and following up on the call (Article 6(1)(f) GDPR). Calendly's own privacy notice applies to your use of its website.
6. Who receives your data
| Recipient | What for | Where |
|---|---|---|
| Amazon Web Services | Delivering this website | Files in Frankfurt; delivery from the nearest CloudFront server |
| Google (Google Workspace) | Email and calendar | EU and United States |
| Calendly LLC | Booking calls | United States |
We do not sell your data and do not share it with advertisers.
7. Transfers outside the EEA
Google and Calendly may process data in the United States. Where they do, the transfer relies on the EU-US Data Privacy Framework (Article 45 GDPR) or on the EU Standard Contractual Clauses (Article 46 GDPR). You can ask us for a copy of the safeguards.
8. How long we keep it
- Emails and booking details: 24 months from our last contact with you.
- If we sign a contract: for as long as it runs, and afterwards for as long as the law requires, for example the retention periods for accounting records.
- Website requests: we keep none (see section 3).
9. Your rights
You can ask us to give you access to your data, correct it, delete it, restrict its processing or transfer it to you or someone else. Where we rely on legitimate interest, you can object at any time. Write to privacy@kvotaro.com; we answer within one month.
You can also complain to the State Data Protection Inspectorate of Lithuania (Valstybinė duomenų apsaugos inspekcija, L. Sapiegos g. 17, Vilnius, vdai.lrv.lt) or to the supervisory authority where you live or work.
10. Automated decisions
We make no automated decisions with legal or similarly significant effects about visitors or the people we talk to.
11. Changes
When we change this notice, we update the date and version at the top of this page.