Privacy notice
This page explains how data is used when you visit this website and enquire about services.
Who is responsible for your data?
The controller responsible for Legal Office service enquiries and client data is Legal Office MB. For privacy enquiries, email info@legaloffice.lt or call +370 683 11312.
This privacy notice applies to legaloffice.lt and communication through the contact details shown on it. Data is processed under the GDPR and applicable Lithuanian law. Visiting the website alone does not constitute consent to marketing or unrestricted data use.
How do website enquiries work?
The virtual assistant responds in your browser. It selects prepared answers. The website code does not send your typed question to Legal Office or an external AI service.
When you click “Send enquiry”, your name, contact details, selected service and description are sent to the website server, which emails the enquiry to info@legaloffice.lt. Filling in the form alone does not send your data. “Copy enquiry” copies the text to your device clipboard. Enquiries are retained in the mailbox for the periods described below.
These fields do not use persistent browser storage. Their contents remain in the open page’s memory; the browser may preserve the page state through its own features. Do not include personal identification numbers, document copies or other confidential personal data in your initial question.
Which data do we process and why?
Responding to enquiries
Data: the name, contact details, message, correspondence and information relevant to the enquiry that you provide.
Legal basis: steps before entering into a contract when you enquire about services on your own behalf (GDPR Article 6(1)(b)). For a company representative’s or general enquiry, our legitimate interest in responding and maintaining business communication applies (Article 6(1)(f)).
Services and document preparation
The order may require identity, contact, authorisation and signing details of founders, participants, managing directors or representatives. We obtain data from you, authorised persons and, where justified, official registers.
Legal basis: performance of a contract, compliance with legal obligations or a legitimate interest in providing a service to a legal entity (Article 6(1)(b), (c) or (f), depending on the relationship). We agree the specific documents required before providing the service.
Accounting and protecting legal rights
Contract, payment and accounting data is used to comply with legal obligations (Article 6(1)(c)). Information needed for a dispute is processed in our legitimate interest in establishing, exercising or defending claims (Article 6(1)(f)).
Only data needed for the relevant purpose should be provided. Without contact details we cannot respond; without mandatory document information it may be impossible to perform the ordered service. You can read general information on this website without providing your contact details.
How long is data retained?
Enquiry information is retained for as long as needed to respond and complete related discussions. If a contract is concluded, relevant information becomes part of the service records. Retention periods for contractual, registration and accounting documents depend on the document type and applicable retention rules. In a dispute, necessary data is retained until it is resolved and relevant claim limitation periods expire. Once the retention basis ends, data is deleted or anonymised.
You can ask us by email for the retention period and basis applicable to your particular document.
Who may receive your data?
Information needed for the service may be provided to notaries, the Centre of Registers, banks, accounting professionals or other authorities as required by the order and law. Email, IT and hosting providers may support communication and technical operation. Only the information needed for the purpose is shared. Notaries, registers and other independent controllers process data under their own rules.
This website is published through OpenAI Sites, whose infrastructure uses Cloudflare. Hosting and security systems may process IP addresses, request times, browser details and other technical data. Website field contents are not sent as requests to those systems. Platform services are additionally subject to the OpenAI privacy policy and Cloudflare privacy policy.
If providing a service involves transfers outside the European Economic Area, a GDPR-compliant transfer basis and safeguards must apply. You may request information by email about the specific recipients, countries and safeguards used.
Cookies and marketing
Sending enquiries uses an essential session cookie, “lo_enquiry”, to protect against forged requests; it lasts for the browser session. To prevent abuse, attempts are counted in one-hour windows using a hash of the IP address; the old record is replaced on the next request. Enquiry text is not stored in this security record.
The current website code does not include analytics or advertising tracking tools, marketing cookies or a newsletter subscription. The hosting platform may use technical security measures under its own rules. If additional non-essential tracking tools are introduced, this privacy notice must be updated and consent obtained before their use where required.
Your rights
Subject to the conditions set out in the GDPR, you may access your data, request rectification, erasure or restriction of processing, exercise data portability or object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of previous processing.
Send your request to info@legaloffice.lt. Where necessary, we will request only the information needed to confirm your identity. We respond within one month; in complex cases, this may be extended by two further months, with the reason and extension explained within the first month. You may complain to the Lithuanian State Data Protection Inspectorate.
The virtual assistant does not make automated decisions with legal or similarly significant effects and does not perform profiling. Individual services and their terms are agreed with a consultant.
Updates to this privacy notice
When data processing changes, we update this page and its version date. Significant changes affecting data already received are communicated appropriately.