Privacy policy

Alexander Mauz, sole trader (individuali veikla no. 1174510), Vytauto g. 8-37, LT-66130 Druskininkai, Lithuania. Email: hello@vectortechlab.eu.

We have not appointed a data protection officer, as we are not required to.

This policy covers www.vectortechlab.eu, including sign-in and the workspace. Use of VectorInvoice is also governed by its own privacy policy: https://www.vectorinvoice.eu/en/privacy. For Vector Plan see https://www.vectorplan.eu/en/privacy.

When you visit, we process technically necessary data: IP address, date and time, requested URL, status code, browser identifier (user agent) and referrer, if any. We use these to deliver the site, keep it secure and fix errors.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a secure, working service). Logs are kept only as long as needed for these purposes.

The website is hosted by Scaleway SAS, 8 rue de la Ville l'Évêque, 75008 Paris, France, in data centres in the Paris region, as our processor (Art. 28 GDPR). Domain and DNS are managed by Hostinger.

When you sign in, we process your email address, password and, if used, a two-factor code. They are passed encrypted, server-side, to the VectorInvoice sign-in service, run by the same controller. We do not store your password on vectortechlab.eu.

After sign-in, the workspace shows your VectorInvoice data on this domain. The VectorInvoice privacy policy applies to that data.

Legal basis: Art. 6(1)(b) GDPR (contract / terms of use).

We only set strictly necessary cookies. Session cookies keep you signed in until you sign out or close the browser, or for up to 30 days with “Stay signed in”. The vi_csrf cookie protects forms against forged requests, for the session.

All cookies are Secure, valid only for www.vectortechlab.eu and, except vi_csrf, not readable by JavaScript. We use no analytics, advertising or tracking cookies, so there is no cookie banner.

Legal basis: Art. 6(1)(b) and (f) GDPR; storage on your device as strictly necessary (Art. 5(3) ePrivacy Directive).

We do not embed analytics tools, social media plugins, maps, videos or third-party fonts. All files are served from our own server.

If you write to us, we process your address, your message and any details in it in order to reply. Legal basis: Art. 6(1)(b) GDPR for contract-related enquiries, otherwise (f). We delete the correspondence once it is settled and no retention duty applies.

Recipients are only the service providers named above and, for sign-in, VectorInvoice. No transfer outside the EU/EEA is intended for this website.

You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and to object to processing based on (f) (Art. 21 GDPR). Write to hello@vectortechlab.eu.

You may lodge a complaint with a supervisory authority. Ours is the State Data Protection Inspectorate of Lithuania (Valstybinė duomenų apsaugos inspekcija, VDAI), L. Sapiegos g. 17, LT-10312 Vilnius, www.vdai.lrv.lt, or the authority where you live.

You don't need to provide any data to visit the site beyond what is technically necessary. Sign-in requires email and password. There is no automated decision-making or profiling under Art. 22 GDPR.

The site is HTTPS-only (HSTS) and uses a strict Content Security Policy.

If the website changes, for example by adding a contact form, we update this policy. The version with the latest date applies.