Legal

Privacy Policy

How we handle your data. Plain language, no legalese.

Introduction

Baltas is a biometric identity infrastructure company based in Vilnius, Lithuania. This privacy policy explains how we collect, use, and protect your personal data when you visit our website at baltas.co. We are committed to transparency and to respecting your rights under the General Data Protection Regulation (GDPR).

Data we collect

Form submissions

When you submit a form on our website, we collect the data you provide:

  • Demo request form: name, organization, role, email, phone, country, product interests, and message.
  • Contact form: name, email, subject, and message.
  • Newsletter: email address.

Cookies

We use a small number of cookies on this site:

  • Necessary cookies: Your consent preference (baltas_consent). These are required for the site to function correctly.
  • Analytics cookies: Google Analytics cookies (_ga, _gid) are set only after you explicitly grant analytics consent via our cookie banner.

Marketing attribution

We may capture UTM parameters from the URL (e.g., utm_source, utm_medium) to understand which marketing channels are most effective. These parameters do not identify you personally.

How we use your data

  • Respond to your demo requests and contact inquiries.
  • Send newsletter communications you have subscribed to.
  • Analyze aggregated site usage via Google Analytics to improve the website experience.
  • Attribute marketing campaign effectiveness using UTM parameters.

Legal basis for processing

  • Consent: Analytics cookies and newsletter subscriptions. You may withdraw consent at any time.
  • Legitimate interest: Responding to contact and demo inquiries you initiate.
  • Contract performance: Processing demo requests to provide you with the service you requested.

Data processors

We work with the following third-party data processors:

  • Resend — Email delivery and newsletter management.
  • Google Analytics — Website analytics via Google Tag Manager. Only active after you grant analytics consent.
  • Hostinger — Website hosting infrastructure.

Data retention

  • Form submission data is retained for the duration of the business relationship or inquiry.
  • Newsletter contact data is retained until you unsubscribe.
  • Analytics data is retained per Google Analytics default retention settings.
  • Your consent preference cookie (baltas_consent) is stored for 13 months.

Your rights

Under the GDPR, you have the right to:

  • Access — Request a copy of the personal data we hold about you.
  • Rectification — Request correction of inaccurate data.
  • Erasure — Request deletion of your personal data.
  • Restriction — Request limitation of processing.
  • Portability — Receive your data in a machine-readable format.
  • Withdrawal of consent — Withdraw consent at any time without affecting prior processing.
  • Lodge a complaint — File a complaint with the Lithuanian State Data Protection Inspectorate (VDAI) at vdai.lrv.lt.

How to exercise your rights

To exercise any of your rights, contact us at privacy@baltas.co. We will respond within 30 days.

Cookie details

Cookie Purpose Duration Type
baltas_consent Stores your cookie consent preferences 13 months Necessary
_ga Google Analytics — distinguishes unique users 2 years Analytics
_gid Google Analytics — distinguishes unique users 24 hours Analytics

Changes to this policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically.

Contact

If you have questions about this privacy policy or our data practices, contact us at privacy@baltas.co.

Effective date: March 11, 2026