Privacy Policy

Last edited: March 18, 2026

MB “Tavo pelnas” PRIVACY POLICY

Effective: March 18, 2026
Version: 1.0

1. WHO WE ARE (DATA CONTROLLER)

MB “Tavo pelnas” (brand name SMARTACCOUNTAI)

  • Company name: Tavo pelnas, MB

  • Company code: 307112834

  • VAT code: LT100018752412

  • Registered address: Algirdo St. 9C, Maišiagala, LT-14242 Vilnius District

  • Phone: +370 655 50158

  • Email: info@smartaccountai.lt

  • Data protection contact: info@smartaccountai.lt

  • Website: www.smartaccountai.lt

Person responsible for data protection: MB “Tavo pelnas” director (contact details as stated above).

2. WHAT IS PERSONAL DATA AND WHAT PRINCIPLES DO WE APPLY?

Personal data is any information about you as a natural person who is identified or identifiable (e.g., name, surname, personal identification number, contact details).

We are committed to processing your data:

  • Lawfully, fairly, and transparently – we will always explain why and how we process data.

  • For specific purposes only – we will not use data for other purposes without your consent.

  • Accurately and up to date – we will ensure that data is correct and updated.

  • For the shortest time necessary – we will comply with statutory retention periods.

  • Securely – we will apply technical and organizational measures to prevent loss or unauthorized access.

3. WHAT DATA DO WE PROCESS, WHY, AND FOR HOW LONG?

3.1. Clients (natural persons) and their representatives

Purpose: Provision of accounting services

  • Data processed: Name, surname, personal identification number, address, bank account number, income/expense documents, contract data.

  • Legal basis: Legal obligation (GDPR Art. 6(1)(c)) in compliance with the Republic of Lithuania Law on Accounting, Law on Tax Administration.

  • Retention period: 10 years from the end of the tax year.

Purpose: Payroll calculation

  • Data processed: Name, surname, personal identification number, bank account, salary, non-taxable amount.

  • Legal basis: Legal obligation (GDPR Art. 6(1)(c)) under the Republic of Lithuania Labour Code, Law on Personal Income Tax.

  • Retention period: 50 years.

Purpose: Contract conclusion and performance

  • Data processed: Name, surname, email, phone, contract data.

  • Legal basis: Contract performance (GDPR Art. 6(1)(b)).

  • Retention period: 10 years after contract termination.

Purpose: Payment administration

  • Data processed: Bank account number, payment history, invoices.

  • Legal basis: Legal obligation (GDPR Art. 6(1)(c)).

  • Retention period: 10 years.

Purpose: Customer service

  • Data processed: Name, surname, email, phone, conversation content.

  • Legal basis: Contract performance / legitimate interest.

  • Retention period: 2 years from last contact.

Purpose: Direct marketing

  • Data processed: Name, email.

  • Legal basis: Consent (GDPR Art. 6(1)(a)).

  • Retention period: Until consent is withdrawn.

3.2. Website visitors

Purpose: Ensuring website operation

  • Data processed: IP address, browser type, visit time.

  • Legal basis: Legitimate interest.

  • Retention period: 14 months.

Purpose: Website traffic statistics (Google Analytics)

  • Data processed: Anonymized IP address, browsing history.

  • Legal basis: Consent.

  • Retention period: 14 months.

Purpose: Contact form inquiries

  • Data processed: Name, email, phone, inquiry content.

  • Legal basis: Contract performance (pre-contractual steps).

  • Retention period: 1 year.

3.3. Suppliers and partners

Purpose: Supplier management

  • Data processed: Name, surname, contact details, bank account.

  • Legal basis: Contract performance / legal obligation.

  • Retention period: 10 years after contract termination.

4. WHERE DO WE OBTAIN YOUR DATA FROM?

  • Directly from you: When you complete a form, enter into a contract, provide documents.

  • From your employees: If we provide services to your company.

  • From state registers: State Tax Inspectorate, Sodra, Register Centre – only to fulfill legal obligations.

5. TO WHOM DO WE TRANSFER YOUR DATA?

5.1. State institutions

  • State Tax Inspectorate – submission of declarations, reports.

  • Sodra – social insurance reports.

  • Register Centre – data verification.

  • State Data Protection Inspectorate – upon their request.

5.2. Data processors

  • Banks (e.g., Swedbank, SEB) – payment processing.

  • Cloud platforms (Microsoft, Google) – accounting software hosting.

  • Google Analytics – website traffic analysis.

  • Email service providers – communication.

We do not sell your personal data to third parties.

6. IS DATA TRANSFERRED OUTSIDE THE EU?

Yes, in certain cases. We use cloud platforms based in the USA. They ensure protection through EU standard contractual clauses.

7. COOKIES

7.1. What cookies do we use?

  • Essential cookies: Ensuring website operation. Validity: session / 12 months.

  • Analytical cookies (Google Analytics): Traffic statistics. Validity: 14 months.

7.2. How to manage cookies?

On your first visit, you will see a cookie consent banner. You can change settings at any time in your browser or through our cookie settings manager.

For a detailed cookie list, visit: www.smartaccountai.lt/cookies

8. YOUR RIGHTS

  • Access: Find out what data we process.

  • Rectification: If data is incorrect.

  • Erasure (“right to be forgotten”): If data is no longer needed or you have withdrawn consent.

  • Restriction of processing: If you contest the accuracy of data.

  • Data portability: Receive data in an automated format.

  • Object: Object to processing for marketing purposes.

  • Withdraw consent: At any time.

  • Lodge a complaint: State Data Protection Inspectorate (www.ada.lt).

How to exercise your rights?

Send a request by email to: info@smartaccountai.lt. We will respond within 30 days.

9. HOW DO WE ENSURE DATA SECURITY?

  • Encryption: HTTPS, encrypted servers.

  • Access control: Only authorized employees.

  • Backups: Regular.

  • Employee training: On data security matters.

10. PRIVACY POLICY CHANGES

  • We will announce changes on the website.

  • If you do not agree, you have the right to terminate the contract.

Last updated: March 19, 2024.

11. CONTACT

  • General inquiries: info@smartaccountai.lt, +370 655 50158

  • Exercising rights: info@smartaccountai.lt

  • By mail: MB “Tavo pelnas”, Algirdo St. 9C, Maišiagala, LT-14242 Vilnius District

Supervisory authority

State Data Protection Inspectorate (VDAI)

  • Address: L. Sapiegos St. 17, LT-10312 Vilnius

  • Email: ada@ada.lt

  • Website: www.ada.lt

12. SPECIAL PROVISIONS

12.1. When you are an employee of our client

If we provide services to your employer and your data was provided by them, we are data processors. For detailed information, contact your employer.

12.2. Automated decision-making

We do not use automated decision-making.

12.3. Sensitive data

We do not process special categories of data (health, biometric) unless required by law.

13. COOKIE LIST

  • cookie_consent (smartaccountai.lt): Remembers your consent. Validity: 12 months.

  • session_id (smartaccountai.lt): Session management. Validity: session.

  • _ga (Google Analytics): Unique visitor. Validity: 2 years.

  • _gid (Google Analytics): Visitor identification. Validity: 24 hours.

DO YOU HAVE QUESTIONS?

📧 info@smartaccountai.lt
📞 +370 655 50158
📍 Algirdo St. 9C, Maišiagala, LT-14242 Vilnius District (by prior arrangement)

MB “Tavo pelnas” team
Your trusted accounting partners