Privacy and Cookies Policy
Effective date:
1. Who we are
This Privacy and Cookies Policy (the "Policy") explains how OIXIO, UAB processes personal data and uses cookies on the Onederful website and related online services (together, the "Website").
Data controller:
OIXIO, UAB
Company code: 110818317
Registered office: Savanoriu ave. 321C, LT-50120 Kaunas, Lithuania
Vilnius office: Liepyno str. 25A, LT-08108 Vilnius, Lithuania
E-mail: privacy@tryonederful.com
Phone: +370 630 14144
OIXIO, UAB is the sole data controller responsible for personal data collected through the Onederful Website. This Policy applies only to the Onederful Website and does not cover external websites that we link to.
OIXIO, UAB operates the Website in compliance with Regulation (EU) 2016/679 (GDPR), the Lithuanian Law on Legal Protection of Personal Data, and the ePrivacy Directive 2002/58/EC as implemented in Lithuania.
2. Scope
This Policy describes:
- What personal data we collect and why.
- The legal grounds we rely on for processing.
- How long we retain personal data.
- Who we share personal data with.
- Your rights as a data subject.
- How we use cookies and similar technologies on the Website.
The Policy does not apply to data of legal entities, or to the processing of personal data on third-party websites and platforms that the Website may link to (external links).
A person acting as a representative of a legal entity (for example, a contact person of a corporate customer) acts on behalf of that company, and the processing of such data is governed by the relevant business relationship rather than by Regulation (EU) 2016/679 in respect of that person individually.
3. Personal data we process
3.1 Technical and anonymous data
When you visit the Website we automatically collect technical information about your visit, including IP address, browser type and version, operating system, device type, language settings, referring URL, pages viewed, time spent on each page, and date and time of the visit.
IP addresses are not linked to identifiable persons, except when an additional security control is necessary within a service portal.
3.2 Data you provide via forms and direct contact
When you submit a contact form, request a demo, ask a question, subscribe to our newsletter, register for an event, or otherwise communicate with us, we may collect:
- Identification data: first name, last name.
- Contact data: e-mail address, phone number, country, city.
- Professional data: company name, job title, industry.
- Communication content: the message you send us and any attachments.
- Marketing preferences: topics of interest and consent records.
3.3 Customer and partner data
If you become a customer, prospect, or partner, we may also process business contact details, registry code, VAT number, billing address, contract-related data, and records of our communication and transactions.
3.4 Special categories
We do not deliberately collect or process special categories of personal data (such as health data, biometric or genetic data, political opinions, or religious beliefs) as defined in Article 9 of the GDPR. Please do not submit such data through the Website.
4. Purposes and legal grounds
We process personal data for the following purposes:
4.1 Responding to enquiries and providing information
Legal ground: our legitimate interest (Art. 6(1)(f) GDPR) in responding to your request, or steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR).
4.2 Providing Onederful demos, trials, and services
Legal ground: performance of a contract or pre-contractual steps (Art. 6(1)(b) GDPR).
4.3 Direct marketing and event communication
Legal ground: your consent (Art. 6(1)(a) GDPR), or our legitimate interest in promoting our solutions to existing customers in line with applicable law (Art. 6(1)(f) GDPR). You can withdraw consent or object at any time.
4.4 Website analytics and improvement
Legal ground: your consent for non-essential cookies (Art. 6(1)(a) GDPR), and our legitimate interest in operating and securing the Website (Art. 6(1)(f) GDPR).
4.5 Compliance with legal obligations
Legal ground: compliance with our legal obligations under Lithuanian and EU law, including accounting and tax rules (Art. 6(1)(c) GDPR).
4.6 Establishment, exercise, or defence of legal claims
Legal ground: our legitimate interest in protecting our rights (Art. 6(1)(f) GDPR).
5. How long we keep personal data
- Anonymous technical and aggregated analytics data: stored without a fixed time limit.
- Contact and enquiry data: up to 24 months after the last interaction, unless a longer period is required.
- Customer and contract data: up to 10 years after the end of the contract, in line with Lithuanian accounting and limitation periods.
- Marketing data and consent records: until you withdraw consent or object, plus a reasonable period to prove compliance.
- Cookie-based data: as set out in the cookie table in section 9.
Where data is no longer needed, it is deleted or anonymised.
6. Recipients of personal data
We share personal data only when necessary and on a lawful basis. Recipients may include:
- OIXIO Group companies, on a need-to-know basis for the purposes described in this Policy.
- IT service providers (hosting, cloud services, e-mail, CRM, marketing automation, analytics, customer support) acting as our data processors under written agreements.
- Professional advisers (legal, audit, accounting) bound by confidentiality.
- Payment service providers, where relevant to a transaction.
- Public authorities and law enforcement, where required by law or to defend our legal interests.
We do not sell personal data.
7. International data transfers
Personal data is processed primarily within the European Economic Area (EEA). Some of our service providers may process data outside the EEA. In such cases we rely on appropriate safeguards under Chapter V of the GDPR, in particular the European Commission's Standard Contractual Clauses, and we apply additional measures where required.
8. Security
Personal data is treated as confidential. We apply administrative, technical, and physical safeguards designed to protect data against unauthorised access, alteration, disclosure, or destruction. Access to personal data is limited to authorised personnel and processors who are bound by confidentiality. Communication channels involving payment data are encrypted.
9. Cookies and similar technologies
9.1 What cookies are
Cookies are small text files placed on your device when you visit a website. They allow the site to recognise your device, remember choices, and collect information about how the site is used. Similar technologies include pixels, tags, local storage, and SDKs.
9.2 Categories of cookies we use
Onederful uses cookies for analytics, personalization, and sharing of information with selected partners. Non-essential cookies are only placed after you give consent through our cookie banner.
| Category | Type / examples | Purpose and consent | Typical duration |
|---|---|---|---|
| Strictly necessary | First-party, session and persistent | Enable core site functions: page navigation, security, load balancing, storage of your cookie consent choice. No consent required. | Session to 12 months |
| Functional / preferences | First-party | Remember your choices such as language, region, and form input. Improve user experience. Consent required. | Up to 12 months |
| Analytics / statistics | First-party and third-party (e.g., Google Analytics) | Measure traffic, visited pages, sources, and on-page behaviour to improve content and performance. Consent required. | Up to 24 months |
| Marketing / partner | Third-party (e.g., LinkedIn Insight Tag, Google Ads, Meta Pixel) | Measure campaign performance, enable remarketing, and share limited information with advertising and partner networks. Consent required. | Up to 24 months |
9.3 Managing your cookie preferences
You can manage cookies in several ways:
- Through the cookie banner shown on your first visit to the Website.
- Through the "Cookie settings" link available on the Website, where you can review and change your choices at any time.
- Through your browser settings, where you can block or delete cookies. Note that disabling strictly necessary cookies may affect Website functionality.
Refusing or withdrawing consent for non-essential cookies will not affect the lawfulness of processing based on consent before its withdrawal.
9.4 Third-party services
Some cookies are set by third-party services we use, such as Google Analytics, Google Ads, LinkedIn, Microsoft, and Meta. These providers may process data in their own capacity as controllers in line with their privacy notices. Please consult those providers for details of their processing.
10. Your rights as a data subject
Subject to applicable law, you have the right to:
- Access the personal data we hold about you.
- Rectify inaccurate or incomplete data.
- Request erasure ("right to be forgotten") where conditions are met.
- Restrict or object to certain processing, including direct marketing.
- Receive your data in a structured, commonly used, machine-readable format (data portability) where applicable.
- Withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
- Not be subject to decisions based solely on automated processing producing legal or similarly significant effects.
To exercise your rights, contact us at info.lt@oixio.eu. To protect your data, we may need to verify your identity, and we will respond within one month of receipt. This period may be extended by two further months for complex or numerous requests.
You also have the right to lodge a complaint with the State Data Protection Inspectorate of the Republic of Lithuania (Valstybine duomenu apsaugos inspekcija), L. Sapiegos str. 17, 10312 Vilnius, ada@ada.lt, www.vdai.lrv.lt.
11. Direct marketing
Where we send you marketing communications, you can opt out at any time by using the unsubscribe link included in every marketing e-mail, or by writing to info.lt@oixio.eu. The change takes effect promptly and does not affect transactional or service-related communications.
12. Children
The Onederful Website is intended for business users. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, please contact us so we can take appropriate action.
13. Changes to this Policy
We may update this Policy from time to time to reflect changes in our services, legal requirements, or operational practices. The latest version is always available on the Onederful Website with the effective date shown at the top. Material changes will be notified through the Website or by other appropriate means.
14. Contact
For questions about this Policy or about how we process your personal data, please contact us:
OIXIO, UAB
E-mail: privacy@tryonederful.com
Phone: +370 630 14144
Address: Savanoriu ave. 321C, LT-50120 Kaunas, Lithuania
Vilnius office: Liepyno str. 25A, LT-08108 Vilnius, Lithuania