Privacy Policy

Introduction

This Privacy Policy (further - the "Policy") explains how HyperHedge ("we," "us," "our") regulates the collection, use, storage, and protection of personal data when you use the website http://www.hyperhedge.eu (further– the “Website”) and its provided services. We may update this Privacy Policy periodically. Material changes will be notified via email or prominently on our website. Continued use of our services after updates constitutes acceptance of the revised policy.

1. Collection and Processing of Personal Data

1.1. When you browse our website, we automatically collect certain information about your device and your information to provide services :

Contact information (name, surname, email address, phone number, address)
Device information (IP address, browser type and version, the time and date of pages you visited, and other statistical information)
Company information (company name, job title, VAT number)
Financial information (bank details for payment processing)
Communication records (emails, meeting notes)

1.2 We only collect data that is strictly necessary for service provision and ensure it is kept accurate and up-to-date.

1.3. By agreeing to this Privacy Policy and providing your personal information, you confirm that you grant us permission to process your personal data in order to provide you with the goods and services offered on the website.

2. Storage and Protection of Personal Data

2.1. We are committed to ensuring the confidentiality and security of personal data by applying appropriate technical and organizational measures to protect it from unlawful or improper use, loss, destruction, or damage.
2.2. We will retain your personal data for as long as necessary to fulfill our legal obligations or business interests:

Account Information (e.g., name, email, login credentials): Retained for as long as the account is active and up to 6 months after closure, unless further retention is required by law.
Transaction and Payment Data: Retained for 7 years to comply with financial and tax regulations.
Customer Support Communications: Retained for 2 years after the last interaction to improve service and resolve any potential disputes.
Marketing Preferences and Communication Logs: Retained for 2 years after the last contact, unless you withdraw your consent earlier.
Job Applicant Data: Retained for up to 6 months after the recruitment process is complete, unless the applicant consents to a longer retention period for future opportunities.
Website Usage Data (cookies, IP addresses, etc.): Retention depends on cookie type - session cookies expire when you close your browser, while persistent cookies are retained for up to 12 months.

2.3. You can visit our website without providing any personally identifiable information. However, if you wish to use certain features of the website, subscribe to our newsletter, or fill out our contact form, you may be asked to provide personal information such as your email address, name, surname, residential information, or phone number. You may choose not to provide your personal data, but in that case, many website functions may be unavailable. If you are unsure what information we collect, you can contact us by email: info@hyperhedge.eu.

3. "Cookies" Usage

3.1. Our website uses cookies to enhance your browsing experience, analyze website traffic, and personalize content. Cookies are small text files stored on your device when you visit a website. You can choose whether to accept cookies in your browser settings at any time. We use:

Essential cookies: Necessary for website functionality.
Analytical cookies: Help us understand website performance and user behavior.
Preference cookies: Store your settings and preferences. By using our website, you consent to the use of cookies. You can manage or disable cookies through your browser settings.

3.2. We collect user consent for the collection and processing of personal data where required by law. Consent may be obtained through:

Pop-up banners or forms when you first visit the site (for cookies or newsletter sign-ups).
Checkboxes or opt-in fields when submitting contact forms or making service inquiries.
Explicit opt-in mechanisms for marketing communications (e.g., newsletters).

3.3. We use a Cookie Consent Manager, to give users control over which types of cookies are enabled.

When you first visit the website, a cookie banner will appear, allowing you to accept or reject non-essential cookies.
You can change your cookie preferences or withdraw consent at any time by clicking the cookie settings icon (usually located in the footer or banner) or by clearing your browser cookies.

3.4. We do not link the visitor’s IP address, email address, or any other personal information to identifiable user data. This means that each website visit session is logged, but the visitor remains anonymous.

3.5. By continuing to use the site after being presented with the consent notice, you agree to the terms outlined in this Privacy Policy.

4. Purpose of Data Processing

4.1. We use your data for the purposes set out below, but are not limited to:

Provide accounting consulting services
Manage client relationships and communications
Process payments and invoices
Ensure compliance with legal and regulatory obligations

5. Legal Basis for Processing

5.1. We process personal data only when we have a valid legal basis to do so, as defined under Article 6 of the General Data Protection Regulation (GDPR). Depending on the context and type of data, we may rely on one or more of the following legal bases:

Consent (Article 6(1)(a)) – Where you have given clear, informed, and explicit consent for us to process your personal data for a specific purpose.
Contractual necessity (Article 6(1)(b)) – Where processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract.
Legal obligation (Article 6(1)(c)) – Where we are required to process your data to comply with a legal obligation.
Legitimate interests (Article 6(1)(f)) – Where processing is necessary for our legitimate interests or those of a third party, provided those interests are not overridden by your rights and freedoms.

6. Data Sharing with Third Parties

6.1. We only share your personal data with trusted third parties and solely for the purposes of proper data processing. We may also share your data when required by applicable laws or when necessary to provide our services, but are not limited to:

Service providers (IT support, payment processors)
Legal and regulatory authorities (if required)
Third-party professional advisors (accountants, auditors)

6.2. We act as the data controller for the personal data you provide to us. This means we determine the purposes and means of the processing of your personal data. In some cases, we may share your data with other independent controllers (e.g., payment providers or legal authorities) who process your data for their own purposes. In such cases, they will have their own privacy policies, and we encourage you to review them.

6.3. We also engage data processors - third-party service providers who process personal data on our behalf and under our instructions. These processors support us in areas such as:

Cloud hosting and IT infrastructure
Email delivery and communications
Customer service tools
Analytics and performance monitoring

6.4. All third-party vendors are:

Carefully vetted for their compliance with data protection regulations, including the GDPR.
Contractually bound by Data Processing Agreements (DPAs) or equivalent legal frameworks to ensure they:
- Process data only on our instructions,
- Implement appropriate technical and organizational measures,
- Do not sub-process data without our consent (unless permitted under the contract),
- Assist in fulfilling data subject rights.

6.5. Where third-party providers are located outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) or adequacy decisions by the European Commission.

6.6. This website may contain third-party advertising banners, links to their websites and services, which we do not control. We are not responsible for the safety and privacy of the information collected by third parties. We recommend reviewing the privacy policies applicable to third-party websites and services you use. This privacy policy was created using the Nordweb privacy policy generator tool - https://nordweb.lt.

7. Data Security

7.1. We implement technical and organizational measures to protect your data from unauthorized access, loss, or misuse.

7.2. In the event of a breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours in accordance with GDPR requirements. If the breach is likely to result in a high risk to you, we will also notify you without undue delay and provide information on the nature of the breach and recommended protective measures.

8. Your Rights

8.1. Under the General Data Protection Regulation (GDPR), you have the following rights regarding your personal data:

Right of access – Request a copy of the personal data we hold about you.
Right to rectification – Request correction of inaccurate or incomplete data.
Right to erasure – Request deletion of your data (“right to be forgotten”) under certain circumstances.
Right to restrict processing – Request that we limit the way we use your data.
Right to data portability – Request transfer of your data to you or another provider.
Right to object – Object to certain types of processing, including direct marketing.
Right to withdraw consent – Withdraw consent at any time, where processing is based on consent.

8.2. To exercise any of these rights, or if you have questions about how your personal data is handled, you can contact us via email: info@hyperhedge.eu

9. International Data Transfers

9.1. Our website is hosted and operated using Wix.com, which may store and process personal data in countries outside the European Economic Area (EEA), including the United States, Israel, South Korea, and other jurisdictions.

9.2. Wix ensures that any transfers of personal data outside the EEA are conducted in compliance with the General Data Protection Regulation (GDPR). This includes the use of:

Adequacy decisions (e.g. Israel is recognized by the European Commission as providing an adequate level of protection),
Standard Contractual Clauses (SCCs),
And other appropriate technical and organizational safeguards.

9.3. By using our website and services, you acknowledge that your personal data may be transferred and processed outside the EEA, subject to these protections

10. Dispute Resolution

10.1. Any dispute related to HyperHedge, its services, and the operation of the website shall be resolved through negotiations between your Company and HyperHedge by contacting via email info@hyperhedge.eu.

10.2. Considering that data processing is carried out in Lithuania, the State Data Protection Inspectorate of Lithuania is considered the responsible supervisory authority.

10.3. If the dispute is brought to court, the laws of Lithuania shall apply, and the dispute shall be heard by a competent court of Lithuania.

11. Contact Information

11.1. If you have any questions or would like more information about our privacy policy, please contact us via email: info@hyperhedge.eu