Privacy Policy

Last updated: 17 September 2026

This Privacy Policy explains how URRU, UAB processes personal data when you use the URRU website, register your interest in seeing or testing URRU, subscribe to updates, or contact us.

1. Data controller

The data controller is URRU, UAB, company code 307838094, VAT code LT100020323919, Klaipėda district, Lithuania.

Privacy-related enquiries can be sent to info@urru.lt.

2. Personal data we may collect

full name;
email address;
phone number, if provided;
message content;
newsletter subscription and consent records;
technical information required for website security and spam prevention.

3. Why we use your data

to respond to enquiries;
to contact people interested in seeing or testing URRU;
to send URRU news where a person has subscribed;
to protect forms and the website against spam, abuse and malicious activity;
to maintain and improve website reliability.

4. Legal basis

Processing may be based on consent, on steps taken at your request before entering into a possible business relationship, or on URRU’s legitimate interests in operating a secure and reliable website and responding to genuine enquiries.

5. Test URRU registrations

When you submit the “Register to test URRU” form, the information you provide is used to assess and respond to your request and to contact you when a suitable opportunity to see or test URRU becomes available.

6. URRU updates

If you subscribe to URRU updates, we record your email address, consent status, subscription source, the applicable privacy-policy version and the time of registration. At launch, these registrations are collected through a Techlift-managed form service and stored in a protected database. If URRU later uses a dedicated newsletter delivery platform, subscribed contacts may be transferred to that platform for the purpose covered by your consent. Marketing messages will include an appropriate way to unsubscribe.

7. Service providers and infrastructure

URRU uses service providers and managed infrastructure where needed to operate the website. The “Register to test URRU” form is handled through Formspark. Cloudflare Turnstile is used to reduce automated abuse and spam. Newsletter registrations are collected through Techlift-managed infrastructure. Plausible Analytics is used to collect aggregate website usage statistics. Website hosting and technical maintenance are provided through contracted infrastructure providers. These providers process data only to the extent needed to provide their services.

8. Data retention

Personal data is kept only for as long as reasonably necessary for the purpose for which it was collected, to maintain appropriate business records, or to meet applicable legal obligations. Newsletter data is generally retained until you unsubscribe or the subscription is otherwise removed.

9. International data transfers

Some technology providers may process limited technical or form-related data outside Lithuania or the European Economic Area. Where applicable, URRU relies on appropriate contractual or other safeguards provided under applicable data-protection law.

10. Your rights

Subject to applicable law, you may have rights to access, correct, delete, restrict or object to processing of your personal data, and to data portability. Where processing is based on consent, you may withdraw consent at any time.

You may also have the right to lodge a complaint with the Lithuanian State Data Protection Inspectorate or another competent supervisory authority.

11. Security

We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse or alteration. Website forms may use automated anti-spam and abuse-prevention services.

12. Changes to this policy

This Privacy Policy may be updated when the website, forms, newsletter tools or other data-processing activities change. The latest version will be published on this page.