Privacy Policy

Privacy Policy and GDPR Notice

Version dated 3 August 2026

1. Controller and Scope

The controller of personal data collected through senseus.agency is UAB Vendoras, legal entity code 303331994, Kareivių g. 11, Vilnius, Lithuania. For data protection enquiries, contact vendoras.uab@gmail.com or call +370 630 54 044. This Policy applies to visitors, donors, representatives of organisations, authors, partners and applicants.

  • identification and contact details; information concerning a person’s position and authority;
  • application, project, correspondence, organisation verification and reporting data;
  • technical data: IP address, device information, activity logs, cookies and consent preferences;
  • donation information: amount, currency, project, status and transaction identifier; full payment card details are normally processed by the payment service provider;
  • materials voluntarily provided by the user, including images and stories relating to aid recipients.

3. Purposes and Legal Bases

We process personal data as necessary to perform our terms and contracts (Article 6(1)(b) GDPR), comply with legal obligations (Article 6(1)(c) GDPR), and pursue our legitimate interests in operating and protecting the platform, verifying projects and preventing misuse (Article 6(1)(f) GDPR). We rely on consent for optional cookies, marketing communications and certain publications (Article 6(1)(a) GDPR).

Special categories of personal data must not be submitted unless necessary. Where a project lawfully publishes information concerning health or vulnerable individuals, the Organisation must have a separate valid legal basis, minimise the data disclosed, and be able to demonstrate the required consents or authorisations.

4. Recipients and International Transfers

Personal data may be disclosed to authorised Vendoras personnel and contractors, hosting, analytics and email service providers, banks and licensed payment service providers, professional advisers, beneficiary Organisations, and public authorities where there is a lawful basis for disclosure.

Transfers outside the European Economic Area are made on the basis of an adequacy decision or, where applicable, Standard Contractual Clauses together with any necessary supplementary measures.

We retain personal data for no longer than necessary. Data relating to an active relationship is retained for the duration of that relationship; contractual, payment and accounting records are retained for the applicable mandatory periods; applications not accepted for further processing are normally retained for up to 24 months; security logs are normally retained for up to 12 months; and records of consent are retained until consent is withdrawn and for any further period necessary to demonstrate compliance. A particular retention period may be extended where required in connection with a claim, investigation or legal obligation.

6. Your Data Protection Rights

You may request access to, rectification or erasure of your personal data, restriction of processing, and data portability. You may also object to processing based on legitimate interests and withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal. We normally respond within one month and may verify the identity of the person making the request.

You may lodge a complaint with the Lithuanian State Data Protection Inspectorate (vdai.lrv.lt) or with the competent supervisory authority in your country of residence.

7. Security and Automated Decision-Making

We use access controls, backups, logging, contractual safeguards and encryption where appropriate. However, absolute security cannot be guaranteed. Vendoras does not make decisions that produce legal effects, or similarly significantly affect an individual, solely on the basis of automated processing unless this is separately disclosed.

8. Contacting Us and Changes to This Policy

A request should include contact details and sufficient information to enable us to identify the relevant records. We may update this Policy from time to time. Material changes will be published with a new version date.