Privacy notice

Last updated: 13 September 2026 · SAUGA PRO, MB

Data controller

SAUGA PRO, MB, company code 305975799, Pavilnionių g. 55, Vilnius, Lithuania. For questions about the pilot application write to risksensei@saugapro.lt; for general data protection matters, info@saugapro.lt.

This notice supplements the general SAUGA PRO privacy policy (saugapro.lt/privatumo-politika).

What this notice covers

The notice applies to three situations:

• The pilot application and visiting the website. Controller – SAUGA PRO, MB.
• Account administration, correspondence and platform security. Controller – SAUGA PRO, MB.
• The content of your organisation's assessments on the platform. The controller is normally your organisation, and SAUGA PRO, MB processes this data on its instructions under a separate data processing agreement provided before the pilot begins. The organisation informs the individuals whose data it submits to the platform. This notice does not apply to that content.

1Pilot application

What we collect

Your name, company, email, phone number, role, ranges for company size and assessment volume, the work process you describe, the source of the application (e.g. a QR code at an event), the language you used to fill in the form and the time of submission.

Name, company, email, phone, role and the process description are mandatory: without them we cannot evaluate the application, so it would not be submitted.

Why and on what basis

We use application data to evaluate suitability, select pilot participants and contact you about taking part. The legal basis is your consent.

We make no automated decisions: every application is reviewed by a person.

You may withdraw consent at any time. After withdrawal we can no longer evaluate your application, so it leaves the selection process and we delete the application data. Withdrawal is not retroactive: processing carried out before it remains lawful.

If you are already taking part in the pilot, we delete the application data in the same way. Participation in the pilot and its related documents are handled under a separate data processing agreement – deleting the application does not affect them.

We contact you only about this application and the pilot. For commercial offers or newsletters we would ask for your separate consent.

How long we keep it

When the period ends we delete the application data. Requests to delete it earlier are assessed and usually granted.

2Accounts, correspondence and security

What we process

Account data: name, email address, role, company, interface language, the time the terms of use were accepted, account status. Passwords are handled by the Firebase Authentication service; we neither see nor can recover them.

Correspondence: your messages to us and our replies, system emails (invitations, password recovery, reminders).

Technical and security data: sign-in metadata, server request logs (which may include IP address and browser information), anti-bot checks, your cookie choice.

Why and on what basis

We administer the account in order to grant the access your organisation requests. The basis is our legitimate interest in administering the service and granting access to the people your organisation designates. The agreement with your organisation is the context for this processing but not an independent basis: you are not personally a party to it – the organisation is.

We correspond with you in order to answer your questions. The basis is our legitimate interest in communicating with users.

We process security data to protect the system against unauthorised access and abuse. The basis is our legitimate interest in ensuring network and information security.

How long we keep it

Account deletion periods match those set out in the annex to the data processing agreement, so that the same action is not described differently in two documents.

3Who we share data with

We share data with the service providers necessary to run the service and, where required by law, with competent authorities.

Transfers outside the European Economic Area are covered by the safeguards set out in the relevant provider's data processing terms. We provide copies or links on request at info@saugapro.lt.

We do not sell data and do not use it for direct marketing.

4Where data is stored

Application and platform data is stored in the European Union – in a Google Cloud data centre in the Netherlands. Sensei AI processing also takes place in the European Union.

5Your rights

You may ask to access your data, correct it, delete it, restrict processing, withdraw consent, and – where processing relies on legitimate interest – object to that processing. Where processing relies on consent or a contract and is carried out by automated means, you may request data portability.

Send all requests concerning your data to info@saugapro.lt. You have the right to lodge a complaint with the State Data Protection Inspectorate of Lithuania.

6Cookies

On the website we use only technologies necessary for operation, security, your settings and saving unfinished work. We do not use analytics or advertising cookies.

When you are signed in to the application, the browser also holds a working copy of an unfinished assessment — until the work is saved to the server, this is its only copy, so the work is not lost if the connection drops. It is cleared automatically once the assessment is saved and closed. In detail – in the Cookie policy.

7Application and account

Submitting an application does not create a RiskSensei account. An account is created only for selected participants, after the pilot terms have been agreed separately.