GDPR & Data Rights
Last updated: 3 August 2026
This page explains your rights under the General Data Protection Regulation (GDPR) and how to exercise them. Vindiko ("Vindiko", "we", "us") is the data controller responsible for personal data processed through vindiko.com.
1. Your Rights
Under GDPR you have the right to: access the personal data we hold about you; have inaccurate data corrected; request erasure of your data ("right to be forgotten"); restrict how we process your data; receive your data in a portable format; and object to processing based on legitimate interests. You can exercise most of these rights directly in your account settings, or by contacting us at privacy@vindiko.com.
2. Automated Decision-Making
Under Article 22 of the GDPR, you have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects. Vindiko uses AI to generate cost estimates and dispute letters. These outputs do not produce legally binding decisions — they are informational only. You may request a manual review of any AI-generated output by emailing privacy@vindiko.com.
3. How to Submit a Data Request
To exercise any of your rights, email privacy@vindiko.com with your registered email address and a description of your request. We will respond within 30 days. In exceptional circumstances we may extend this by up to a further two months, and will inform you of any extension within the initial 30-day period.
4. Data Controller
The data controller for personal data processed through vindiko.com is Vindiko, registered in Lithuania (Reg. No. 306145823), Gedimino pr. 1, Vilnius, Lithuania. We have not appointed a Data Protection Officer: our processing does not meet any of the thresholds in Article 37(1) GDPR — we are not a public authority, we do not monitor data subjects regularly and systematically on a large scale, and we do not process special categories of data on a large scale. For all data protection matters, contact privacy@vindiko.com.
5. Supervisory Authority
If you believe we have not handled your data rights request properly, you have the right to lodge a complaint with the Lithuanian State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija, VDAI) at ada.lt. You may also contact the data protection authority in your country of residence.
6. Contact
For any data rights enquiries, email privacy@vindiko.com. We aim to acknowledge all requests within 5 working days and resolve them within 30 days.