Legal
How MB Tilfortis (Tillforty) collects, uses and protects personal data on this website and in its services. Last updated: 5 November 2026.
The data controller is MB Tilfortis (brand name Tillforty), company code 304448018, registered at Jurbarko g. 2A, Kaunas, Lithuania. Questions about personal data: hello@tillforty.com, +370 677 83305.
| When | Data | Purpose | Legal basis | Kept for |
|---|---|---|---|---|
| You send the contact form or email us | Name, email, organisation, your message | To reply and arrange a call | Steps before a contract (GDPR art. 6(1)(b)) and our legitimate interest in answering enquiries | 12 months after the last contact, unless a contract follows |
| You become a client | Contact details of your staff, contract and invoicing data, project correspondence | To deliver and invoice the services | Contract (art. 6(1)(b)); accounting law for invoices | Duration of the contract plus 10 years for accounting records, as required by Lithuanian law |
| You visit the website | Technical data in the server log, and whatever the measurement tags collect: IP address, browser, pages visited, approximate location | To keep the site available and secure, and to measure how it is used | Our legitimate interest in running a working, secure website; consent for measurement tags | Server logs 30 days; measurement data for as long as the tag in question retains it |
We do not sell personal data and we do not use it for automated decisions that have legal effects on you.
This website loads Google Tag Manager (container GTM-TSDKN6H) on every page. Tag Manager sets no cookies by itself; it loads the measurement tags configured in it. Today that is Google Analytics 4, which sets the cookies _ga and _ga_79EMFD2MQY in your browser and sends Google the pages you open, your approximate location and your device. Apart from those, the site stores nothing in your browser.
Other third parties receive data when you use the site:
You can block these tags with your browser's settings or a content blocker, and the site will work normally without them.
Hetzner and our Microsoft tenant are inside the European Economic Area. Calendly, Slack and Google are in the United States, and those transfers rely on the EU standard contractual clauses or an adequacy decision.
When we deliver services, we usually act as a processor on behalf of the client, who stays the controller of the data in their documents and systems. Solutions are deployed inside the client's own environment, and our access is governed by a data processing agreement, confidentiality obligations and the client's access rights. We do not use client data to train AI models.
Under the GDPR you may ask us to access, correct, delete or restrict your personal data, object to processing based on legitimate interest, receive your data in a portable format, and withdraw consent at any time. Write to hello@tillforty.com; we answer within one month. You can also complain to the State Data Protection Inspectorate of Lithuania (Valstybinė duomenų apsaugos inspekcija, vdai.lrv.lt).
We use access controls, two-step verification, encryption in transit and the security features of Microsoft 365 and Azure. Our team works under confidentiality obligations and our activity is covered by professional liability insurance.
We may update this policy. The date at the top shows the latest version; material changes will be announced on this page.