Qezaro Privacy Policy
UAB Qezaro (hereinafter – Qezaro) respects individual privacy and is committed to protecting and maintaining the confidentiality of personal information. This Privacy Policy describes how and why Qezaro processes personal information about you when you visit our website qezaro.com or use the products and services provided by Qezaro, including the Orbit solution.
How do we collect your information?
Section titled “How do we collect your information?”Qezaro collects your personal information via:
- our website qezaro.com,
- our products and services (such as Orbit),
- Cookies.
What information do we collect?
Section titled “What information do we collect?”Qezaro collects and processes the following information about you:
- information that Microsoft Partner representatives voluntarily provide:
- name and surname
- email address
- company name
- data of Clients’ customers fetched via API from the Business Central Admin Center or entered by the Microsoft Partner:
- Customers’ company name entered by the Partner, domain email address.
- Data that can be read in the Business Central Admin Center, such as but not limited to environment name, localization, database size.
- information about your visit to our website collected via cookies (see the Cookies section below).
Our role: data controller or data processor?
Section titled “Our role: data controller or data processor?”For the information you provide to us directly (such as account details of Microsoft Partner representatives) and the information collected on our website, Qezaro acts as the data controller, and this Privacy Policy applies to that processing.
For the data of Clients’ customers fetched from the Business Central Admin Center or entered by the Microsoft Partner, the Microsoft Partner acts as the data controller and Qezaro acts as a data processor. We process such data only on the Partner’s behalf and under the Partner’s instructions. If you are a customer of a Microsoft Partner, please refer to that Partner’s privacy policy for information about how your personal data is handled.
Use of personal information and legal basis
Section titled “Use of personal information and legal basis”We process personal information for the following purposes and on the following legal bases:
| Purpose | Personal data | Legal basis |
|---|---|---|
| Providing our products and services, e.g. running Orbit so that Microsoft Partners can manage their Customers’ environments | Account data of Microsoft Partner representatives; Business Central Admin Center data | Performance of a contract (GDPR Article 6 (1) (b)) |
| Communicating with you and responding to your inquiries | Name, email address, company name, contents of your inquiry | Our legitimate interest in responding to inquiries, considering this interest is not overridden by your fundamental rights and freedoms (GDPR Article 6 (1) (f)) |
| Analyzing how our website is used in order to improve it | Cookie identifiers and website usage data collected by Google Analytics | Your consent (GDPR Article 6 (1) (a)), given via the cookie banner |
Cookies
Section titled “Cookies”We use cookies on our website qezaro.com. Cookies are small text files stored on your device. The only non-essential cookies we use are set by Google Analytics, which helps us understand how visitors use our website so that we can improve it.
Analytics cookies are set only if you give your consent via the cookie banner. You can withdraw or change your consent at any time via the cookie settings on our website, by deleting cookies in your browser, or by using the Google Analytics opt-out browser add-on.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
| _ga | Google Analytics | Distinguishes unique visitors for website usage statistics | 2 years |
| ga* | Google Analytics | Maintains session state for website usage statistics | 2 years |
Google Analytics is provided by Google Ireland Limited and Google LLC. Information collected by Google Analytics may be transferred to the United States – see the section on transfers outside the European Economic Area below.
Sharing of personal information
Section titled “Sharing of personal information”We do not sell personal information. We share personal information with the following service providers (data processors) that process it on our behalf:
- Microsoft Corporation – our products and data are hosted in Microsoft Azure data centers.
- Google (Google Ireland Limited and Google LLC) – website analytics via Google Analytics, only if you have consented to analytics cookies.
In addition, personal information may be shared with third parties where one of the following circumstances applies:
- You have consented to us doing so.
- We are under a legal, regulatory, or professional obligation to disclose your personal information or to protect the rights, property, or safety of our company, our clients, or others.
- Our company is merged or acquired by a third party, in which case your personal information may form part of the transferred or combined assets.
When disclosing your personal information to third parties that will process it on our behalf, we will obtain assurances from these third parties that they will safeguard personal information consistently with this privacy policy.
Where we have knowledge that such third party is using or disclosing personal information in a manner contrary to this Policy, we will take reasonable steps to prevent or stop the use or disclosure. In addition, Qezaro holds these third parties accountable for maintaining your trust in the company through documents such as Non-Disclosure Agreements.
Do you transfer information about me outside the European Economic Area?
Section titled “Do you transfer information about me outside the European Economic Area?”Personal information processed in our products and services is stored in Microsoft Azure data centers located in North Europe and is not transferred outside the European Economic Area (all member states of the European Union and Iceland, Liechtenstein and Norway).
If you have consented to analytics cookies, information collected by Google Analytics may be transferred to Google LLC in the United States. This transfer is safeguarded by Google LLC’s certification under the EU–U.S. Data Privacy Framework, which the European Commission has recognized as ensuring an adequate level of data protection.
How long do we store your personal information?
Section titled “How long do we store your personal information?”We keep your personal information only for as long as we need it for the purposes described above:
- Account data of Microsoft Partner representatives is kept for the duration of our contractual relationship with the Partner and deleted no later than 3 years after the relationship ends, unless a longer period is required by law or needed to establish, exercise, or defend legal claims.
- Data processed on behalf of Microsoft Partners is kept for as long as the Partner uses our services and is handled according to the Partner’s instructions.
- Inquiry correspondence is kept for up to 2 years after the inquiry is resolved.
- Google Analytics data is retained for up to 14 months.
Security
Section titled “Security”We maintain reasonable safeguards to protect against unauthorized disclosure, misuse, alteration, or destruction of the personal information you provide to us. We protect data in many ways. Physical security is designed to prevent unauthorized access to database equipment and hard copies containing our confidential information, including your personal information.
Electronic security measures continuously monitor access to our servers and protect them from hacking or other unauthorized access from remote locations. This protection includes firewalls, restricted access, and encryption technology.
Please note, however, that perfect security does not exist on the Internet. Therefore, while we endeavor to protect your personal information, unauthorized parties may access and use data when data is transferred over the Internet.
Processing of sensitive information
Section titled “Processing of sensitive information”Sensitive information is information about your health, racial or ethnic origin, political views, religious or philosophical beliefs or membership in trade unions, genetic or biometric data or sexual orientation. We do not collect or process sensitive information about you and we ask you not to provide us any sensitive information.
Are you making automated decisions? Are you profiling?
Section titled “Are you making automated decisions? Are you profiling?”We do not make automated decisions regarding you, you are not profiled.
Your rights
Section titled “Your rights”You have certain rights about your personal information:
Right to access: you have the right to request access to any data that can be considered your personal data. This includes the right to be informed on whether we process your personal data, what personal data categories are being processed by us, and the purpose of our data processing;
Right to be informed: you have the right to be informed about processing of your personal data and such information has to be easy to understand. This right is executed with this privacy policy;
Right to rectification: you have the right to request that we correct any of your personal data if you believe that it is inaccurate or incomplete;
Right to object: you are entitled to object to certain processing of personal data, including for example, making automated decisions based on your personal data or when we otherwise base the processing of your personal data on our legitimate interest;
Right to restrict personal data processing: you have the right to request that we restrict the processing of your personal data if you wish to: (i) object the lawfulness of the processing; (ii) fix unlawful processing of personal data; (iii) receive or avoid deletion of personal data for establishing defending against legal claims; or (iv) demand restriction of the processing until assessing the plausibility of Qezaro’s legitimate interest in the specific processing activity;
Right to erasure: you may also request your personal data to be erased if the personal data is no longer necessary for the purposes for which it was collected, or if you consider that the processing is unlawful, or if you consider that the personal data has to be erased to enable us to comply with a legal requirement;
Right to data portability: if your personal data is being automatically processed with your consent or on the basis of a mutual contractual relationship, you may request that we provide you that personal data in a structured, commonly used and machine-readable format. Moreover, you may request that the personal data is transmitted to another controller. Bear in mind that the latter can only be done if that is technically feasible;
Right to withdraw your consent: in cases where the processing is based on your consent (such as analytics cookies), you have the right to withdraw your consent to such processing at any time without any adverse effect;
Right to submit your claim with the supervisory authority: if you are not satisfied with our response to your request in relation to personal data or you believe we are processing your personal data not in accordance with the law, you can submit your claim with the supervisory authority in your country of residence or to the lead supervisory authority – the Lithuanian State Data Protection Inspectorate at https://vdai.lrv.lt.
However, note that these rights are not absolute, and even if you exercise these rights, we may need to retain certain information for legal or administrative purposes.
If you would like to exercise any of the rights above, please email us using the email at the bottom of the page. To help us prevent unauthorized individuals from accessing, changing, or deleting your information, we may ask you to provide additional information that is necessary to confirm your identity. We will respond to your request within one month. If your request is complex, this period may be extended by a further two months, in which case we will inform you of the extension and its reasons within the first month.
Updates of privacy policy
Section titled “Updates of privacy policy”We review and update this Qezaro privacy policy once a year or more often if it is needed. When we do so, we will publish the changes on this page and update the date at the bottom of this policy. If you disagree with these changes, please stop using our website, products, and services.
Updating your information
Section titled “Updating your information”If your personal details (such as your name or email address) change, we kindly ask you to inform us as soon as possible via email at the bottom of the page.
Contact Details
Section titled “Contact Details”You can email your inquiries or any other questions or concerns to using the email below or by post to our office address below. We will investigate and attempt to resolve any questions, complaints, or disputes regarding using and disclosing personal information by the principles of this privacy policy.
UAB Qezaro Company code: 306799496 Address: Jonazoliu str. 17-33, LT-04136 Vilnius Email: sales at qezaro.com
If you have any questions regarding personal data processed by Qezaro, you can contact the responsible person directly via email above. This privacy policy was last updated on 2026 July 8th.