1. Controller and contact
Elisteka UAB, company code 304915849, is the controller of personal data described in this policy. Its registered office is Žuvėdrų g. 22, LT-87106 Telšiai, Lithuania. Questions or requests about privacy can be sent to sales@elisteka.com.
2. Information we process
When you use the IPv6 application, IPv4 quote or IPv4 seller-intake forms, we process the information you provide. Depending on the form, this may include your name, job title, business contact details, company details, resource information, country and company website, ASN or proposed ASN arrangement, upstream and rDNS requirements, expected start date, commercial preferences, intended use, notes, source or campaign parameters included in the page URL, and the acknowledgements recorded with your submission.
We may also process correspondence, submission references, timestamps, basic request and security data such as an IP address, and public registry or routing information associated with an IPv4 or IPv6 resource during later manual review.
The current seller-intake form does not publish submitted information. Choosing an exact or masked display preference does not authorise publication; any later marketing or listing requires a separate decision and commercial mandate.
3. Purposes and legal bases
We use this information to respond to requests, review business identity, intended use and technical feasibility of IPv6 applications and assess seller submissions, communicate with business representatives, protect the service from misuse, maintain submission and acceptance records, and comply with legal obligations.
Depending on the circumstances, processing is based on steps requested before entering a contract, our legitimate interests in operating and protecting a B2B resource service and evaluating genuine submissions, and compliance with legal obligations. The privacy acknowledgement confirms that you have read this policy; it is not blanket consent to all processing.
4. Recipients, processors and transfers
Access is limited to Elisteka personnel and service providers who need the information for these purposes. Current service providers include Vercel for website hosting, Neon for managed PostgreSQL hosting, and the configured email-delivery provider. Professional advisers or authorities may receive information where reasonably necessary or legally required.
Some providers may process information outside Lithuania or the European Economic Area. Where required, transfers rely on an adequacy decision, standard contractual clauses or another lawful safeguard.
5. Retention
We keep information only as long as reasonably necessary for the purpose for which it was collected, including handling the request, maintaining security and acceptance records, meeting legal obligations and resolving disputes. Information that is no longer needed is deleted or anonymised where reasonably practicable. Legally required accounting or transaction records may be retained for the applicable statutory periods.
IPv6 applications and IPv4 quote requests are sent to the configured Elisteka sales mailbox using the existing email provider. They are not automatically imported into a provisioning system. IPv4 seller submissions use the existing managed PostgreSQL service and email notifications.
6. Public technical sources and automated decisions
After a seller submission, authorised staff may manually run point-in-time checks using public technical sources, including RIPEstat, Whois, routing or BGP information and RPKI data. These sources can be incomplete or change over time and do not by themselves prove ownership or transfer eligibility.
Elisteka does not use the public seller-intake service to make solely automated decisions that produce legal or similarly significant effects. Seller submissions and IPv6 applications require human review. No public application automatically accepts a customer, collects payment or provisions network resources.
7. Cookies and analytics
The public website currently uses no third-party analytics service and no advertising or analytics cookies. The application does not use browser localStorage or sessionStorage. If a seller submits the intake form, source and UTM campaign parameters present in the page URL are stored with that submission; they do not create a separate tracking request or browser identifier. A strictly necessary HttpOnly session cookie is used only for the restricted administrator area. Hosting and security infrastructure may process technical request data needed to deliver and protect the service.
8. Security
We use appropriate technical and organisational measures intended to protect personal data, including access controls, restricted production credentials, encrypted connections and validation of public submissions. No internet service can guarantee absolute security.
9. Your rights
Subject to applicable law, you may request access, correction, deletion, restriction or portability of your personal data, or object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it without affecting earlier lawful processing. Contact sales@elisteka.com to exercise a right.
You may also lodge a complaint with Lithuania’s State Data Protection Inspectorate or another competent supervisory authority.
10. Changes
We may update this policy when the service or legal requirements change. The current version and effective date appear at the top of this page. Material changes affecting a new application or seller submission must be reviewed and acknowledged through the current form.
The Seller Intake Terms explain the limited scope of an IPv4 submission.