Private LLM hosting for Lithuanian companies, member state to member state.
Dedicated single-tenant infrastructure in EU-Central, run by a Czech Societas Europaea. Lithuania and the Czech Republic are both EU member states, so this is an intra-EU deployment under one GDPR framework, not a transfer to a third country.
Not legal advice. This page describes GPUwerk's infrastructure and corporate structure. Whether it satisfies your specific obligations under Lithuanian or EU data protection law is a question for your own legal counsel or data protection officer, not for this website.
Two member states, one regulation
A Lithuanian company sending data to a processor in the Czech Republic is not making a third-country transfer. Both countries apply the same GDPR text directly, as an EU regulation rather than a national law that varies by transposition. There's no standard contractual clause to negotiate for this leg, no adequacy decision to check, and no separate legal basis needed beyond what your own processing already requires under Chapter II GDPR.
Where does the data sit?
On a dedicated machine in EU-Central, in the Czech Republic, inside the EU's single data protection framework.
Who is the vendor, legally?
PRINT IT! SE, a Czech Societas Europaea. Company details are published at /legal/imprint.
Can procurement get the paperwork?
Yes. A standard Art. 28 GDPR data processing agreement is at /legal/dpa, and there are no sub-processors on instance workloads, listed at /legal/sub-processors. No certifications such as ISO 27001 are claimed; confirm directly if one is a requirement for you.
VDAI at home, ÚOOÚ for the vendor
Your own company's processing in Lithuania is supervised by the State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija, VDAI). GPUwerk is operated by PRINT IT! SE, registered in Prague, so GPUwerk's processing falls under the Czech Office for Personal Data Protection (ÚOOÚ). Both authorities apply GDPR under the one-stop-shop and cooperation mechanisms in Chapter VII, and neither has to reason about a foreign legal regime because there isn't one in this chain: no US parent, no US-incorporated entity, no CLOUD Act exposure. This still isn't a substitute for your own review: whether GPUwerk's setup satisfies your sector rules or internal policy is a question for your own counsel or DPO.
For the compliance file
The facts to check against your own checklist.
| Question | Answer |
|---|---|
| Operating entity | PRINT IT! SE, Societas Europaea, Altajská 1568/2, Vršovice, 100 00 Praha 10, Czech Republic |
| Where is data physically processed? | EU-Central, on a dedicated single-tenant machine assigned to you |
| Transfer basis Lithuania → Czech Republic | Intra-EU. Both are EU member states under the same GDPR; no SCCs needed for this leg. |
| Supervisory authority for your own processing | State Data Protection Inspectorate (VDAI), Lithuania |
| Supervisory authority for GPUwerk | Úřad pro ochranu osobních údajů (ÚOOÚ), as the vendor is a Czech entity |
| US CLOUD Act exposure? | None. No US parent, no US region, no US-incorporated entity in the chain. |
| Pricing | $0.79/hour for a single DGX Spark, $1.79/hour for a two-node cluster (128GB unified memory each) |
| Who can access instance content? | Through the instance itself, only holders of your SSH keys; password login is disabled fleet-wide. GPUwerk keeps standard infrastructure administrator access, and under the DPA does not use it on your content except at your request for support or where a legal obligation requires it. |
| Sub-processors for the workload? | None, listed at /legal/sub-processors |
| DPA (Art. 28 GDPR)? | Published at /legal/dpa, no charge |
| Certifications held | None claimed, including ISO 27001. Confirm directly if your process requires one. |
Questions we get from Lithuanian buyers
Is moving data from Lithuania to the Czech Republic a cross-border transfer?
Not in the sense that triggers Chapter V GDPR safeguards. Lithuania and the Czech Republic are both EU member states, so a data flow between them is an intra-EU transfer, not a transfer to a third country. There are no standard contractual clauses or adequacy decisions to attach.
Who is the supervisory authority?
For your own company's processing, the State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija, VDAI), Lithuania's national data protection authority. GPUwerk is operated by PRINT IT! SE, a Czech entity, so its own processing is supervised by the Czech Office for Personal Data Protection (ÚOOÚ).
Is a DPA available under Art. 28 GDPR?
Yes, published at /legal/dpa at no charge. There are no sub-processors for instance workloads, listed at /legal/sub-processors.
Is this legal advice?
No. This page describes GPUwerk's infrastructure and corporate structure. Whether it satisfies your specific compliance obligations is a question for your own legal counsel or data protection officer.
Related pages
One regulation, no transfer paperwork.
Lithuania to Czech Republic, same rules throughout.
Talk to us Deploy an instanceSee how this compares for other EU/EEA countries: Iceland, Malta, Cyprus, Latvia. For the general case, see private LLM hosting and pricing.