Legal information

Privacy and cookie policy

Last updated: . Here you will find who processes your personal data, for what purposes and on what legal basis, who receives it, how long it is kept and what rights you have.

This is a translation of the Lithuanian privacy policy. In case of any discrepancy, the Lithuanian version prevails.

01Data controller

The data controller is a natural person carrying out individual activity (self-employment) under a certificate (NACE/EVRK 62.10.90 “Kita kompiuterių programavimo veikla” – other computer programming activities), operating under the brand aigentas.lt.

Address: Vilnius, Lietuva (Vilnius, Lithuania)
Email: info@aigentas.lt
Individual activity certificate No. 935182

No data protection officer has been appointed – under GDPR Art. 37 this is not mandatory. For any privacy question, write to info@aigentas.lt.

02What data I collect

  • Enquiry form. Name, email, phone (optional), company (optional), selected service area, your message and the page the form was sent from.
  • Emails. If you write directly to info@aigentas.lt, I process your email address, name and the content of your email.
  • Consultation booking. If you book a time through the Calendly calendar, Calendly passes on your name, email, the selected time and the answers you provide. The calendar is loaded only after you click “Show calendar”.
  • Technical data. The website server (Vercel) automatically records the IP address, request time, page address and browser information. To limit how often the form can be submitted, the IP address is briefly held in server memory.
  • Business contacts. If I write to your company first, I process work contact details obtained from public sources (see “Direct marketing to businesses”).
  • Statistics. Google Analytics 4 is loaded only if you consent to statistics cookies. Vercel Analytics collects aggregated, anonymous statistics without cookies.

You are not required to provide data, but without an email address and a message I will not be able to reply to your enquiry. Please do not include special categories of data in the form.

03Purposes and legal bases

I process data only for the following purposes and do not sell it. I do not use data received through the website form for marketing emails.

Replying to your enquiry and preparing a proposal

Data:
name, email, phone, company, selected service area, message, correspondence
Legal basis:
GDPR Art. 6(1)(b) (steps taken at your request before entering into a contract) and Art. 6(1)(f) (legitimate interest in replying to business enquiries)

Entering into and performing a contract

Data:
contact details, correspondence, project-related information
Legal basis:
GDPR Art. 6(1)(b) (performance of a contract)

Accounting and taxes

Data:
data shown on invoices and payment documents
Legal basis:
GDPR Art. 6(1)(c) (legal obligation under accounting and tax laws)

Visitor statistics (Google Analytics)

Data:
pseudonymous cookie identifiers, pages viewed, device and browser type, approximate location
Legal basis:
GDPR Art. 6(1)(a) – your consent (Lithuanian Law on Electronic Communications). Google Analytics is not loaded without consent.

Anonymous statistics (Vercel Analytics)

Data:
aggregated page view data, without cookies
Legal basis:
GDPR Art. 6(1)(f) (legitimate interest in understanding how the website is used)

Website security and spam protection

Data:
IP address, request time, browser information
Legal basis:
GDPR Art. 6(1)(f) (legitimate interest in keeping the website running and secure)

Where I rely on legitimate interest, you have the right to object to such processing (see “Your rights”).

04Direct marketing to businesses

Sometimes I write first to companies that may benefit from my services. In that case I process work contact details: the company name, the contact person’s name, job title, work email address or phone number. I find them in public sources (the company’s website, public registers or directories), and I state the specific source in my first email.

The legal basis is GDPR Art. 6(1)(f) (legitimate interest in offering services to businesses) and the direct marketing provisions of the Lithuanian Law on Electronic Communications. Without prior consent I write only to legal entities; to natural persons, including those carrying out individual activity, only with their consent.

I send no more than 3 emails per contact and do not track email opens or clicks. You can opt out in any email: reply “No” or write to info@aigentas.lt, and I will stop immediately. You can object to such processing at any time.

05Recipients and processors

Data is processed by the following service providers (data processors), who use it only on my instructions and only to provide their service:

Vercel Inc.

Purpose:
website hosting, server logs, anonymous Vercel Analytics statistics, form submission rate limiting (the IP address is held in server memory for up to 10 min.)
Country:
USA

Resend

Purpose:
delivering contact form enquiries by email to my inbox
Country:
USA

Zoho Corporation B.V.

Purpose:
the info@aigentas.lt mailbox (Zoho Mail, EU service zoho.eu)
Country:
Netherlands (EU)

Google Ireland Limited / Google LLC

Purpose:
Google Analytics statistics (only with consent)
Country:
Ireland (EU), USA

Calendly LLC

Purpose:
booking a consultation time – the Calendly calendar is loaded only after you click “Show calendar”
Country:
USA

Data may also be provided to public authorities (e.g. the tax administrator) where required by law.

06Transfers outside the EEA

Some service providers (Vercel, Resend, Google LLC, Calendly) may process data in the USA. Such transfers are covered by the EU–US Data Privacy Framework (DPF) where the provider is certified under it, and/or by standard contractual clauses approved by the European Commission. More information: dataprivacyframework.gov.

07Retention periods

Enquiries and correspondence, if no contract is concluded

Period:
12 months from the last correspondence

Contract and accounting documents

Period:
as long as required by accounting and tax laws

Google Analytics data

Period:
user- and event-level data – no longer than 14 months (GA4 retention setting); aggregated reports without identifiers may be kept longer

Business contacts for direct marketing

Period:
12 months from the last email if you have not replied; an opt-out record (email address and date) – for as long as needed to make sure I do not write again

Consent choice in your browser

Period:
until you change it or clear your browser data; consent is requested again at least every 12 months

IP address for abuse protection

Period:
up to 10 min. in server memory (form submission rate limiting)

Server logs

Period:
for a limited time under Vercel’s log retention rules

08Cookies and browser storage

Strictly necessary storage is used without consent – it only remembers your choice. Statistics cookies (Google Analytics) are set only with your consent. Vercel Analytics does not use cookies.

aigentas-consent-v1

Type:
browser storage (localStorage), strictly necessary
Purpose:
remembers your cookie choice
Duration:
until you change or delete it (no longer than 12 months)

_ga

Type:
cookie, statistics (Google Analytics 4)
Purpose:
distinguishes visitors by a pseudonymous identifier
Duration:
2 years

_ga_<ID>

Type:
cookie, statistics (Google Analytics 4)
Purpose:
stores the session state
Duration:
2 years

Calendly cookies

Type:
third-party cookies
Purpose:
calendar functionality and booking
Duration:
under Calendly’s policy; set only after you click “Show calendar”

You can change or withdraw your consent at any time by clicking “Cookie settings” in the website footer. Withdrawal does not affect the lawfulness of processing carried out before it. You can also delete or block cookies in your browser settings.

09Your rights

  • Right of access – to get confirmation of whether your data is processed, and a copy of it.
  • Right to rectification – to have inaccurate data corrected or incomplete data completed.
  • Right to erasure – to have your data deleted (the “right to be forgotten”).
  • Right to restriction of processing – e.g. while the accuracy of the data is being checked.
  • Right to data portability – to receive the data you provided in a commonly used format.
  • Right to object – to processing based on legitimate interest, including direct marketing.
  • Right to withdraw consent – at any time, via “Cookie settings” in the footer.

Send requests to info@aigentas.lt. I will reply within 1 month at the latest; in complex cases this period may be extended, and I will let you know.

10Complaints

If you believe your data is being processed improperly, you can file a complaint with the State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija, L. Sapiegos g. 17, LT-10312 Vilnius, vdai.lrv.lt). That said, I suggest contacting me first – we can usually resolve the issue faster.

11Automated decisions

I do not make automated decisions that have legal effects on you, and I do not carry out profiling.

12Changes to this policy

This policy may be updated when service providers or laws change. The current version is always published on this page, and the date of the last update is shown at the top.

This English text is a translation provided for convenience. In case of any discrepancy between the English and Lithuanian versions, the Lithuanian version prevails.