01Data controller
The data controller is a natural person carrying out individual activity (self-employment) under a certificate (NACE/EVRK 62.10.90 “Kita kompiuterių programavimo veikla” – other computer programming activities), operating under the brand aigentas.lt.
Address: Vilnius, Lietuva (Vilnius, Lithuania)
Email: info@aigentas.lt
Individual activity certificate No. 935182
No data protection officer has been appointed – under GDPR Art. 37 this is not mandatory. For any privacy question, write to info@aigentas.lt.
02What data I collect
- Enquiry form. Name, email, phone (optional), company (optional), selected service area, your message and the page the form was sent from.
- Emails. If you write directly to info@aigentas.lt, I process your email address, name and the content of your email.
- Consultation booking. If you book a time through the Calendly calendar, Calendly passes on your name, email, the selected time and the answers you provide. The calendar is loaded only after you click “Show calendar”.
- Technical data. The website server (Vercel) automatically records the IP address, request time, page address and browser information. To limit how often the form can be submitted, the IP address is briefly held in server memory.
- Business contacts. If I write to your company first, I process work contact details obtained from public sources (see “Direct marketing to businesses”).
- Statistics. Google Analytics 4 is loaded only if you consent to statistics cookies. Vercel Analytics collects aggregated, anonymous statistics without cookies.
You are not required to provide data, but without an email address and a message I will not be able to reply to your enquiry. Please do not include special categories of data in the form.
03Purposes and legal bases
I process data only for the following purposes and do not sell it. I do not use data received through the website form for marketing emails.
Replying to your enquiry and preparing a proposal
- Data:
- name, email, phone, company, selected service area, message, correspondence
- Legal basis:
- GDPR Art. 6(1)(b) (steps taken at your request before entering into a contract) and Art. 6(1)(f) (legitimate interest in replying to business enquiries)
Entering into and performing a contract
- Data:
- contact details, correspondence, project-related information
- Legal basis:
- GDPR Art. 6(1)(b) (performance of a contract)
Accounting and taxes
- Data:
- data shown on invoices and payment documents
- Legal basis:
- GDPR Art. 6(1)(c) (legal obligation under accounting and tax laws)
Visitor statistics (Google Analytics)
- Data:
- pseudonymous cookie identifiers, pages viewed, device and browser type, approximate location
- Legal basis:
- GDPR Art. 6(1)(a) – your consent (Lithuanian Law on Electronic Communications). Google Analytics is not loaded without consent.
Anonymous statistics (Vercel Analytics)
- Data:
- aggregated page view data, without cookies
- Legal basis:
- GDPR Art. 6(1)(f) (legitimate interest in understanding how the website is used)
Website security and spam protection
- Data:
- IP address, request time, browser information
- Legal basis:
- GDPR Art. 6(1)(f) (legitimate interest in keeping the website running and secure)
Where I rely on legitimate interest, you have the right to object to such processing (see “Your rights”).
04Direct marketing to businesses
Sometimes I write first to companies that may benefit from my services. In that case I process work contact details: the company name, the contact person’s name, job title, work email address or phone number. I find them in public sources (the company’s website, public registers or directories), and I state the specific source in my first email.
The legal basis is GDPR Art. 6(1)(f) (legitimate interest in offering services to businesses) and the direct marketing provisions of the Lithuanian Law on Electronic Communications. Without prior consent I write only to legal entities; to natural persons, including those carrying out individual activity, only with their consent.
I send no more than 3 emails per contact and do not track email opens or clicks. You can opt out in any email: reply “No” or write to info@aigentas.lt, and I will stop immediately. You can object to such processing at any time.
05Recipients and processors
Data is processed by the following service providers (data processors), who use it only on my instructions and only to provide their service:
Vercel Inc.
- Purpose:
- website hosting, server logs, anonymous Vercel Analytics statistics, form submission rate limiting (the IP address is held in server memory for up to 10 min.)
- Country:
- USA
Resend
- Purpose:
- delivering contact form enquiries by email to my inbox
- Country:
- USA
Zoho Corporation B.V.
- Purpose:
- the info@aigentas.lt mailbox (Zoho Mail, EU service zoho.eu)
- Country:
- Netherlands (EU)
Google Ireland Limited / Google LLC
- Purpose:
- Google Analytics statistics (only with consent)
- Country:
- Ireland (EU), USA
Calendly LLC
- Purpose:
- booking a consultation time – the Calendly calendar is loaded only after you click “Show calendar”
- Country:
- USA
Data may also be provided to public authorities (e.g. the tax administrator) where required by law.
06Transfers outside the EEA
Some service providers (Vercel, Resend, Google LLC, Calendly) may process data in the USA. Such transfers are covered by the EU–US Data Privacy Framework (DPF) where the provider is certified under it, and/or by standard contractual clauses approved by the European Commission. More information: dataprivacyframework.gov.
07Retention periods
Enquiries and correspondence, if no contract is concluded
- Period:
- 12 months from the last correspondence
Contract and accounting documents
- Period:
- as long as required by accounting and tax laws
Google Analytics data
- Period:
- user- and event-level data – no longer than 14 months (GA4 retention setting); aggregated reports without identifiers may be kept longer
Business contacts for direct marketing
- Period:
- 12 months from the last email if you have not replied; an opt-out record (email address and date) – for as long as needed to make sure I do not write again
Consent choice in your browser
- Period:
- until you change it or clear your browser data; consent is requested again at least every 12 months
IP address for abuse protection
- Period:
- up to 10 min. in server memory (form submission rate limiting)
Server logs
- Period:
- for a limited time under Vercel’s log retention rules
08Cookies and browser storage
Strictly necessary storage is used without consent – it only remembers your choice. Statistics cookies (Google Analytics) are set only with your consent. Vercel Analytics does not use cookies.
aigentas-consent-v1
- Type:
- browser storage (localStorage), strictly necessary
- Purpose:
- remembers your cookie choice
- Duration:
- until you change or delete it (no longer than 12 months)
_ga
- Type:
- cookie, statistics (Google Analytics 4)
- Purpose:
- distinguishes visitors by a pseudonymous identifier
- Duration:
- 2 years
_ga_<ID>
- Type:
- cookie, statistics (Google Analytics 4)
- Purpose:
- stores the session state
- Duration:
- 2 years
Calendly cookies
- Type:
- third-party cookies
- Purpose:
- calendar functionality and booking
- Duration:
- under Calendly’s policy; set only after you click “Show calendar”
You can change or withdraw your consent at any time by clicking “Cookie settings” in the website footer. Withdrawal does not affect the lawfulness of processing carried out before it. You can also delete or block cookies in your browser settings.
09Your rights
- Right of access – to get confirmation of whether your data is processed, and a copy of it.
- Right to rectification – to have inaccurate data corrected or incomplete data completed.
- Right to erasure – to have your data deleted (the “right to be forgotten”).
- Right to restriction of processing – e.g. while the accuracy of the data is being checked.
- Right to data portability – to receive the data you provided in a commonly used format.
- Right to object – to processing based on legitimate interest, including direct marketing.
- Right to withdraw consent – at any time, via “Cookie settings” in the footer.
Send requests to info@aigentas.lt. I will reply within 1 month at the latest; in complex cases this period may be extended, and I will let you know.
10Complaints
If you believe your data is being processed improperly, you can file a complaint with the State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija, L. Sapiegos g. 17, LT-10312 Vilnius, vdai.lrv.lt). That said, I suggest contacting me first – we can usually resolve the issue faster.
11Automated decisions
I do not make automated decisions that have legal effects on you, and I do not carry out profiling.
12Changes to this policy
This policy may be updated when service providers or laws change. The current version is always published on this page, and the date of the last update is shown at the top.
This English text is a translation provided for convenience. In case of any discrepancy between the English and Lithuanian versions, the Lithuanian version prevails.