Legal
Privacy Policy
Updated: July 2026
1. What this privacy policy covers
This privacy policy explains how personal data is processed in connection with the website consiliumdigitale.lt, with correspondence by email, and with the provision of services. It also sets out your rights and how to exercise them.
Personal data is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council, referred to below as the GDPR, and the Law on Legal Protection of Personal Data of the Republic of Lithuania.
2. Data controller
| Controller | Consilium Digitale, MB |
|---|---|
| Company registration number | 308087405 |
| VAT number | LT100020634318 |
| Registered office | Vilnius, Lithuania |
| Website | consiliumdigitale.lt |
| Contact for data protection questions | send an email |
The company is not required to appoint a data protection officer, so all questions are handled through the contact given above.
3. What personal data is
Personal data is any information about an identified or identifiable natural person. This is not only a name, surname, email address or phone number, but also an IP address or a cookie-stored identifier, if it can be used to link information to a person.
4. Visiting the website
The website is hosted by Netlify. Like any other web host, it logs technical information about every request so the service works and stays secure.
| Purpose | Data | Legal basis | Retention period |
|---|---|---|---|
| Website operation, security, fault diagnosis | IP address, date and time of the request, page opened, HTTP status, browser and operating system, referring page | Legitimate interest in keeping the website secure and operational, GDPR Article 6(1)(f) | The hosting provider keeps server logs for a short period under its own retention terms, after which they are deleted |
These logs are not used to identify visitors, build profiles, or for marketing. They are not combined with the analytics data described in section 5.
5. Cookies and analytics
A cookie is a small text file that a website stores on your device. This website does not use cookies for advertising, profiling, or tracking across other websites.
We use Google Analytics 4 to measure how the website is used. The analytics script is not loaded and no analytics cookies are set until you click "Accept" on the cookie notice. If you choose "Decline", or make no choice at all, analytics stays off and no cookies are created.
| Name | Set by | Purpose | Type | Duration |
|---|---|---|---|---|
cd_consent |
This website | Remembers your analytics choice so you are not asked again | Strictly necessary, no consent required. This is local storage, not a cookie | Until you clear your browser data |
_ga |
Google Analytics | Distinguishes one visitor from another | Analytics, consent required | 2 years |
_ga_<stream ID> |
Google Analytics | Maintains session state for measurement | Analytics, consent required | 2 years |
| Purpose | Data | Legal basis | Retention period |
|---|---|---|---|
| Measuring website traffic and content performance | Pseudonymous identifier, pages viewed, approximate location based on IP address, device and browser type, referring source | Your consent, GDPR Article 6(1)(a) | Google Analytics retains data according to the period set in the account. The GA4 default is 2 months and can be extended to 14 months |
Google Analytics 4 does not log or store IP addresses. Advertising features, Google Signals, and ad personalisation are turned off, so analytics data is not used to build advertising audiences.
Google Analytics is provided by Google Ireland Limited, acting as a data processor. Data may be transferred outside the European Economic Area to the United States, to Google LLC. Such transfers are based on the European Commission's standard contractual clauses and the EU-US Data Privacy Framework.
Withdrawing consent is as easy as giving it. Click "Cookie settings" in the footer to change your choice at any time. You can also delete this website's cookies and local storage in your browser settings, or install the Google Analytics opt-out add-on.
6. Contacting us by email
The website has no contact form. Contact is made by email or through LinkedIn.
| Purpose | Data | Legal basis | Retention period |
|---|---|---|---|
| Responding to your enquiry and discussing further cooperation | Name, email address, company or position if provided, and the content of the message | Legitimate interest in responding to a business enquiry, GDPR Article 6(1)(f). If services are agreed, performance of a contract, Article 6(1)(b) | Correspondence that does not turn into a contract is deleted once no longer relevant, and no later than after 2 years |
7. Providing services
| Purpose | Data | Legal basis | Retention period |
|---|---|---|---|
| Entering into and performing contracts, invoicing, accounting obligations | Contact and role details of client representatives, correspondence, contract and payment information | Performance of a contract, GDPR Article 6(1)(b), and compliance with a legal obligation, Article 6(1)(c) | Accounting records are kept for the period set by Lithuanian law, in most cases 10 years |
8. Direct marketing
No direct marketing is carried out through this website. There is no newsletter, mailing list, or marketing automation. Contacting us by email does not add you to any list, and your data is never sold or shared for marketing purposes.
9. Social networks
The website links to a LinkedIn profile, but no LinkedIn content is embedded here, so LinkedIn does not set cookies on this website and does not receive data about your visit unless you click the link. Once on LinkedIn, that company's own privacy policy applies. The same applies to mindaugasgumauskas.com, which has its own separate privacy policy.
10. Fonts
Fonts are loaded from Google Fonts. The browser requests the font files from Google's servers, and as a result Google learns your IP address. Google states that Google Fonts does not set cookies and that these requests are not used to build user profiles. This is the only third-party request that happens before you make a cookie choice. If you want to avoid it, most browsers and privacy extensions can block third-party fonts, and the website's content will remain legible.
11. Where data comes from and who it is shared with
Data is obtained directly from you, when you write to us or contact us through LinkedIn, and from your use of the website, as described in sections 4 and 5. No personal data is purchased from data brokers or collected from third-party sources.
Data may be disclosed to service providers acting on documented instructions, namely the website hosting and email service providers and Google as the analytics processor, as well as to the person providing accounting services. Data may also be disclosed where required by law, or to lawyers where necessary to establish, exercise or defend legal claims. Data is not provided to any other third parties.
12. Data security
The website is served over encrypted HTTPS and applies a restrictive content security policy. Access to email and client materials is protected by strong authentication. Technical and organisational measures proportionate to the volume of data processed are in place to protect data against unauthorised access, loss, alteration, and unlawful processing.
13. Your rights
Under the GDPR you have the rights listed below. Requests are responded to within one month. In complex cases this period may be extended by a further two months, with notice given within the first month.
- Access. Find out whether your data is being processed, and obtain a copy of it.
- Rectification. Request correction of inaccurate data and completion of incomplete data.
- Erasure. Request deletion of data where the grounds set out in GDPR Article 17 apply.
- Restriction of processing. In the cases set out in GDPR Article 18.
- Data portability. Receive data you provided in a structured, commonly used, machine-readable format, where processing is based on consent or a contract and carried out by automated means.
- Object. Object at any time to processing based on legitimate interest, as described in sections 4 and 6.
- Withdraw consent. Withdraw consent to analytics at any time, without affecting the lawfulness of processing carried out before the withdrawal.
To exercise these rights, contact us using the details in section 2. We may need to verify your identity so that data is not disclosed to the wrong person. When contacting us by email, it is usually enough to write from the address the data relates to.
14. Complaints
If you believe your personal data is being processed improperly, please first contact us using the details in section 2. Most issues are resolved at this stage.
You also have the right to lodge a complaint with a supervisory authority. In Lithuania this is the State Data Protection Inspectorate, L. Sapiegos g. 17, Vilnius, vdai.lrv.lt. If you live or work in another European Union or European Economic Area state, you can lodge a complaint with that state's supervisory authority.
15. Accuracy of the data you provide
When you provide information about yourself or about colleagues, please make sure it is accurate and that you have the right to share it. We are not responsible for consequences arising from inaccurate information provided to us.
16. Changes to this privacy policy
This privacy policy may be updated, for example when the tools used on the website change. The current version is always published on this page, and the update date is shown above. Significant changes related to consent-based processing will be communicated by asking for consent again.