Skip to content
+370 670 99265

Privacy policy

Version 1.2, effective from 21 October 2026

1. Who processes your data

The controller of your personal data is Web studija, MB (company code 306455709, registered office: Alaušo g. 1C, LT-08424 Vilnius), trading as IT studija SITE.LT (hereinafter “we”). Contacts: email web@site.lt, tel. +370 670 99265.

We process data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR), the Law on Legal Protection of Personal Data of the Republic of Lithuania and the Law on Electronic Communications of the Republic of Lithuania. We have not appointed a data protection officer, as this is not mandatory. For all questions regarding personal data, please use the contacts above.

2. What data we process, for what purposes and on what legal basis

2.1. Enquiry form

  • What we receive: your name, phone number, email address, the selected topic and your comment – whatever you enter in the form. Together with this, we receive the address of the page on which the form was filled in and the time it was sent.
  • How the form works. The completed form is sent by email to our mailbox. The content of enquiries is not stored on the website server.
  • Spam protection. The form asks you to answer a simple question, and we limit the number of enquiries from a single IP address. The IP address itself is not recorded – we only store its hash value (an HMAC-SHA256 digest) and the time of the enquiry for no longer than 1 hour.
  • Purpose: to respond to your enquiry, provide a quote and deliver the service.
  • Legal basis: steps taken at your request prior to entering into a contract and performance of a contract (Article 6(1)(b) GDPR); spam protection – legitimate interest (Article 6(1)(f) GDPR).

2.2. Calls and email

When you call or email us, we process your phone number or email address, your name (if you provide it) and the content of the correspondence. Purpose and legal basis – as in section 2.1.

2.3. Service delivery and accounting

When providing a service, we process the contact person’s data, and when issuing an invoice, the buyer’s details. Legal basis – performance of a contract and the legal obligation to keep accounting records (Article 6(1)(b) and (c) GDPR).

2.4. Visitor statistics (only with your consent)

  • Tool: Google Analytics 4 (Google Ireland Limited). We measure the number of visitors, page views, traffic sources and key actions, such as enquiry submissions and clicks on phone, email and messaging app (WhatsApp, Viber, Telegram) links. The form content, phone number or email address are not sent to Google Analytics.
  • Data: pseudonymous cookie identifiers, device and browser information, approximate location (country, city), pages visited and actions taken. The Google Signals feature is disabled.
  • Legal basis: your consent (Article 6(1)(a) GDPR). Until you click “Accept”, Google tags are not loaded. You can withdraw your consent at any time by clicking “Cookie settings” at the bottom of the website.
  • Retention: Google Analytics cookies are valid for up to 400 days (see the cookie policy); visit data are kept in Google Analytics for no longer than 14 months. Google retains other data under its own rules (business.safety.google/privacy).

2.5. Google Consent Mode v2

We use version 2 of Google Consent Mode. Until you click “Accept”, the Google Analytics tag is not loaded, its cookies are not set and no data are sent to Google. Once you consent, the analytics signal analytics_storage is sent as “granted”, while the advertising signals ad_storage, ad_user_data and ad_personalization are always sent as “denied”: we do not use Google advertising services. If you click “Decline” or withdraw your consent, all signals are changed to “denied”, and Google cookies and browser storage entries on the site.lt domain are deleted.

2.6. Server logs

The hosting server automatically records technical data (IP address, time, requested address, browser) to ensure the operation and security of the website – legitimate interest (Article 6(1)(f) GDPR). The retention period is set by the hosting service provider.

3. How long we keep data

  • Enquiries and correspondence – 60 months from the last correspondence. Longer – only if needed to resolve a dispute (until it is resolved).
  • Invoices and other accounting documents – 10 years, as required by the legislation on the retention of accounting documents.
  • Google Analytics data – as set out in section 2.4.

4. Who we share data with

  • UAB „Interneto vizija“ (IV.lt) – the website hosting provider.
  • Google Ireland Limited – the email service provider (Google Workspace) and, with your consent, the provider of Google Analytics.
  • The accounting service provider – only data from invoices and other accounting documents.
  • Public authorities – only where required by law.

Google may transfer data outside the European Economic Area; in that case, standard contractual clauses approved by the European Commission or other safeguards provided for in the GDPR apply. We do not sell data.

5. Your rights

You have the right to access your data, have it rectified or erased, restrict its processing, object to processing based on legitimate interest, receive your data in a portable format and withdraw your consent at any time (withdrawal does not affect processing carried out before it). Please send your request to web@site.lt – we will reply within 30 days at the latest.

If you believe that we process your data unlawfully, you may lodge a complaint with the State Data Protection Inspectorate (L. Sapiegos g. 17, 10312 Vilnius, vdai.lrv.lt).

6. Changes to this policy

If we change this policy, we will publish the new version on this page and state its effective date.