Privacy Policy

1. Who we are

Controller: Vincentas Gedvilas
Email: [email protected]

2. What data we collect

When you use the "Contact me" form we store:

• Your IP address (automatically logged by the web server)
• First name
• E-mail address
• Phone number
• The message you type

3. Why we collect it

• To reply to your inquiry – we need your contact details to get back to you.
• To protect the site from abuse – we use the IP address for rate-limiting to stop spam.

4. Legal basis

We process the data on the basis of legitimate interests (preventing spam and enabling communication).

If you prefer, you can give explicit consent by checking the box below the form; you can withdraw that consent at any time by emailing us.

5. How long we keep it

All contact-form entries (including the IP address) are automatically deleted 7 days after submission.

6. Who we share it with

Data-processing arrangements

• Web-hosting / CDN – Cloudflare

  We host the site on Cloudflare's global network. Cloudflare provides GDPR-compatible data-processing terms for Enterprise customers. Because our site runs on the free/Pro tier, we have secured the EU-US Data-Privacy Framework Standard Contractual Clauses (SCCs) from Cloudflare to cover any personal data that passes through their edge servers.

• E-mail service – Amazon Simple Email Service (SES)

  All email sent through AWS SES is processed under Amazon's GDPR-compliant Data Processing Addendum (GDPR DPA), which is automatically incorporated into the AWS Service Terms for every AWS customer.

• Final mailbox – personal Gmail/Outlook account

  The message is forwarded to a personal mailbox. The mailbox provider is a secondary processor; we rely on the user's explicit consent to retain the message longer than the 7-day retention period required for the contact-form processing.

All personal data (IP address, name, e-mail, phone, message) is deleted from our own database and from the SES logs after 7 days, in line with the legitimate-interest purpose of responding to the inquiry and preventing spam.

7. How we protect your data

• Data are stored in an encrypted database.
• All communication uses HTTPS (TLS 1.2+).
• Access is limited to the site owner (Vincentas Gedvilas).

8. Your rights

You have the right to:

• Access the personal data we hold about you
• Ask for correction or deletion
• Restrict or object to processing
• Receive a copy of your data in a portable format

To exercise any of these rights, please email [email protected].

9. Complaints

If you are not satisfied with our response, you may complain to the State Data Protection Inspectorate (Lithuania) or the supervisory authority in your EU Member State.

10. Changes to this policy

We may update this policy from time to time. The "Effective date" at the top will reflect the latest revision.