Privacy policy

1. Who is responsible for your data?

The data controller is UAB Aniversa, Borutos g. 37, LT-46115 Kaunas, Lithuania.

For personal-data enquiries, email aniversa.lt@gmail.com or call +370 682 46306. This policy covers our website and enquiries submitted through it.

2. What information do we receive?

The enquiry form asks for your name, email address and message. Your company name and telephone number are optional. We also receive project information you include in your message and any subsequent correspondence.

Required fields are needed to assess your enquiry and reply. Providing information is your choice, but without a contact email we cannot reply by email. Please do not send health information, personal identification numbers or other sensitive details that are unnecessary for your enquiry.

Technical information is processed to operate and protect the website: IP address, request time, technical information sent by your browser, login attempts and security events. The language cookie stores a language code.

3. Why do we process data, and on what basis?

We respond to enquiries, discuss products and prepare quotations. When you contact us about a contract in your own name, the basis is taking steps at your request before entering a contract or performing it (GDPR Article 6(1)(b)). In other cases, including enquiries from company representatives, we rely on our legitimate interest in business communication and answering questions (Article 6(1)(f)).

Security information is processed in our legitimate interest in preventing abuse and protecting the website (Article 6(1)(f)). Where processing is necessary to meet a statutory obligation, the basis is compliance with a legal obligation (Article 6(1)(c)).

Submitting an enquiry does not give consent to advertising or subscribe you to a newsletter. The website does not make solely automated decisions that have legal or similarly significant effects on you.

4. How long is information kept?

We keep enquiries and correspondence that do not become part of an order or contract for one month after the last correspondence. We delete them at the end of this period.

Where information is needed for an order, contract, legal obligation or specific dispute, we retain only the necessary records for that purpose and the applicable legal periods. This does not justify keeping all enquiries indefinitely.

The one-month period applies to enquiries, not all technical records. The temporary form anti-repeat record expires after two minutes. Security-log, hosting-log and backup retention must be confirmed against the final website configuration before launch.

5. Who may receive information?

Enquiries are handled by authorised Aniversa staff. Hosting, IT support and email providers may process information as needed to provide their services. Information may also be disclosed to authorities where required by law.

Enquiries are intended for aniversa.lt@gmail.com; Google provides this email service. See Google’s privacy policy for its processing information. The form does not create a separate archive of submitted messages in the website database.

Service providers may process data outside the European Economic Area. The specific providers, transfers and applicable legal basis and safeguards must be confirmed before launch. Linking to a provider’s privacy policy does not establish the particular transfer arrangements.

6. Cookies and external links

Necessary cookies: pll_language stores the language code (lt, en or ru) for the browser session; aniversa_consent remembers your privacy choices for 180 days. Login and administration cookies are for website administrators. Browser session restoration may preserve session cookies.

Optional analytics is based on your consent (GDPR Article 6(1)(a)). You can choose Google Analytics and Microsoft Clarity separately. Before you choose, and if you decline, these tools are not loaded, including in cookieless mode. Consent is not required to browse or send an enquiry.

Google Analytics 4 provides visitor and page-use statistics. When the service is enabled and you consent, Google receives page-view, device, browser and pseudonymous identifier data. We set _ga and _ga_* cookies to expire after 180 days without automatically renewing them on each visit. Google Signals and advertising-personalisation signals are disabled in this integration.

Microsoft Clarity provides click and scroll heatmaps and session recordings to improve the website. When enabled and consented to, Microsoft receives interaction, page-structure, browser and pseudonymous identifier data. It is excluded from contact pages. It is also excluded when the current or referring page URL contains query parameters. Advertising-cookie consent is not granted.

Clarity’s first-party cookies _clck and _clsk identify the browser and connect page views within a session. The provider also documents third-party cookies. Their exact lifetimes and the selected account’s data retention must be verified before enabling the service. Analytics retention is separate from the one-month enquiry retention rule.

Use Cookie settings in the footer to change your choice. Withdrawing a previously granted permission revokes consent, clears accessible first-party cookies for that service and reloads the page. Data previously processed lawfully is not automatically deleted from providers’ systems; contact us to exercise your rights. You can also manage third-party cookies in your browser.

More information: Google privacy policy, Microsoft privacy statement and Clarity cookie list. Providers may process data outside the EEA; we will confirm the applicable transfer arrangements and retention periods before enabling these services.

Manufacturer and partner links lead to other websites. When you open them, those sites’ privacy and cookie policies apply.

7. Your rights and how to exercise them

Subject to the GDPR’s conditions, you can access your data, obtain a copy and request correction, deletion or restriction of processing. Data portability applies where the relevant conditions are met. You can object to processing based on legitimate interests for reasons relating to your particular situation. If processing were based on consent, you could withdraw it at any time without affecting the lawfulness of earlier processing.

Send requests to aniversa.lt@gmail.com. We may ask for only the additional information needed to confirm your identity. We normally respond within one month of receiving a request. If a lawful extension is needed, we will explain the reasons within that month.

You may also complain to the Lithuanian State Data Protection Inspectorate or another competent supervisory authority. You do not have to contact us first.

8. Changes to this policy

We will update this page and its date when website features or data processing change. Where required, we will inform you of a new purpose before using your data for it.