Privacy policy
Last updated: 12 October 2026
1. Controller
Rokas Mensevičius, self-employed (individual activity certificate No. 1462754), not a VAT payer ("rokas digital", "I").
Email: sveiki@rokas.digital
Location: Kaunas, Lithuania
2. What data I process, why and on what basis
- Enquiries (website form or email). Name, email, topic, message. Purpose: to reply and prepare a quote. Basis: GDPR Art. 6(1)(b) (steps taken at your request before entering into a contract); where the enquiry is not about a contract, Art. 6(1)(f) (legitimate interest in replying).
- Contracts and invoices. Name or company details, contacts, payment details. Purpose: performing the contract and bookkeeping. Basis: GDPR Art. 6(1)(b) and (c) (legal obligation).
- Abuse protection. IP address when you submit the form or use the speed test, to limit the number of requests. Kept for up to 1 hour. Basis: GDPR Art. 6(1)(f) (legitimate interest in protecting the site from spam).
- Server logs. The hosting provider briefly keeps technical request data (IP address, browser, page opened). Basis: GDPR Art. 6(1)(f) (site operation and security).
The site uses no analytics or advertising cookies and does not link visits to you.
3. Direct offers to businesses
Sometimes I write to a company first to offer my services. In that case the data is not obtained from you (GDPR Art. 14):
- Data: the company's public email address, name and website.
- Sources: the company's website and public registers and directories.
- Purpose: to offer services.
- Basis: GDPR Art. 6(1)(f) (legitimate interest).
- Retention: up to 2 years or until you ask me to stop.
- Right to object: reply to the email or write to sveiki@rokas.digital. The address is added to a do-not-contact list and no further offers are sent.
4. Cookies
Only one strictly necessary cookie is used, so no consent is required:
| Name | Type | Duration | Purpose |
|---|---|---|---|
| locale | Necessary | 1 year | Remembers the chosen language |
5. Processors
- Google (Google Workspace) – mailbox. Privacy policy
- Resend – sending emails from the website form. Privacy policy
- Vercel – website hosting. Privacy policy
- Upstash – request rate limiting (IP address, up to 1 hour). Privacy policy
These companies are based in the US or may transfer data to the US. Transfers rely on the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.
6. Retention
- Enquiries and correspondence – up to 2 years after the last email.
- Contracts and invoices – as long as accounting law requires.
- Direct offer data – up to 2 years or until you ask me to stop.
- IP address for rate limiting – up to 1 hour.
7. Your rights
Under the GDPR you have the right to:
- access your data;
- have inaccurate data corrected;
- have your data erased or its processing restricted;
- object to processing based on legitimate interest;
- receive your data in a portable format;
- lodge a complaint with the State Data Protection Inspectorate of Lithuania (vdai.lrv.lt).
Write to sveiki@rokas.digital. I reply within 1 month.
8. Changes
This policy may be updated. The current version is always published on this page.