Privacy & Cookie Policy
Last updated: 2026-08-03
1. Data controller
The controller of personal data processed through this website is Darius, operating as an individual (not a registered company), the creator of KodoAsas (kodasas.lt). You can reach the controller via the contact form on this website.
2. What data we collect and why
- Contact/order form — name, email address, selected service, and your message. Used solely to respond to your inquiry. Legal basis: steps taken at your request prior to entering into a contract (GDPR Art. 6(1)(b)), and our legitimate interest in responding to inquiries (Art. 6(1)(f)) where no contract follows.
- Language preference — a cookie remembering whether you browse in Lithuanian or English. Strictly necessary for the site to function as you requested.
- Admin login — if you are the site owner logging into the admin panel via Google, a session cookie keeps you signed in. Not applicable to regular visitors.
- Analytics — only if you consent via the cookie banner, anonymous usage statistics (pages visited, approximate traffic) are collected via Umami. Legal basis: your consent (Art. 6(1)(a)), which you can withdraw at any time.
3. Cookies used on this site
| Cookie | Purpose | Duration | Type |
|---|---|---|---|
lang | Remembers your chosen language (LT/EN) | 1 year | Necessary, first-party |
connect.sid (session) | Keeps the site owner logged into the admin panel | Browser session | Necessary, first-party (admin only) |
cookie-consent (localStorage) | Remembers your cookie preference so we don't ask again | Until you clear it or change your choice | Necessary, first-party |
| Umami analytics | Anonymous, aggregate visit statistics — no cross-site tracking, no advertising profile | Only loaded after consent | Analytics, opt-in (third-party service, Umami Cloud) |
4. Who else sees your data (processors)
- Render — hosts this website and its database.
- Umami Cloud — processes anonymous analytics data, only if you consent to analytics cookies.
- Yahoo Mail (SMTP) — used to forward contact-form submissions to the controller's inbox.
- Google — only used for the site owner's own admin login (Google OAuth); this does not involve regular visitors' data.
Some of these processors may operate infrastructure outside the EU/EEA. We rely on each processor's own compliance mechanisms (such as standard contractual clauses) for any such transfers; we do not independently verify this beyond what each processor publicly states.
5. How long we keep your data
Contact/order form submissions (name, email, message) are kept for 12 months from submission, after which they are automatically deleted. If you'd like your data removed sooner, contact us via the form and we will delete it manually.
6. Your rights
Under the GDPR, you have the right to: access your data, request correction, request erasure, restrict or object to processing, request data portability, and withdraw consent at any time (use the button, or the 🍪 icon in the corner of any page). You also have the right to lodge a complaint with the Lithuanian State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija, VDAI) — ada.lt, email ada@ada.lt.
7. Changes to this policy
We may update this policy as the website evolves. Material changes affecting cookie consent will prompt the cookie banner to appear again.
This page is provided in good faith based on general EU/Lithuanian data protection practice and is not a substitute for professional legal advice.