Privacy Policy

This policy explains how Koktu collects, uses, and protects personal data when you visit koktu.lt or contact Koktu about its services. It is written to comply with the EU General Data Protection Regulation (GDPR) and the Lithuanian Law on Legal Protection of Personal Data.

1. Who we are (data controller)

The data controller for personal data collected through this website is:

• Name: KOKTU MB
• Registered address: Palaimos g. 22, LT-04125 Vilnius, Lithuania
• Company code (įmonės kodas): 305595836
• VAT ID: LT100014637315
• Email: jurgis@koktu.lt
• Phone: +370 683 39 169

2. What personal data we collect

We collect personal data only when you provide it voluntarily, and a limited amount of technical data automatically:

• When you contact us (email, phone): your name, email address, phone number, and the content of your message.
• Automatically when you visit the site: IP address, browser type, device type, referring URL, pages viewed, and timestamps. This is collected by our hosting provider's server logs and (where used) by analytics tools.
• Cookies: see section 6 below.

3. Why we use your data (purposes and legal basis)

• To respond to your inquiry — legal basis: steps taken at your request prior to entering a contract (Art. 6(1)(b) GDPR).
• To deliver contracted services — legal basis: performance of a contract (Art. 6(1)(b) GDPR).
• To keep our website secure and functioning — legal basis: legitimate interest in operating a working website (Art. 6(1)(f) GDPR).
• To meet legal obligations (e.g. accounting, tax) — legal basis: legal obligation (Art. 6(1)(c) GDPR).

4. Who we share your data with

We do not sell or rent your data. We share data only with carefully selected service providers acting as data processors on our behalf:

• Hosting provider: iv.lt — UAB Interneto vizija (Lithuania) — stores the website and server logs.
• Email provider: UAB Interneto vizija (iv.lt) — handles email correspondence sent to jurgis@koktu.lt.
• Analytics: Google Analytics 4 (Google LLC, United States) loaded via Google Tag Manager — collects aggregated traffic statistics (page views, source, device, country). Only loaded after you click "Accept" on the cookie banner. IP addresses are anonymised by Google.
• Fonts & CDN: Google Fonts — serves typography assets; may receive your IP address.

Where data is transferred outside the European Economic Area (e.g. to Google in the United States), the transfer is protected by the European Commission's Standard Contractual Clauses or an equivalent safeguard.

5. How long we keep your data

• Inquiry correspondence: up to 12 months after the last contact, unless we enter a contract.
• Contract-related data (invoices, agreements): 10 years, in line with Lithuanian tax and accounting law.
• Server logs: typically 30–90 days, depending on the hosting provider.
• Analytics data (if any): according to the analytics provider's retention settings, typically 14 months.

6. Cookies

This website uses two categories of cookies:

• Strictly necessary: required for the site to function (e.g. remembering your cookie choice). No consent needed.
• Analytics (Google Analytics 4): measure aggregated traffic. Loaded only after you click "Accept" on the cookie banner. If you decline, no analytics cookies are set and Google Analytics is never loaded.

You can change your choice at any time by clicking the "cookies" link in the footer — this clears the saved preference and shows the banner again. You can also disable cookies in your browser; the site will continue to work.

7. Your rights under GDPR

You have the right to:

• Access the personal data we hold about you.
• Have inaccurate data corrected.
• Request deletion ("right to be forgotten") where applicable.
• Restrict or object to certain processing.
• Receive your data in a portable format.
• Withdraw consent at any time, where processing is based on consent.
• Lodge a complaint with the Lithuanian State Data Protection Inspectorate (vdai.lrv.lt).

To exercise any of these rights, write to jurgis@koktu.lt. We respond within 30 days.

8. Security

We apply reasonable technical and organisational measures to protect personal data — encrypted transport (HTTPS), restricted access to accounts, and reputable service providers. No system is perfectly secure; if a breach occurs that is likely to affect your rights, we will notify you and the supervisory authority as required by law.

9. Changes to this policy

We may update this policy from time to time. The "last updated" date at the top reflects the most recent version. Significant changes will be highlighted on the website.

10. Contact

Questions about this policy or how we handle your data: jurgis@koktu.lt · +370 683 39 169.