Privacy policy

Who processes your data

Your personal data is processed by The common ground, MB, company code 307061813, email labas@bukinternete.lt. We have no data protection officer, because the law does not require us to appoint one. We answer every question at the same address.

What data we collect

Contact form data: name, email, company (if provided), the services you selected, the message text and optional file attachments. We use it only to answer your inquiry. Legal basis: steps taken at your request before entering into a contract.

With your consent: Google Analytics statistics about the visit, meaning the pages viewed, an approximate location from the IP address, and the device and browser type. Without consent Analytics does not start and sends nothing.

Server logs keep a technical record: IP address, request time and browser identifier. This is needed for the site to run and stay secure. Legal basis: legitimate interest.

A consent record: a random number, a timestamp, your choice, the policy version and a truncated IP address (the last part is dropped). We do not store the exact IP. This exists so we can demonstrate consent, as GDPR Art. 7(1) requires.

Who receives your data

We do not sell data and we do not use it for advertising profiles. We pass on only what the site needs to work, and only to these recipients.

Cloudflare, Inc.: DNS and reverse proxy for the site. Every request passes through it, so Cloudflare sees the visitor's IP address and browser data. Without this service the site would not load.

Hostinger: website hosting and outgoing email. Their servers hold the site files and logs, and the contact form content with its attachments travels through their mail service.

Google Ireland Limited: Google Analytics, only after your consent. And Google reCAPTCHA, which runs only when you press the form's send button and checks that the sender is not a bot. reCAPTCHA relies on legitimate interest, because without it the form fills with spam.

Transfers outside the EU

Cloudflare and Google are US companies, so part of the data may be processed outside the European Economic Area. Both rely on the EU-US Data Privacy Framework and standard contractual clauses. With Hostinger the data stays in the EU.

How long we keep it

Inquiry data is kept as long as needed for correspondence and potential collaboration, but no longer than 24 months.

Analytics cookies live in your browser for up to 400 days. Withdrawing consent deletes them immediately. Consent records are kept for three years, because that is how long it may take to have to demonstrate that consent was given. Server logs are retained by the hosting provider under its own terms.

On the Google Analytics side the periods are set as follows: event data is kept for 2 months and user-linked data for 14 months. After that it is deleted automatically and only aggregated statistics remain.

Your rights

You have the right to access your data, correct it, ask for deletion or restriction, port it, and object to processing based on legitimate interest. Use the form on the “Personal data request” page, or write to labas@bukinternete.lt. We answer within one month.

You can withdraw analytics consent at any time using “Cookie settings” at the bottom of the site. Withdrawal is as easy as consent and deletes the analytics cookies already stored. You may also lodge a complaint with the State Data Protection Inspectorate (vdai.lrv.lt).