Who handles your data
The controller of your personal data is Lukas Stankevičius, trading as LS1 (“I”, “me”). This policy covers the website ls1.lt and the enquiries you send me.
Lukas Stankevičius (LS1)
Email: info@ls1.lt
Phone: +370 639 01517
I have no data protection officer, as Article 37 of the GDPR does not require one. For any question, write to info@ls1.lt.
What data I collect
- Enquiry form: name, email, phone, company or trade, current website address, the service you chose and your message.
- Communication: emails, messages and what you tell me in calls.
- Client data: contract, invoice and payment details.
- Technical data: IP address, browser type and time of visit in server logs. To protect the form from spam, the IP address is kept only as an irreversible code and deleted after an hour.
The website uses no analytics or advertising cookies; see the cookie policy. I do not ask for sensitive data (health, beliefs and so on), so please do not send it through the form.
Why I process data and on what basis
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Replying to an enquiry and sending a quote | Form and communication data | Steps before a contract at your request (GDPR Art. 6(1)(b)) | 12 months after the last contact if no contract follows |
| Providing services under a contract | Contacts, contract and project data | Performance of a contract (GDPR Art. 6(1)(b)) | For the term of the contract and 3 years after it ends |
| Accounting | Invoices, payments | Legal obligation (GDPR Art. 6(1)(c)) | 10 years, as Lithuanian accounting law requires |
| Website and form security | IP address, technical data | Legitimate interest in protecting the website (GDPR Art. 6(1)(f)) | Server logs are kept by the hosting provider Hostinger under its own rules |
Who receives the data
I do not sell personal data. I share it only with service providers that help me work, and only as far as needed:
- Website hosting and form emails: Hostinger International Ltd.
- Public authorities, where the law requires it.
Agreements that meet Article 28 of the GDPR apply to these processors.
Transfers outside the EEA
If a provider processes data outside the European Economic Area, this happens only with the safeguards the GDPR provides, such as the European Commission’s standard contractual clauses.
Your rights
You have the right to:
- know whether I process your data and get a copy of it;
- have inaccurate data corrected;
- have your data deleted;
- restrict processing;
- receive your data in a structured format and move it to another controller;
- object to processing based on legitimate interest;
- complain to the State Data Protection Inspectorate of Lithuania (L. Sapiegos g. 17, LT-10312 Vilnius, ada@ada.lt, vdai.lrv.lt) or to the authority in your country.
Send requests to info@ls1.lt. I reply within one month and may ask you to confirm your identity. Exercising your rights is free.
Automated decisions
I make no decisions with legal effects on you by automated means alone and do no profiling.
Children
My services are for businesses. I do not knowingly collect data from anyone under 16. If you think a child has sent me data, write to me and I will delete it.
Visitors outside the EU
Every visitor gets the same GDPR protection and rights, wherever they are. Visitors in the United Kingdom have rights under the UK GDPR and can contact the Information Commissioner’s Office (ico.org.uk). Visitors from other countries can exercise their local rights in the same way as described under “Your rights”.
How I protect data
The website runs over HTTPS. Enquiries are stored on the server outside the public website folder and deleted after 12 months.
Changes to this policy
If the way I handle data changes, I will update this policy and the date at the top of the page.