Legal
Privacy Policy
Last updated: July 2026
1. What does this Privacy Policy mean?
This Privacy Policy explains how personal data is collected and used in connection with the website mindaugasgumauskas.com, when you contact me through it, and when an advisory relationship follows. It also sets out the rights you have over your personal data and how to exercise them.
Personal data is processed in accordance with Regulation (EU) 2016/679, the General Data Protection Regulation, referred to below as the GDPR, and with the Law on Legal Protection of Personal Data of the Republic of Lithuania.
2. Who is the data controller?
| Controller | Consilium Digitale, MB |
|---|---|
| Legal entity code | 306087405 |
| Registered office | Vilnius, Lithuania |
| Website | mindaugasgumauskas.com |
| Data protection contact | send an email |
Consilium Digitale, MB is the company through which advisory work is delivered. It is not required to appoint a data protection officer, so enquiries are handled at the address above.
3. What is personal data?
Personal data means any information relating to an identified or identifiable natural person. It includes obvious identifiers such as a name, an email address or a telephone number, and less obvious ones such as an IP address or an online identifier stored in a cookie, where these can be linked back to a person.
4. Visiting this website
The website is hosted by Hostinger. Like effectively every web server, it records technical information about each request so that the service can be kept running and secure.
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Serving the website, security, fault diagnosis | IP address, date and time of request, page requested, HTTP status, browser and operating system, referring page | Legitimate interest in operating a secure and functioning website, Article 6(1)(f) GDPR | Held in server logs by the hosting provider for a short period under its own retention schedule, then deleted |
These logs are not used to identify individual visitors, to build profiles, or for marketing. They are not combined with the analytics data described in section 5.
5. Cookies and analytics
A cookie is a small text file placed on your device by a website. This site uses no cookies at all until you make a choice, and it uses none for advertising, profiling or cross-site tracking.
Google Analytics 4 is used to understand how the site is found and which content is read. The analytics script is not loaded and no analytics cookies are set unless you press Accept on the cookie notice. If you press Decline, or ignore the notice, no analytics runs and no analytics cookies are created.
| Cookie | Set by | Purpose | Type | Lifetime |
|---|---|---|---|---|
mg_consent |
This website | Remembers whether you accepted or declined analytics, so you are not asked again | Strictly necessary, no consent required | Stored in local storage until you clear it |
_ga |
Google Analytics | Distinguishes one visitor from another | Analytics, consent required | 2 years |
_ga_<property id> |
Google Analytics | Maintains session state for measurement | Analytics, consent required | 2 years |
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Measuring website audience and content performance | Pseudonymous identifier, pages viewed, approximate location derived from IP address, device and browser type, referring source, clicks on the contact and LinkedIn buttons | Your consent, Article 6(1)(a) GDPR | Retained in Google Analytics according to the property's data retention setting. The GA4 default is 2 months for user and event level data, and it can be extended to 14 months |
Google Analytics 4 does not store IP addresses, and IP addresses are additionally anonymised in the site's configuration. Advertising features, Google Signals and ad personalisation are switched off, so the analytics data is not used to build advertising audiences.
Google Analytics is provided by Google Ireland Limited, acting as a data processor, and data may be transferred outside the European Economic Area to Google LLC in the United States. Those transfers rely on the EU standard contractual clauses together with the EU to US Data Privacy Framework.
Withdrawing consent is as easy as giving it. Use the Cookie settings link in the footer of the site to change your choice at any time. You can also delete cookies and local storage for this domain in your browser settings, or install the Google Analytics opt-out browser add-on.
6. Contacting me
There is no contact form on this site. Contact happens by email, or through LinkedIn.
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Replying to your enquiry and taking forward any advisory conversation | Your name, email address, employer or company where you mention it, and the content of your message | Legitimate interest in responding to a business enquiry, Article 6(1)(f) GDPR. Where the exchange leads to an engagement, the performance of a contract, Article 6(1)(b) GDPR | Correspondence that does not lead to an engagement is deleted when it is clearly no longer relevant, and in any case within 2 years |
7. Advisory engagements
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Concluding and performing advisory contracts, invoicing, and meeting accounting obligations | Contact and role details of the client's representatives, correspondence, contractual and billing information | Performance of a contract, Article 6(1)(b) GDPR, and compliance with a legal obligation, Article 6(1)(c) GDPR | Accounting records are kept for the period required by Lithuanian accounting and tax law, which is 10 years for most documents |
8. Direct marketing
No direct marketing is carried out through this website. There is no newsletter, no mailing list and no marketing automation. You will not be added to any list as a result of contacting me, and your details are never sold, rented or shared for marketing purposes.
9. Social media
This site links to a LinkedIn profile but embeds nothing from it, so LinkedIn sets no cookies here and receives no data about your visit unless you click the link. Once you are on LinkedIn, that visit is governed by LinkedIn's own privacy policy, and LinkedIn acts as the controller of any information you provide there. The same applies to consiliumdigitale.lt, which is a separate website with its own policy.
10. Web fonts
Typefaces are loaded from Google Fonts. Your browser requests the font files from a Google server, and as a technical consequence of that request Google receives your IP address. Google states that Google Fonts sets no cookies and that these requests are not used to build user profiles. This is the only third party request the site makes before you have made any cookie choice. If you prefer to avoid it, most browsers and privacy extensions can block third party font requests without affecting the readability of the site.
11. Where data comes from and who receives it
Personal data comes from you directly, when you write to me or connect on LinkedIn, and from your use of the website as described in sections 4 and 5. No personal data is bought from data brokers or scraped from third parties.
Data may be disclosed to service providers acting on documented instructions, namely the hosting provider, the email provider and Google as the analytics processor, and to my accountant for invoicing and statutory reporting. Data may also be disclosed where disclosure is required by law, or to legal advisers where it is necessary to establish, exercise or defend legal claims. Data is not otherwise transferred to third parties.
12. Security
The site is served over an encrypted HTTPS connection and applies a restrictive content security policy. Access to email and to any client material is protected by strong authentication. Appropriate organisational and technical measures are used to protect personal data against unauthorised access, loss, alteration and unlawful processing, proportionate to the limited nature of the data involved.
13. Your rights
Under the GDPR you have the following rights in relation to your personal data. Requests are answered within one month, which may be extended by a further two months for complex requests, in which case you will be told within the first month.
- Access. To be told whether your personal data is being processed and to receive a copy of it.
- Rectification. To have inaccurate data corrected and incomplete data completed.
- Erasure. To have your data deleted where the grounds in Article 17 GDPR apply, for example where it is no longer needed for the purpose it was collected for.
- Restriction. To have processing restricted in the circumstances set out in Article 18 GDPR.
- Portability. To receive data you provided, where processing is based on consent or a contract and is carried out by automated means, in a structured, commonly used, machine readable format.
- Objection. To object at any time to processing based on legitimate interest, as described in sections 4 and 6.
- Withdrawal of consent. To withdraw analytics consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
To exercise any of these rights, write to the address in section 2. So that data is not disclosed to the wrong person, you may be asked to confirm your identity, which for an email enquiry normally means replying from the address the data relates to.
14. Complaints
If you believe your personal data has been handled improperly, please raise it with me first, using the contact details in section 2. Most issues are resolved quickly at that stage.
You also have the right to lodge a complaint with the supervisory authority. In Lithuania this is the State Data Protection Inspectorate, Valstybine duomenu apsaugos inspekcija, L. Sapiegos g. 17, Vilnius, vdai.lrv.lt. If you live or work in another EU or EEA country, you may complain to the supervisory authority there instead.
15. Accuracy of the data you provide
Where you send information about yourself or about colleagues, please make sure it is accurate and that you are entitled to share it. I cannot be responsible for consequences arising from inaccurate information provided to me.
16. Changes to this Privacy Policy
This Privacy Policy may be updated, for example if the tools used on the site change. The current version is always published on this page with the date of the last update shown at the top. Material changes affecting processing based on consent will be accompanied by a fresh request for consent.