About Us
Privacy policy
Website www.zlioba.lt
1. Data controller
The controller of your personal data is the law firm “Žlioba & Žlioba” (the Firm or we), registered office at J. Janonio g. 17, LT-92238 Klaipėda, tel. +370 46 311 523, email info@zlioba.lt. The Firm’s Plungė office is at Vytauto g. 10, 2nd floor, LT-90123 Plungė, mobile +370 606 44 204.
The Firm has appointed a data protection officer, advocate Gediminas Žlioba, tel. +370 685 713 51, email gediminas@zlioba.lt. Please use these contacts for data-protection questions.
This privacy policy explains what personal data we process when you use the Website, why and how we process it, to whom we disclose it, how long we keep it, and what rights you have. We process personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (the General Data Protection Regulation, GDPR), the Law on Legal Protection of Personal Data of the Republic of Lithuania, and other applicable laws.
Information you entrust to us when we provide legal assistance is also protected by advocate secrecy under the Law on the Bar of the Republic of Lithuania.
2. What data we process
The Website has no registration, user accounts, or contact form. We receive data only when you contact us yourself, or automatically when you visit the Website:
- Correspondence data: the content of your email or message, your name, surname, email address, telephone number, and other data you choose to provide when you contact us by email or telephone.
- Technical (usage) data: IP address, browser type and version, operating system, device type, date and time of the visit, duration, pages viewed, the referring address, and actions on the Website.
- Cookie data: cookie identifiers and the information stored in them (see section 4).
- Location (map) data: your IP address, which is sent in order to load the Google Maps map (see section 6).
We do not seek to collect special-category data (for example, health data or religious beliefs) and we do not ask you to provide it. If you voluntarily include such information in an enquiry, we process it only to reply and to provide the legal assistance you requested.
3. Purposes and legal basis
| Purpose | Data | Legal basis |
|---|---|---|
| Replying to your enquiry by email or telephone, a consultation, or sending a proposal | Correspondence data | GDPR Article 6(1)(b) – steps at your request before entering into a contract; after a contract is concluded, Article 6(1)(b) (performance of a contract) |
| Operating the Website, security, and fixing errors | Technical data, necessary cookies | GDPR Article 6(1)(f) – legitimate interest in a secure and stable Website |
| Audience measurement and improvement of the Website (Google Analytics) | Technical data, analytics cookies | GDPR Article 6(1)(a) – your consent, given in the cookie banner |
| Displaying the map (Google Maps) on the Contacts page | IP address | GDPR Article 6(1)(a) – your consent, given in the cookie banner (functional cookies) |
You may withdraw consent (for example, for analytics cookies) at any time. Withdrawal does not affect the lawfulness of processing before the withdrawal. Withdrawing consent does not release us from duties we must perform under the law.
4. Cookies
Cookies are small text files that the Website stores on your device. They help the Website work, remember your choices, and collect statistical information. The Website uses these cookie categories:
| Category | Purpose | Examples | Duration | Consent required |
|---|---|---|---|---|
| Necessary | Operation of the Website, security, remembering cookie choices | CONCRETE5, cc_cookie | Session / 6 months | No |
| Analytics | Visit statistics and analysis of how the Website is used | _ga, _ga_MWX4TVHHR8 | Up to 24 months | Yes |
| Functional (Google Maps) | Loading and displaying the map on the Contacts page | NID, _Secure-ENID | 6 months / 13 months | Yes |
We set non-essential cookies (analytics and functional) only after you give prior consent in the cookie banner. Until you consent, Google Analytics and Google Maps do not receive your data. Your choice is stored in the cc_cookie cookie for 6 months. To change it, delete the cookies in your browser and the banner will be shown again.
You can also manage cookies in your browser settings: delete them or block them. If you block necessary cookies, some functions of the Website may stop working.
5. Google Analytics
We use Google Analytics 4 (measurement ID G-MWX4TVHHR8), a web analytics service provided by Google. It helps us understand how visitors use the Website. The information collected includes the time and duration of the visit, pages viewed, actions taken, device and browser type, approximate geographic area, and IP address.
We do not receive reports that identify a visitor by name, surname, or email address. Google Analytics data is used for statistical reports and to improve the Website, not to identify particular people.
Google keeps analytics data for up to 14 months (depending on the account settings). The _ga and _ga_MWX4TVHHR8 cookies remain on your device for up to 24 months.
Transfers outside the EEA: Google data centres may be in the United States. The transfer relies on the EU–US Data Privacy Framework and/or the European Commission’s standard contractual clauses. More information: https://policies.google.com/privacy
If you do not want Google Analytics to collect your data, you can: (1) refuse analytics cookies in the cookie banner; you can withdraw consent by deleting cookies in your browser; (2) install the Google Analytics opt-out browser add-on: https://tools.google.com/dlpage/gaoptout; (3) change your browser’s cookie settings.
6. Google Maps
The map on the Contacts page is loaded from Google Maps (maps.googleapis.com). After you accept functional cookies, this script is loaded on the pages of the Website. Your browser then connects to Google’s servers and sends your IP address. Google may set the NID cookie (up to 6 months from last use) and the _Secure-ENID cookie (up to 13 months). Which of them is set depends on your choices in Google’s services. Google sets these cookies on google.com or a local domain (for example, google.lt). Google processes this data under its privacy policy: https://policies.google.com/privacy and https://policies.google.com/technologies/cookies. We do not have access to this data.
If you do not want the map to load, refuse functional cookies in the cookie banner. Until you consent, the map is not loaded and Google does not receive your IP address. There is no separate button to load the map. You can always see the addresses in text (see section 1), so the map is not required in order to find us.
7. Who we share data with
We do not sell your personal data and we do not share it with third parties for marketing. We may disclose data only to recipients who are needed to run the Website and to provide services:
- IT service providers: the Website hosting and maintenance provider, UAB Interneto vizija, which also provides email services.
- Google LLC / Google Ireland Limited – analytics (Google Analytics) and maps (Google Maps).
- Public authorities, courts, and bailiffs – only where and as required by law.
We enter into data-processing agreements that meet Article 28 GDPR with all processors. Processors handle data only on our instructions and undertake to keep it secure.
8. How long we keep data
We keep data only for as long as needed for the stated purposes, or for as long as the law requires:
- Enquiries by email or telephone that did not become a client relationship – 36 months from the last correspondence.
- Analytics (Google Analytics) data – up to 14 months; cookies on the device – up to 24 months.
- The cookie-consent record (cc_cookie) – up to 6 months.
When the retention period ends, the data is deleted or anonymised.
9. Your rights
Under the GDPR you have the following rights:
- The right of access to your personal data and to information about the processing (Article 15).
- The right to have inaccurate or incomplete data rectified (Article 16).
- The right to erasure (“right to be forgotten”) where there are grounds for it (Article 17).
- The right to restriction of processing (Article 18).
- The right to object to processing based on legitimate interest (Article 21).
- The right to data portability (Article 20).
- The right to withdraw consent at any time where processing is based on consent (Article 7(3)).
To exercise your rights, write to gediminas@zlioba.lt or to J. Janonio g. 17, LT-92238 Klaipėda. We reply within 1 month of receiving the request. Where necessary, this period may be extended by a further 2 months, and we will tell you if we do so. We do not usually charge a fee. If requests are manifestly unfounded or excessive, we may charge a reasonable fee or refuse to act on the request (GDPR Article 12(5)).
If you believe your data is processed unlawfully, you may lodge a complaint with the State Data Protection Inspectorate (L. Sapiegos g. 17, Vilnius, email ada@ada.lt, https://vdai.lt) or with the supervisory authority of your place of residence. We suggest you contact us first. We can often resolve the matter more quickly.
10. Data security
We take appropriate technical and organisational measures to protect your data against unauthorised access, disclosure, alteration, or destruction. We use encrypted connections (HTTPS), access control, confidentiality commitments by staff and partners, and regular system updates. No method of transmission over the internet is completely secure, so we cannot guarantee absolute security, but we take the measures that can reasonably be required under Article 32 GDPR.
If a personal-data breach occurs that is likely to result in a high risk to your rights and freedoms, we will inform you and, where the law requires it, notify the supervisory authority within 72 hours.
11. Automated decision-making
We do not use your personal data for automated decision-making, including profiling, that produces legal effects or similarly significantly affects you.
12. Links to other websites
The Website may contain links to websites of other companies or organisations. We are not responsible for the content of those websites or for their data-protection practices. We recommend that you read the privacy policy of each website.
13. Changes to this policy
We may update this privacy policy when the law or our processing changes. The current version is always published on the Website, with the date of the update. If a change is significant (for example, a new purpose that requires consent), we will ask for your consent again.