Privacy policy

This privacy policy explains what personal data we collect on the rokasgilys.lt website, why and on what legal basis we process it, and what rights you have. It follows Regulation (EU) 2016/679 of 27 April 2016 (the GDPR), the Lithuanian Law on Legal Protection of Personal Data, and the Lithuanian Law on Electronic Communications.

Last updated: 10 August 2026.

1. Data controller

The website operator and controller of your personal data:

• Rokas Gilys
• Email for data protection matters: privacy@rokasgilys.lt

We have not appointed a data protection officer, as our activities do not meet the criteria in Article 37 of the GDPR.

2. What data is collected

2.1. Server logs

The site is hosted on Hostinger servers. Like every website, it automatically records technical connection data:

• your IP address,
• browser and device type (user agent),
• the page requested and the time of the request.

Purpose: running the site, security and fault diagnosis. Legal basis: legitimate interest (Article 6(1)(f) GDPR).

2.2. Google Analytics 4

The site uses Google Analytics 4 (measurement ID G-RM0S9QQLG3) for audience statistics. It collects:

• a random visitor identifier stored in cookies,
• approximate location derived from your IP address (the full IP address is not stored in Google Analytics 4),
• browser and device details,
• pages viewed and time spent.

Purpose: understanding which reviews are read, in order to improve the content. Legal basis: your consent (Article 6(1)(a) GDPR). Processor: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Data may be transferred outside the EEA under the EU–US Data Privacy Framework and standard contractual clauses.

Until you give consent, Google Analytics is not loaded at all — no request is made to Google’s servers. On your first visit a notice appears where you can choose “Accept” or “Decline”; your choice is remembered in your browser (localStorage, key rg-consent) rather than in a cookie.

You can withdraw consent at any time using “Cookie settings” at the bottom of the page. Withdrawing deletes the analytics cookies.

In addition, if your browser sends a “Do Not Track” signal, this is treated as a refusal — the notice is not shown and Google Analytics is not loaded.

2.3. YouTube videos

Reviews embed YouTube videos. Importantly: no data is sent to YouTube or Google until you press the play button. Before that, only a still image served from this site is shown.

Once you press play, the video loads through the youtube-nocookie.com domain, and Google processes your data as an independent controller under its own privacy policy.

Legal basis: your action — consent (Article 6(1)(a) GDPR).

2.4. Affiliate links

Some links to shops are affiliate links (the Awin network, tidd.ly). Following such a link may cause the affiliate network to set a cookie so a purchase can be attributed. This happens only when you click the link, and no longer on this site.

We are not responsible for the privacy practices of those sites — please read their policies.

2.5. Getting in touch

There is no contact form on this site. The email addresses and phone number shown are ordinary links. If you write or call, we process only what you choose to provide (your name, contact details, the content of your message).

Purpose: answering your enquiry. Legal basis: legitimate interest, or steps taken at your request before entering into a contract (Articles 6(1)(f) and 6(1)(b) GDPR). Retention: correspondence is kept only as long as needed to resolve the enquiry, and no longer than 2 years.

2.6. What is not collected

The site has no registration, user accounts, newsletter, comment system, advertising networks, or profiling used for automated decision-making. Fonts are served from this site, so loading them creates no requests to third-party servers.

3. Cookies

YouTube cookies are set only when you start a video yourself.

You can delete or block cookies at any time in your browser settings. With cookies disabled the site works normally — only the accuracy of the statistics suffers.

4. Who receives the data

We do not sell data or pass it to third parties for marketing. Technical data is accessible to:

• Hostinger — website hosting;
• Google Ireland Limited — audience statistics and YouTube;
• Awin and related affiliate networks — only when you click an affiliate link.

Data may be disclosed to competent authorities where required by law.

5. Retention periods

• Server logs — as determined by the hosting provider;
• Google Analytics data — 14 months from the last visit;
• Email correspondence — up to 2 years.

6. Your rights

Under the GDPR you have the right to:

• know whether your data is processed and to access it (Article 15);
• rectify inaccurate data (Article 16);
• erase data (the “right to be forgotten”, Article 17);
• restrict processing (Article 18);
• port your data (Article 20);
• object to processing based on legitimate interest (Article 21);
• withdraw consent at any time, without affecting the lawfulness of processing carried out beforehand (Article 7(3)).

Write to privacy@rokasgilys.lt. We will respond within one month.

If you believe your rights have been infringed, you may lodge a complaint with the supervisory authority:

State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija) L. Sapiegos g. 17, LT-10312 Vilnius, Lithuania Email: ada@ada.lt Phone: +370 5 271 2804 vdai.lrv.lt

You may also complain to the supervisory authority in your own country of residence.

7. Children

The site is intended for a general audience and does not knowingly collect data from anyone under 14 (the age threshold applied in Lithuania under Article 8 GDPR). If we become aware of any such data, we delete it.

8. Changes to this policy

This policy may be updated. The current version is always published on this page, with the date it was last revised.