Privacy and Cookie Policy
This policy explains what personal data the website collects sdwski.com, why it is needed, how long it is retained, and how to manage cookie consent. It applies to all language versions of the website (RU, EN, LT, BY, UA), the blog, and the contact form.
Last updated: October 15, 2026.
1. Who is responsible for your data
The personal data operator (controller) is a sole proprietor operating under the name SDWSKi and running the website sdwski.com. I work alone, so I am the only person who handles your data. If you have any questions about your data or wish to exercise the rights described in Section 9, please contact me at this email address.
- Email: [email protected]
- Place of business: Vilnius, Lithuania
2. What data I collect and why
I only collect what is necessary for a specific purpose.
| Situation | Data collected | Purpose |
|---|---|---|
| Contact form (home page and “Contacts”) | Name, email, message text, selected project topics, confirmation of consent to the policy | Respond to the inquiry, discuss the project, and provide pricing and timelines |
| Messages and calls | Contact details and correspondence content | Discuss the project and fulfill the contract |
| Blog comments | Email address (for signing in and notifications), name and comment text, login details | Publish a comment, send a one-time login code, notify you of a reply, and prevent spam |
| Website visits | IP address, browser and device type, date and time, pages visited | Website operation and security, protection against attacks and spam |
| Analytics (only with your consent) | Anonymized website usage data | Understand which pages are useful and improve the website |
Please do not submit information about your health or political views, passwords, or documents through the form or in comments, as this information is not needed for the website to function. I do not sell data, share it with advertising networks, or make decisions based solely on automated processing.
3. Legal bases
Processing is based on the EU General Data Protection Regulation (GDPR, Regulation 2016/679).
| Purpose | Legal basis |
|---|---|
| Responding to a form submission and discussing the project | Consent (Art. 6(1)(a)) and pre-contractual measures taken at your request (Art. 6(1)(b)) |
| Comments and code-based login | Consent (Art. 6(1)(a)) |
| Website security and protection against spam and attacks | Legitimate interest (Art. 6(1)(f)) |
| Analytics cookies | Consent (Art. 6(1)(a) GDPR and Art. 5(3) of the ePrivacy Directive 2002/58/EC) |
| Essential cookies | Required for the website to function; no separate consent is needed |
| Contracts, accounting | Performance of a contract and compliance with a legal obligation (Art. 6(1)(b) and 6(1)(c)) |
You can withdraw your consent at any time as easily as you gave it. Withdrawal does not affect the lawfulness of processing carried out before it.
4. Blog Comments
No password or registration is required to leave a comment: enter your email address, receive a one-time code, and use it to sign in.
- Only your name and comment are displayed publicly. Your email address is not published.
- Your email address is used to send you a sign-in code and notifications of replies. You can unsubscribe using the link in the email.
- After you sign in, a cookie is stored on your device for 30 days so that you do not have to enter the code again.
- Before the code is sent, you must check the box to consent to the processing of your email address and comments.
- You can download or delete your data in your commenter account. If you are unable to do so, contact me and I will delete the data myself.
A published comment is visible to all visitors and search engines. Do not include anything you do not want to disclose publicly.
5. Cookies
A cookie is a small text file that a website stores in your browser. Some cookies are necessary for the website to function at all, while others help us understand how it is used.
| Category | Purpose | When it is activated | Timeline |
|---|---|---|---|
| Necessary | Website functionality and security, remembering your choices in the cookie banner | Always | From the end of the session up to 12 months |
| Comment login | Keeps you signed in after entering a one-time code | After signing in | 30 days |
Analytics (Google Analytics: _ga, _ga_*) | Visitor statistics: which pages are viewed and where visitors come from | Only with your consent | Up to 2 years |
Advertising and marketing cookies are not used on this website. The background video and images are hosted directly on the website, so embedded content from third-party services does not set cookies. If any of this changes, I will update the policy and banner, and enable any new cookies only with your consent.
6. How to manage cookies
- On your first visit, a banner appears with three buttons: “Reject all,” “Accept all,” and “Customize.” Rejecting is just as easy as accepting.
- You can change or withdraw your choice at any time using the “Cookie settings” link in the footer of any page on the site.
- Your choice is saved for 12 months, after which the banner will appear again.
- You can also delete or block cookies in your browser settings. If you do, some features, such as signing in to leave comments, may not work.
If you reject optional cookies, the site will remain fully functional, with no limitations for you.
7. Who the data is shared with
Data may only be received by services that are essential for the site to function. They act either as my data processors or as independent data controllers under their own policies.
- Hosting and Cloudflare: website hosting, DNS, CDN, and protection against attacks.
- Email services: delivery of form submissions, login codes, and reply notifications.
- Google (Analytics and Search Console): statistics, only with your consent.
- Machine translation services (e.g., Microsoft Azure or DeepL): public website content, including published comments, is automatically translated into the website's other languages.
Some of these services are located in the United States. Data transfers there are based on the European Commission's adequacy decision (EU–US Data Privacy Framework) or the EU Standard Contractual Clauses. Data is disclosed to public authorities only as required by law.
8. How long data is retained
| Data | Timeline |
|---|---|
| Form submissions and correspondence | Up to 24 months after the last contact |
| Customer data, contracts, invoices | Retention periods required by accounting law |
| Comments and commenters' email addresses | Until you delete them yourself or ask me to do so |
| Comment login (cookie) | 30 days |
| Technical server logs | Up to 12 months |
| Analytics data | Up to 14 months, depending on the service settings |
| Selection in the cookie banner | 12 months |
After this period, the data is deleted or anonymized.
9. Your rights
You have the right to:
- find out what personal data I process and obtain a copy of it;
- correct inaccurate data;
- request the deletion of data;
- restrict or object to its processing;
- receive the data in a machine-readable format (data portability);
- withdraw consent at any time.
Write to me at [email protected], and I will respond within one month. To confirm that the request comes from you, I may ask you to write from the same email address you provided on the website.
10. Security, Children, and Policy Changes
Security. The website uses HTTPS, and I am the only person with access to the data. Comments are accessed using a one-time code, with no passwords required. If a data breach occurs that poses a risk to your rights, I will notify you and the supervisory authority within the time limits established by the GDPR.
Children. This website is intended for adults. If you become aware that a child has submitted personal data on the website, please contact me and I will delete it.
Changes. I update this policy whenever the website's operation or the law changes. The current version is always available on this page, with the date of the latest update shown at the top. I will post a notice on the website about any material changes.