Privacy Policy

Effective from June 5, 2026

1. Data controller

1.1. The controller of your personal data is:

Kasparas Jasiukėnas

Individual Activity Certificate No. 1516359

Address: J. Basanavičiaus g. 30, Vilnius

1.2. A Data Protection Officer (DPO) has not been appointed, as it is not mandatory given the scale of the activity (GDPR Art. 37).

2. What data we collect

2.1. During purchase we collect the following data:

Email address — required to deliver the license
Purchase history — purchased Products, date, amount

2.2. Payment data (bank card number, CVV, etc.) we never see or store — they are processed by the Stripe payment platform according to its privacy policy (stripe.com/privacy).

2.3. For website traffic statistics we use the Umami analytics tool, which:

Does not collect personal data or use cookies
Does not track visitors across different websites
Does not store IP addresses

3. Purposes and legal basis of processing

3.1. Personal data is processed for the following purposes:

Purpose	Data	Legal basis
Product delivery by email	Email	Contract performance (GDPR Art. 6(1)(b))
Purchase history retention	Email, purchase data	Legal obligation — accounting (GDPR Art. 6(1)(c))
Warranty service	Email, purchase date	Contract performance (GDPR Art. 6(1)(b))

4. Data retention period

4.1. Data is stored no longer than necessary:

Email address — 2 years from the last purchase (for warranty service)
Invoices and purchase data — 10 years per the accounting requirements of the Republic of Lithuania

5. Data recipients and transfer

5.1. Your data may be transferred to the following data processors:

Stripe, Inc. (USA) — payment processing. Stripe is PCI DSS Level 1 certified and operates under Standard Contractual Clauses (SCC).

5.2. Data is not transferred to any other third parties, except where required by the law of the Republic of Lithuania.

6. Your rights

6.1. Under the GDPR you have the following rights:

Right to be informed — receive information about the data processed
Right of access — receive a copy of the data processed
Right to rectification — request correction of inaccurate data
Right to erasure ("right to be forgotten") — request deletion of data no longer needed
Right to restriction — temporarily suspend data processing
Right to data portability — receive data in a structured format
Right to object — object to data processing
Right to lodge a complaint — contact the State Data Protection Inspectorate (vdai.lrv.lt)

6.2. To exercise these rights, write to info@kasparas.eu. We will respond within 30 days.

7. Cookies

7.1. The Website uses only essential cookies required for the purchase process (Stripe payment session support).

7.2. The Website does not use advertising, tracking, or profiling cookies. Therefore, a cookie consent banner is not required.

8. Data security

8.1. We apply appropriate technical and organizational measures to protect your data: HTTPS encryption, access control, regular software updates.

8.2. In the event of a data breach, per GDPR requirements, we will notify the State Data Protection Inspectorate within 72 hours, and you, if there is a high risk.

9. Policy changes

9.1. We reserve the right to update this Privacy Policy. We will announce material changes on the Website.

9.2. Last updated: June 5, 2026.