Privacy policy

Last updated: 28 September 2026

1. General provisions

This privacy policy sets out how the Association "Lithuanian Small and Medium Enterprises Council" (Lithuanian SME Council; legal name: Asociacija "Lietuvos smulkaus ir vidutinio verslo taryba"; hereinafter – the Association or LSVVT) collects, uses, stores and processes the personal data of natural persons when they visit the website www.lsvvt.lt (hereinafter – the Website), use its features, submit information or contact the Association.

The Association ensures that personal data are processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (the General Data Protection Regulation – GDPR), the Law of the Republic of Lithuania on Legal Protection of Personal Data and other applicable legal acts.

2. Data controller

Personal data controller: Asociacija "Lietuvos smulkaus ir vidutinio verslo taryba"

Legal entity code: 308068814

Registered office: M. K. Čiurlionio g. 22, Kazlų Rūda, LT-69422, Lithuania

Email: info@lsvvt.lt

3. Personal data processed

3.1. Data provided by the person themselves (for example, via the Website inquiry form or by email):

  • name, surname or the name of the represented organisation;
  • email address;
  • phone number (if provided);
  • the subject and content of the inquiry;
  • other information the person provides voluntarily.

Fields marked as required in the form are needed to submit an inquiry; the phone number is optional. If required information is not provided, an inquiry can be sent by email.

3.2. Automatically collected technical data. For security and technical maintenance purposes, the servers of the Website hosting provider may automatically record:

  • IP address;
  • technical data of the browser and device;
  • date and duration of the visit and the pages viewed.

3.3. Analytics data. Only after separate consent, Google Analytics 4 processes information about pages viewed, browser and device, interactions with the Website, approximate location and online identifiers. Google receives the IP address to determine approximate location; under Google Analytics 4 settings, IP addresses are not logged or stored.

4. Purposes of data processing

Personal data are processed for the following purposes:

  • responding to inquiries and membership requests;
  • administering the activities of the Association;
  • with separate consent, analysing Website use and improving its content;
  • ensuring the technical operation and security of the Website.

5. Legal bases for data processing

Data are processed on the basis of:

  • the person's consent (Article 6(1)(a) GDPR), including separate consent for analytics; analytics consent can be withdrawn at any time using “Cookie settings” in the Website footer;
  • the legitimate interest of the Association (Article 6(1)(f) GDPR);
  • a legal obligation, where provided for by legal acts (Article 6(1)(c) GDPR).

6. Cookies

Essential browser storage is used to remember the visitor's analytics choice; this preference is not sent to Google. Google Analytics 4 is not loaded and analytics cookies are not set unless the visitor selects “Accept analytics”. After acceptance, Google Analytics 4 uses the _ga and _ga_1CHBN7QKSM cookies to measure visitors and their use of the Website. The Website sets a cookie lifetime of up to 6 months; the browser may shorten it. Analytics can be rejected or consent withdrawn using “Cookie settings” in the footer. Google Signals and advertising personalisation are disabled.

7. Google Analytics and third-party links

Hostinger provides the Website hosting and email service. Data submitted through the inquiry form are transmitted through Hostinger's infrastructure and delivered to the Association's mailbox; Hostinger may also process technical server logs.

If the visitor consents to analytics, Website usage data are disclosed to Google as the provider of Google Analytics. Google may process data outside the European Economic Area; the safeguards set out in Google's data processing terms and privacy policy apply. For more information, see the Google Privacy Policy and Google data processing terms.

The Website may also contain links to third-party websites and social network accounts (for example, Facebook). When such a link is followed, the privacy rules of the respective third party apply. The Association is not responsible for the content of third-party websites or the data processing they carry out.

8. Data retention periods

Inquiry data and technical server logs are stored only for as long as necessary for the relevant purpose or as required by law. The Google Analytics 4 event-data retention period is controlled in the Google account and is intended to be set to 2 months for this Website. Analytics cookies last up to 6 months, or less if removed by the browser or visitor.

9. Rights of data subjects

Every person has the right to:

  • access their data;
  • request that the data be corrected or erased;
  • restrict or object to the processing;
  • receive data they provided in a structured, commonly used and machine-readable format where the conditions of Article 20 GDPR apply;
  • withdraw the consent given;
  • lodge a complaint with the State Data Protection Inspectorate of Lithuania (vdai.lrv.lt).

To exercise your rights, please contact us at info@lsvvt.lt.

10. Final provisions

The Association reserves the right to update this privacy policy at any time. The updated version is published on the Website.