Data controller
The controller of your personal data is Advokatų Kiaurakio, Sriebaliaus ir partnerių kontora “Wise Law”, S. Šimkaus g. 12, Klaipėda, Lithuania. For privacy matters and data-subject requests, contact linas@wlt.lt or use the other contact details published on the website.
What data we process and why
We process your name or company name, email address, selected area of enquiry, phone number if provided, and the content of your message. The data is used to assess and respond to your enquiry and, where requested, to take steps before entering into a legal-services agreement. The legal basis is Article 6(1)(b) GDPR and, where applicable, our legitimate interest in administering incoming enquiries under Article 6(1)(f) GDPR.
The contact form uses a necessary WLTSESSID session cookie, a CSRF token and server-side validation to protect submissions. Submission frequency is limited using a keyed hash of the network address and timestamps, not the contents of your enquiry. The rate window is 24 hours; older rate entries are cleared on the next form check. Hosting providers may separately keep their security logs. The legal basis is our legitimate interest in operating secure IT systems.
Google Analytics 4 and its Google Tag Manager container load only after you choose “Allow analytics”. Before that choice, and when you choose “Essential only”, this site does not load those Google tags. Analytics may process page views, interaction events, approximate location, browser/device information and traffic source. The legal basis is your consent under Article 6(1)(a) GDPR. The analytics choice does not authorise advertising, advertising user data or ad personalisation.
The choice is stored in localStorage under wlt-consent-v30 and remembered for up to 180 days. You can reopen Cookie settings in the footer. Opening the panel alone does not change your choice. Selecting Essential only withdraws analytics consent, attempts to remove accessible first-party Google measurement cookies and reloads the page to unload previously loaded scripts.
Google Tag Manager and Google Analytics
Only analytics consent is requested on this website. The advertising consent signals remain denied, including after analytics is accepted. Form field contents, names, contact details and case descriptions are not included in the website’s analytics events. A successful-submission event requires a one-time server confirmation after the SMTP server accepts the message; merely viewing the thank-you page is not treated as a submission.
Recipients
Our IT, hosting and email service providers may process data where necessary to provide their services. Hostinger services are used for website hosting and email infrastructure. If you consent to analytics, Google service providers participate in the processing. We do not sell personal data or use it for third-party direct marketing.
Transfers outside the EEA
Where a technical service provider processes data outside the European Economic Area, a lawful Chapter V GDPR transfer mechanism must apply, such as an adequacy decision of the European Commission or Standard Contractual Clauses where required.
Retention
Contact enquiries that do not become a legal-services engagement are generally retained for no longer than 12 months after the last contact, unless longer retention is reasonably necessary for a dispute, protection of legal claims or compliance with a legal obligation. If a legal-services agreement is entered into, further retention of client and matter data is governed by the legal and professional obligations applicable to the engagement. Analytics data is retained according to the Google Analytics property settings and only for as long as necessary for statistical purposes.
Your rights
Where provided by the GDPR, you may request access, rectification or erasure of your personal data, restriction of processing, object to processing and exercise data-portability rights. Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.
If you believe your data is processed unlawfully, you may lodge a complaint with the Lithuanian State Data Protection Inspectorate.
Is providing data mandatory?
To send the contact form, you must provide a name or company name, email address and message. Phone number and area of enquiry are optional. Without the required data, we cannot respond through the form.
Confidentiality and attorney-client relationship
Submitting the contact form does not itself create an attorney-client relationship and does not mean that an engagement has been accepted. Until representation is confirmed, please avoid submitting unnecessary confidential, special-category or highly sensitive information. If an engagement is accepted, data is subsequently handled in accordance with professional secrecy and other applicable professional obligations.
Automated decision-making
We do not use automated decision-making or profiling in relation to website visitors that produces legal or similarly significant effects.
Changes to this notice
We may update this privacy information when the website, technologies we use or legal requirements change. The date of the current version is shown at the top of the page.