Get in touch

Privacy Policy

Last updated: September 2026 · Tomas Kubilius, VAT ID: 1186375

This Privacy Policy explains how Tomas Kubilius ("I", "me", the "data controller", reachable via www.tomaskubilius.com) collects, uses and protects personal data when you visit this website, submit the contact form, or book a call. It is written to comply with Lithuanian law and the EU General Data Protection Regulation (GDPR, Regulation 2016/679).

Data may be collected voluntarily through email, phone, or this website's forms and booking tool. All processing follows the principles and rights described below.

1. Definitions

"Personal data" means any information relating to an identified or identifiable person. The "data subject" is the individual whose data is processed. The "data controller" (Tomas Kubilius) determines the purposes of processing; a "data processor" processes data on the controller's behalf (for example, the tools listed in Section 5). "Consent" means freely given, informed agreement to processing.

2. Processing Principles

  • Data is processed only for legitimate, clearly defined purposes.
  • Data is handled fairly, lawfully and transparently.
  • Data is kept accurate and updated where necessary.
  • Collection is limited to what is actually needed.
  • Data is stored only for as long as necessary for the purpose it was collected.
  • Access is restricted to Tomas Kubilius and the authorised service providers listed in Section 5.

3. Why Data Is Processed

Personal data submitted through this site is used to: respond to enquiries and audit/consultation requests; schedule and manage calls; issue invoices and business documents where a service is contracted; communicate about ongoing or prospective work; understand how the website is used, in aggregate, to improve it; and meet legal or accounting obligations.

By voluntarily submitting your data through the contact form or booking tool, you agree to its processing as described in this policy.

4. What Data Is Collected

Depending on how you interact with the site, this may include: your name, email address, company name, and the content of your message (via the contact form); your name, email and selected meeting time (via the booking tool); and general website usage data such as approximate location, device/browser type, and pages viewed (via analytics).

5. Tools and Third-Party Processors

This website uses the following third-party services, each of which processes limited data on my behalf under its own privacy terms:

  • Google Tag Manager & Google Analytics (GA4) - website usage analytics (pages visited, approximate location, device information).
  • FormSubmit - delivers the contact form submission (name, email, message) to my inbox.
  • Calendly - handles call bookings (name, email, selected time slot).

None of these tools are used to sell your data to third parties.

6. Your Rights

Under GDPR, you have the right to: know what data is collected about you; access your data; request correction or deletion; restrict or object to processing; receive your data in a portable format; withdraw consent at any time; decline to provide data (though this may limit what I can do for you); and lodge a complaint with your national data protection authority (in Lithuania, the State Data Protection Inspectorate).

To exercise any of these rights, contact [email protected].

7. Cookies

This site uses cookies for analytics and to understand site usage, set via Google Tag Manager / Google Analytics. Cookies are small files stored in your browser; they cannot run programs or transmit viruses. You can accept, block or delete cookies through your browser settings at any time, though this may affect some site functionality. No personal information beyond standard analytics data is collected through cookies.

8. Third-Party Links

This site may link to external websites (for example, case studies or social profiles). I am not responsible for the privacy practices of those sites and recommend reviewing their own privacy policies.

9. Data Security

Reasonable administrative, technical and organisational measures are in place to protect data against unauthorised access, loss, misuse or alteration.

10. Governing Law

This policy is governed by Lithuanian and EU law. Any disputes will be resolved by negotiation or, failing that, before the competent Lithuanian courts. This policy applies to www.tomaskubilius.com.