Last updated: July 1, 2026
1. Data Controller
The data controller for this website (experiencefirst.lt) is Ina Lakavičė, operating as a registered sole proprietor (individuali veikla) under registration No. 1504829 in Lithuania.
Address: Vilnius, Lithuania
Email: ina@experiencefirst.lt
Referred to below as "we" or "ExperienceFirst.lt". This privacy policy explains what personal data we collect when you visit our website or contact us, why we collect it, how long we keep it, and what rights you have under the General Data Protection Regulation (GDPR, EU 2016/679).
2. What Data We Collect
2.1. Website visit data (analytics)
With your consent, we use Google Analytics 4 to analyze website traffic. This tool collects your (anonymized) IP address, device and browser type, pages visited, session duration, and approximate geographic location (city/country level). This data is statistical and is not used to identify you personally.
GA4 is activated only after you click "Accept" on the cookie banner shown at the bottom of the site. If you click "Decline" or make no choice, GA4 is never loaded.
2.2. Fonts (Google Fonts)
Fonts are loaded from Google Fonts servers. This means your IP address is technically transmitted to Google in order to serve the font file, even if you don't have a Google account.
2.3. Data you provide directly
- Contacting us by email (ina@experiencefirst.lt): name, email address, and whatever you include in your message.
- VoC tool recommendation survey (via Tally.so): clicking "Get a recommendation" takes you to the external site tally.so, where you fill in a short survey. This data is first collected by Tally (a separate data controller), and then shared with us so we can send you a personalized recommendation.
2.4. Server logs (hosting)
The website is hosted on Cloudflare Pages infrastructure. Cloudflare automatically collects technical logs (IP address, timestamp, request type) for security and stability purposes.
3. Why We Process Your Data
| Purpose | Legal basis (GDPR) |
|---|---|
| Website analytics (GA4) | Your consent (Art. 6(1)(a)) |
| Responding to your email inquiry | Steps taken at your request prior to entering a contract (Art. 6(1)(b)) |
| Sending a personalized recommendation after the Tally survey | Consent / your own initiative (Art. 6(1)(a) or (b)) |
| Website security and operation (hosting logs) | Legitimate interest in ensuring security (Art. 6(1)(f)) |
4. Cookies
Analytics cookies are only set after you give consent via the cookie banner shown on the site. You can change your choice at any time — see the button at the bottom of this page.
| Cookie | Purpose | Duration | Type |
|---|---|---|---|
| _ga | Distinguishing unique visitors (Google Analytics) | up to 2 years | Analytics (consent-based) |
| _ga_* | Session state persistence (GA4) | up to 2 years | Analytics (consent-based) |
| ef_cookie_consent | Remembers your cookie choice in this browser | indefinite (until browser data is cleared) | Essential |
We do not use advertising or profiling cookies on this site.
5. Who We Share Data With
- Google Ireland Limited (Google Analytics, Google Fonts) – data may be processed on servers in the US under the European Commission's Standard Contractual Clauses (SCCs).
- Cloudflare, Inc. – website hosting and content delivery network (CDN).
- Tally – survey platform; when you use the VoC recommendation form, you also become a user of their site, subject to their own privacy policy.
We do not sell your data or share it with third parties for marketing purposes.
6. How Long We Keep Data
- Google Analytics data: per Google's default retention period (up to 14 months), after which it is automatically deleted or anonymized.
- Email inquiries: kept for no longer than 3 years after the last correspondence, unless a longer retention period is required by law.
- Tally survey responses: kept for no longer than 12 months.
7. Your Rights
Under GDPR you have the right to: access your data, request correction or deletion, restrict processing, request data portability, object to processing based on legitimate interest, withdraw consent at any time, and lodge a complaint with the Lithuanian State Data Protection Inspectorate (VDAI), L. Sapiegos g. 17, Vilnius, www.vdai.lrv.lt.
To exercise these rights, contact us at ina@experiencefirst.lt. We will respond within 30 days.
8. Data Security
We apply reasonable technical and organizational measures to protect your data from loss, unauthorized access, or disclosure (the site runs over HTTPS, and the hosting infrastructure is protected by Cloudflare's security measures).
9. Children's Data
This website is intended for business clients (B2B) and is not knowingly directed at individuals under 16. We do not knowingly collect personal data from minors.
10. Changes to This Policy
This privacy policy may be updated from time to time, for example when the tools we use or applicable laws change. The update date is shown at the top of this page.
11. Contact & Cookie Settings
Questions about this privacy policy or how your data is handled can be sent to ina@experiencefirst.lt.