Who is responsible
MB „Kryptingi projektai“ (KP), company code 304844804, VAT number LT100013832013, Taikos g. 150-30, LT-05227 Vilnius, Lithuania, operates sarunas.xyz and supplies consulting and software services. For privacy questions or requests, email s@1d.works.
This notice covers our website, consulting relationships and software services, including customised SaaS and apps on subdomains where KP is identified as the software provider. This notice provides shared information; any additional notice supplied for a particular app supplements it. The inquiry privacy notice also explains inquiries through Meta forms or messaging.
Software provider and merchant roles
KP is the controller for its own inquiries, client relationships, account administration, billing, security and legal records. Where a merchant or provider decides why its customers' order, booking or other service data is used and KP hosts or handles it on that business's instructions, that business is the controller and KP is its processor. Its privacy notice explains its use of that data; our business data-processing addendum governs our instructed processing where agreed. Please direct requests about a merchant's sales or customer records to that merchant; we can help identify the right contact and assist it.
Information used in our services
Depending on the service and the information you provide, we process:
- Contact, company, proposal, contract, project and support correspondence needed to discuss and deliver consulting or software.
- Account and authentication data, display name, language/timezone preferences, organisation details, permissions and service activity needed to administer access.
- Customer content and transaction records needed by the particular app, such as order selections, workplace/delivery details, bookings, attendance or preferences, and records of accepted terms.
- Billing, tax, invoice, subscription and transaction identifiers and payment/refund status where payments are enabled.
- Technical request, security, error and audit information used to deliver and protect the service.
Only the categories relevant to the service apply; this list does not mean that every app collects all of them. Do not submit another person's data without authority, or sensitive data unless the service specifically supports it with appropriate safeguards and a lawful basis. Direct accounts and purchases are intended for adults unless an app explicitly provides an appropriate exception.
Optional advertising measurement
Only after you accept, Meta Pixel records a page visit and a click on a Calendly booking link. A booking click indicates interest; it does not confirm that a meeting was booked. Each is recorded at most once per page load. The privacy pages do not send these events.
Meta receives the visited page URL, including campaign parameters, technical information such as your IP address and browser, and advertising identifiers. Meta may set cookies such as _fbp and _fbc. This helps measure ads and build website visitor audiences for future remarketing. We do not send names, email addresses, form contents or contact lists through the Pixel; automatic advanced matching is not enabled.
Meta Platforms processes this information under its own Privacy Policy, which explains retention, international transfers and your choices.
Your choice
Declining does not affect the site or booking links. Meta Pixel tracking stays off before a choice, when your browser signals Global Privacy Control, or when a choice cannot be saved. We store your accepted or declined choice in your browser for 180 days.
Use Tracking settings below to change your choice. Declining stops future Pixel events and attempts to remove this site's Meta cookies. It cannot recall information already sent to Meta. Browser settings can also block or delete cookies.
Booking-link counts
We count requests to booking links to understand which pages and campaigns lead to Calendly. The counter keeps daily totals by page, button and campaign for 90 days. It uses no cookies and stores no IP addresses or visitor identifiers. Counts are link requests, not unique people or confirmed bookings. Ordinary hosting logs are separate. Optional Meta Pixel tracking still requires your consent.
Visits and bookings
Our hosting infrastructure processes ordinary request information to serve the site. If you follow a booking link, Calendly receives your visit and the booking details you choose to provide under its Privacy Notice. Campaign parameters in the link help us identify which campaign a booking came from. Booking and inquiry details are used to arrange and follow up on your conversation.
Purposes and legal bases
For processing where KP is controller, we rely on performance of a contract with you or steps you request before entering it (GDPR Article 6(1)(b)); legitimate interests in communicating with business representatives, administering services, preventing abuse, securing systems and handling legal claims (Article 6(1)(f)); legal obligations for accounting, tax and other mandatory records (Article 6(1)(c)); and consent for optional advertising tracking or other consent-based uses (Article 6(1)(a)). We consider your rights when relying on legitimate interests. Essential service information is needed to provide the requested service; without it we may be unable to create an account, fulfil an order or provide support.
Clients and users retain their rights in their data and content. We use it to deliver, support, secure and bill for the agreed service. We do not use client/customer content to train AI models or for unrelated marketing without separate authorisation and any required lawful basis or consent. Accepting service terms is not consent to optional advertising. For data processed on a merchant's instructions, that controller determines the applicable purposes and lawful bases.
Providers and other recipients
Relevant recipients include the merchant/provider you transact with; authorised staff and contractors; hosting, infrastructure, security, backup and email-delivery providers for the service; payment providers; and professional advisers or authorities where legally necessary. We limit access to what is needed for the relevant function. Contact us for current service-specific provider and processing information. Additional details may also be supplied in the app or engagement information.
When a Stripe or Wise payment option is used, that provider receives payment information under its own terms and privacy notice: Stripe and Wise. We receive information needed to reconcile transactions, invoices, subscriptions, fees and refunds. Payment providers may act as independent controllers for their legal, verification, security and fraud-prevention duties and as processors for other services; their notices explain those roles. Merchant verification information submitted directly to a payment provider is handled by that provider. Payment processing does not make KP the seller of the merchant's goods or services.
The website's Meta and Calendly processing is explained above. We do not sell personal data. Our inquiry channels may also use customer-relationship tools as described in the inquiry notice.
Storage and international transfers
Infrastructure and processing locations depend on the service; contact us for the arrangements relevant to your app or engagement. This notice does not promise that all processing stays in one country. Some providers, including international scheduling, advertising and payment services, may process data outside the EEA. Transfers requiring a GDPR Chapter V mechanism must be covered by an applicable adequacy decision or appropriate safeguards such as Standard Contractual Clauses and any necessary supplementary measures. Contact us for information about a relevant transfer and a copy of applicable safeguards, subject to lawful redactions.
Retention
We keep information for as long as needed for the relevant purpose, considering the active service, the last meaningful contact, security needs, the customer's instructions, legal retention duties and applicable claim periods. App-specific schedules explain concrete periods for that service's records, exports and backups where established. The website's 180-day tracking choice and 90-day booking-link aggregate periods are stated above.
- Account and service content: for the authorised service and its documented closure/return/deletion process, subject to controller instructions and required legal retention.
- Inquiries, support and project records: while needed to respond, perform the engagement, resolve issues and handle relevant claims.
- Billing, tax, transaction and accepted-contract records: for applicable statutory retention and claim periods; a request to close an account does not automatically erase legally required records.
- Security logs and backups: for operational recovery and security under the relevant service schedule, with access restricted; deletion from active systems and expiry of backup copies can occur at different times.
App cookies and browser storage
Apps may use necessary authentication/security cookies and preference or checkout-recovery storage. Contact us for the particular technologies and duration relevant to your app; additional app notices, where provided, supplement this information. They do not inherit an advertising-consent choice or a promise of no cookies from this website. Optional non-essential tracking requires the choice applicable to that app.
Your rights and contact
Subject to GDPR conditions, you may request access, correction, erasure, restriction or portability, object to processing based on legitimate interests, and withdraw consent at any time. Withdrawal does not affect earlier lawful processing. You may always object to processing for direct marketing. Email s@1d.works; we may need proportionate identity verification. We normally respond within one month, with any lawful extension explained. Where we act as processor, we pass the request to the relevant controller and assist it.
You may complain to the Lithuanian State Data Protection Inspectorate or the competent supervisory authority where you live, work or believe an infringement occurred. You need not contact us first.
Security, automated decisions and changes
We use safeguards appropriate to the processing, including access controls and encrypted transport, and manage requests through support. We do not use website inquiry data to make solely automated decisions with legal or similarly significant effects. A payment provider's own security decisions are explained in its notice; any relevant additional app processing must be explained in the app's notice.
We update this notice when services, providers or legal requirements change and identify the current date here. Material changes will be communicated where required. Our terms and conditions explain the service relationship; privacy consent is requested separately where needed.