Privacy Policy | Calendar.lt

1. Data Controller

Calendar.lt is operated by Majevski, MB, a small partnership (mažoji bendrija) registered in Lithuania (European Union).

Company name	Majevski, MB
Company code	304720404
Registered address	Vilnius, Lithuania
Websites operated	Calendar.lt, NDA.lt, Pusher.lt
Contact	pagalba@majevski.com

2. What Data We Collect

We collect the following categories of data when you use Calendar.lt:

Technical data — IP address (anonymised by Google Analytics before storage), browser type, operating system, referring URL, pages visited, and time spent on pages.
Preferences — your chosen language and colour theme, stored in first-party cookies on your device.
Push subscription — if you opt in to push notifications, your browser's push endpoint URL is stored by Pusher.lt to deliver morning briefings. No name or email is required.
Event submission — when you submit a paid event, we collect: your name (or company name), email address, event date and title, optional location and URL, and — for company invoicing — company code, VAT number, and billing address. We also store the payment reference ID, payment method (Stripe or PayPal), and payment status.

We do not collect raw payment card numbers or bank account details — these are processed exclusively by Stripe and PayPal and never pass through our servers. We do not collect government-issued ID numbers or special-category data (Art. 9 GDPR).

3. Cookies and Similar Technologies

We use cookies and local storage to make the site work and, with your consent, to analyse traffic, deliver personalised push notifications and show advertising (Google AdSense). You can manage your choices at any time via the Cookie settings button in the footer.

Name	Duration	Purpose	Category
`calendar_theme`	1 year	Stores your light/dark theme preference	Necessary
`clt_consent_v`	1 year	Records your cookie consent choices	Necessary
`_ga`	2 years	Google Analytics — distinguishes unique visitors	Analytics
`_ga_*`	2 years	Google Analytics — stores session state	Analytics
`_fbp`	3 months	Meta Pixel — identifies browser for ad attribution	Marketing
`pusherlt_*`	Session	Pusher.lt — manages push notification subscription	Marketing
`__gads / __gpi`	13 months	Google AdSense — ad serving, frequency capping and ad measurement (set only after you allow advertising)	Advertising
`__eoi`	6 months	Google AdSense — protects ads against fraud and abuse	Advertising
`IDE (doubleclick.net)`	13–24 months	Google — serves and measures ads across websites	Advertising
`test_cookie (doubleclick.net)`	15 minutes	Google — checks whether the browser accepts cookies	Advertising

4. Legal Basis for Processing

We process your data under the following legal bases (Art. 6 GDPR):

Consent (Art. 6(1)(a)) — analytics cookies, marketing cookies, advertising cookies (Google AdSense) and push notification subscriptions. You may withdraw consent at any time.
Legitimate interests (Art. 6(1)(f)) — server security logs and fraud prevention. Our interest in maintaining a secure service does not override your rights.
Legal obligation (Art. 6(1)(c)) — where applicable under Lithuanian or EU law.

5. Data Retention

Analytics data — retained in Google Analytics for 14 months, after which it is automatically deleted.
Consent records — stored in your browser's local storage for up to 1 year, then re-asked.
Advertising cookies — set by Google only after you allow advertising and valid for up to 13 months in the EEA, the UK and Switzerland and up to 24 months elsewhere (see section 3). Withdrawing consent stops new ones; existing ones can be removed in your browser settings.
Push subscriptions — retained until you unsubscribe or revoke browser notification permission.
Contact form data — deleted within 6 months of your last enquiry unless a legal obligation requires longer retention.

6. Third-Party Data Processors

We share data with the following processors under appropriate data processing agreements:

Processor	Country	Purpose	Privacy policy
Google LLC	USA / IE	Google Analytics 4 — anonymous traffic analysis	policies.google.com/privacy
Google Ireland Limited	Ireland / USA	Google AdSense — serving and measuring ads (independent controller)	policies.google.com/technologies/partner-sites
Meta Platforms Ireland Ltd	Ireland	Meta Pixel — advertising attribution	facebook.com/privacy/policy
Stripe Payments Europe, Ltd.	Ireland	Payment processing — card and billing data for paid event submissions	stripe.com/en-lt/privacy
PayPal (Europe) S.à r.l.	Luxembourg	Payment processing — payment data for paid event submissions	paypal.com/us/legalhub/privacy-full

Transfers to the USA are protected by Google's and Meta's participation in the EU–US Data Privacy Framework. Stripe and PayPal process payment data under their own GDPR-compliant privacy frameworks. Google LLC's Data Privacy Framework certification also covers AdSense data.

7. Advertising (Google AdSense)

Calendar.lt is free to use and is funded by advertising served through Google AdSense. Ads appear only after you allow the Advertising category in the cookie settings — until then no Google AdSense code is loaded and no advertising cookies are set.

When you allow advertising, Google and its certified partners may use cookies (listed in section 3) to serve ads, limit how often you see the same ad, measure ad performance and detect invalid traffic. Because Calendar.lt does not use an IAB Transparency & Consent Framework (TCF) platform, Google shows visitors from the European Economic Area, the United Kingdom and Switzerland only non-personalised or limited ads: they are chosen from the content of the page and your approximate location, not from your browsing history or interests. Outside these regions, Google and its partners may use advertising cookies to show ads based on your previous visits to this and other websites (personalised ads).

Google acts as an independent data controller for the data it processes to serve ads. How Google uses that data is described at policies.google.com/technologies/partner-sites. You can manage personalised advertising across Google services at adssettings.google.com and opt out of personalised ads from other vendors at youronlinechoices.eu.

You can withdraw your advertising consent at any time via Cookie settings in the footer; from the next page load no ads are shown. We place no ads on the privacy policy, app, API or event-submission pages, and we never use pop-up, overlay or full-screen ad formats.

8. Your Rights

Under the GDPR you have the right to:

Access (Art. 15) — request a copy of the data we hold about you.
Rectification (Art. 16) — ask us to correct inaccurate data.
Erasure (Art. 17) — ask us to delete your data ("right to be forgotten").
Restriction (Art. 18) — ask us to restrict processing in certain circumstances.
Portability (Art. 20) — receive your data in a structured, machine-readable format.
Object (Art. 21) — object to processing based on legitimate interests.
Complaint — lodge a complaint with the State Data Protection Inspectorate (Lithuania) or the supervisory authority in your country of residence.

To exercise any right, contact us at pagalba@majevski.com. We will respond within 30 days.

9. Withdrawing Consent

You may change or withdraw your cookie consent at any time by clicking Cookie settings in the footer of any page. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

To remove all locally stored consent data, clear your browser's cookies and local storage for calendar.lt.

10. Contact

For privacy-related enquiries, write to pagalba@majevski.com.
You may also contact the supervisory authority: State Data Protection Inspectorate of Lithuania (ADA), A. Juozapavičiaus str. 6, Vilnius LT-09310.

11. Changes to This Policy

We may update this Privacy Policy when our practices change or when required by law. The "Last updated" date at the top reflects when the most recent revision was made. Significant changes will be announced on the site.