Privacy Policy
Last updated: 4 October 2026
MB “Glaubic” (“we”, “us”), which operates the website glaubic.com, explains in this policy what personal data we process when you visit the website, buy training or a gift coupon, subscribe to the newsletter, send an inquiry or otherwise contact us, why we do so, who receives the data and what rights you have. We process data in accordance with the EU General Data Protection Regulation (GDPR), the Lithuanian Law on Legal Protection of Personal Data and the Lithuanian Law on Electronic Communications.
1. Data Controller
MB “Glaubic” (a Lithuanian small partnership, mažoji bendrija)
Legal entity code: 306622581
Address: Raitininkų g. 4-74, Vilnius, Lithuania
Email: [email protected]
Phone: +370 624 69115
Website: glaubic.com
Data about the partnership is collected and stored in the Register of Legal Entities of the Republic of Lithuania. We have not appointed a data protection officer: please send any data protection questions to the email address above.
2. What Data We Process
- Purchase and registration data: first name, last name and email address that you enter on the Stripe payment page, payment country and address (if Stripe asks for it), the selected training, date, city, number of participants, amount, payment and order numbers.
- Invoicing data (for companies): company name, legal entity code, VAT number (if provided) and registered address.
- Payment card data: you enter it in Stripe’s secure environment. It is not accessible to us and is not stored on our servers.
- Gift coupon data: recipient’s name, buyer’s name and message (if entered), coupon number, expiry date and training date (if selected). If someone else gave you a coupon, we received your name from them.
- Newsletter data: email address and a consent record: date and time of consent, the form’s location on the website and the version of the consent text.
- Quote request data: the selected service, first and last name, company, email address, phone number and team size (if provided) and the description of your needs.
- Correspondence data: your contact details and the content of your emails when you contact us directly by email or phone.
- Testimonials, photos and videos: name, photo, position or occupation, Instagram profile link, testimonial text and video. We publish them only with your consent (see section 7).
- Technical data: IP address, browser and device information, time and address of the request. These are logged automatically by our server, Cloudflare and Railway. We also use the IP address briefly to protect our forms against excessive requests.
- Analytics data (only with your consent): a pseudonymous Google Analytics identifier, pages viewed and actions on the website (for example, opening the purchase window, starting a payment, sending an inquiry or subscribing), approximate location, device and browser information. Google Analytics 4 does not store IP addresses.
Purchase data is necessary to conclude and perform the contract: without it, you cannot register or buy a coupon. Providing any other data is up to you.
3. Purposes and Legal Bases
| Purpose | Legal basis (Art. 6(1) GDPR) |
|---|---|
| Training registration, organising the training and providing the services | Performance of a contract (point (b)) |
| Payments, invoices and accounting, including the purchase log | Performance of a contract and compliance with a legal obligation (points (b) and (c)) |
| Issuing and redeeming gift coupons | Buyer’s data: performance of a contract (point (b)). Recipient’s data: our legitimate interest in fulfilling the buyer’s order and enabling the recipient to use the coupon (point (f)) |
| Sending the newsletter | Your consent (point (a)) |
| Responding to a company quote request and preparing a quote | Steps taken at your request before entering into a contract (point (b)) |
| Answering other questions, customer support | Our legitimate interest in responding to your request (point (f)) |
| Website operation and security (server logs, protection against form abuse) | Our legitimate interest in operating a secure website (point (f)) |
| Traffic analytics (Google Analytics) | Your consent, given in the cookie banner (point (a)) |
| Showing the video testimonial through the Google Drive player | Your consent, given by clicking “Watch the video testimonial” (point (a)) |
| Taking photos during the training (documenting our activities and selecting photos for possible publication) | Our legitimate interest in documenting our activities (point (f)). You can object: tell the trainer, and we will not photograph you |
| Publishing testimonials, photos and videos | Consent of the person whose data is published (point (a)) |
| Establishing and defending legal claims | Our legitimate interest (point (f)) |
4. Recipients and Transfers outside the EU
We do not sell your data. We share it only with the following service providers, which process data on our behalf under contracts (processors) or, where stated, act as separate controllers:
| Provider | Purpose | Data location |
|---|---|---|
| Stripe Payments Europe, Ltd. (Ireland), Stripe, Inc. (USA) | Payment processing. For fraud prevention and financial reporting, Stripe acts as a separate controller. | EU, USA |
| Resend, Inc. (USA) | Sending automated emails: confirmations, gift coupons, notifications about inquiries and subscriptions. | USA |
| Google Ireland Limited (Ireland), Google LLC (USA) | Our mailbox [email protected] (Google Workspace); purchase and registration logs (Google Sheets, Apps Script); traffic analytics (Google Analytics, only with consent); video testimonial player (Google Drive, only after you click). Google provides the Google Drive player as a separate controller. | EU, USA |
| Omnisend (Lithuania) | Sending newsletters and keeping the subscriber list. | EU |
| Railway Corporation (USA) | Website server (hosting). | USA |
| Cloudflare, Inc. (USA) | Domain name system, traffic delivery and protection against attacks. Sees visitors’ IP addresses. | EU, USA |
| Accounting service provider | Handling invoices and accounting. | Lithuania |
We may also disclose data to public authorities where required by law.
When data is transferred to the USA or other countries outside the European Economic Area, we rely on the European Commission’s adequacy decision for the EU-US Data Privacy Framework (where the provider is certified under it) and/or on the Standard Contractual Clauses approved by the European Commission. You can obtain a copy of these safeguards by writing to us.
5. Cookies and Browser Storage
Cookies and browser storage entries (localStorage, sessionStorage) are small records on your device. We use essential ones without consent, because without them the website could not work the way you ask it to. We enable analytics only after you click “Accept all” in the cookie banner. Until you consent, Google Analytics is not loaded and no data is sent to Google.
The website’s fonts and images are served from our own server, so loading them does not share any data with third parties.
| Name | Provider | Purpose | Duration | Type |
|---|---|---|---|---|
glaubic-slapukai (localStorage) | GLAUBIC | Your choice in the cookie banner: version, time of the choice and whether you consented to analytics | 12 months, after which we ask again | Essential |
lang (localStorage) | GLAUBIC | Your selected website language (LT or EN). Saved only when you click a language button | Until you delete it in your browser | Essential (for a feature you chose) |
_ga (cookie) | Google Analytics | Distinguishes visitors by a pseudonymous identifier | 2 years | Analytics, only with consent |
_ga_7LHSP3KSSF (cookie) | Google Analytics | Keeps the state of the visit (session) | 2 years | Analytics, only with consent |
purchase_<Stripe Checkout session ID> (sessionStorage) | GLAUBIC | Ensures that a paid purchase is recorded in Google Analytics only once | Until you close the browser tab | Analytics, only with consent |
glaubic-pirkimas (sessionStorage) | GLAUBIC | The purchase form fields (invoice details, the gift recipient’s and your name, the message), so that you do not have to enter them again when you come back from Stripe’s payment page. Saved only when you click “Continue to payment” | Until you return to the purchase form, pay or close the form, and no longer than until you close the browser tab | Essential (for a feature you chose) |
__cf_bm and other Cloudflare cookies | Cloudflare | Protection against bots and attacks. Set only when Cloudflare protection is active | Up to 30 minutes | Essential |
| Google Drive player cookies | Showing the video testimonial. Loaded only after you click “Watch the video testimonial” | Set by Google | Third-party, only after your click |
Payment takes place on Stripe’s page checkout.stripe.com, which uses Stripe cookies under Stripe’s privacy policy.
How to change your choice. You can change or withdraw your consent at any time by clicking “Cookie settings” at the bottom of the website. If you choose “Essential only”, we delete the Google Analytics cookies and the page reloads. You can also delete cookies and storage entries in your browser settings.
6. Newsletter
We send the newsletter only with your consent, which you give by subscribing through the form on the website. We keep a consent record: your email address, the date and time of consent, the form’s location and the version of the consent text. We manage the subscriber list in Omnisend. You can unsubscribe at any time by clicking the unsubscribe link in any newsletter or by writing to [email protected].
7. Testimonials, Photos and Videos
We publish participants’ testimonials (name, photo, position or occupation, Instagram profile link, testimonial text or video) and training photos in which people can be identified only with the consent of the people concerned. You can withdraw your consent at any time by writing to [email protected]: we will remove your testimonial or photo from the website within 14 days. Withdrawal does not affect the lawfulness of publication before it.
We may take photos during the training to document our activities and to select photos for possible publication. We do not publish photos in which you can be identified without your consent. If you do not want to appear in photos, please tell the trainer.
The video testimonial is stored on Google Drive. Until you click “Watch the video testimonial”, we show only a cover image hosted on our own server and make no request to Google. After you click, the Google Drive player loads: Google receives your IP address, browser information and the page address, may use its own cookies and, if you are signed in to a Google account, may link the view to it. Google processes this data under its own privacy policy (opens in a new window).
8. Retention Periods
- Purchase, payment and invoicing data, including the purchase log: 10 years from the purchase, as required by accounting legislation.
- Gift coupon data: for the validity period of the coupon and afterwards together with the purchase data.
- Newsletter email address: until you unsubscribe. Consent record: 3 more years after you unsubscribe, so that we can prove that we had consent.
- Inquiries and correspondence: 2 years from the last message if no contract is concluded. If a contract is concluded, as purchase data.
- Testimonials, photos and videos: until you withdraw consent or we remove them ourselves.
- Unpublished training photos: no longer than 2 years from the training day.
- Google Analytics data: no longer than 14 months.
- Server and email delivery logs: as long as the service providers keep them, usually no longer than 30 days.
- Cookies and browser storage entries: as stated in the table in section 5.
9. Your Rights
Under the GDPR you have the right to:
- access your data and receive a copy of it;
- have inaccurate data corrected;
- have your data erased (“right to be forgotten”) when it is no longer needed or you withdraw consent;
- restrict the processing of your data;
- receive the data you provided in a structured format and transmit it to another controller (data portability);
- withdraw consent (newsletter, analytics, publication of a testimonial) at any time. Withdrawal does not affect the lawfulness of processing before it.
Right to object. You may object at any time to the processing of your data based on our legitimate interest (for example, answering questions or keeping the website secure), and you may opt out of direct marketing, including the newsletter, at any time.
Please send requests to [email protected]. We will reply within 1 month of receiving your request. In complex cases we may extend this period by up to 2 more months and will let you know. Before disclosing data, we may ask you to confirm your identity.
We do not make automated decisions, including profiling, that produce legal effects concerning you or similarly significantly affect you.
10. Data Security
We apply technical and organisational measures to protect your data against unauthorised access, loss or disclosure. The website uses encrypted HTTPS, payments are processed in Stripe’s secure environment, and only people who need the data for their work have access to it.
11. Complaints
If you believe that your data is being processed improperly, please contact us first: we will try to resolve the issue as quickly as possible. You also have the right to lodge a complaint with the State Data Protection Inspectorate of Lithuania (Valstybinė duomenų apsaugos inspekcija, L. Sapiegos g. 17, LT-10312 Vilnius, [email protected], vdai.lrv.lt (opens in a new window)).
12. Changes to This Policy and Language
We update this policy when our data processing changes. The current version and its date are always published on this page, and we will send previous versions on request. If the list of cookies or their purposes changes, the cookie banner will ask for your choice again. This policy is published in Lithuanian and English. In case of any discrepancy, the Lithuanian version prevails.
13. Contact Us
For any questions about privacy or data processing:
Email: [email protected]
Phone: +370 624 69115