Last updated: 2026-10-27

This privacy policy explains how MB “Volungius” (hereinafter “we”) collects, uses and stores your personal data when you visit the nextgenerati0n.com website or use our services.

1. Data controller

MB “Volungius”
Company code: 307101649
Address: Giedraičių g. 39, Vilnius, Lithuania
Email: [email protected]

2. What data we collect

2.1. Data you provide yourself (contact form, questionnaire, email, phone):

• first name, last name
• email address, phone number
• company name and website address
• questionnaire answers and other information you provide

2.2. Automatically collected data:

• IP address (used for spam protection and to determine approximate location)
• browser, device and operating system information
• pages viewed, clicks, visit duration, where you came from (e.g. ad click identifier)
• identifiers of cookies and similar technologies

3. Why we use data and on what legal basis

• To respond to an inquiry, prepare an offer and provide services – data: 2.1; legal basis: Request to enter into a contract, performance of a contract
• Website operation and spam protection (Cloudflare, Turnstile) – data: IP, device data; legal basis: Legitimate interest
• Traffic statistics (Google Analytics 4) – data: 2.2; legal basis: Your consent
• Measuring advertising effectiveness (Google Ads conversions) – data: 2.2, encrypted email (see Section 5); legal basis: Your consent
• Retargeting (remarketing) on the Google network – data: 2.2; legal basis: Your consent
• Website usage analysis (Microsoft Clarity, PostHog) – data: 2.2; legal basis: Your consent
• Compliance with legal obligations (accounting, requests from authorities) – data: 2.1; legal basis: Legal obligation

We do not send marketing emails without your consent.

4. Cookies and consent

On your first visit, a cookie notice is displayed (Acceptrics). You can accept all cookies, reject them or choose categories. You can change your decision at any time by clicking the cookie settings link on the website.

We use “Google Consent Mode v2”. Until you give consent, Google analytics and advertising cookies are not stored, and Google receives only anonymous signals without cookies or identifiers (e.g. that a page was opened). These are used only for aggregate statistical modelling. Microsoft Clarity and PostHog are not activated without consent.

• Necessary – examples: Acceptrics consent cookie, Cloudflare (__cf_bm, Turnstile); purpose: Storing consent, security; duration: up to 12 months / up to 30 min.
• Analytics – examples: Google Analytics (_ga, _ga_*), Microsoft Clarity (_clck, _clsk), PostHog (ph_*_posthog); purpose: Traffic statistics, usage analysis; duration: up to 2 years / up to 1 year.
• Advertising – examples: Google Ads (_gcl_au, _gcl_aw), conversion linking; purpose: Measuring advertising results, remarketing; duration: up to 90 days.

Commercial proposal pages (nextgenerati0n.com/pasiulymas-…) that we send to a specific company are measured without cookies: PostHog (EU server) records when the proposal was opened, how long it was read and which parts of it were viewed, and records the browsing session (scrolling and clicks; all form fields are masked). The data is linked to the proposal, not to a specific person, and nothing is stored on your device. The legal basis is our legitimate interest in properly preparing and discussing the proposal. You can object to such measurement by writing to [email protected].

5. Server-side tracking and enhanced conversions

Analytics and advertising data is first sent to a server that we control ourselves (k7p.nextgenerati0n.com, service provider Stape, EU server). There, unnecessary data is discarded, and only then is the data passed on to Google. This way, less data reaches third parties directly from your browser.

If you consent to advertising cookies and submit a form, your email address is converted in your browser into an irreversible code (SHA-256) and passed to Google Ads (“enhanced conversions”). Google uses it only to determine whether the inquiry came from an ad. Your email address is not sent to Google in plain text.

6. Data recipients

• Google Ireland Ltd. / Google LLC – purpose: Google Analytics 4, Google Ads; location: EU / USA*
• Microsoft Ireland Operations Ltd. – purpose: Microsoft Clarity; location: EU / USA*
• PostHog Inc. – purpose: Website usage analysis (PostHog EU Cloud); location: EU
• Stape – purpose: Server-side tracking; location: EU
• Cloudflare, Inc. – purpose: Website network, security, Turnstile; location: EU / USA*
• Acceptrics – purpose: Cookie consent management; location: EU
• Website hosting and IT service providers – purpose: Operation of the website and forms; location: EU
• Public authorities – purpose: Where required by law; location: Lithuania

* Data is transferred to the USA under the EU-US Data Privacy Framework or standard contractual clauses.

We do not sell your data.

7. Retention periods

• Inquiry and questionnaire data where no contract is concluded – period: 3 years from the last correspondence
• Client data – period: Term of the contract + 10 years (accounting documents)
• Google Analytics 4 data – period: 14 months
• Cookies – period: As set out in Section 4
• Consent records – period: Up to 12 months or until you withdraw consent

8. Your rights

You have the right to:

• obtain information about your data and a copy of it
• request that your data be rectified or erased
• restrict processing or object to it
• data portability
• withdraw your consent at any time (this does not affect processing carried out before withdrawal)

Write to [email protected] – we will respond within 30 days. You may also lodge a complaint with the Valstybinė duomenų apsaugos inspekcija (State Data Protection Inspectorate, vdai.lrv.lt).

9. Data security

We use SSL encryption, access control and protection against automated requests (Cloudflare Turnstile), and we limit who can see your data.

10. Changes to this policy

We will publish any changes on this page and update the date at the top.