Privacy
Data controller
Evaldas Bajoras. Privacy contact: bajoras.giveaway@gmail.com.
Data and purposes
We process nickname, email, language, acceptance and policy-version evidence, verification and entry status, entry number and necessary security records. Winners additionally have claim and fulfillment records. Registration does not request a surname, password, identity-document copy or social-account credentials.
Lawful basis
Data is used to perform giveaway terms, protect the giveaway under legitimate interests and meet applicable legal duties. Accepting rules is not marketing consent. No marketing emails are sent.
Recipients and transfers
Authorized organizer staff and processors may access necessary data: Supabase (EU-region database and admin authentication), Vercel (hosting), Resend (email) and Cloudflare Turnstile (bot protection). Required processing agreements and safeguards for any transfers outside the EEA must be checked before launch.
Retention and erasure
Giveaway participant contact data is manually cleared no later than 90 calendar days after all prizes are fulfilled and complaints resolved. Unverified records are reviewed after 7 days and temporary security records no later than 30 days; unnecessary data is removed. Records demonstrably needed for a dispute or legal obligation may be kept until that specific reason ends. Public winner data and provider history are reviewed as part of cleanup. Backups are kept for up to 30 days and are not used for everyday website operation. Previously fulfilled erasure requests must be reapplied when restoring a backup. This registration does not create a permanent community account and is not used for a future points system.
Your rights
You may request access, correction, erasure, restriction and other applicable rights through your personal page or the organizer contact. You can withdraw before roster freeze. Requests receive a response within one month of receipt. If a complex request requires more time, you are informed of the justified extension within that first month. Any retention exception is assessed individually. You may also complain to the Lithuanian State Data Protection Inspectorate.
Publication and storage
Only winner nicknames, entry numbers and prizes are published. Emails and prize codes remain private. Only essential security/session cookies are used. An unfinished form draft stays only in the same tab’s sessionStorage and is cleared after a successful submission. No advertising tracking or source-attribution analytics are used.