Privacy Policy

Last updated: 22 September 2026

1. Data controller

Decks and stories, MB
Company code: 307594793
Address: Pramonės pr. 19-440, LT-51328 Kaunas, Lithuania
Director: Vilius Budžys
Contact email (privacy requests, data-subject rights, and general correspondence): decksandstories@gmail.com

2. What personal data we collect

We collect only the data you choose to send us through the website:

• Newsletter opt-in (homepage toast and optional checkbox on the submit page): email address. Stored in Resend Contacts / Segments. During a transitional period the same email may also be submitted to Formspree form ID mlglprvj as a backup channel that is being phased out.
• Mix / Event submission (forms on /submit/): artist or contact name, email, location, place of birth, birthday, Instagram / social handle, track pick, mix and photo links, story answers, quiz answers, consent checkbox values, and a honeypot field used only to detect bots. This data is processed by our Cloudflare Worker and sent in parallel to Resend (transactional email to us and a thank-you email to you) and Telegram (admin notification containing the submitted fields).
• Ask a Question (homepage form): name (optional), Instagram (optional), question text, and technical form metadata (section, source). Submitted to Formspree form ID mkoqabob. This form does not collect an email address.

We do not run Google Analytics, Meta Pixel, or Cloudflare Web Analytics on this site. YouTube and Instagram content is linked externally (target="_blank"); we do not embed third-party players that set cookies on page load.

3. Purposes and legal bases

• Newsletter: to send updates about episodes, studio sessions, and related news. Legal basis: consent (Art. 6(1)(a) GDPR). The newsletter checkbox is unchecked by default; joining via the toast requires an active submit action.
• Mix / Event submissions: to review submissions, communicate about possible publication or collaboration, and operate the Decks&Stories platform. Legal basis: steps prior to a contract / legitimate interest in evaluating artistic submissions and running the collective (Art. 6(1)(b) and/or Art. 6(1)(f) GDPR).
• Ask a Question: to consider community questions for future video content. Legal basis: consent through voluntary participation (Art. 6(1)(a) GDPR).

You may withdraw newsletter consent at any time via the unsubscribe link in our emails or by contacting us.

4. Recipients / processors (third parties)

We use service providers that process data on our behalf or as tools we operate. Some providers are established outside the EEA; data may therefore be processed outside the EU/EEA, subject to the safeguards those providers offer (e.g. Standard Contractual Clauses where applicable).

• Formspree (United States) — Ask a Question (mkoqabob, active); newsletter backup (mlglprvj, transitional / being phased out in favour of Resend).
• Resend (United States) — transactional emails for submissions; marketing Contacts, Segments, and Broadcasts for the newsletter. Open/click tracking for Broadcasts is not enabled on our domain at this time.
• Telegram (Telegram FZ-LLC; headquarters outside the EEA) — administrative notification of each mix/event submission, sent in parallel with Resend on every submission (not only as a fallback when email fails). Notifications include the submitted form fields.
• Cloudflare — website hosting and delivery infrastructure for decksandstories.com.

5. Retention

• Newsletter: we keep your email while you remain subscribed. After you unsubscribe (or ask us to delete your contact), we remove you from the active mailing list and delete the contact record within 1 month, unless a longer period is required to demonstrate compliance with your unsubscribe request.
• Mix / Event submissions: submission data processed via our Worker, Resend (transactional emails), and Telegram admin notifications is retained for up to 24 months from the submission date, then deleted or anonymised, unless we still need it for an ongoing collaboration with you or to establish / exercise / defend legal claims.
• Ask a Question: questions and optional name / Instagram handles submitted via Formspree are retained for up to 1 month, unless a question is selected for publication (in which case the published content may remain public on our channels).

You can request earlier deletion at decksandstories@gmail.com.

6. Your rights

Under the GDPR you may have the right to:

• access your personal data;
• rectify inaccurate data;
• erase data (“right to be forgotten”) where applicable;
• restrict or object to processing;
• data portability where applicable;
• withdraw consent at any time (without affecting prior lawful processing).

To exercise these rights, email decksandstories@gmail.com. We will respond within the timeframes required by law.

7. Cookies and local storage

Details of cookies and similar technologies (including first-party localStorage / sessionStorage) are described in our Cookie Policy. You can manage optional preferences via the cookie banner on this site.

8. Complaints

If you believe your data protection rights have been infringed, you may lodge a complaint with the Lithuanian supervisory authority — the State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspecija, VDAI): https://vdai.lrv.lt/.