Privacy Policy
1. General Information
This privacy policy explains how the website “Gintarinė nuoma” (hereinafter – the Website) collects, uses, and stores personal data.
Personal Data Controller:
- Evaldas Pocius
- Individual Activity Certificate No. 939308
- VAT number LT10017930913
- Rambyno str. 26A Palanga
- Email for privacy inquiries: gintarinekopa@gmail.com
- +370 (677) 41 714
2. Website
- Website name: Gintarinė nuoma
- Website address: https://www.gintarinenuoma.lt/
- The website is intended for providing seaside apartment rental services, receiving inquiries, and managing bookings.
3. What personal data we collect
The following personal data may be collected on the website:
- Name and surname
- Email adress
- Phone number
- Content of inquiries
- Order information
- Payment information (processed through third parties)
Data is collected through:
- Contact form
- Apartment booking system HBook (Maestral)
- Payment system Paysera
4. Purposes of personal data processing
Personal data is processed for the following purposes:
- For managing inquiries
- For providing services
- For order fulfillment and booking management
- For marketing and newsletter distribution
- For website operation and traffic analysis
5. Legal basis for data processing
Personal data is processed based on the following legal grounds:
- Performance of a contract – for order processing and booking management;
- Consent – for newsletters and marketing;
- Legitimate interests – for website operation and traffic analysis;
- Legal obligations – where required by applicable law.
6. Third parties
Personal data may be shared with the following data processors:
- To the website hosting service provider – Hostinger
- To the booking system – HBook (Maestral)
- To website creation and optimization tools – Elementor, Rank Math
- To website analytics – Google Analytics
- To email services and newsletters – Mailchimp
Some service providers may process data outside the European Union, but only in compliance with GDPR requirements.
7. Storage of personal data
Personal data is stored:
Data is stored no longer than necessary to achieve the specified purposes or as required by law.
8. Data subject rights
You have the right to:
- to obtain information about the personal data being processed;
- to request the correction of inaccurate data;
- to request the deletion of data ("right to be forgotten");
- to restrict the processing of data;
- to transfer data to another controller;
- to withdraw your consent at any time;
- to file a complaint with the State Data Protection Inspectorate (VDAI).
9. Cookies
10. Final provisions
The privacy policy may be updated. The updated version is always published on this Website. We recommend reviewing this policy periodically.
Chatbot (AI assistant)
Our website runs an AI-powered chatbot that helps you find available apartments, prices and answers to common questions. Replies to e-mails are prepared in the same way.
What we process
- The text you write in the chat or e-mail and the assistant's replies.
- The dates you choose, the number of guests and the selected language.
- Technical data: a temporary conversation identifier and a cryptographic hash of your IP address (used only to prevent abuse; the IP address itself is not stored).
- If you fill in the contact form: your name, phone number and/or e-mail address, your message and the conversation transcript.
Why we process it
- To answer your questions and make you an offer – our legitimate interest in providing customer service (GDPR Art. 6(1)(f)), and, once you send an enquiry, steps taken at your request before entering into a contract (Art. 6(1)(b)).
- To protect the system from abuse – legitimate interest (Art. 6(1)(f)).
Who receives it
- Anthropic PBC (USA) – the conversation text is sent to the Claude AI service to generate a reply. Anthropic acts as a data processor under a data processing agreement with Standard Contractual Clauses. Anthropic does not use this data to train AI models and deletes it within 30 days.
- Our hosting provider – the data is stored in the website database.
- Our e-mail provider – if you fill in the contact form, the enquiry is sent to us by e-mail.
How long we keep it
- The conversation on our server – 2 hours after the last message.
- The conversation in your browser – until you close the browser tab.
- Contact form enquiries with the transcript – 12 months, then deleted automatically.
- Abuse-protection records – up to 12 minutes.
Good to know
- The assistant makes no decisions with legal effect for you. A booking is always confirmed by a person.
- Please do not type payment card details, national ID numbers, health or other sensitive information into the chat – we neither need nor process it.
- Information given by the assistant is indicative; the final price and conditions are confirmed by the booking system or by our staff.
Statistics and browser storage
We collect only aggregate, non-personal counts: how many times the chat was opened, how many questions were asked, how many times "Book" was clicked. These are not linked to an individual visitor and are kept for 12 months.
The chatbot stores the following in your browser:
| Entry | Purpose | Duration |
|---|---|---|
| gnc_session, gnc_items | so the conversation is not lost while you browse the site | until the browser tab is closed |
| gnc_opened, gnc_pill | so the greeting is not shown every time | until you clear your browser data |
These entries are necessary for the chat to work and are not used for advertising or tracking.
Social media
We maintain Facebook and Instagram accounts where we publish information about our apartments and offers. Some posts are prepared automatically from our own website data; a member of staff reviews them before they are published.
When you visit our page, comment or send a message, your data is processed by Meta Platforms Ireland Ltd. under its own terms. For page visitor statistics ("Page Insights") we and Meta act as joint controllers.
Please do not post personal or payment details in comments or messages – for bookings use the website, e-mail or telephone.
Links we share on social media carry UTM tags showing which network you came from. They are not linked to your identity.
Your rights
You have the right to access your data, to have it corrected or erased, to restrict processing, to object to processing based on legitimate interest, and to lodge a complaint with the State Data Protection Inspectorate of Lithuania. Contact us: gintarinekopa@gmail.com, +370 677 41714. How to request deletion is described here.