Privacy Policy

Updated 20 September 2026 · Version 2026-09-20-v4

Data controller

Rūta Sabonienė, a self-employed operator trading as LAIKO TERPĖ. Business and correspondence address: Rotušės a. 1-8, Kaunas, Lithuania. Contact: laikoterpe@gmail.com, +370 683 14737.

Enquiries and registrations

We process the registering adult’s name, email, phone number, chosen activity and date, optional comments, submission time, source page, language and registration status. Children’s registrations also require the child’s first name, age and a choice about photography, filming and publication. The adult may optionally provide practical information needed to organise the activity safely and appropriately, such as allergies, individual needs or required support. We use these details to respond, arrange services, reserve places and organise activities. These forms are for adults; a parent or guardian registers a child.

Adult contact and booking information is processed to take steps at your request before entering into a contract and to perform it (GDPR Article 6(1)(b)). Children’s names, ages and necessary practical information are processed in our legitimate interest in safely delivering an age-appropriate activity suited to individual needs (Article 6(1)(f)), considering the child’s interests and limiting collection to what is necessary. The photography, filming and publication choice is processed on the basis of consent (Article 6(1)(a)); refusal does not affect participation and consent may be withdrawn at any time. General enquiries unrelated to a booking are handled in our legitimate interest in responding to people who contact us.

Required fields are necessary to process the form. Without them, you cannot submit it; you may contact us directly instead. Comments, additional practical information and marketing consent are optional. Do not include national identity numbers, diagnoses or excessive health information; provide only what is relevant to safe participation. Receipt of a form does not itself confirm a place.

Feedback and suggestions

The feedback form records the selected feedback type, the experience visited and the message. Providing a name and email is optional unless you ask for a reply, in which case an email address is required. We process this information in our legitimate interest in improving our activities, reviewing comments and responding to requests (GDPR Article 6(1)(f)).

We publish feedback only when you tick the separate consent box (Article 6(1)(a)). Even with consent, we will not publish your name or other identifying information without separate confirmation. You may withdraw publication consent at any time by emailing laikoterpe@gmail.com; withdrawal does not affect earlier lawful processing.

News and offers by email and/or phone

Marketing is based only on your separate, voluntary consent (Article 6(1)(a)). The checkbox is not preselected, and declining does not affect registration or service. We use the adult’s full name, email and phone number, consent status, timestamp, wording version and withdrawal information. Children’s details and registration comments are excluded from the marketing contact export.

You may withdraw consent free of charge at any time by emailing laikoterpe@gmail.com or following the unsubscribe link in marketing emails. This does not affect previous lawful processing or your service. Leaving the checkbox unchecked on a new booking does not by itself withdraw earlier consent; please use the withdrawal methods above.

Retention

• Enquiries, registrations and feedback records: up to 12 months from submission.
• Children’s names, ages, additional practical information and booking comments: up to 90 days after the selected activity ends. Additional age/group details and comments in general enquiries: up to 90 days from submission.
• The photography, filming and publication choice: up to three years after the activity or until consent is withdrawn, whichever comes first, so that we can demonstrate whether material was used lawfully.
• Marketing contacts: until withdrawal, and no longer than two years after the latest consent. Evidence of consent and withdrawal: up to three years from the relevant event, based on our legitimate interest in demonstrating lawful processing.
• Pseudonymous abuse-prevention counters: up to two hours. The sign-in provider handles administrator authentication information under its own terms.

Expiry checks run when forms or administration are used. Contracts, accounting documents and information required for a specific dispute, if applicable, are handled separately for legally required periods or as necessary to resolve the dispute (Article 6(1)(c) or (f)).

Recipients and providers

The controller and authorised activity organisers may access information only as needed. The website and database use OpenAI Sites infrastructure and Cloudflare D1. Administrator sign-in uses Sign in with ChatGPT. Email correspondence uses Google Gmail. Information may be disclosed to authorities where required by law. We do not sell personal data.

Automatic registration and enquiry notifications are sent using Resend. The provider receives the recipient’s email address and the message content required to deliver the notification.

Infrastructure providers may process information outside the European Economic Area. Such transfers must rely on an adequacy decision or GDPR safeguards, such as European Commission standard contractual clauses. Contact the controller for details or a copy of the safeguards applying to the relevant processing.

Website operation and cookies

Infrastructure processes technical request information, including IP addresses, request times and page addresses, to provide a secure connection and protect forms. Form protection converts the IP address to a short-lived pseudonymous identifier, never used for marketing. The basis is our legitimate interest in secure operation (Article 6(1)(f)).

We have not installed advertising trackers or analytics cookies in this version. Hosting and sign-in infrastructure may use necessary security and authentication cookies. Any future optional analytics or advertising cookies will require the relevant consent before activation. Social and map links open third-party websites with their own privacy policies.

When purchasing an e-gift, sessionStorage stores the order identifier “laikoterpeGiftOrder” for the payment flow. It is not used for analytics or advertising and is removed when the browser tab session ends.

Your rights

You may request access, correction, erasure, restriction and portability where applicable, object to legitimate-interest processing, and withdraw consent. Some rights may be limited where information is required by law or for legal claims. We do not carry out profiling or solely automated decisions that produce legal or similarly significant effects.

Email requests to laikoterpe@gmail.com. We may proportionately verify your identity. We respond within one month; if a lawful extension is needed for a complex request, we explain it within the first month. You may also complain to the Lithuanian State Data Protection Inspectorate.