Privacy Policy

This Privacy Policy describes how veltrworks collects, uses, and protects your personal information when you use our website and services related to Old Town food tasting walks in Vilnius. We are committed to protecting your privacy and handling your data responsibly. We believe transparency about our data practices is essential to building trust with our visitors and customers.

Who We Are

We operate food tasting walking tours in Vilnius Old Town, specializing in local cheese and craft pastry experiences. When you interact with our website, book a tour, or contact us with inquiries, we collect and process certain information about you. We act as the data controller for all personal information collected through our services, and we take our responsibility seriously.

Information We Collect

We collect information in several ways:

• Contact Information: When you contact us via email or phone, we collect your name, email address, phone number, and message content.
• Booking Information: When you book a tour, we collect your name, contact details, number of participants, date preferences, and any dietary restrictions or special requests.
• Website Usage: We collect information about how you interact with our website, including pages visited, time spent, and referral sources through analytics.
• Cookies: We use cookies and similar technologies to enhance your browsing experience and understand how our site is used.
• Payment Information: If you make a payment, payment processing is handled by secure third-party providers; we do not store full payment card details.

Legal Basis for Processing

We process your personal information based on the following legal grounds:

• Consent: When you contact us or subscribe to communications, we process your data based on your explicit consent.
• Legitimate Interest: We analyze website usage and customer behavior to improve our services and provide better experiences.
• Contract Performance: When you book a tour, we process your information to fulfill our booking and tour delivery obligations.
• Legal Obligation: We may process data to comply with tax laws, financial regulations, and other legal requirements in Lithuania.

How We Use Your Information

We use your personal information for specific purposes:

• Processing and confirming tour bookings and reservations
• Sending booking confirmations, reminders, and tour information
• Responding to inquiries and customer support requests
• Improving our website functionality and user experience
• Analyzing usage patterns to better understand customer needs
• Complying with legal and tax obligations in Lithuania
• Sending marketing communications if you have opted in to receive them

We do not use your information for automated decision-making or profiling that could have legal effects on you.

Data Retention

We retain your personal information only for as long as necessary for the purposes outlined in this policy:

• Contact Form Messages: Up to 24 months after your last interaction with us
• Booking Information: Up to 36 months to maintain tour history and handle potential disputes or follow-up inquiries
• Analytics and Cookie Data: Up to 14 months; we regularly purge older data
• Website Server Logs: Up to 12 months for security and troubleshooting purposes
• Payment Records: Up to 7 years as required by Lithuanian tax and accounting regulations

After the retention period expires, we securely delete or anonymize your data. If you request deletion of your information, we will remove it within 30 days unless we are required to retain it for legal compliance.

Your Rights

Under data protection regulations, you have the following rights regarding your personal information:

• Right of Access: You can request a copy of the personal information we hold about you.
• Right to Rectification: You can request correction of inaccurate or incomplete data.
• Right to Erasure: You can request deletion of your personal information, subject to legal obligations.
• Right to Restrict Processing: You can request that we limit how we use your data in certain circumstances.
• Right to Data Portability: You can request your data in a structured, commonly used format.
• Right to Object: You can object to processing for marketing or legitimate interest purposes.
• Right to Withdraw Consent: If processing is based on consent, you can withdraw it at any time.

To exercise any of these rights, please contact us using the information provided in the Contact Us section below.

Cookies and Tracking

We use cookies to improve your browsing experience and gather analytics about website usage. Cookies are small files stored on your device that help us remember your preferences and understand how you interact with our site. You can control cookie settings through your browser preferences; however, disabling cookies may limit some website functionality. We use both session cookies (temporary) and persistent cookies (remain longer). Analytics cookies help us understand visitor behavior and optimize our services. We do not use tracking cookies for third-party advertising purposes. For detailed information about our cookie practices, please refer to our separate Cookie Policy.

Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Our website uses secure HTTPS encryption for data transmission. Access to personal information is restricted to authorized personnel who need it to perform their duties. However, no method of data transmission over the internet is completely secure, and we cannot guarantee absolute security. We encourage you to use strong passwords and protect your account information.

Third-Party Sharing

We do not sell, trade, or rent your personal information to third parties. However, we may share your information in limited circumstances:

• With payment processors to handle tour payments securely
• With service providers who assist us in operating our website and delivering services
• If required by law, court order, or government authority
• To protect our legal rights, privacy, or safety

Any third parties we work with are bound by confidentiality agreements and are permitted to use your information only as necessary to provide services to us.

International Data Transfers

Your personal information is primarily stored and processed within Lithuania and the European Union. If we transfer data outside the EU/EEA, we implement appropriate safeguards such as Standard Contractual Clauses to ensure your information receives adequate protection equivalent to EU standards.

Your Supervisory Authority

You have the right to lodge a complaint with the data protection authority in Lithuania if you believe we have violated your privacy rights. The Lithuanian Data Protection Authority (VDPT) oversees data protection compliance and can investigate complaints about our data handling practices. You can contact them through their official website or submit a formal complaint if you believe your rights have been infringed.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by updating the "Last updated" date at the top of this page. We encourage you to review this policy periodically to stay informed about how we protect your information. Your continued use of our website and services after changes become effective constitutes your acceptance of the updated Privacy Policy.