Privacy policy

This website is operated by the following company, which is also the controller of your personal data as defined in the General Data Protection Regulation (GDPR):

• UAB ArtGlacio
• Company code: 303131399
• VAT code: LT100008019714
• Address: Pilviškių g. 48, Vilkaviškis LT-70150, Lithuania
• Email: info@artglacio.lt

You can write to us at that address about anything covered by this policy. We have not appointed a separate data protection officer — requests are handled by the company management.

We only process what you submit through the website forms yourself, plus the technical data without which the website could not run.

We do not collect special categories of data (health, religious or political beliefs and the like) and never ask for them in the forms. We do not make automated decisions about you and do not carry out profiling.

We do not send newsletters or other marketing unless we ask for and receive your separate consent. You can withdraw consent at any time — withdrawing it does not make the processing carried out before it unlawful.

• Visit booking requests — 12 months after the correspondence ends.
• B2B enquiries and correspondence — 2 years after the last contact, or for as long as the cooperation lasts.
• Accounting records — 10 years, as required by law.
• Server logs with technical data — up to 6 months.
• The record of your cookie consent — 6 months, after which we ask again.

Once the period is over, the data is destroyed or irreversibly anonymised so that you can no longer be identified from it.

We never sell your data or pass it to third parties for marketing. Access is limited to our own staff who need it for their work and to vetted service providers acting on our instructions (data processors):

• website hosting and technical maintenance providers;
• the email provider through which we receive form submissions;
• the email marketing platform (Omnisend) we send newsletters through, which also measures website visits;
• an accounting service provider, if we enter into a contract with you.

Data is processed within the European Economic Area (EEA), except for our email marketing platform: Omnisend is operated by a company established in the United States, so the data entrusted to it (your email address and the website activity linked to it) is transferred outside the EEA. That transfer is covered by the Standard Contractual Clauses approved by the European Commission together with the additional safeguards applied by the provider. Any other transfer outside the EEA would likewise only be made with the safeguards set out in Chapter V of the GDPR in place. We may also disclose data to competent authorities where the law requires it.

Cookies are small text files a website stores on your device so it can recognise your browser on your next visit. We use strictly necessary cookies without separate consent, because the website would not work without them. Everything else is only stored once you have given consent through the cookie banner.

You can change or withdraw your consent at any time — open the cookie settings and save a new choice. You can also delete or block cookies in your browser settings, though some parts of the website may then stop working properly.

Cookie settings Cookie settings

Under the GDPR you have the right to:

• know whether we process your data and receive a copy of it;
• have inaccurate or incomplete data corrected;
• have your data erased once it is no longer needed for the purpose it was collected for;
• restrict the processing while we look into your request;
• object to processing carried out on the basis of legitimate interest;
• transfer your data to another controller where the processing is based on consent or a contract and is carried out automatically;
• withdraw your consent at any time;
• lodge a complaint with the supervisory authority.

Write to us at info@artglacio.lt and tell us which right you want to exercise. We will reply no later than one month after receiving the request; if the request is complex, we may extend that by a further two months and will let you know. To avoid disclosing data to the wrong person, we may ask you to confirm your identity.

If our answer does not satisfy you, you can contact the State Data Protection Inspectorate of Lithuania: L. Sapiegos g. 17, 10312 Vilnius, tel. +370 5 271 2804, email ada@ada.lt, vdai.lrv.lt.

The website runs over encrypted HTTPS, so form data only travels through an encrypted channel. Access to the submissions we receive follows the "only as much as the work requires" principle, and our systems and their backups are updated regularly. No measure is absolute, so please do not send us particularly sensitive information in free-form fields.

The website is not intended for anyone under 14 — that is the age from which a person in Lithuania can consent to the processing of their data for information society services on their own. If we notice that a request came from someone younger without a guardian's consent, we will delete the data.

We may update this policy — for instance when the website changes or the law does. The current version is always on this page, with its date shown at the top. We will announce any significant changes on the website.

For anything about personal data, cookies or this policy, write to us:

info@artglacio.lt