Privacy Policy
Privacy Policy sets out how the company Hevytė, MB processes your personal data when you visit the website mindaugolaivai.lt, register, order and pay for boat rental services, contact us, or sign a rental agreement.
Effective from: 2026-01-01
1. Basic Definitions
1.1. Data Controller – Hevytė, MB, company code 307092545, address Trakų g. 43-1, Senųjų Trakų k., LT-21146 Trakų r.
1.2. Data Subject / Customer – a natural person whose data is processed (website visitor, customer).
1.3. Website / Online Store – the website mindaugolaivai.lt.
1.4. Services – boat rental services at Trakai Lake and related services.
1.5. Personal Data – any information relating to an identified or identifiable natural person.
1.6. Data Processing – any operation performed on personal data (collection, storage, use, transfer, etc.).
1.7. Cookies – small data files stored on your device while browsing the website.
2. General Provisions
2.1. When processing personal data, we comply with the EU General Data Protection Regulation (GDPR), the laws of the Republic of Lithuania, and this Privacy Policy.
2.2. We process personal data in accordance with the following principles: lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, and security.
2.3. The Privacy Policy may be updated. The latest version is always published on the website.
3. What Data We Collect and for What Purposes We Use It
3.1. For the purpose of order processing and service provision (conclusion and performance of a contract), we may process the following data:
first name, last name;
email address;
phone number;
order information (service date, time, selected service, additional notes);
payment information (payment method, payment confirmation, transaction identifiers);
IP address and technical data (when necessary for security and system operation).
Legal basis: performance of a contract (GDPR Article 6(1)(b)).
3.2. For the purpose of payment administration, payments are processed through MakeCommerce (Maksekeskus AS), and therefore the data necessary for payment processing is transferred to this service provider.
Legal basis: performance of a contract and legitimate interest in ensuring payments.
3.3. For the purpose of signing the contract and fulfilling legal obligations, the Customer additionally provides data for the rental agreement:
first name, last name;
date of birth;
residential address;
phone number;
email address.
This data is processed in order to conclude and administer the rental agreement, ensure the lawfulness of the service, resolve disputes, and address liability issues.
Legal basis: performance of a contract (GDPR Article 6(1)(b)) and legitimate interest (GDPR Article 6(1)(f)).
3.4. For the purpose of website operation, security, and statistics, we may process:
cookie data, device information, browsing data;
website usage statistics (e.g., via Google Analytics).
Legal basis: consent (when required) and/or legitimate interest in ensuring website quality.
3.5. For the purpose of direct marketing (newsletters, offers), your data may be processed only with explicit consent, if such functionality is used.
Consent may be withdrawn at any time.
4. How Long We Store Data
4.1. We store data no longer than necessary to achieve the purposes.
4.2. Order and contract data may be stored for as long as required for accounting, dispute resolution, and compliance with legal requirements (e.g., according to document retention periods).
4.3. Cookie storage periods depend on the type of cookie and the settings in your browser.
5. To Whom We May Transfer Your Data
5.1. Your data may be provided to:
payment service provider MakeCommerce (Maksekeskus AS) (for payments);
IT service providers (website hosting, maintenance, email services), to the extent necessary;
analytics services (e.g., Google Analytics), if used;
state institutions, when required by law.
5.2. We do not sell or provide data to third parties for marketing purposes without consent.
6. Your Rights
You have the right to:
access your data;
request correction of inaccurate data;
request deletion of data (where applicable);
restrict processing;
object to processing when it is based on legitimate interest;
data portability (where applicable);
lodge a complaint with the State Data Protection Inspectorate.
7. Cookies
7.1. The website uses cookies to function properly (e.g., for the WooCommerce cart functionality), as well as for statistics and convenience.
7.2. You can manage cookies in your browser settings, as well as through the cookie banner (if installed).
7.3. You can learn more about cookies at: allaboutcookies.org.
8. Contact Information
For questions regarding the processing of personal data, please contact:
Hevytė, MB
Address: Trakų g. 43-1, Senųjų Trakų k., LT-21146 Trakų r.
Company code: 307092545
Email: info@mindaugolaivai.lt
Phone: +370 609 82242
