lt/en

Privacy

Privacy Policy

How we handle your personal data.

Privacy Policy

UAB "RevooDEMO" (test / sample document — see note at the end of the document) Last updated: August 10, 2026

  1. General Provisions 1.1. This Privacy Policy (hereinafter — the Policy) governs the main principles of personal data collection, processing, and storage applicable to visitors, guests, and customers (hereinafter — You, the Data Subject) of the online booking website revoo.revoo.lt (hereinafter — the Website). 1.2. We process your personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation, hereinafter — GDPR), the Law on Legal Protection of Personal Data of the Republic of Lithuania, and other applicable legal acts. 1.3. By using the Website and the services provided on it (making reservations, contacting us, subscriptions, etc.), you confirm that you have read and understood this Policy.

  2. Data Controller 2.1. Personal Data Controller:

Company: UAB "RevooDEMO" Company code: 124567 4989 VAT code: LT112457 8 Registered address: Birutės g. 1, Lithuania Contact email for data protection matters: privatumas@revoo.revoo.lt 2.2. If you have any questions regarding this Policy or the processing of your personal data, you can contact us using the details provided above.

  1. What Personal Data We Collect Depending on how you use the Website, we may collect the following categories of personal data:

Identification data: full name, date of birth (when necessary to provide accommodation services in accordance with legal requirements). Contact data: email address, phone number, mailing address. Reservation data: arrival and departure dates, number of guests, selected additional services, special requests, reservation number, and status. Legal entity data (if booking on behalf of a company): company name, code, VAT number, registered address. Payment data: payment amount, payment method, and status. We do not store bank card data ourselves — it is processed exclusively by certified payment service providers. Technical data: IP address, browser type, device information, time of visit to the Website, cookie data. Correspondence data: messages, inquiries, and feedback sent to us by you.

  1. Purposes and Legal Basis

  • Making and executing reservations, providing accommodation services

    • Legal basis (GDPR Art. 6): Performance of a contract (Art. 6(1)(b))

  • Payment administration, issuing invoices

    • Legal basis (GDPR Art. 6): Legal obligation (Art. 6(1)(c))

  • Contacting you regarding reservations (confirmations, reminders)

    • Legal basis (GDPR Art. 6): Performance of a contract (Art. 6(1)(b))

  • Customer service and responding to inquiries

    • Legal basis (GDPR Art. 6): Legitimate interest (Art. 6(1)(f))

  • Sending marketing communications (if consent was provided)

    • Legal basis (GDPR Art. 6): Consent (Art. 6(1)(a))

  • Ensuring Website functionality, security, fraud prevention

    • Legal basis (GDPR Art. 6): Legitimate interest (Art. 6(1)(f))

  • Storage of accounting records

    • Legal basis (GDPR Art. 6): Legal obligation (Art. 6(1)(c))

  1. Data Retention Period 5.1. Reservation and related data are stored during the period of performance of the contract and for 3 years after the last contact — for the purpose of general statutory limitation periods for claims. 5.2. Accounting documents (invoices and related data) are stored for the period specified by legal acts — typically 10 years in Lithuania. 5.3. Data processed for marketing purposes is retained until you withdraw your consent, or for no longer than 2 years from your last activity. 5.4. Upon expiration of the retention period, the data is deleted or anonymized.

  2. Data Recipients 6.1. We may transfer your personal data to the following recipients (only to the extent necessary to provide the service):

Accommodation management (to fulfill the reserved service). Payment service providers (for payment processing). IT service and cloud infrastructure providers (for data storage and Website operation). Email distribution service providers (for sending notifications). Accounting service providers. State authorities when required by law. 6.2. We do not transfer data to third parties for marketing purposes without your separate consent. 6.3. Certain service providers may be located outside the European Economic Area (EEA). In such cases, we ensure that data transfers comply with GDPR requirements (e.g., by applying Standard Contractual Clauses approved by the European Commission).

  1. Cookies 7.1. The Website uses cookies to ensure its proper functioning, analyze traffic, and improve user experience. 7.2. We use the following categories of cookies:

Essential cookies — necessary for core Website functions (e.g., reservation process); cannot be disabled. Analytical cookies — help us understand how visitors interact with the Website and improve it. Functional cookies — remember your preferences (e.g., language, currency). 7.3. You can change your cookie settings at any time in your browser settings or via the Website's cookie management panel.

  1. Your Rights As a data subject, you have the following rights under the GDPR:

The right to be informed about the processing of your personal data. The right of access to your processed personal data. The right to request rectification of inaccurate or incomplete data. The right to request erasure of data ("right to be forgotten") where legally applicable. The right to restrict data processing. The right to data portability. The right to object to data processing based on legitimate interest. The right to withdraw consent at any time if processing is based on consent (without affecting the lawfulness of processing prior to withdrawal). The right to lodge a complaint with a supervisory authority — in Lithuania, the State Data Protection Inspectorate (VDAI), www.vdai.lrv.lt. To exercise your rights, please contact us using the details provided in Section 2.

  1. Data Security 9.1. We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, loss, destruction, or disclosure — including data encryption in transit, access control, and regular system monitoring. 9.2. Access to personal data is restricted to authorized employees and service providers who require it to perform their duties and are bound by confidentiality obligations.

  2. Changes to the Policy 10.1. We reserve the right to amend this Policy. We will inform you of material changes by publishing the updated version on the Website, indicating the date of the update. 10.2. We recommend reviewing this Policy periodically.

  3. Contacts If you have questions about this Policy or wish to exercise your rights as a data subject:

UAB "RevooDEMO" Email: privatumas@revoo.revoo.lt Address: Birutės g. 1, Lithuania

Updated: 19 August 2026