Privacy Policy

Last updated: 7 May 2026

1. Who is the data controller?

Vila Valentino (hereinafter “we”, “us”, “our”) is a private villa rental property located at Kaštonų St., Kliepšiai, Žemaitkiemis eldership, Ukmergė district, 20371 Lithuania. Contact email: info@vilavalentino.lt. Phone: +370 614 44949.

2. What personal data do we collect?

When you submit a booking enquiry on vilavalentino.lt, we collect:

  • Full name
  • Email address
  • Phone number
  • Requested check-in and check-out dates
  • Number of guests and type of stay
  • Optional message

We also automatically collect technical data: IP address, browser type, and page visit statistics (see the “Analytics and cookies” section below).

3. Legal basis and purposes for processing

  • Performance of a contract (GDPR Art. 6(1)(b)): processing your enquiry, contacting you about availability and pricing.
  • Legitimate interests (GDPR Art. 6(1)(f)): website performance analysis, security.
  • Consent (GDPR Art. 6(1)(a)): analytics and marketing cookies — only with your consent via the cookie settings panel.

4. Data retention

Enquiry data is retained for 2 years from the date of last contact. Accounting records are kept for 10 years in accordance with Lithuanian law. Analytics logs are kept for 14 days (see the “Data Retention” page).

5. Data processors (sub-processors)

Your data may be processed by the following trusted third-party providers:

  • Hostinger International Ltd. — server hosting and domain services.
  • Cloudflare, Inc. — content delivery network, DDoS protection.
  • Google LLC — Google Analytics 4 site statistics; Google Maps (when analytics cookies are accepted).
  • PostHog Inc. (EU cloud infrastructure) — product analytics, session recording, heatmaps. Data stored on EU servers (eu.posthog.com). Session recordings begin only from the moment you accept Analytics consent — not before. The enquiry form and legal text regions are completely excluded from session recordings.
  • Meta Platforms Ireland Ltd. — Meta Pixel and Conversions API (when marketing cookies are accepted). Email and phone are transmitted only as hashed values (SHA-256); unhashed personal data is never shared.
  • Resend / SMTP service — email delivery to you and to the owner after an enquiry is submitted.

6. Session recordings and DSARs

If you accept analytics cookies, we may record an anonymised session replay using PostHog. The enquiry form and legal text regions are completely excluded from recordings. To delete a recorded session, contact us at info@vilavalentino.lt and include the ph_*cookie value from your browser. We will use PostHog's GDPR deletion API to purge the session data.

7. Your rights

Under the GDPR you have the right to:

  • access the personal data we hold about you;
  • request correction of inaccurate data;
  • request erasure of your data (“right to be forgotten”);
  • restrict processing;
  • data portability;
  • object to processing;
  • withdraw consent at any time (this does not affect processing carried out before withdrawal).

To exercise your rights, contact us at info@vilavalentino.lt. You also have the right to lodge a complaint with the Lithuanian State Data Protection Inspectorate (vdai.lrv.lt).

8. Cookies

For detailed information about cookies, please see our Cookie Policy.

9. Changes to this policy

We will notify you of material changes by publishing an updated version on this page. We recommend reviewing this policy periodically.