{"id":3,"date":"2020-07-04T08:18:03","date_gmt":"2020-07-04T10:18:03","guid":{"rendered":"https:\/\/comfyrestlt.local\/?page_id=3"},"modified":"2026-03-31T09:34:24","modified_gmt":"2026-03-31T06:34:24","slug":"privatumo-politika","status":"publish","type":"page","link":"https:\/\/comfyrest.eu\/en\/privatumo-politika\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"

COMFYREST<\/b><\/p>\r\n

Last updated: 2026 03 20<\/span><\/i><\/p>\r\n

1. Data Controller<\/b><\/h4>\r\n

This Privacy Policy explains how we collect, use, store and protect your personal data when you use our website www.comfyrest.lt and accommodation services.<\/span><\/p>\r\n

Data Controller:<\/b><\/p>\r\n

UAB Limo Trading Company<\/b>
<\/span>Company code: 133114845<\/span>
<\/span>Registered address: Ievos Kalno g. 6-10, LT-93103 Neringa<\/span>
<\/span>VAT number: LT100001342215<\/span>
<\/span>Email <\/span>rest@comfyrest.lt<\/span><\/a>
<\/span>Phone: +37064569999<\/span><\/p>\r\n

If you have questions about the processing of your personal data, you may contact us at the email address above.<\/span><\/p>\r\n

2. What personal data we collect<\/b><\/h4>\r\n

We collect the following categories of personal data:<\/span><\/p>\r\n

2.1 Booking data<\/b><\/h5>\r\n

First and last name, email address, phone number, postal address (if provided), check-in and check-out dates, number of guests, selected property, special requests or preferences.<\/span><\/p>\r\n

2.2 Payment data<\/b><\/h5>\r\n

Payment method, transaction amount, transaction date and time, payment status. Payment card details (card number, expiry date, security code) are processed exclusively by Paysera \u2013 ComfyRest does not receive or store this data.<\/span><\/p>\r\n

2.3 Guest registration data (E.tourist)<\/b><\/h5>\r\n

Under Article 32(3) of the Law on Tourism of the Republic of Lithuania we are required to collect: first and last name; date of birth; the state that issued the identity document; number of accompanying minor children; place of residence (country and city or settlement); dates of arrival and departure; whether the tourist arrived through a tour operator; main purpose of travel (leisure, work, health, other).<\/span><\/p>\r\n

2.4 Communication data<\/b><\/h5>\r\n

Your correspondence with us by email, telephone or through the website contact form.<\/span><\/p>\r\n

2.5 Website usage data<\/b><\/h5>\r\n

IP address, browser type and version, operating system, pages visited, date and duration of visit, referral source. This data is collected via cookies and analytics tools (see section 9).<\/span><\/p>\r\n

3. Legal bases and purposes of data processing<\/b><\/h4>\r\n

We process your personal data on the following legal bases under Article 6 GDPR:<\/span><\/p>\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n
\r\n

Purpose<\/b><\/p>\r\n<\/td>\r\n

\r\n

Legal basis<\/b><\/p>\r\n<\/td>\r\n

\r\n

Data categories<\/b><\/p>\r\n<\/td>\r\n<\/tr>\r\n

\r\n

Fulfilment of booking and provision of accommodation services<\/span><\/p>\r\n<\/td>\r\n

\r\n

Performance of contract<\/span>
<\/span>(GDPR 6(1)(b))<\/span><\/p>\r\n<\/td>\r\n

\r\n

Booking data, payment data<\/span><\/p>\r\n<\/td>\r\n<\/tr>\r\n

\r\n

Guest registration in the E.tourist system<\/span><\/p>\r\n<\/td>\r\n

\r\n

Legal obligation<\/span>
<\/span>(GDPR 6(1)(c))<\/span><\/p>\r\n<\/td>\r\n

\r\n

Guest registration data<\/span><\/p>\r\n<\/td>\r\n<\/tr>\r\n

\r\n

Maintenance of accounting and tax records<\/span><\/p>\r\n<\/td>\r\n

\r\n

Legal obligation<\/span>
<\/span>(GDPR 6(1)(c))<\/span><\/p>\r\n<\/td>\r\n

\r\n

Booking data, payment data<\/span><\/p>\r\n<\/td>\r\n<\/tr>\r\n

\r\n

Communication regarding your booking (confirmations, reminders, property information)<\/span><\/p>\r\n<\/td>\r\n

\r\n

Legitimate interest<\/span>
<\/span>(GDPR 6(1)(f))<\/span><\/p>\r\n<\/td>\r\n

\r\n

Contact data<\/span><\/p>\r\n<\/td>\r\n<\/tr>\r\n

\r\n

Service quality improvement and fraud prevention<\/span><\/p>\r\n<\/td>\r\n

\r\n

Legitimate interest<\/span>
<\/span>(GDPR 6(1)(f))<\/span><\/p>\r\n<\/td>\r\n

\r\n

Booking, communication, website data<\/span><\/p>\r\n<\/td>\r\n<\/tr>\r\n

\r\n

Marketing communications (newsletters, offers)<\/span><\/p>\r\n<\/td>\r\n

\r\n

Consent<\/span>
<\/span>(GDPR 6(1)(a))<\/span><\/p>\r\n<\/td>\r\n

\r\n

Name, email<\/span><\/p>\r\n<\/td>\r\n<\/tr>\r\n

\r\n

Ensuring website operation and analytics<\/span><\/p>\r\n<\/td>\r\n

\r\n

Legitimate interest \/ Consent<\/span>
<\/span>(GDPR 6(1)(f) \/ 6(1)(a))<\/span><\/p>\r\n<\/td>\r\n

\r\n

Website usage data<\/span><\/p>\r\n<\/td>\r\n<\/tr>\r\n<\/tbody>\r\n<\/table>\r\n

\u00a0<\/h2>\r\n

4. Recipients and processors of data<\/b><\/h4>\r\n

Your personal data may be transferred to the following recipients:<\/span><\/p>\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n
\r\n

Recipient<\/b><\/p>\r\n<\/td>\r\n

\r\n

Purpose<\/b><\/p>\r\n<\/td>\r\n

\r\n

Role<\/b><\/p>\r\n<\/td>\r\n<\/tr>\r\n

\r\n

UAB \"Paysera LT\"<\/span>
<\/span>(electronic money institution licence No. 1, Bank of Lithuania)<\/span><\/p>\r\n<\/td>\r\n

\r\n

Payment processing<\/span><\/p>\r\n<\/td>\r\n

\r\n

Data processor on our behalf for payment processing purposes.<\/span>
<\/span>Independent data controller in respect of its own regulatory obligations (anti-money laundering, etc.).<\/span>
<\/span>Privacy policy: www.paysera.com<\/span><\/p>\r\n<\/td>\r\n<\/tr>\r\n

\r\n

National Tourism Information System (E.tourist \/ NTIS)<\/span><\/p>\r\n<\/td>\r\n

\r\n

Guest registration under the Tourism Act<\/span><\/p>\r\n<\/td>\r\n

\r\n

Public authority (data recipient under law)<\/span><\/p>\r\n<\/td>\r\n<\/tr>\r\n

\r\n

Municipal authorities<\/span><\/p>\r\n<\/td>\r\n

\r\n

Tourist tax administration<\/span><\/p>\r\n<\/td>\r\n

\r\n

Public authority<\/span><\/p>\r\n<\/td>\r\n<\/tr>\r\n

\r\n

Accounting service provider<\/span><\/p>\r\n<\/td>\r\n

\r\n

Bookkeeping and tax filing<\/span><\/p>\r\n<\/td>\r\n

\r\n

Data processor<\/span><\/p>\r\n<\/td>\r\n<\/tr>\r\n

\r\n

Website hosting and IT service providers<\/span><\/p>\r\n<\/td>\r\n

\r\n

Website operation, email sending<\/span><\/p>\r\n<\/td>\r\n

\r\n

Data processors<\/span><\/p>\r\n<\/td>\r\n<\/tr>\r\n

\r\n

Law enforcement authorities<\/span><\/p>\r\n<\/td>\r\n

\r\n

Only where required by law or court order<\/span><\/p>\r\n<\/td>\r\n

\r\n

Data recipients under law<\/span><\/p>\r\n<\/td>\r\n<\/tr>\r\n<\/tbody>\r\n<\/table>\r\n

\u00a0<\/h2>\r\n

We have concluded data processing agreements with all data processors in accordance with Article 28 GDPR. We do not transfer your personal data to third parties for marketing purposes without your explicit consent.<\/span><\/p>\r\n

5. Transfer of data outside the EEA<\/b><\/h4>\r\n

Your personal data is processed primarily within the European Economic Area (EEA). If data is transferred outside the EEA for technical reasons (e.g. cloud service providers), we ensure that appropriate safeguards are in place:<\/span><\/p>\r\n

    \r\n
  • European Commission adequacy decision (GDPR Art. 45);<\/span><\/li>\r\n
  • Standard contractual clauses approved by the European Commission (GDPR Art. 46(2)(c));<\/span><\/li>\r\n
  • Other appropriate safeguards under the requirements of Chapter V GDPR.<\/span><\/li>\r\n<\/ul>\r\n

    You may obtain information about the specific safeguards applied by contacting us at the email address above.<\/span><\/p>\r\n

    6. Data retention periods<\/b><\/h4>\r\n

    We retain your personal data only for as long as necessary to achieve the relevant purpose:<\/span><\/p>\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n
    \r\n

    Data category<\/b><\/p>\r\n<\/td>\r\n

    		\r\n

    Retention period<\/b><\/p>\r\n<\/td>\r\n

    		\r\n

    Basis<\/b><\/p>\r\n<\/td>\r\n<\/tr>\r\n

    \r\n

    Booking and contract data<\/span><\/p>\r\n<\/td>\r\n

    		\r\n

    10 years from end of contract<\/span><\/p>\r\n<\/td>\r\n

    		\r\n

    Civil Code of the Republic of Lithuania (limitation period) and accounting law<\/span><\/p>\r\n<\/td>\r\n<\/tr>\r\n

    \r\n

    Accounting and payment documents<\/span><\/p>\r\n<\/td>\r\n

    		\r\n

    10 years<\/span><\/p>\r\n<\/td>\r\n

    		\r\n

    Law on Accounting of the Republic of Lithuania, Law on Tax Administration<\/span><\/p>\r\n<\/td>\r\n<\/tr>\r\n

    \r\n

    Guest registration data (E.tourist)<\/span><\/p>\r\n<\/td>\r\n

    		\r\n

    As per NTIS rules (data transmitted to NTIS)<\/span><\/p>\r\n<\/td>\r\n

    		\r\n

    Law on Tourism of the Republic of Lithuania<\/span><\/p>\r\n<\/td>\r\n<\/tr>\r\n

    \r\n

    Communication data (correspondence)<\/span><\/p>\r\n<\/td>\r\n

    		\r\n

    3 years from last communication<\/span><\/p>\r\n<\/td>\r\n

    		\r\n

    Legitimate interest (dispute resolution)<\/span><\/p>\r\n<\/td>\r\n<\/tr>\r\n

    \r\n

    Marketing consents and communications<\/span><\/p>\r\n<\/td>\r\n

    		\r\n

    Until consent is withdrawn<\/span><\/p>\r\n<\/td>\r\n

    		\r\n

    Consent<\/span><\/p>\r\n<\/td>\r\n<\/tr>\r\n

    \r\n

    Website analytics data<\/span><\/p>\r\n<\/td>\r\n

    		\r\n

    Up to 26 months<\/span><\/p>\r\n<\/td>\r\n

    		\r\n

    Legitimate interest \/ Consent<\/span><\/p>\r\n<\/td>\r\n<\/tr>\r\n<\/tbody>\r\n<\/table>\r\n

    \u00a0<\/h2>\r\n

    Upon expiry of the retention period, your personal data is deleted or anonymised. If data must be retained longer due to legal disputes or court proceedings, the retention period may be extended until the dispute is resolved.<\/span><\/p>\r\n

    7. Your rights as a data subject<\/b><\/h4>\r\n

    Under the GDPR you have the following rights:<\/span><\/p>\r\n

    Right to be informed. <\/b>You have the right to be informed about the processing of your personal data. This Privacy Policy fulfils this right.<\/span><\/p>\r\n

    Right of access. <\/b>You may obtain confirmation of whether we process your personal data and receive a copy of it (GDPR Art. 15).<\/span><\/p>\r\n

    Right to rectification. <\/b>You may request correction of inaccurate or completion of incomplete personal data (GDPR Art. 16).<\/span><\/p>\r\n

    Right to erasure (\"right to be forgotten\"). <\/b>You may request deletion of your personal data when it is no longer necessary for the purpose for which it was collected, or when you withdraw consent (GDPR Art. 17). This right may be limited where we are required to retain data by law.<\/span><\/p>\r\n

    Right to restriction of processing. <\/b>You may request restriction of the processing of your data in certain circumstances (GDPR Art. 18).<\/span><\/p>\r\n

    Right to data portability. <\/b>You may receive personal data you have provided in a structured, commonly used and machine-readable format and transmit it to another controller (GDPR Art. 20).<\/span><\/p>\r\n

    Right to object. <\/b>You may object to the processing of personal data based on legitimate interest (GDPR Art. 21). Where data is processed for marketing purposes, the right to object is absolute.<\/span><\/p>\r\n

    Right to withdraw consent. <\/b>Where processing is based on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.<\/span><\/p>\r\n

    Right to lodge a complaint. <\/b>If you believe your rights are being violated, you may lodge a complaint with the State Data Protection Inspectorate (SDPI).<\/span><\/p>\r\n

    How to exercise your rights<\/b><\/h5>\r\n

    You may submit requests to exercise your rights by email to rest@comfyrest.lt. We will respond within 30 calendar days of receiving the request. In exceptional cases where the request is particularly complex, the period may be extended by a further 60 days, of which we will inform you.<\/span><\/p>\r\n

    To protect your data, we may ask you to verify your identity before fulfilling the request.<\/span><\/p>\r\n

    8. Payment processing through Paysera<\/b><\/h4>\r\n

    Payments for bookings are processed by UAB \"Paysera LT\" (electronic money institution licence No. 1, issued by the Bank of Lithuania).<\/span><\/p>\r\n

    Paysera as data processor: <\/b>for payment processing purposes, Paysera acts as a data processor on our behalf (as data controller). A data processing agreement has been concluded with Paysera in accordance with Article 28 GDPR. Paysera processes only the data necessary to execute the payment transaction.<\/span><\/p>\r\n

    Paysera as independent data controller: <\/b>due to its own regulatory obligations (anti-money laundering, payment services regulation, etc.), Paysera also processes certain data about you as an independent data controller under GDPR Art. 6(1)(c). This processing is governed by Paysera's privacy policy: www.paysera.com.<\/span><\/p>\r\n

    ComfyRest does not receive or store:<\/b> your payment card number, expiry date or security code. All card data is processed directly in Paysera's systems, which comply with PCI DSS security standards.<\/span><\/p>\r\n

    9. Cookies<\/b><\/h4>\r\n

    Our website uses cookies \u2013 small text files stored on your device. Cookies help ensure the website functions correctly and improve your user experience.<\/span><\/p>\r\n

    9.1 Cookie categories<\/b><\/h5>\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n
    \r\n

    Category<\/b><\/p>\r\n<\/td>\r\n

    		\r\n

    Purpose<\/b><\/p>\r\n<\/td>\r\n

    		\r\n

    Consent<\/b><\/p>\r\n<\/td>\r\n<\/tr>\r\n

    \r\n

    Essential cookies<\/span><\/p>\r\n<\/td>\r\n

    		\r\n

    Website operation, security, session management, remembering cookie preferences<\/span><\/p>\r\n<\/td>\r\n

    		\r\n

    Not required (legitimate interest)<\/span><\/p>\r\n<\/td>\r\n<\/tr>\r\n

    \r\n

    Functional cookies<\/span><\/p>\r\n<\/td>\r\n

    		\r\n

    Remembering your preferences (language, region)<\/span><\/p>\r\n<\/td>\r\n

    		\r\n

    Consent<\/span><\/p>\r\n<\/td>\r\n<\/tr>\r\n

    \r\n

    Analytical cookies<\/span><\/p>\r\n<\/td>\r\n

    		\r\n

    Website traffic statistics, usage analysis (e.g. Google Analytics)<\/span><\/p>\r\n<\/td>\r\n

    		\r\n

    Consent<\/span><\/p>\r\n<\/td>\r\n<\/tr>\r\n

    \r\n

    Marketing cookies<\/span><\/p>\r\n<\/td>\r\n

    		\r\n

    Targeted advertising and service offers<\/span><\/p>\r\n<\/td>\r\n

    		\r\n

    Consent<\/span><\/p>\r\n<\/td>\r\n<\/tr>\r\n<\/tbody>\r\n<\/table>\r\n

    \u00a0<\/h2>\r\n

    9.2 Cookie management<\/b><\/h5>\r\n

    When you first visit the website, you will see a cookie consent banner where you can choose which cookie categories you consent to. You may change your preferences at any time via the \"Cookie settings\" link in the website footer.<\/span><\/p>\r\n

    You can also manage cookies in your browser settings. Please note that disabling essential cookies may cause some website features to not work properly.<\/span><\/p>\r\n

    10. Data security<\/b><\/h4>\r\n

    We apply appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration or destruction:<\/span><\/p>\r\n