Privacy policy
Effective from 4 November 2026
1. Who processes your data
The data controller is Edita Balčiūnienė, operating under a Lithuanian business certificate (verslo liudijimas), who runs the BEBRYNĖ prie Luodžio homestead, Dumblynės viensėdis 2, 32215 Salakas, Zarasai district, Lithuania. Email info@bebryne.lt, phone +370 5 241 6817.
2. What data we collect
- Booking data: your full name, phone number, email, the house you chose, arrival and departure dates, number of guests, extra services (sauna, hot tub), your chosen payment method, whether you are bringing a pet, your notes and any discount code.
- Payment data: invoices, payment amounts and dates. We do not collect bank card details on the website; payment is made by bank transfer.
- Gift voucher order data: your email, the amount, and the recipient’s name and delivery date that you give us.
- Chat data: the messages you write in the website chat “Bebrų komanda” and, if you ask us to pass your question on, your name and contact details.
- Technical data: IP address, browser type and the time of requests. These are seen automatically by the website hosting service, and we use them only for security (for example, to limit abuse).
We do not collect special categories of personal data. Please do not include such data in your notes either.
3. Why we process your data and on what basis
| Purpose | Legal basis (GDPR Art. 6(1)) |
|---|---|
| Receiving and confirming bookings, invoicing and contacting you about your stay | Entering into and performing a contract (point b) |
| Ordering and delivering gift vouchers | Performing a contract (point b) |
| Answering questions in the chat, by email and by phone | Steps taken at your request before entering into a contract (point b) or our legitimate interest in answering visitors (point f) |
| Accounting and taxes | Legal obligation (point c) |
| Website security and abuse prevention | Legitimate interest (point f) |
We do not send marketing emails. If we ever want to send news, we will first ask for your separate consent.
4. How long we keep your data
- Bookings and related correspondence: 2 years after your stay, so that we can answer questions or claims.
- Invoices and other accounting documents: as long as accounting law requires (usually 10 years).
- Enquiries and unconfirmed bookings: 12 months.
- Records of “Bebrų komanda” chats: up to 12 months.
- Technical logs: no longer than 30 days, unless needed to investigate a security incident.
5. Who we share your data with
We do not sell your data. It is processed only by service providers we use (data processors), under contracts and only on our instructions:
- Cloudflare, Inc.: website hosting and running the booking system.
- Supabase, Inc.: the database where bookings and enquiries are stored.
- Resend (Plus Five Five, Inc.): sending booking emails.
- Anthropic PBC: automatic replies in the “Bebrų komanda” chat (see section 7).
- Google LLC: the availability calendar sheet (it contains only booked dates, without your personal data).
- Esri and Open-Meteo: map images and the weather forecast on the website. They only see your IP address when your browser loads the map or the weather.
We may also provide data to public authorities when the law requires it, to the person keeping our accounts, and to the bank when needed for a payment.
6. Transfers outside the EU and EEA
Some service providers (for example Anthropic, Resend, Cloudflare, Supabase and Google) are based in the United States or may process data outside the EU. In such cases, data is transferred under the standard contractual clauses approved by the European Commission, or under the EU-US Data Privacy Framework where the provider takes part in it. We will give you more information about the safeguards on request.
7. The “Bebrų komanda” chat
The website chat “Bebrų komanda” (the Beaver Team) is an artificial intelligence program. It answers automatically, based on information about the homestead that we have prepared. Your messages are sent to the Anthropic service so that a reply can be generated. Under Anthropic’s commercial terms, API messages are not used to train models. The “Bebrų komanda” chat makes no decisions about you: only we confirm bookings. Please do not write sensitive data in the chat. If your question is important, the “Bebrų komanda” chat will offer to pass it on to us by email.
8. Cookies and browser storage
The website does not use advertising or analytics cookies. In your browser’s storage we keep only what the website needs to work: your choice of light or dark theme, your language choice, your booking selection while you move to the booking page, and the chat history until you close the browser tab. You can delete these entries at any time in your browser settings.
9. Your rights
Under the GDPR, you have the right to access your data, to have it corrected or deleted, to restrict its processing, to object to processing based on legitimate interest, and to receive your data in a portable format. Send your request to info@bebryne.lt. We will reply within one month at the latest. Before providing data, we may ask you to confirm your identity.
10. Contact and complaints
For questions about your data, write to info@bebryne.lt or call +370 5 241 6817 (Mon–Fri, 9:00–19:00). If you believe your data is processed in breach of the law, you can lodge a complaint with the State Data Protection Inspectorate of Lithuania (L. Sapiegos g. 17, Vilnius, vdai.lrv.lt).
We may update this policy. The latest version is always published on this page.