Privacy Policy

Privacy Policy

Last updated: 19 April 2026.

Prie Trakų respects your privacy. This policy explains what personal data we process, for what purposes, whom we share it with, and the rights you have under the EU General Data Protection Regulation (GDPR, 2016/679).

1. Data controller

Prie Trakų countryside estate, Petkėniškės k., LT-21101 Trakai district, Lithuania. Contact: [email protected]

2. What data we collect

  • Contact data — name, email, phone number.
  • Booking data — arrival and departure dates, number of guests, chosen accommodation, optional services, special requests.
  • Payment data — billing details for invoicing. We do not store card numbers — payment card data is handled by our payment processor (e.g. Stripe).
  • Technical data — IP address, browser type, server logs, cookies.

3. Purposes and legal bases

  • Performing your reservation and providing our services — Art. 6(1)(b) GDPR (contract).
  • Accounting and tax obligations — Art. 6(1)(c) GDPR (legal obligation).
  • Website security, fraud prevention, and service improvement — Art. 6(1)(f) GDPR (legitimate interest).
  • Newsletters and marketing — Art. 6(1)(a) GDPR (consent); you may withdraw consent at any time.

4. Who we share data with

We never sell your data. We share it only with trusted processors: email and messaging providers, our payment processor, the cloud hosting provider, our accountant, and — where required by law — competent authorities.

5. Retention

  • Reservation records and correspondence — 3 years after your last stay.
  • Accounting records — 10 years, as required by Lithuanian law.
  • Marketing data — until you withdraw consent.

6. International transfers

Where our processors operate outside the EU/EEA, transfers are made only with appropriate safeguards — for example, the European Commission's Standard Contractual Clauses (SCC).

7. Your rights

You have the right to:

  • access your data;
  • have it corrected or erased;
  • restrict or object to processing;
  • receive it in a portable format;
  • withdraw consent;
  • lodge a complaint with the Lithuanian State Data Protection Inspectorate (vdai.lrv.lt).

To exercise your rights, email us at [email protected] — we will respond within 30 days.

8. Cookies

Our website uses strictly necessary cookies (required for the site to work) and analytics cookies (only with your consent). You can manage cookie preferences in your browser at any time.

9. Changes to this policy

We may update this policy from time to time. Updates are posted on this website; where changes are material, we will notify you by email.