• Legal

Privacy Policy

  • Last updated: January 2025
  • Chaska Paska · Vilnius, Lithuania
  • GDPR Compliant

Summary: Chaska Paska collects only the personal data necessary to respond to your enquiries, process reservations, and improve our service. We do not sell your data to anyone. You have the right to access, correct, or delete your data at any time.

1. Who We Are

This Privacy Policy applies to Chaska Paska, a restaurant located at:

Chaska Paska

Savanorių prospektas 46, Vilnius 03130, Lithuania

chaskapaskahalal@gmail.com

+370 692 25276

Chaska Paska is the data controller responsible for your personal data collected through this website and our contact channels.

2. What Data We Collect

We collect personal data only when you actively provide it to us. This includes:

2.1 Contact Form & Enquiries

  • Your full name
  • Email address
  • Phone number (if provided)
  • The content of your message

2.2 Table Reservation Form

  • Your full name
  • Phone number
  • Preferred date and time
  • Number of guests
  • Any special dietary requests or notes you provide

2.3 WhatsApp & Phone Contact

  • Your phone number (shared by you when you initiate contact)
  • Content of your messages

2.4 Website Usage Data

  • Browser type and version
  • Device type (desktop, mobile, tablet)
  • Pages visited and time spent
  • Referring website or search engine
  • IP address (anonymised where possible)

We do not collect any sensitive personal data such as financial information, payment card details, health data, or ethnic origin.

3. How We Use Your Data

We use the personal data you provide for the following purposes only:

  • To respond to your enquiries and messages
  • To confirm and manage your table reservations
  • To contact you about your reservation if needed
  • To improve our website and customer experience
  • To comply with our legal obligations under Lithuanian and EU law

 

We do not use your personal data for automated decision-making or profiling.

We do not send marketing emails or promotional messages unless you have explicitly opted in to receive them.

4. Legal Basis for Processing (GDPR)

Under the General Data Protection Regulation (GDPR), we process your personal data on the following legal bases:

Legitimate Interest (Article 6(1)(f))
When you contact us with an enquiry, we process your data to respond to you — this is in the legitimate interest of both parties.

Contractual Necessity (Article 6(1)(b))
When you make a table reservation, we process your data to fulfil the reservation — this is necessary to perform our service.

Legal Obligation (Article 6(1)(c))
In some cases we may be required to process your data to comply with applicable Lithuanian or EU legal obligations.

Consent (Article 6(1)(a))
Where we ask for your consent — for example, before sending you any marketing communications — we will only process your data if you give clear, specific consent. You may withdraw consent at any time.

5. How We Store and Protect Your Data

Your personal data is stored securely using industry-standard measures. We take the following steps to protect your information:

  • Our website uses HTTPS encryption for all data transmitted between your browser and our server
  • Access to personal data is restricted to authorised Chaska Paska staff only
  • We do not store payment card information — all payments are processed in person
  • Form submissions are sent directly to our email and are not stored on third-party servers beyond what is necessary

 

Despite these measures, no method of data transmission over the internet is 100% secure. If you have any concerns about the security of your data, please contact us directly.

6. Third Parties We Share Data With

We do not sell, rent, or trade your personal data to any third party.

In the ordinary course of operating our website and services, we may share limited data with the following categories of third-party service providers:

Website Hosting
Our website is hosted on a server within the European Economic Area (EEA). Your data is stored on servers that comply with GDPR requirements.

Google Services
We use Google Business Profile for our restaurant listing and Google Maps for location services. Google may collect data in accordance with their own Privacy Policy at policies.google.com/privacy.

Bolt Food
If you place an order through Bolt Food, your data is processed by Bolt Food in accordance with their own Privacy Policy. We only receive order details necessary to prepare your food.

Email Service Provider
Contact form submissions are delivered to our email inbox. We use a standard email service provider operating within the EEA.

WhatsApp (Meta)
If you contact us via WhatsApp, your message is processed by Meta Platforms in accordance with their Privacy Policy. We use WhatsApp only to communicate with customers who initiate contact.

All third parties we work with are required to handle your personal data in compliance with applicable data protection laws.

7. Cookies

Our website may use cookies — small text files stored on your device — to ensure the website functions correctly and to understand how visitors use our site.

Types of cookies we use:

  • Essential cookies: Required for the website to function. These cannot be disabled.
  • Analytics cookies: Help us understand how visitors interact with our website (e.g. which pages are visited most). These are anonymised and do not identify individual users.
    We do not use advertising cookies or cross-site tracking cookies.

 

You can control and delete cookies through your browser settings. Disabling cookies may affect the functionality of some parts of our website.

Note: If you visit our Google Business Profile or use Google Maps embedded on our site, Google may set its own cookies. Please refer to Google’s Cookie Policy for details.

8. Your Rights Under GDPR

As a data subject under the GDPR, you have the following rights regarding your personal data:

  • Right of Access: You can request a copy of the personal data we hold about you.
  • Right to Rectification: You can ask us to correct any inaccurate or incomplete data.
  • Right to Erasure: You can request that we delete your personal data, subject to certain legal conditions.
  • Right to Restriction: You can ask us to restrict how we process your data in certain circumstances.
  • Right to Data Portability: You can request your data in a structured, commonly used, machine-readable format.
  • Right to Object: You can object to our processing of your data where we rely on legitimate interest as the legal basis.
  • Right to Withdraw Consent: Where processing is based on your consent, you can withdraw it at any time without affecting the lawfulness of processing before withdrawal.

 

To exercise any of these rights, please contact us using the details in Section 12. We will respond to your request within 30 days.

You also have the right to lodge a complaint with the Lithuanian supervisory authority:

State Data Protection Inspectorate of Lithuania

L. Sapiegos g. 17, Vilnius 10312, Lithuania

vdai.lrv.lt

ada@ada.lt

9. Data Retention

We retain your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by law.

  • Contact enquiries: Retained for 12 months after the last communication, then deleted.
  • Reservation records: Retained for 6 months after the reservation date, then deleted.
  • Legal records: Retained for the period required by Lithuanian law (typically 5–10 years for accounting and tax records).

 

After the retention period, your data is securely deleted or anonymised.

10. Children’s Privacy

Our website and services are not directed at children under the age of 16. We do not knowingly collect personal data from children under 16.

If you believe that a child under 16 has provided us with personal data without parental consent, please contact us immediately and we will delete the data as soon as possible.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements.

When we make significant changes, we will update the “Last updated” date at the top of this page. We encourage you to review this policy periodically.

Your continued use of our website after any changes are posted constitutes your acceptance of the updated policy.

12. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way we handle your personal data, please contact us:

Chaska Paska

Savanorių prospektas 46, Vilnius 03130, Lithuania

chaskapaskahalal@gmail.com

+370 692 25276

We aim to respond to all data-related requests within 30 days of receipt.