Privacy Policy

This Privacy Policy describes how sorboovia (sorboovia Unlimited Liability Company) collects, uses, and protects your personal information when you visit our website and participate in our amber jewellery making workshops and classes. We are committed to protecting your privacy and handling your data responsibly and in compliance with applicable data protection laws. This policy outlines what information we collect, how we use it, and the rights you have regarding your data.

Who We Are (Data Controller)

We operate amber jewellery making workshops and classes specializing in Baltic amber bead stringing and silver setting techniques in Palanga. When you register for our workshops, contact us, or visit our website, we collect and process your personal information. We act as the data controller for your personal data and are responsible for ensuring your information is processed lawfully and securely.

Information We Collect

We collect various types of information to provide our services and improve your experience:

• Contact Information: Name, email address, phone number, and postal address when you register for workshops or contact us
• Workshop Registration: Details about workshops you attend, payment information, dietary requirements, and accessibility needs
• Usage Data: Information about how you interact with our website, including pages visited, time spent, and device information
• Communication Records: Messages, inquiries, and correspondence you send to us
• Cookies and Similar Technologies: Data collected through cookies to enhance your browsing experience

Legal Basis for Processing

We process your personal information based on the following legal grounds: (1) Consent – when you explicitly agree to our processing, such as subscribing to our newsletter; (2) Contract Performance – to fulfill workshop registrations and provide services you have requested; (3) Legal Obligation – to comply with applicable laws and regulations; and (4) Legitimate Interest – to improve our services, prevent fraud, and ensure website security. For each type of processing, we balance your rights with our legitimate business needs.

How We Use Your Information

We use your personal data for specific purposes related to our amber jewellery workshops:

• Processing and managing your workshop registrations and bookings
• Sending confirmation emails, reminders, and updates about classes
• Responding to your inquiries and providing customer support
• Processing payments and issuing receipts or invoices
• Improving our website functionality and user experience
• Complying with legal and regulatory requirements
• Preventing fraud and ensuring platform security
• Sending marketing communications (only with your consent)

Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected. Specific retention periods include: Workshop Registration Data – retained for 24 months following your last workshop attendance or interaction with us, to facilitate rebooking and provide relevant communications; Contact Form Messages and Inquiries – retained for up to 24 months after your last message to respond to follow-up questions; Payment and Invoice Records – retained for 36 months to comply with accounting and tax requirements; Website Analytics and Cookies – retained for up to 12-14 months to analyze website performance; Server Logs – retained for up to 12 months for security and troubleshooting purposes. After the retention period expires, we securely delete or anonymize your data.

Your Privacy Rights

You have several rights regarding your personal information under data protection law:

• Right of Access: You may request a copy of the personal data we hold about you
• Right to Rectification: You can request correction of inaccurate or incomplete information
• Right to Erasure: You may request deletion of your personal data, subject to legal limitations
• Right to Restrict Processing: You can ask us to limit how we use your information
• Right to Data Portability: You may request your data in a portable format
• Right to Object: You can object to certain types of processing, including marketing communications
• Right to Withdraw Consent: If we rely on consent, you can withdraw it at any time

To exercise any of these rights, contact us using the information provided below.

Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience. Cookies are small text files stored on your device that help us recognize you, remember your preferences, and analyze how you use our site. We use essential cookies for website functionality, performance cookies to understand user behavior, and marketing cookies (only with consent) to deliver relevant content. You can control cookie settings through your browser preferences, though disabling certain cookies may affect website functionality. For detailed information about our cookie usage, please refer to our Cookie Policy.

Data Security

We implement industry-standard security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. These include encryption, secure server infrastructure, access controls, and regular security assessments. However, no transmission over the internet is completely secure, and we cannot guarantee absolute security. We encourage you to use strong passwords and protect your account credentials.

Third-Party Services

We may share your information with trusted third parties who assist us in operating our website and providing workshop services, including payment processors, email service providers, and analytics platforms. These third parties are contractually obligated to use your information only as necessary to provide services to us and to maintain the confidentiality and security of your data. We do not sell or rent your personal information to third parties for their independent marketing purposes.

International Data Transfers

Your information is primarily processed and stored within the European Union. If we transfer data outside the EU, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission, to protect your rights and comply with data protection laws.

Children's Privacy

Our workshops and website are not intentionally directed to children under 13 years of age. We do not knowingly collect personal information from children without parental consent. If we become aware that we have collected data from a child under 13, we will promptly delete such information. For minors aged 13-18, we provide additional privacy protections.

Your Supervisory Authority

You have the right to lodge a complaint with your data protection supervisory authority. In Lithuania, this is the State Data Protection Inspectorate (VDAI). You can submit a complaint if you believe we have violated your data protection rights. Contacting the supervisory authority does not prevent you from seeking other legal remedies.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. Any material changes will be posted on our website with an updated "Last Updated" date. Your continued use of our website and services following the posting of revisions constitutes your acceptance of the updated Privacy Policy. We encourage you to review this policy regularly to stay informed about how we protect your information.