In short: we use your name, contact details and address to fulfil and deliver your order. We do not sell data and we do not send marketing emails without consent. We use analytics and marketing cookies (Google Analytics, Meta Pixel, our own visitor analytics) only if you agree. You can exercise your rights by writing to info@zvejybosprognoze.lt.
Who we are (data controller)
The controller of your personal data is MB “MJ Partneriai”, company code 308105611, registered office Girulių g. 10, LT-12112 Vilnius, Lithuania (“we”). The website is zvejybosprognoze.lt, including the online store zvejybosprognoze.lt/shop/ and the fishing diary.
Contact: email info@zvejybosprognoze.lt, tel. +370 606 35256.
What data we collect and why
Store orders
- Data: first and last name, email, phone number, delivery address (or the chosen DPD parcel locker), postal code, order notes, order contents and total, payment status.
- Purpose: accepting the order, confirming payment, delivery, issuing the invoice, contact about the order, returns and warranty.
- Legal basis: performance of a contract (GDPR Art. 6(1)(b)); keeping invoices and accounting documents – legal obligation (c).
Order emails
We send only emails related to your order: order confirmation, one reminder about an unpaid order, a shipping notice with the invoice and the parcel tracking number. These are not marketing. We do not send marketing emails without separate consent.
Payments
You pay in the Paysera system – we do not see or store your card or bank login details. Payment is processed by Paysera LT, UAB, which acts as a separate controller for its own purposes. We only receive the payment confirmation and amount.
Delivery
To deliver the parcel, DPD Lietuva receives your name, phone, email and delivery address (or parcel locker).
“Notify me when available”
If you ask to be notified when a product is back in stock, we store your email and the product so we can send one notification (basis: your request). We can delete the record immediately on request.
Fishing diary
- Data: nickname / name, email, password (stored only in hashed form), optional profile photo, your entries (lake, date, time, fish, bait, notes, photos, weather data at the time of the entry).
- Visibility: entries are private unless you choose to share. Approved entries you choose to make public are shown on the website with your nickname.
- Basis: contract (account service). We will delete the account and data on request.
Forms (lake, fish, information suggestions, feedback)
We store the text you enter, the name and email (if you provide them) and a hashed IP address to protect against abuse. We use the data to review the suggestion and, if needed, reply.
Security and technical data
To protect against abuse (e.g. password guessing, bots) we briefly keep a hashed IP address in attempt counters. The server may log technical information (IP, browser type, time) for security and troubleshooting. Basis: legitimate interest (GDPR Art. 6(1)(f)).
Visitor analytics
Only with your consent we use:
- Our own analytics in the store: an anonymous visitor identifier, page path, source of arrival (e.g. ad tags), actions (product view, add to cart, checkout start, purchase). We do not store your IP address, full browser information or email. We link an order to its source of arrival.
- Google Analytics (Google Ireland Ltd. / Google LLC) – traffic statistics across the website.
- Meta Pixel (Meta Platforms Ireland Ltd.) – in the store only, to measure and optimise advertising (events: product view, add to cart, checkout start, purchase, search, wishlist). Meta may become a joint controller for this data.
Basis: your consent (GDPR Art. 6(1)(a)), which you can withdraw at any time.
External services on the website
Weather data comes from Open-Meteo, map tiles from OpenStreetMap and the map library from unpkg.com. Your browser calls these services directly, so their providers receive your IP address. We do not see or store these requests.
Cookies and local browser storage
We use essential cookies without consent because the site would not work without them. Analytics and marketing cookies are enabled only after you click “Accept” in the cookie banner.
| Name | Purpose | Duration | Type |
|---|---|---|---|
| PHPSESSID | Session: cart, login, form protection | Until the browser is closed | Essential |
| zp_consent, zp_cv | Your cookie choice | 1 year | Essential |
| Local storage: theme, last lake, wishlist, seen news notice, consent choice | Remembering your settings (stays only in your browser) | Until you delete it | Essential |
| zp_vid, zp_sid | Our own visitor analytics (store) | 90 days / 30 min. | Analytics (consent) |
| _ga, _ga_* | Google Analytics (consent) | Up to 2 years | Analytics (consent) |
| _fbp, _fbc | Meta Pixel | Up to 90 days | Marketing (consent) |
You can change your consent at any time: click “Cookie settings” at the bottom of the page or delete cookies in your browser settings. After you withdraw consent, analytics and marketing cookies are no longer used.
Who we share data with
We share data only as needed to provide the service:
- Paysera LT, UAB – payment processing;
- UAB “DPD Lietuva” – parcel delivery;
- Hostinger – website hosting and email service (processing on our behalf);
- Google, Meta – only with your consent (analytics, advertising);
- public authorities – where required by law (e.g. tax, accounting).
We do not sell data and we do not make automated decisions that would have legal effects on you.
Transfers outside the EU / EEA
Google and Meta (and their service providers) may process data outside the European Economic Area, e.g. in the USA. In that case we rely on the European Commission adequacy decision (EU–US Data Privacy Framework) or standard contractual clauses. These services are enabled only with your consent.
How long we keep data
- Orders and invoices: for the period required by law (up to 10 years); unpaid and cancelled orders without an invoice are deleted 7 days after cancellation;
- Abandoned cart: up to 30 days;
- Our own analytics: page views – 90 days, other events and visits – up to 400 days;
- Diary account and entries: until you delete the account or entry;
- Back-in-stock notifications, form submissions: as long as needed to send the notification / review the suggestion, or until you ask for deletion;
- Google Analytics and Meta: according to their retention periods.
Your rights
You have the right to access your data, rectify it, erase it (“right to be forgotten”), restrict processing, data portability, object to processing based on legitimate interest, and withdraw consent at any time (this does not affect the lawfulness of earlier processing).
Write to info@zvejybosprognoze.lt. We will reply within 30 days. We cannot delete data we are legally required to keep (e.g. invoices) until the mandatory period ends.
If you believe your rights have been violated, you have the right to lodge a complaint with the State Data Protection Inspectorate of Lithuania (L. Sapiegos g. 17, Vilnius, vdai.lrv.lt).
Data security
We protect data with reasonable technical and organisational measures: encrypted connection (HTTPS), passwords stored only in hashed form, restricted and password-protected administrator access with attempt limits, and forms protected against abuse.
Children
The website is not intended for children and we do not knowingly collect children’s data. If you believe a child has given us data, write to us and we will delete it.
Changes to this policy
This policy may be updated. We will mark significant changes with the date at the top of this page.
Contact
Questions about data processing: info@zvejybosprognoze.lt, tel. +370 606 35256. MB “MJ Partneriai”, Girulių g. 10, LT-12112 Vilnius.