Privacy Policy

This privacy policy explains how MB „Breda LT“ (hereinafter – “Platform”, “we”) collects, uses, stores and otherwise processes personal data when you use the website, the Platform account, booking features, an owner account or other Platform services.

1. Data Controller

The controller of your personal data is:

MB Breda LT
Company registration number: 306684978
Address: Vilnius, V. Nageviciaus g. 3, LT-08237, Republic of Lithuania
Email: sales@breda.lt
Phone: +4915231302367

2. Who this policy applies to

This privacy policy applies when we process personal data of the following individuals:

website visitors;
registered users;
customers and prospective customers who submit booking requests or reserve properties;
owners and prospective owners who use the Platform to advertise or manage properties;
individuals who contact us by email, phone or other channels.

3. What personal data we may process

Identity and contact data: first and last name, email address, phone number, account data.
Booking data: arrival and departure dates, number of guests, booking status, correspondence or inquiry information, notes or technical records related to the booking.
Payment data: information about payment status, amounts, refunds, payouts, technical identifiers or confirmations provided by the payment service provider, where applicable.
Owner data: data related to accounts, payouts, reports, property management, taxes or other information related to cooperation.
Usage and technical data: IP address, browser information, device information, activity logs, language preference, session information, data from cookies or similar technologies.
Data on acceptance of legal documents: when and which version of a document you accepted, IP address, user agent and related context.
Communication data: the content of correspondence, inquiries, claims, feedback, complaints or other contacts.

4. Where we obtain data from

From you, when you register, fill out forms, submit a booking request, reserve a property, use your account or contact us.
From an owner or another user, if they lawfully provide information related to a booking or property administration.
From our service providers, for example payment, email, hosting, analytics or other IT service providers, to the extent necessary for the provision of services.
From automatically generated technical logs when you use the website or account.

5. For what purposes and on what legal bases we process data

To create and administer accounts – performing a contract or taking steps at your request prior to entering into a contract.
For booking administration – performing a contract or taking steps at your request prior to entering into a contract.
For administration of payments, refunds and payouts – performing a contract, complying with legal obligations and, where needed, having a legitimate interest to properly administer transactions.
For customer service, handling inquiries, complaints and disputes – performing a contract, complying with legal obligations and having a legitimate interest to defend our rights and ensure service quality.
For Platform security, fraud prevention, access control and incident management – having a legitimate interest to ensure the security of the Platform, customers, owners and our systems.
To record acceptance of versions of legal documents – complying with legal obligations and having a legitimate interest to prove consents, acknowledgement of terms or applicable rules.
For accounting, tax and other legal obligations – complying with legal obligations.
For direct marketing or use of non-essential cookies – only based on your consent, if such processing is actually applicable.

6. To whom we may disclose data

to our IT, hosting, system maintenance, email, communication, analytics or other technical service providers;
to payment service providers, banks or intermediaries for financial transactions, where applicable;
to owners or customers as necessary for booking administration and organization of accommodation services;
to accounting, audit, legal, debt collection or other professional service providers where necessary;
to government authorities, courts, supervisory bodies or law enforcement when required by law or necessary to defend our rights.

7. Transfer of data outside the European Economic Area

We generally strive to have your data processed within the European Economic Area. If in certain cases data is transferred outside the European Economic Area, we will do so only on a lawful basis and by applying appropriate safeguards, for example the European Commission's approved standard contractual clauses or another transfer mechanism provided for by law.

8. How long we retain data

Account data is retained while the account is active and thereafter as long as necessary for legitimate interests, disputes, security or compliance with legal obligations.
Booking, payment, refund, payout and related accounting data are retained as required by applicable law and as necessary to address potential disputes or claims.
Communication, inquiry and complaint data are retained as long as necessary to resolve the specific matter and thereafter as reasonably needed to defend our rights or ensure quality.
Technical logs and security records are retained as long as necessary for Platform security, incident investigation and protection of legitimate interests.
If we are required to retain certain data for a longer period by law, we retain it for the period prescribed by law.

9. Your rights

Under applicable data protection laws you may have the following rights:

the right to obtain information about data processing;
the right to access your data;
the right to request correction of inaccurate or incomplete data;
the right to request deletion of data when there is a legal basis to do so;
the right to request restriction of data processing;
the right to data portability, where applicable;
the right to object to processing when the processing is based on legitimate interests or is carried out for direct marketing purposes;
the right to withdraw consent if the data is processed on the basis of consent;
the right not to be subject to a decision based solely on automated data processing if it produces legal or similarly significant effects for you and if such a situation applies.

10. How you can exercise your rights

To exercise your rights, you can contact us by email at sales@breda.lt.
We may ask for additional information to verify your identity if necessary for secure handling of the request.
We respond to requests without undue delay and generally within 1 month of receipt, unless the law allows an extension of this period.

11. Complaints

If you believe that your personal data is being processed in violation of the law, you have the right to lodge a complaint with the State Data Protection Inspectorate (VDAI) or another competent supervisory authority.

12. Cookies and similar technologies

The Platform may use essential cookies and similar technologies necessary for the operation of the website, security, session management, language selection or other essential functions.
If we use analytics, functional or marketing cookies that require consent, their use is based on your consent and we inform you about them separately.

13. Data security

We apply appropriate technical and organizational measures to protect personal data from unauthorized disclosure, loss, destruction, alteration or unlawful access. However, no system can guarantee absolute security, so we ask you to also responsibly protect your account and login details.

14. Links to third-party websites

The Platform may contain links to third-party websites or services. We are not responsible for the privacy practices of such websites or services, so we recommend reviewing their privacy policies separately.

15. Policy changes

We reserve the right to periodically update this privacy policy if our activities, technological solutions, legal requirements or data processing practices change. The updated version becomes effective from the date it is published on the Platform or from a later date specified therein.

16. Final provisions

By using the Platform you confirm that you have read this privacy policy or had the opportunity to read it before you started using the Platform, registering, submitting a booking request or performing other actions related to the Platform.