Legal

Privacy Policy

Last updated: January 2025  ·  GDPR Compliant  ·  NestivoLT UAB, Lithuania

1. Who We Are

NestivoLT UAB ("NestivoLT", "we", "our", "us") is the data controller responsible for your personal data. We operate the website nestivolt.com and provide hostel accommodation services in Lithuania.

Contact details of the Data Controller:

2. What Personal Data We Collect

We collect personal data that you provide directly to us through our website forms, including:

Reservation Form

  • Full name
  • Email address
  • Gender
  • Occupation category (Student, Professional, Businessman, Freelancer, Traveler)
  • Preferred rental type and room preference
  • Any additional information you voluntarily provide in the concerns field

Contact Form

  • Full name
  • Email address
  • Message content

Website Usage Data

  • IP address (anonymised where possible)
  • Browser type and version
  • Pages visited and time spent
  • Referring website

3. How We Use Your Personal Data

We process your personal data for the following purposes:

  • To process your reservation request — to contact you, confirm availability, and arrange accommodation (Legal basis: Performance of a contract / pre-contractual steps, Article 6(1)(b) GDPR)
  • To respond to enquiries — when you contact us via the contact form (Legal basis: Legitimate interests, Article 6(1)(f) GDPR)
  • To manage our accommodation services — administration, record keeping, and service improvement (Legal basis: Legitimate interests)
  • To comply with legal obligations — including Lithuanian tax and company law requirements (Legal basis: Legal obligation, Article 6(1)(c) GDPR)

4. How We Store Your Data

Reservation and contact form submissions are stored in Google Sheets via Google's secure infrastructure. By submitting a form on our website, your data may be stored on Google's servers. Google LLC is a certified processor under the EU–US Data Privacy Framework. For more information, see Google's Privacy Policy.

We retain your personal data for as long as necessary to fulfil the purposes set out in this policy, or as required by law. Reservation data is typically retained for up to 3 years after your last interaction with us.

5. Data Sharing

We do not sell, rent, or trade your personal data to third parties. We may share your data only in the following limited circumstances:

  • Service providers: Google (form data storage) — bound by data processing agreements
  • Legal requirements: When required by Lithuanian law, court order, or regulatory authority
  • Business transfer: In the event of a merger or acquisition, with appropriate data protection safeguards

6. International Transfers

Your data may be processed outside the European Economic Area (EEA) by Google's infrastructure. Such transfers are made under appropriate safeguards including Standard Contractual Clauses and the EU–US Data Privacy Framework. We ensure that adequate protection is in place for all international transfers.

7. Your Rights Under GDPR

As a data subject under the General Data Protection Regulation, you have the following rights:

  • Right of access — to obtain a copy of your personal data we hold
  • Right to rectification — to correct inaccurate or incomplete data
  • Right to erasure ("right to be forgotten") — to request deletion of your data
  • Right to restriction of processing — to limit how we use your data
  • Right to data portability — to receive your data in a structured, machine-readable format
  • Right to object — to object to processing based on legitimate interests
  • Right to withdraw consent — where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, please contact us at contact@nestivolt.com. We will respond within 30 days.

You also have the right to lodge a complaint with the State Data Protection Inspectorate of Lithuania (vdai.lrv.lt) if you believe we have not handled your data in accordance with GDPR.

8. Cookies

Our website uses essential cookies necessary for the site to function correctly (e.g., session management). We do not use advertising or tracking cookies without your consent.

You can control cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the website.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those websites and encourage you to review their privacy policies before providing any personal data.

11. Children's Privacy

Our services are not directed at persons under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a minor, please contact us immediately at contact@nestivolt.com.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this page periodically. Continued use of our website after changes are posted constitutes acceptance of the updated policy.

13. Contact Us

For any questions, requests, or concerns regarding this Privacy Policy or your personal data, please contact us:

Terms & Conditions Back to Home