Privacy Policy

Last updated: 2026-07-20

This Privacy Policy is prepared under Regulation (EU) 2016/679 (GDPR), the Law on Legal Protection of Personal Data of the Republic of Lithuania, and other applicable EU/Lithuanian rules.

1. Data controller

Body & Face / Dr. Tetiana Toptun
Savanorių pr. 59, kab. 6, LT-03149 Vilnius, Lithuania
Phone: +370 641 09990
Email: blackrabbit442@gmail.com
Website: https://tatjanosmasazai.lt

2. Data we process

• Contact data — name, phone, email, message text when you send a booking request or contact us.
• Technical data — IP address, browser/device info, time of visit (server logs, security).
• Cookie data — language and design preference, cookie consent status (see Cookie Policy).

3. Purposes and legal bases (GDPR Art. 6)

• Handling enquiries and bookings — contract or steps prior to a contract (Art. 6(1)(b)).
• Site operation and security — legitimate interests (Art. 6(1)(f)).
• Analytics cookies — only with your consent (Art. 6(1)(a)).
• Legal obligations — where retention is required by law (Art. 6(1)(c)).

4. Retention

Enquiries are kept as long as needed to reply and provide services, typically up to 24 months, unless longer retention is required. Security logs typically up to 12 months. Consent records for as long as needed to demonstrate consent.

5. Recipients

Hosting/IT providers (e.g. Hostinger), email/notification services, and public authorities where required by law. Processors act under contracts and GDPR. Data is normally processed in the EEA; transfers outside the EEA use appropriate safeguards.

6. Your rights

You may access, rectify, erase, restrict processing, object to legitimate-interest processing, receive data portability, withdraw consent at any time (where processing is based on consent), and lodge a complaint with the State Data Protection Inspectorate of Lithuania (VDAI) — vdai.lrv.lt.

7. Security

We apply reasonable technical and organisational measures (HTTPS, access control, updates). No method of transmission over the Internet is 100% secure.

8. Children

This site is not directed at children under 14. Contact us if you believe a child’s data was submitted without a lawful basis.

9. Changes

We may update this policy. The new version is published on this website with the update date.

10. Contact

For privacy requests: blackrabbit442@gmail.com or +370 641 09990.