Privacy Policy

The operator of kar2.lt (“we”) is the controller of your personal data. Contact: info@kar2.lt.

Account data: your email address and, if you give it, your name.

Request data: the activity, preferred times, group size, your name, email and messages and, if you give them, your company name, company code and VAT code.

Provider profile data: name, description, contact details and photos.

Provider calendar data: if a provider connects their calendar, we keep only busy time blocks (start and end), with no event titles, descriptions or attendees.

Reviews: the rating, comment and your first name.

Technical data: IP address, browser data and error reports.

Your email address (and, for a request, your name) is needed to use your account and send requests. Company details are optional.

To run your account and sign you in.

To pass requests to providers and send related emails.

To show customers when a provider is likely busy, without revealing any details.

To publish provider profiles and reviews. Provider profiles, including contact details, and reviewers' first names are public.

To keep the site secure and to find and fix errors.

To understand how the site is used and improve it, from aggregated visit statistics.

To meet legal obligations.

Contract (GDPR Art. 6(1)(b)) — account, requests, profiles and reviews.

Legitimate interests (Art. 6(1)(f)) — keeping the site secure and working, and aggregated visit statistics.

Legal obligation (Art. 6(1)(c)) — where the law requires it.

Providers you send a request to.

Service providers acting on our instructions (hosting, content delivery, storage, email, security, monitoring and website analytics services).

Public authorities, where the law requires it.

We do not sell your data.

We store data in the EU. Where a service provider processes data outside the EU, the safeguards required by the GDPR apply, such as the European Commission's standard contractual clauses.

Account data — while you have an account.

Request data — 3 years after the activity date.

Provider calendar busy times — while the calendar is connected; they are replaced on every sync and deleted when the calendar is disconnected.

Reviews — while the activity is listed, or until you ask us to delete them.

Technical data — only as long as needed to keep the site secure.

Error reports and server logs — up to 90 days.

Backups — 30 days.

You can ask to access, correct or delete your data, restrict or object to its processing, and receive it in a portable format. Email info@kar2.lt — we reply within one month.

You can also complain to the State Data Protection Inspectorate (vdai.lrv.lt).

To understand how the site is used and improve it, we collect anonymous, aggregated visit statistics, such as which pages are visited and how often the main features are used.

The analytics service we use sets no cookies, stores nothing on your device and does not record IP addresses or other personal data, so these statistics cannot identify you.

We only use strictly necessary cookies. See the Cookie Policy for details.

We may update this policy; the date above shows the latest version.