Privacy policy

The data controller is Hippo Fun, MB, company code 307092068, VAT number LT100017627813, address Verslo g. 13, LT-11346 Vilnius.

For any privacy question, write to andrius@hippofishing.eu.

• Inquiry form: name, email, phone number, travel dates, number of guests, preferred house or package, your comments and the language of the website.
• Bookings and payments: contact details, chosen package, dates, number of guests, house, prices, discount code, payment amounts and statuses. We never receive or store your card or online banking details, these are handled by our payment partners Montonio and Stripe.
• Gift vouchers: the buyer's name, email and phone number, the recipient's name, the greeting, the voucher code, its validity and use.
• Technical data: IP address and browser details when you send an inquiry or a booking, to protect the site against abuse.
• Partner code, if you came to the site through a partner link.
• Visit data: which pages you opened and when, where you came from (the previous website, a search engine, ad or newsletter tags and click ids such as gclid or fbclid), device type, browser, operating system, browser language, IP address and the country based on it. If you send an inquiry or a booking, we link this data to it.
• Newsletter: your email and your consent to receive news.
• Correspondence: emails and conversations with us about your trip.

• Replying to your inquiry and preparing an offer: steps before entering into a contract (Art. 6(1)(b) GDPR).
• Handling your booking, taking payments, sending confirmations, reminders and pre-arrival information: performance of a contract (Art. 6(1)(b) GDPR).
• Accounting and invoices: legal obligation (Art. 6(1)(c) GDPR).
• Newsletters and special offers: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.
• Reminders about an offer you have not answered, a request to rate your trip and an invitation for the next season to our guests: legitimate interest (Art. 6(1)(f) GDPR). Every such email has a link to unsubscribe.
• Visitor statistics and measuring our ads (Google Analytics, Google Ads, Meta Pixel): only if you accept cookies, your consent (Art. 6(1)(a) GDPR).
• Website security, preventing abuse and tracking partner commissions: legitimate interest (Art. 6(1)(f) GDPR).
• Understanding where inquiries and bookings come from (which channels, campaigns and articles work) and improving the website: legitimate interest (Art. 6(1)(f) GDPR). You can object to this by writing to us.

• Inquiries that did not lead to a booking: 2 years after the last contact.
• Bookings, gift vouchers and payments: as long as accounting law requires (up to 10 years).
• Newsletter subscription: until you withdraw your consent.
• IP address and browser details are kept together with the inquiry or booking.
• Visit data without an inquiry: 24 months after your last visit. If you send an inquiry, it is kept together with it.
• Cookie consent records (without IP address): 24 months.

We never sell your data. It is only shared with service providers that help us run our business, and only as far as needed:

• Laravel Cloud and Cloudflare: website hosting, protection and fast delivery.
• Stripe: payments. Stripe processes payment data as an independent controller under its own privacy policy.
• Montonio: payments by bank link and card. Montonio processes payment data as an independent controller under its own privacy policy.
• Our email delivery provider: confirmations, reminders and replies to inquiries.
• Google (Tag Manager, Analytics and Ads): only if you accept cookies.
• Meta (Facebook and Instagram ads): only if you allow marketing cookies. The Meta Pixel in your browser and the same events from our server (Conversions API) tell Meta which pages you viewed and when you sent a request, started paying or paid, with your email, phone and name in hashed (unreadable) form, your IP address and browser details. Meta uses this to measure and show our ads. For this collection and transfer Meta and we are joint controllers (Art. 26 GDPR), and Meta handles the data under its own privacy policy.
• YouTube: the video's preview image loads from a YouTube server (Google receives your IP address, no cookies are set), the player itself only when you click it, through the privacy-enhanced youtube-nocookie.com.
• Facebook and Instagram (Meta): the home page shows some of our posts from these networks, only if you allow marketing cookies or click the button to show them. Loading them sends your IP address and browser details to Meta, which handles them under its own privacy policy.
• Accountants and public authorities, when the law requires it.

Some providers (Google, Meta, Stripe, Cloudflare) may process data in the United States. In that case data is transferred under the EU-US Data Privacy Framework or the standard contractual clauses approved by the European Commission.

We use strictly necessary cookies, our own cookies to see where inquiries come from and, only with your consent, Google Analytics, Google Ads and Meta Pixel cookies. The full list, how long each one lasts and how to change your choice at any time are in our cookie policy.

You have the right to access your data, correct it, have it erased, restrict its processing, receive it in a portable format, object to its processing and withdraw your consent at any time. To use these rights, write to andrius@hippofishing.eu and we will reply within one month.

If you believe your data is not handled properly, you can lodge a complaint with Valstybinė duomenų apsaugos inspekcija (https://vdai.lrv.lt).

We will update this policy when our services or the law change. The date of the last update is shown at the top of this page.