Privacy policy

Last updated: 2 November 2026. This is a courtesy translation; the Lithuanian version prevails.

This policy explains how we process personal data when you use the website lolavilnius.lt (LOLA and LOLA SOLÉ), fill in the enquiry form or write to us by email. We do not sell goods online on this website and we have no accounts or subscriptions.

1. Who processes your data

Data controller: UAB LONORSA, company code 305822604, registered office Architektų g. 56-101, LT-04111 Vilnius, Lithuania.
For privacy questions, write to: [email protected].

2. What data we collect and why

The “LOLA to your office” enquiry form. The name, phone number, email address and message you provide. We use them only to reply to your enquiry and prepare an offer. Legal basis: your consent (GDPR Art. 6(1)(a)) and steps taken at your request before entering into a contract (point (b)).

Gift vouchers and other email correspondence. When you email us, we see your email address and what you write. When issuing an invoice, we process the data needed for it. Basis: performance of a contract and the legal obligation to keep accounting documents (points (b) and (c)).

Technical data. When serving the website and protecting it from abuse, servers temporarily record the IP address and browser information. Basis: legitimate interest in ensuring security (point (f)).

Visitor statistics. We use Cloudflare Web Analytics. It works without cookies and does not build profiles of individual visitors; it only shows aggregated figures (how many people opened a page, from which country, on which device). Basis: legitimate interest in understanding how the website is used (point (f)).

3. Cookies and browser storage

The website does not use advertising or tracking cookies. The menu basket (selected dishes, table number, note) is stored only in your device’s browser storage for about 8 hours so that it does not disappear when the page reloads. It is not sent to us. Fonts and images are loaded from our own website.

4. Who we share data with

Data is processed by our service providers, only as far as needed to provide the service:

• Cloudflare, Inc.: website hosting, domain and visitor statistics.
• Web3Forms: forwarding enquiry form data to our email.
• Email service provider: receiving and sending emails.
• Accounting service providers, where needed for invoices and bookkeeping.

Some service providers may process data outside the European Economic Area. In such cases the safeguards provided by the GDPR apply (e.g. standard contractual clauses). We do not sell data and do not use it for marketing.

Other websites we link to (Wolt, Tablein, Breezit, Instagram, Facebook, TikTok, Google Maps) have their own privacy rules, which we do not control.

5. How long we keep data

• Enquiry form data and correspondence: up to 12 months from the last contact.
• Invoices and related data: as long as accounting law requires (up to 10 years).
• Technical logs: briefly, as long as needed for security.

6. Your rights

You have the right to access your data, rectify it, erase it, restrict processing, object to processing, port your data and withdraw consent at any time (withdrawal does not affect processing carried out before it). Write to [email protected], and we will reply within 30 days.

If you believe your rights have been violated, you can complain to the State Data Protection Inspectorate (L. Sapiegos g. 17, Vilnius, vdai.lrv.lt).

7. Changes

We may update this policy. The latest version is always published on this page, with the date shown at the top.