minifarmland
1. Data controller
The controller is minifarmland, Nemunas Wharf 14, LT-44291 Klaipėda, Lithuania. Email: hello@minifarmland.com. For privacy-specific requests: privacy@minifarmland.com (monitored business days).
2. What we collect
- Website technical data: server logs (IP address, user agent, timestamps, pages visited), security telemetry, and cookie data as described in our Cookie Policy.
- Communications: name, email, phone if you provide them via forms, email, or phone; message content and routing metadata.
- Reservations & events: guest names, party size, preferences, billing contact details where deposits apply, and dietary notes you volunteer.
- Casino Zone: ID verification outcomes, entry timestamps, incident notes required by policy or law, and self-exclusion records where applicable.
- CCTV: video in public areas for security and dispute resolution, retained on a rolling schedule (see §5).
3. Purposes and lawful bases (GDPR)
We rely on:
- Contract — to fulfil reservations, events, and purchases you initiate.
- Legitimate interests — to secure premises, prevent fraud, analyse aggregated site traffic, and improve service, balanced against your rights.
- Legal obligation — where statute requires retention or disclosure to authorities.
- Consent — for optional marketing communications and non-essential cookies where required; you may withdraw consent without affecting lawful processing on other bases.
4. Recipients and transfers
We use processors for hosting, email delivery, booking tooling, and payment services — each bound by written agreements requiring GDPR-aligned safeguards. If data leaves the EEA, we rely on Standard Contractual Clauses or adequacy decisions as applicable.
5. Retention
Logs rotate typically within 90 days unless needed for security investigations. Reservation records follow accounting and tax rules (often 7–10 years for invoice-related subsets). Marketing consents persist until withdrawn. CCTV loops are overwritten according to posted internal policy (commonly 14–30 days) unless an incident requires a legal hold.
6. Your rights
You may request access, rectification, erasure, restriction, portability (where technically feasible), and object to processing based on legitimate interests. You may lodge a complaint with the State Data Protection Inspectorate of Lithuania (ADA) or your local EU supervisory authority. We will verify identity before acting on requests.
7. Children
Our services are directed at adults. The Casino Zone is 18+ after stated hours. We do not knowingly collect data from minors for marketing; if you believe we have, contact us for deletion.
8. Automated decisions
We do not make solely automated decisions with legal or similarly significant effects. ID scanners assist staff; final admission decisions involve human review.
9. Updates
We will revise this policy when practices change. Material updates will be noted with a new effective date at the top of this page.
Effective date: 31 March 2026.