i
+370 699 61678

Privacy Policy

Updated on 22 September 2026.

This policy explains how we process personal data about visitors to laimonofoto.lt, people who contact us and our photography clients. We offer services in Lithuania, Latvia and Estonia.

1. Who is responsible for your data

The data controller is MB Laimonofoto, company registration number 306685286, registered office: Bajorų kel. 36, LT-08427 Vilnius, Lithuania.
For privacy enquiries, email laimonofoto@gmail.com or call +370 699 61678.

2. What data we process and why

  • Enquiries and bookings. We process the name, contact details, correspondence, photography location, booking information and other details you provide when contacting us. We use them to respond, arrange and deliver our services. The legal basis is taking steps before entering into a contract and performing a contract (GDPR Article 6(1)(b)); for representatives of organisations, it is our legitimate interest in managing business relationships (Article 6(1)(f)).
  • Photographs. We process photographs and booking information when providing our services. Photographs are personal data when a person can be identified from them. The legal basis for preparing, delivering and archiving commissioned photographs depends on our relationship with the person photographed: performance of a contract, a legitimate interest in fulfilling the commission or, where required, consent. Public use of photographs of identifiable people in a portfolio is considered separately; booking a service does not constitute consent to unrestricted publication.
  • Accounting and legal claims. We process booking, payment and invoice data to meet legal obligations (Article 6(1)(c)). Data necessary to establish, exercise or defend legal claims may be processed on the basis of legitimate interests (Article 6(1)(f)).
  • Website operation and security. The server and security tools may process IP addresses, request dates and URLs, browser information and security events. This supports website operation, abuse detection and data security, based on legitimate interests (Article 6(1)(f)).
  • Audience measurement and cookies. This website uses Google Analytics. Depending on your consent choices, data about pages visited, interactions, devices and cookie identifiers may be processed. The legal basis for optional cookies and analytics requiring consent is your consent (Article 6(1)(a)). See our Cookie Policy for more information.

We do not use client contact details for newsletters or direct marketing. We do not sell personal data. Visiting the website does not oblige you to book a service. If you do not provide information necessary for a booking, we may be unable to respond or provide the service.

Advertising tag. This website also uses a Google Ads tag. It runs after consent to marketing cookies and may transmit visit, interaction, device and cookie identifier data to measure advertising results. This is a separate website function: we do not use clients’ email addresses or telephone numbers for advertising.

Other Google components. The website uses Google Fonts, technical Google Maps resources and a Sign in with Google component. When these are loaded, the provider may receive your IP address and browser information. Google’s privacy rules and the information in the Cookie Policy also apply to these components.

3. How long we keep data

  • We retain photographs for 5 years.
  • We keep enquiry and correspondence data for as long as necessary to handle the enquiry and administer the associated booking. We retain additional data only where required to meet legal obligations or defend specific claims, taking applicable time limits into account.
  • Accounting records are retained for the periods required by law.
  • Cookie lifetimes are listed in our Cookie Policy. Retention of technical and security records depends on their security purpose, incident investigation needs and service settings. Data must be deleted or anonymised once the applicable retention need ends.

4. Who may receive data

Data may be accessible to providers of website hosting, email, file storage and transfer, IT support or accounting services only as needed for their role. Website hosting is provided by Interneto vizija (serveriai.lt), audience measurement by Google and security tools by Wordfence (Defiant). Consent preferences are managed using Complianz. Data may also be disclosed to competent authorities where required by law.

When using international providers, data may be processed outside the European Economic Area, including in the United States. Providers describe their transfer mechanisms in Google's data transfer information and Wordfence's Standard Contractual Clauses. You can contact us by email for information about safeguards applicable to a particular transfer.

5. Your choices and rights

The cookie banner lets you accept or reject optional cookies and choose categories. You can change your choices through “Manage consent”. Withdrawing consent does not affect the lawfulness of processing based on consent before its withdrawal.

When you reject or withdraw the relevant consent, analytics and advertising tags are blocked from running. Cookies saved earlier may remain in your browser until they expire; you can delete them in your browser’s privacy settings.

Under the GDPR and subject to its conditions, you may request access to, correction or deletion of your data, restriction of processing or data portability. You may object to processing based on legitimate interests and withdraw consent where processing is based on consent. These rights are not absolute; for example, we may have to retain some data by law.

Send requests to laimonofoto@gmail.com. Where necessary, we will request proportionate information to verify your identity. We will respond within the GDPR time limits, normally within one month. You may also complain to the Lithuanian State Data Protection Inspectorate or the competent supervisory authority where you live or work.

6. External websites and policy updates

Social media and other external links lead to websites operated by other controllers and governed by their own privacy policies. We update this policy when our services or data processing change; the latest version is published on this page.