Privacy Notice

Updated 30 September 2026.

This notice explains how we handle personal data when you visit marsasbistro.lt, contact us or book a table.

Who is responsible for your data?

The data controller is UAB SMAGIAI (trading as “Marsas Bistro”). For privacy questions or to exercise your rights, email labas@marsasbistro.lt. The restaurant you can visit is at Pilies g. 1, Kaunas, Lithuania.

What data do we use, and why?

• Website operation and security. When you open the website, the server receives technical request data such as your IP address, request time, page requested and browser information. We use this to deliver the site, diagnose problems and protect it against misuse. The legal basis is our legitimate interest in operating a functional and secure website.
• Enquiries. When you call or email us, we use the contact details and message you provide to reply and discuss your visit. The legal basis is our legitimate interest in answering enquiries; where you are arranging a booking, we also take steps at your request before providing the service.
• Reservations. In the Tablein widget you provide a booking time, party size, name, contact details and any optional notes. We use these to accept, confirm or change your reservation and prepare for your visit. The legal basis is taking steps at your request and fulfilling the reservation. We cannot accept an online booking without the required details.
• Optional website analytics. Only with your consent, Google Analytics 4 helps us understand which pages people visit and whether they click booking, phone and menu PDF links. This involves cookie identifiers, page views, those clicks and technical browser and connection data. The legal basis is your consent. A click indicates interest, not a confirmed reservation or a completed call.

Please do not include unnecessary or sensitive personal data in reservation notes. Discuss allergies and other food-related needs directly with our team.

Service providers and external links

Hostinger hosts our website. We make website backups with UpdraftPlus and store them in Google Drive. Tablein provides the reservation system and, according to its privacy policy, processes restaurant guest booking data on the restaurant’s behalf. Opening our reservations page connects your browser to Tablein; information you enter in the form is submitted through its widget. We also use email and communications providers to handle enquiries. Providers receive the data needed to perform their services.

Tablein says some of its providers may process data outside the European Economic Area and that it applies appropriate safeguards to such transfers. See Tablein’s privacy policy for details.

If you agree to analytics, we use Google Analytics, provided by Google Ireland Limited, under the accepted Google data processing terms. Google and its subprocessors may process data outside the European Economic Area, including in the United States; those terms and their appendices describe the applicable transfer safeguards. See also how Google uses data from partner websites.

Our directions button is a link to Google Maps. Google’s service opens only if you click it; we do not embed a map on this page.

Cookies and analytics

Before enabling our website analytics, we offer equally presented “Allow analytics” and “Reject analytics” choices. Until you agree, we do not load this analytics code or send data to Google Analytics. You can refuse and still use the whole website and book a table. With the same optional analytics choice, our Google tag also configures the Marsas Bistro Google Ads destination. Advertising storage, advertising user-data sharing, advertising personalization and Google signals remain disabled. No completed-reservation conversion or monetary value is sent by this website integration. The separate Google Ads destination does not establish completed-booking attribution. Our GA4 property is linked to Google Ads to help measure advertising performance. Audience import for advertising personalization is not enabled.

Your choice is valid for 180 days and is remembered in your browser’s local storage. If it cannot be saved there, a necessary refusal-only cookie, marsas_analytics_denied, may remember a refusal for up to 180 days. If your browser does not allow the choice to be saved, we may ask again on the next page. With consent, Google Analytics uses _ga and _ga_… cookies; we configure a lifetime of up to 180 days and turn off automatic renewal.

You can change your choice or withdraw consent at any time using “Cookie settings” in the page footer (“Slapukų nustatymai” in Lithuanian) and choosing “Reject analytics”. This stops our website analytics collection and clears this website’s analytics cookies; the page may reload. Withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.

Our analytics implementation does not read booking form fields. Its events do not include names, email addresses, phone numbers or clicked link text. We send the page address without query parameters or fragments and only the referring website’s origin, not the full referring URL. The Tablein widget loads separately on the reservations page and may use technical cookies needed for booking and security; see Tablein’s privacy policy for its cookie information.

Separate Tablein analytics. The booking widget has a separate Google Analytics integration enabled to measure widget use and reservation creation. It may set analytics cookies on the Tablein domain and send page-view, booking and technical browser data to Google. Our website’s Cookie settings do not currently control that separate integration; it may load even when you have not accepted website analytics. This notice does not constitute your consent to analytics. If you prefer not to use the external widget, book by phone at +370 644 48144 or email labas@marsasbistro.lt. Our website analytics cookie lifetime settings do not automatically apply to cookies on the Tablein domain.

How long do we keep data?

We keep data for as long as needed for its purpose: to answer an enquiry and resolve related matters, manage a reservation and visit, or maintain website security. If a legal retention period applies to particular records, or data is needed to establish or defend a legal claim, we keep it only as long as necessary for that reason. We then delete or anonymise it.

We set Google Analytics user-level and event-level data retention to 2 months and disable renewal based on new activity. Expired data is removed through Google’s monthly deletion process. This setting does not apply to standard aggregated statistical reports, which may remain available longer; see Google Analytics’ data retention explanation.

Your rights

You may ask to access, correct or erase your data, restrict its use, object to processing based on legitimate interests and, where applicable, receive your data in a portable format. Email labas@marsasbistro.lt to exercise these rights. We may ask you to confirm your identity to avoid disclosing data to someone else. You may also lodge a complaint with the Lithuanian State Data Protection Inspectorate.