Privacy policy
Updated: 2026-10-16
1. Data controller
Švaros Banga, MB — the provider of the “Event Sea” service and the controller of your data (“we” or the “Service”).
Company code: 307021007
Registered office: Taikos pr. 13-69, LT-91135 Klaipėda, Lithuania
Email: info@eventsea.lt
2. What data we collect and why
- Email address — for notifications when ticket sales open and about the pace of sales (“selling fast”) (based on consent, GDPR Art. 6(1)(a)).
- Favourite events (watchlist) — for personal notifications (based on consent).
- Newsletter email and chosen city — for the weekly “what's hot” newsletter (double opt-in consent, GDPR Art. 6(1)(a); an unsubscribe link in every email).
- Payment data — for the Premium subscription and B2B services; payments are processed by Stripe, we do not store card details (performance of a contract, GDPR Art. 6(1)(b)).
- Analytics data — only with your consent, via the cookie-less Vercel Web Analytics (GDPR Art. 6(1)(a)).
- Technical cookies — necessary for the site to work (legitimate interest, GDPR Art. 6(1)(f)).
3. Legal basis
We process data under GDPR Art. 6(1): consent (subscriptions and analytics), performance of a contract (account management) and legitimate interest (security and operation of the site).
4. Retention periods
- Account data — until the account is deleted + 30 days.
- Price history — indefinitely, as anonymous statistical data.
- Analytics data — 12 months.
5. Recipients
We may share data with the following providers:
- Supabase (Ireland) — database (EU data centre).
- Vercel — website hosting and cookie-less visitor statistics (Vercel Web Analytics, only with consent).
- Fly.io (servers in Frankfurt) — data processing infrastructure.
- Stripe — payment processing (Premium and B2B).
- Resend — sending email notifications.
- Google — optional sign-in with a Google account (OAuth).
- Telegram — optional Telegram bot notifications.
Our infrastructure runs in EU data centres (Ireland and Germany). Some of the providers (Stripe, Vercel, Resend, Fly.io, Google) are US companies — transfers to them are based on the EU–US Data Privacy Framework or the EU Standard Contractual Clauses (SCC).
6. Your rights
Under the GDPR you have the following rights:
- Right of access — to obtain a copy of the data we hold.
- Right to rectification — to have inaccurate data corrected.
- Right to erasure — the “right to be forgotten”.
- Right to restriction of processing — to have processing temporarily suspended.
- Right to data portability — to receive your data in a machine-readable format.
- Right to object — to object to processing based on legitimate interest.
- Right to withdraw consent — at any time; withdrawal does not affect the lawfulness of processing carried out before it.
To exercise these rights, write to: info@eventsea.lt. We reply to requests within one month at the latest (GDPR Art. 12(3)).
7. Right to lodge a complaint with a supervisory authority
If you believe that we process your data in breach of the GDPR, you can lodge a complaint with the Lithuanian supervisory authority:
VDAI — Valstybinė duomenų apsaugos inspekcija (State Data Protection Inspectorate)
L. Sapiegos g. 17, 10312 Vilnius
vdai.lrv.lt
Email: ada@ada.lt
If you habitually reside in another EU country, you can also lodge a complaint with the supervisory authority of your country of residence.
8. Data security and automated decisions
We apply technical and organisational security measures: encrypted connections (HTTPS), access restrictions and EU data centres. We do not carry out automated decision-making or profiling that would produce legal or similarly significant effects for you (GDPR Art. 22). The “heat” ranking rates events, not people.
9. Providing data, and children
You can browse the catalogue without providing any personal data. You provide your email and other data voluntarily — without them we cannot send notifications or provide Premium services. The Service is not intended for persons under 14; we do not knowingly collect their data.
10. Cookie summary
- Essential cookies — session, authentication. No consent needed.
- Analytics — site usage statistics (the cookie-less Vercel Web Analytics). Consent required.
The full list of cookies is in the cookie policy. You can change your cookie settings at any time by clicking “Cookie settings” at the bottom of the site.
11. Changes to this policy
We may update this policy. We will announce material changes on the site and notify subscribers by email. The current version is always available on this page; the date of the last update is shown at the top.