Privacy policy
Last updated 30 October 2026. This is an English translation of our Privatumo politika; if the two ever differ, the Lithuanian version applies.
1. Who looks after your data
The data controller is MB Kavos Klubas (company code 305439381, Vytauto g. 35-10, LT-08119 Vilnius, Lithuania), which owns the café Espresinė, the roastery Kavos Broliai and this website, espresine.lt.
Questions about your data: espresine@kavosbroliai.lt. We reply within 30 days at the latest.
This policy applies to the website espresine.lt. The website sells nothing: you buy coffee, gift vouchers and tasting tickets on kavosbroliai.lt, where your data is handled under the kavosbroliai.lt privacy policy.
2. What data we collect and why
We collect only what we need. The legal basis is given under Article 6(1) of the General Data Protection Regulation (GDPR).
| When | Data | Why | Basis |
|---|---|---|---|
| You visit the website | technical data (IP address, browser, pages visited) in the server logs, the consent cookie | to keep the website running and secure | legitimate interest (f) |
| You agree to statistics cookies | visit statistics (Google Analytics 4): which pages you viewed, where you came from, approximate location (city), browser and device data, the cookie identifier | to understand what is useful on the website | consent (a) |
| You email or call us | name, email address or phone number, your message | to answer your question | legitimate interest (f) |
| You leave a Google review of Espresinė | your public name (on the website we show only the first name and the initial of the surname), the review text, the stars and the date | to show visitors real reviews and our replies to them | legitimate interest (f) |
The website has no forms, accounts, newsletter or shop, so we ask you for no other data. This website uses no advertising cookies (Meta pixel, Google Ads). Fonts and photos load from our own server; the map opens in Google Maps only when you click the link.
If you would rather we did not show your review on the website, write to us and we will remove it.
3. Who we share data with
We share data only with those without whom the website would not work, or where the law requires it. They handle our data under contract and only for the purposes we set.
| Recipient | For what |
|---|---|
| UAB „Interneto vizija“ (IV.LT) | hosting of the website and email |
| Google Ireland Limited | visit statistics — only with your consent to statistics cookies |
| Public authorities | when the law requires it |
We do not sell data.
Transfers outside the European Economic Area. Google may also process data in the USA. In that case the EU–US Data Privacy Framework or the standard contractual clauses approved by the European Commission apply.
4. How long we keep it
| Data | How long |
|---|---|
| Emails and enquiries | 1 year from the last message |
| Server logs | up to 3 months |
| Google Analytics 4 statistics | 14 months |
| The consent cookie in your browser | up to 12 months |
| Reviews on the website | as long as we show them; removed on request |
When the period ends, we delete or anonymise the data.
5. Your rights
You have the right to:
- access your data and get a copy of it;
- have inaccurate data corrected;
- have your data deleted when it is no longer needed or is processed without a basis;
- restrict processing, or object to processing based on legitimate interest;
- receive the data you gave us in a common machine-readable format (portability);
- withdraw your consent at any time — this does not affect processing carried out before the withdrawal.
Write to espresine@kavosbroliai.lt. Before handing over data we may ask you to confirm your identity. We will reply within 30 days.
If you believe your data is processed unlawfully, you can complain to the State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija): L. Sapiegos g. 17, 10312 Vilnius, tel. +370 5 271 2804, ada@ada.lt, www.vdai.lrv.lt. We would be grateful if you came to us first — we can often sort it out faster.
6. Cookies
The essential cookie is always set: the cookie consent banner remembers your choice.
Statistics cookies (Google Analytics 4 via Google Tag Manager) are set only with your consent. Until you consent, Google tags run in consent mode (Consent Mode v2) and set no cookies. Google Analytics 4 does not store IP addresses.
This website uses no marketing cookies.
You can change your choice at any time with “Cookie settings” at the bottom of the website. The full list of cookies and how long they last is in our Cookie policy.
7. Social media
We have Espresinė and Kavos Broliai accounts on Facebook and Instagram. When you post, comment or like there, we see your public name and what you wrote — we use it only to reply and keep in touch. We handle the accounts’ statistics together with Meta Platforms Ireland Limited (joint controllers); how Meta handles data is described in its privacy policy.
8. Security
The website works only over an encrypted connection (HTTPS). Only our team has access to the website’s administration and the email.
9. Children
We do not knowingly collect data from anyone under 14.
10. Changes
We review this policy at least once a year and whenever our processing changes. The latest version is always on this page; the date is at the top.