Mastera

Privacy Policy

This version of the Privacy Policy is effective as of 27 August 2026.

This Privacy Policy explains what personal data Mastera, UAB (the "Company", "we", "us") collects and processes when you use our website and book our lawn care and landscaping services. We respect your privacy and are committed to processing your personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation, "GDPR"), the Law of the Republic of Lithuania on Legal Protection of Personal Data, and other applicable legislation.

This Policy applies to all individuals who visit the website and/or submit the booking form.

1. Data Controller

The controller of your personal data is:

  • Mastera, UAB
  • Company code: 303170740
  • VAT payer code: LT10000813321
  • Registered address: Panerių g. 54, LT-02194 Vilnius, Lithuania
  • Email: compliance@mastera.lt
  • Phone: +370 640 74136

2. What Personal Data We Collect

Depending on how you use the website, we may collect the following categories of personal data:

  • Booking data: full name, phone number, plot size and location, description of the work required, selected service date, and the frequency/duration of a recurring booking (if applicable).
  • Photos: images you voluntarily attach to help us assess the scope of work.
  • Technical data: IP address, browser type, language preference and other technical data collected automatically while using the site (e.g. in server logs, session and CSRF-protection cookies).
  • Correspondence data: information you provide when contacting us by email or phone.

3. Purposes of Processing and Legal Basis

  • Administering your booking and providing the service (assessment, scheduling, performance of the work and follow-up visits) – Art. 6(1)(b) GDPR (performance of a contract / steps taken at your request prior to entering into a contract).
  • Contacting you regarding booking confirmation, changes or queries – Art. 6(1)(b) and (f) GDPR (performance of a contract and our legitimate interest in ensuring smooth service delivery).
  • Bookkeeping and fulfilling tax obligations – Art. 6(1)(c) GDPR (compliance with a legal obligation under Lithuanian accounting and tax legislation).
  • Operating the website (maintaining your session, remembering your language choice, protecting against CSRF attacks) – Art. 6(1)(f) GDPR (our legitimate interest in keeping the site secure and functional); these cookies are strictly necessary and do not require consent.
  • Statistical analysis of website usage (e.g. via Google Analytics), where enabled – Art. 6(1)(a) GDPR (your consent), obtained before such cookies are activated.

4. Who We May Share Your Data With

Your personal data is processed by authorised Company staff. We may share data with:

  • Hosting and IT service providers who process data on our behalf as data processors under Art. 28 GDPR and data processing agreements concluded with us.
  • Analytics service providers (e.g. Google Analytics), where used and you have given consent.
  • Competent public authorities, where required by applicable law.

We do not sell or rent your personal data to third parties for marketing purposes.

5. Transfers of Data Outside the EEA

Where analytics tools such as Google Analytics are used on the site, some data may be processed on servers located outside the European Economic Area (EEA), for example in the United States. In such cases, the transfer is carried out on the basis of the European Commission's Standard Contractual Clauses or other appropriate safeguards under Chapter V of the GDPR. If such tools are not used, your data is not transferred outside the EEA.

6. How Long We Keep Your Data

Data submitted through the booking form is kept for as long as necessary to provide the service and resolve any related matters, and thereafter until you request its deletion, unless the law (e.g. Lithuanian accounting or tax legislation) requires us to retain certain records for a longer statutory period (e.g. accounting documents for up to 10 years). Photos submitted with a booking are kept only for as long as necessary to assess and carry out the work, and may subsequently be deleted at your request. Cookie retention periods are set out in Section 8 of this Policy.

7. Your Rights

As a data subject, under the GDPR you have the following rights:

  • The right to access your personal data (Art. 15 GDPR);
  • The right to request rectification of inaccurate data (Art. 16 GDPR);
  • The right to request erasure of data (the "right to be forgotten") (Art. 17 GDPR);
  • The right to restrict processing (Art. 18 GDPR);
  • The right to data portability (Art. 20 GDPR);
  • The right to object to processing based on legitimate interest (Art. 21 GDPR);
  • The right to withdraw consent at any time, without affecting the lawfulness of processing carried out before the withdrawal (Art. 7(3) GDPR);
  • The right to lodge a complaint with a supervisory authority.

To exercise these rights, please contact us at compliance@mastera.lt. We will respond to your request within 1 month of receipt, as required by the GDPR.

8. Cookies

Our website uses the following cookies:

  • Strictly necessary cookies (session, CSRF protection and language selection) – required for the website to function and remain secure. These cookies do not require consent (exemption under Art. 61(3) of the Lithuanian Law on Electronic Communications).
  • Analytics cookies (e.g. Google Analytics, if enabled) – used to collect statistical information about site traffic. These cookies are activated only after obtaining your prior consent via a cookie banner.

You may delete cookies or withdraw your consent to their use at any time in your browser settings; this may affect the functioning of certain features of the site.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, disclosure or destruction, including access restrictions, secure data transmission (HTTPS) and regular system maintenance.

10. Children's Data

Our services are intended for adults. We do not knowingly collect personal data from minors. If we become aware that such data has been provided without parental or guardian consent, we will delete it without undue delay.

11. Changes to This Policy

We may update this Privacy Policy from time to time, for example following changes in legislation or in the services we provide. The current version is always published on this page, together with its effective date.

12. Contact and Complaints

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:

  • Email: compliance@mastera.lt
  • Phone: +370 640 74136
  • Address: Panerių g. 54, LT-02194 Vilnius

If you believe your personal data protection rights have been violated, you have the right to lodge a complaint with the State Data Protection Inspectorate (VDAI), website: https://vdai.lrv.lt.