Privacy policy
Last updated September 30, 2026
Who is responsible for your data
K129 living operates the K129 living apartments in Vilnius and this website, and is the data controller for the information described below.
Our contact details are on the contact page.
What we collect
When you book a stay
Your first and last name, email address, phone number, the apartment, your arrival and departure dates, the number of guests and any note you add to the booking. We also keep the booking reference, its status and the price we quoted.
When you use the contact form
Your name, email address, an optional phone number, the subject you picked, your message and the IP address the message came from. We keep the IP address only to block abuse of the form.
When you ask to change or cancel a booking
The dates you are asking for and the reason you give us, kept alongside the booking it belongs to.
Automatically
Our server keeps standard technical logs — IP address, time, requested page, browser — for security and troubleshooting.
What we do not collect
We never handle your card details on this website. No card number, expiry date or security code is ever entered into, transmitted through or stored on our systems. When online payment is introduced, it will run through a certified payment provider on their own pages, and this policy will be updated before that happens.
We do not use advertising or analytics trackers, we do not build profiles, and we do not sell or rent your data to anyone.
Why we are allowed to use it
To perform our contract with you — taking, confirming and servicing your booking, and letting you in on arrival. Without this data we cannot host you.
Because you asked us something — answering your message is in both our interests.
To meet legal obligations — accounting and tax records, and any guest registration required of accommodation providers in Lithuania.
To keep the site working — our legitimate interest in security, fraud prevention and stopping automated abuse of our forms.
Who else sees it
We share your data only with the services we need to run the stay, and only what each of them needs:
Hostaway — the property management system where our bookings and calendars live. Your booking is created there, so our staff can manage the stay.
Our email provider — to deliver your confirmation and any replies.
Our hosting provider — the servers that store this website and its database.
Our accountant and, where required, the tax authority — for invoices and returns.
If you booked through Booking.com, Airbnb or another portal, that portal has its own privacy policy for the data you gave them, and it applies alongside this one.
How long we keep it
Bookings — up to 60 months after departure, so we can handle invoices, warranty and tax questions.
Contact messages — until the question is closed, and then up to 12 months.
Server logs — a few months, then overwritten.
Records we are legally required to keep for accounting are kept for as long as that law requires, even if you ask us to erase everything else.
Your rights
Under the GDPR you can ask us to show you the data we hold about you, correct it, erase it, restrict what we do with it, hand it over in a portable format, or object to our using it. Write to us using the details above and we will answer within one month.
If you are not happy with how we handled it, you can complain to the State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija) in Vilnius, or to the supervisory authority where you live.
Cookies and local storage
This site sets a session cookie so forms work and so a page you submit knows it is still you. It also carries a security token that stops other sites submitting our forms on your behalf. Both are strictly necessary — the site cannot function without them, and neither is used to track you.
If you close a notice at the top of the page, we remember that in your browser's local storage so it does not come back on the next page. That never leaves your device.
There are no analytics, advertising or social media cookies on this site.
Changes to this policy
If we change how we use your data — for example when we add online card payment — we will update this page and change the date at the top.