Privacy Policy
Effective from 26 October 2026.
1. Who processes your data
The data controller is VšĮ „Vilniaus miesto opera“ (Vilnius City Opera), legal entity code 302817107, registered office at Ašmenos g. 8, LT-01135 Vilnius, Lithuania. For privacy matters, write to monika@vilniuscityopera.com.
This policy covers the website vilniuscityopera.com, our newsletter and email correspondence. We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and the Law on Legal Protection of Personal Data of the Republic of Lithuania.
2. What data we process and why
|
Purpose |
Data |
Legal basis |
Retention period |
|---|---|---|---|
|
Sending the newsletter |
Email address, date and time of subscription, date of unsubscription |
Your consent (GDPR Art. 6(1)(a); Art. 69 of the Lithuanian Law on Electronic Communications) |
Until you withdraw consent |
|
Replying to email enquiries (information, advertising, media) |
Name, surname, email, phone, organisation, message content |
Legitimate interest in responding (Art. 6(1)(f)); where the enquiry concerns a contract, steps prior to entering into it (Art. 6(1)(b)) |
Up to 2 years after the last correspondence, unless longer is required to perform a contract or comply with the law |
|
Cooperation with sponsors and partners |
Contact person's name, surname, position, work email and phone |
Performance of a contract (Art. 6(1)(b)) and legitimate interest in maintaining cooperation (Art. 6(1)(f)) |
For the duration of the contract; accounting records as long as accounting and archiving laws require |
|
Website operation and security |
IP address, browser type, time of request, server log entries, session cookie |
Legitimate interest in ensuring the website works and is secure (Art. 6(1)(f)) |
Server logs up to 6 months; cookies – see Section 5 |
|
Photography and filming at events |
Your image in photos and videos taken during performances and events |
Legitimate interest in publicising our artistic work (Art. 6(1)(f)) |
While the images are published; removed on request |
We do not sell tickets on this website. Tickets are sold by third-party ticketing providers, who process your data as independent controllers under their own privacy policies.
3. Who receives your data
Your data may be received by service providers that process it on our behalf and under our instructions: our website hosting provider Telia Lietuva, AB (Telia Hostingas), our newsletter platform MailerLite (MailerLite Limited, Ireland) and our email service provider. We sign data processing agreements with them.
We may also disclose data to public authorities where required by law. We do not sell your data or share it with third parties for their marketing.
4. Transfers outside the European Economic Area
We process data within the European Economic Area (EEA): Telia and MailerLite store data in the EU. If a service provider or its sub-processor processes data outside the EEA, the transfer relies on a European Commission adequacy decision (for example, the EU–US Data Privacy Framework) or on standard contractual clauses approved by the Commission.
5. Cookies
We use only strictly necessary cookies:
- wire – session identifier required for the website to work; expires when you close your browser.
- cookies-consent – remembers that the cookie notice has been shown to you; expires after 1 year.
We do not use analytics or advertising cookies. The website code contains an inactive Google Analytics tag: it sets no cookies and collects no visitor statistics, but when it loads, Google Ireland Limited receives your IP address and technical information about your browser. Google may transfer this data to the United States; Google LLC is certified under the EU–US Data Privacy Framework. More details are in our Cookie Policy.
The links to our Facebook, Instagram and YouTube accounts are plain links. Clicking one opens that platform, which processes your data under its own terms.
Performance recording pages contain an embedded LRT Mediateka video player. When you open such a page, your browser connects to lrt.lt, so Lithuanian National Radio and Television (LRT) receives your IP address and technical information about your device. The player may use cookies set by LRT and its partners, including statistics and advertising cookies. LRT processes this data as an independent controller and manages cookie consent within its player; see the LRT privacy policy on lrt.lt for details.
6. Your rights
Under the GDPR, you have the right to:
- access your personal data;
- have inaccurate data corrected;
- have your data erased;
- restrict processing;
- object to processing based on legitimate interest;
- receive your data in a structured, commonly used format (portability);
- withdraw your consent at any time. You can unsubscribe from the newsletter via the link at the bottom of every email.
To exercise your rights, write to monika@vilniuscityopera.com. We will reply within 1 month and may ask you to verify your identity.
If you believe your data is processed unlawfully, you may lodge a complaint with the State Data Protection Inspectorate of Lithuania (vdai.lrv.lt).
7. Children's data
The newsletter is not intended for persons under 14. If we learn that we have received such a person's data without the consent of a parent or guardian, we delete it.
8. Data security
We apply organisational and technical measures to protect data against unauthorised access, loss or alteration. The website runs over an encrypted HTTPS connection, and access to data is limited to staff and service providers who need it.
9. Changes to this policy
We may update this policy. The current version is always published on this page together with its effective date.