Privacy Policy

The controller of personal data is Habidesk.

Email for enquiries and data protection matters: [email protected].

• Account and identity data — first name, last name, email, password, phone number, data from external account sign-in. Used for account administration and security.
• Payment and financial data — bank account number, payment history. Payment card data is processed directly through the secure payment system.
• Tax data (DAC7) — personal identification number, date of birth, company registration number, VAT number, registered address. Collected on the basis of a legal obligation for reports submitted to the tax authority.
• Listing and booking data — space addresses, photos, booking times, dispute history.
• Technical data — IP address, session data, browser settings.

• Personal and account data — until account deletion plus 30 days.
• Accounting documents, invoices, and DAC7 report records — 10 years (in accordance with Lithuanian law).
• Dispute and booking history — 10 years (to protect against legal claims within the limitation period).

We do not sell or share your personal data for marketing purposes. Data may only be shared with the following partners:

• Payment and identity verification service providers.
• The State Tax Inspectorate (STI) — for legally required reports.
• Server and infrastructure providers (data stored on secure servers within the European Union).

We care deeply about the security of your data and your peace of mind. At any time you may:

• Check what data we hold about you.
• Request correction of inaccurate or outdated information.
• Delete your account with one click or ask us to remove your data.
• In certain cases, restrict or object to the processing of your data.