Privacy Policy

XS VENTURES, MB ("RUBIX") respects your privacy and is committed to protecting your personal data in accordance with the GDPR and Lithuanian laws.

1. Data Controller

  • Company: XS VENTURES, MB
  • Code: 306987612
  • Address: Maučiuvio g. 17-4, Nairių k., LT-39380
  • Email: [email protected]

2. Data We Collect

  • Reservation details: Name, Phone number, Guest count, Date/Time.
  • Technical data: IP address, browser type, device info (via standard web logs).
  • Cookies: Essential cookies for site functionality and non-essential cookies (analytics/marketing) if you consent.

3. Data Processors

  • We use third-party service providers who process your personal data on our behalf. These processors are carefully selected and contractually bound to comply with GDPR:
  • Google LLC (Google Analytics, Google Fonts) — analytics and font delivery.
  • Stripe Inc. — payment processing for online transactions.
  • [Hosting provider] — secure server hosting and infrastructure.

4. International Data Transfers

  • Some of our service providers, including Google LLC, are located in the United States. When data is transferred to the US, we rely on the European Commission's Standard Contractual Clauses (SCCs) as the appropriate safeguard under Article 46 of the GDPR.
  • By using our services, you acknowledge that your personal data may be processed in countries outside the European Economic Area (EEA) under these safeguards.

5. Purpose of Processing

  • To process and manage table reservations.
  • To communicate with you regarding your booking.
  • To comply with legal and tax obligations (retention of invoice data).

6. Data Retention

  • We retain your personal data only for as long as necessary to fulfill the purposes described in this policy, subject to the following specific periods:
  • Guest accounts: until you request deletion.
  • Reservation records: 2 years after your last visit.
  • Newsletter data: until you unsubscribe.
  • Financial/accounting records: 10 years (Lithuanian tax law requirement).
  • Analytics data: 26 months (Google Analytics data retention setting).

7. Your Rights

  • Right to Access: You can ask what data we hold about you.
  • Right to Rectification: You can ask us to correct incorrect data.
  • Right to Erasure ("Right to be Forgotten"): You can ask us to delete your data at any time (subject to legal retention periods for invoices).
  • Right to Data Portability: You can request to receive your data in a structured, commonly used, machine-readable format, or have it transferred to another controller.
  • Right to Withdraw Consent: Where processing is based on consent, you have the right to withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.
  • Right to Lodge a Complaint: If you believe your data protection rights have been violated, you have the right to lodge a complaint with the supervisory authority:
  • Valstybinė duomenų apsaugos inspekcija (VDAI)
  • L. Sapiegos g. 17, LT-10312 Vilnius
  • Email: [email protected]
  • Website: vdai.lrv.lt
  • To exercise any of these rights, email us at: [email protected]

8. Cookies

  • We use cookies to improve your experience. You can manage your preferences via our Cookie Banner.
  • Essential cookies are always active. Third-party cookies require your explicit consent.

9. Cookies Used

  • guest_token — Essential — Session login — 30 days
  • _ga — Analytics — Google Analytics ID — 2 years
  • _ga_CR8ZE145C3 — Analytics — Google Analytics session — 2 years

10. Updates

  • We may update this policy from time to time. Changes will be posted on this page.