Privacy policy

Last updated: 28 October 2026

Raganeta, IĮ ("we", "us") runs rillbook.com, a website and booking platform for creative studios. This policy explains what personal data we collect through rillbook.com, why we collect it, how long we keep it and what rights you have. If anything is unclear, write to us at kasheftin@rillbook.com.

1. Who we are

The data controller for rillbook.com is:

2. What data we collect

  • Contact form: your name, email address, phone number (if you give it) and your message.

  • Account: if you sign up, your name, email address, phone number, a hashed version of your password and your settings (language, theme, cookie choices).

  • Technical data: IP address, browser and device information and server logs, needed to run and protect the site.

  • Analytics: how the site is used (pages visited, approximate location, device type), collected by Google Analytics. With your consent it uses cookies; without it, it sends only cookieless signals (see Cookies below).

3. Why we use it, and on what legal basis

  • To answer your enquiry and discuss using RillBook: steps taken at your request before a possible contract, and our legitimate interest in replying.

  • To create and run your account: performance of a contract (providing the account you signed up for).

  • To keep the site secure and working, including spam protection on forms: our legitimate interest.

  • To understand how the site is used and improve it: your consent for analytics cookies, given through the cookie banner; the cookieless signals sent without consent rely on our legitimate interest in counting visits.

  • To meet legal obligations, such as accounting or requests from authorities: legal obligation.

We do not sell your data and do not send you marketing emails without your consent.

4. Cookies

Necessary cookies keep you signed in, protect the site and remember your cookie choice. The site does not work properly without them, so they cannot be switched off.

Analytics cookies (Google Analytics) are set only if you choose "Allow all" or allow them under "Customize". Without that consent, Google Analytics sets no cookies and sends only cookieless signals (such as a page view, without an identifier that recognises you on your next visit), which Google uses to estimate overall visitor numbers.

Marketing cookies: we do not currently use any on rillbook.com.

Our forms are protected by Google reCAPTCHA, which checks that a real person is sending the form and may collect device and browser data for that purpose.

Your cookie choice is kept for one year. You can change it at any time with the "Cookie settings" link at the bottom of every page.

5. Who we share data with

We share data only as far as needed to run rillbook.com:

  • Hetzner Online GmbH, which hosts our servers in Germany;

  • Google, for Google Analytics and Google reCAPTCHA; Google may process data outside the EU under the EU-US Data Privacy Framework and standard contractual clauses;

  • Calendly, if you book a call with us through it (Calendly's own privacy policy applies there);

  • public authorities, when the law requires it.

6. Studios that use RillBook

When a studio uses RillBook to run its own website and bookings (for example, Artoteka.lt), the studio is the controller of its customers' data and we process that data on the studio's behalf. For those websites, the studio's own privacy policy applies.

7. How long we keep data

  • Contact form messages: as long as needed to handle the conversation, and no longer than 2 years after our last contact.

  • Account data: for as long as your account exists; we delete it when you ask us to.

  • Analytics data: for the retention period set in our Google Analytics account, no longer than 14 months.

  • Cookie choice: one year, or until you change it.

  • Server logs: a limited time, needed for security and fixing errors.

  • Data we must keep by law (for example, accounting records): for the period the law requires.

8. Your rights

You have the right to:

  • access the personal data we hold about you;

  • have inaccurate data corrected;

  • have your data deleted when there is no longer a reason to keep it;

  • restrict or object to how we process it;

  • receive your data in a structured, machine-readable format;

  • withdraw your consent at any time, without affecting processing done before you withdrew it.

To use any of these rights, write to kasheftin@rillbook.com. We reply within one month. You can also complain to the Lithuanian supervisory authority, the State Data Protection Inspectorate (vdai.lrv.lt).

9. Security

We use reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, change or disclosure.

10. Changes to this policy

We may update this policy when our services, the technology we use or legal requirements change. The current version is always published on this page.