Updated 1 November 2026.
1. Controller
This website (Matrest) is operated by Čižinių centras, MB, company code 153276178, registered office Didlaukio g. 80-96, LT-08326 Vilnius, Lithuania. Contact for privacy questions: info@matrest.com, phone +370 600 99666.
2. What we process, why and on what basis
Answering enquiries sent through the contact forms, by e-mail or by phone
- Data
- name, e-mail address, phone number, the content of your message
- Legal basis (GDPR Art. 6)
- steps at your request before a contract (Art. 6(1)(b)) or our legitimate interest in answering you (Art. 6(1)(f))
- Retention
- until the enquiry is resolved and a reasonable time after
Security and operation of the website
- Data
- technical data in server logs (IP address, requested page, browser)
- Legal basis (GDPR Art. 6)
- legitimate interest in a secure website (Art. 6(1)(f))
- Retention
- as set by the hosting provider's log rotation
Delivering fonts, pictures and standard scripts from third-party networks
- Data
- IP address and browser details
- Legal basis (GDPR Art. 6)
- legitimate interest in a fast, correctly displayed website (Art. 6(1)(f))
- Retention
- as set by each provider (section 4)
Showing the map on the Contacts page
- Data
- IP address and browser details sent to Google
- Legal basis (GDPR Art. 6)
- your consent (Art. 6(1)(a)), only after you press "Show the map"
- Retention
- as set by Google (section 4)
Optional traffic-source attribution
- Data
- a cookie set by WooCommerce Order Attribution
- Legal basis (GDPR Art. 6)
- your consent (Art. 6(1)(a)), only after you click Accept
- Retention
- until you withdraw consent or the cookie expires
3. Cookies and your choice
The site sets the cookies it needs to work (for example a session cookie). Optional cookies, such as the traffic-source attribution cookies, are set only if you click Accept in the cookie banner; Decline keeps them off. Your choice is stored in your browser and you can change it by clearing this site’s browser storage.
The map on the Contacts page does not contact Google until you press "Show the map". Jetpack Stats, which used to load on every page, was switched off on 1 November 2026. The font and picture networks in section 4 are contacted on every page because the page cannot be displayed without them; they are not used to track you.
4. Recipients and processors
Your data is handled by our staff and by the companies below. We measured on 1 November 2026 (a headless browser on a desktop and a mobile screen, on the home page, the Contacts page, the shop page and a team page, before and after pressing Accept) which outside hosts this website contacts; every one is listed here. We do not sell personal data.
Website hosting and e-mail delivery
- Hosts contacted
- matrest.hostingas.lt
- Company
- UAB Interneto vizija (J. Kubiliaus g. 6, LT-08234 Vilnius, Lithuania), operator of the Hostingas hosting service
- Purpose
- Runs the website, stores it and its database, writes server logs and delivers the e-mails the contact forms send.
- Data
- IP address, requested page and browser details in server logs; the content of the messages you send through the contact forms.
- Legal basis
- Processor acting on our behalf under GDPR Art. 28; our own basis is in section 2.
- Transfer outside the EEA
- None: servers and operator are in Lithuania.
- When
- On every visit, because the site is served from there.
- Vendor documents
- Hosting operator's privacy policy (hosting section 10)
Adobe Fonts (web font)
- Hosts contacted
- use.typekit.net, p.typekit.net
- Company
- Adobe Systems Software Ireland Limited and Adobe Inc.
- Purpose
- Delivers the typeface the site is designed in.
- Data
- Your IP address (received to deliver the font; Adobe says it does not store it), the address of the page loading the font and the font project; Adobe says it sets no cookies to serve fonts.
- Legal basis
- Our legitimate interest in showing the site in its chosen typeface (Art. 6(1)(f)).
- Transfer outside the EEA
- Standard Contractual Clauses between the Adobe entities, as Adobe describes on its EU data transfers page.
- When
- On every page, before and after your cookie choice.
- Vendor documents
- Adobe Fonts privacy information; Adobe EU data transfers
Jetpack Site Accelerator (image and script delivery network)
- Hosts contacted
- i0.wp.com, c0.wp.com
- Company
- Aut O'Mattic A8C Ireland Ltd (Grand Canal Dock, 25 Herbert Pl, Dublin D02 AY86, Ireland) and Automattic Inc. (USA)
- Purpose
- Serves our pictures and standard WordPress and WooCommerce scripts and style sheets from a fast global network.
- Data
- Your IP address and browser details, as in any request to those servers. Automattic's Jetpack page lists no visitor data for this service.
- Legal basis
- Our legitimate interest in a fast website (Art. 6(1)(f)).
- Transfer outside the EEA
- Standard contractual arrangements approved by the European Commission, as Automattic's privacy policy states.
- When
- On every page, before and after your cookie choice.
- Vendor documents
- Jetpack Site Accelerator; Automattic privacy policy
Jetpack Stats and WooCommerce Analytics (switched off)
- Hosts contacted
- stats.wp.com, pixel.wp.com
- Company
- Aut O'Mattic A8C Ireland Ltd (Dublin, Ireland) and Automattic Inc. (USA)
- Purpose
- Site statistics. These two services were loaded on every page without waiting for your choice; we switched them off on 1 November 2026 and they are no longer loaded.
- Data
- While active: IP address, user agent, visited address, referring address, time, browser language and country code. Automattic says visitor IP logs are retained for 28 days.
- Legal basis
- None applies today: the service is off. We will only switch statistics on again together with a consent choice.
- Transfer outside the EEA
- Standard contractual arrangements approved by the European Commission, as Automattic's privacy policy states.
- When
- Not loaded since 1 November 2026.
- Vendor documents
- Jetpack privacy information (Stats); Automattic privacy policy
Google Maps (embedded map on the Contacts page)
- Hosts contacted
- maps.google.com, www.google.com, maps.gstatic.com, maps.googleapis.com, fonts.googleapis.com, fonts.gstatic.com
- Company
- Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) for visitors in the EEA; Google LLC (USA) for the map display
- Purpose
- Shows a map of our address on the Contacts page.
- Data
- Your IP address, browser details and the cookies and similar technologies Google uses, as Google's privacy policy describes.
- Legal basis
- Your consent (Art. 6(1)(a)): the map stays blank until you press "Show the map".
- Transfer outside the EEA
- Google says it complies with the EU-US Data Privacy Framework and relies on Standard Contractual Clauses where needed.
- When
- Only on the Contacts page, and only after you press "Show the map".
- Vendor documents
- Google privacy policy; Google data transfer frameworks
Jetpack protection and site connection
- Hosts contacted
- server-side (not visible in the browser)
- Company
- Aut O'Mattic A8C Ireland Ltd (Dublin, Ireland) and Automattic Inc. (USA)
- Purpose
- Protects the site against attacks (login protection, firewall rules, uptime monitoring) and keeps the site connected to WordPress.com.
- Data
- For failed logins: IP address, the user name or e-mail address tried and the browser details. Jetpack also copies a defined subset of the site's data to WordPress.com.
- Legal basis
- Our legitimate interest in the security of the website (Art. 6(1)(f)).
- Transfer outside the EEA
- Standard contractual arrangements approved by the European Commission, as Automattic's privacy policy states.
- When
- In the background on our server; your browser does not contact Automattic for this.
- Vendor documents
- Jetpack privacy information; Automattic privacy policy
Akismet spam check
- Hosts contacted
- server-side (not visible in the browser)
- Company
- Aut O'Mattic A8C Ireland Ltd (Dublin, Ireland) and Automattic Inc. (USA)
- Purpose
- Checks comments left on the site for spam. The contact forms are not sent to Akismet: their templates carry no Akismet fields (checked on 1 November 2026).
- Data
- When a comment is submitted: IP address, browser details, name, e-mail address, website and message.
- Legal basis
- Our legitimate interest in keeping spam out (Art. 6(1)(f)).
- Transfer outside the EEA
- Standard contractual arrangements approved by the European Commission, as Automattic's privacy policy states.
- When
- In the background on our server, only when a comment is submitted.
- Vendor documents
- Jetpack privacy information (Akismet); Akismet terms of use
Other installed plug-ins
These plug-ins are installed but did not contact any outside host from visitors’ browsers when we measured: Google for WooCommerce, WooCommerce Tax, elegro Crypto Payment, LatePoint, Booked, Smash Balloon Instagram Feed, Slider Revolution, The Events Calendar, Envato Market, Cookie Information (WP GDPR Consent). Before any of them is used for visitor data, it will be added to this section.
5. Transfers outside the EEA
Some of the companies above are or have group companies in the United States. Where your data reaches them, the transfer relies on the mechanisms they state in their own documents linked above: Standard Contractual Clauses (Adobe, Automattic, Google) and, for Google, also the EU-US Data Privacy Framework. The hosting provider keeps your data in Lithuania.
6. Your rights
Under GDPR Articles 15-22 you may ask for access to your data, correction, erasure, restriction, portability and object to processing, and withdraw consent at any time. Write to info@matrest.com; we answer within one month. You may also complain to the State Data Protection Inspectorate of Lithuania (VDAI, vdai.lrv.lt).
7. Changes
We may update this policy; the current version is always published on this page with its date.