Privacy Policy

This privacy policy (the "Policy") sets out how VšĮ Dozo (the "Organiser" or "Data Controller") collects, processes and stores personal data that visitors provide when using the website japonukulturosfestivalis.lt and when taking part in the Japanese Culture Festival (the "Festival").

Your privacy matters to us, so we process personal data fairly, transparently and only for lawful purposes, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (the General Data Protection Regulation, "GDPR") and the Law on Legal Protection of Personal Data of the Republic of Lithuania.

Attending the Festival does not involve the sale of tickets – entry to the Festival is free, so this Policy does not cover the processing of ticket-purchase or payment data.

Name: VšĮ Dozo

Legal entity code: 308007658

Registered address: Mickevičiaus g. 11-6, Vilnius, Lithuania

Email for personal-data matters: info@japonukulturosfestivalis.lt

3.1. Registration for workshops and other Festival activities

What data is collected: name, phone number, email address.

How the data is collected and processed: registration data is submitted through a "Google Forms" registration form, automatically carried over into a "Google Sheets" spreadsheet, from which it is passed directly to the "Brevo" platform via the Brevo API, used to send registration confirmation and reminder emails. We do not use any additional third-party automation tools for this data transfer.

Purpose: reserving a participant's place in a specific workshop or activity, and ensuring you're informed of its time, location or any changes.

Legal basis: performance of steps taken at the data subject's request prior to entering into a contract (GDPR Art. 6(1)(b)) – by registering, you are requesting that a place in a specific activity be reserved for you.

Retention period: 6 months from the end of the Festival, after which the data is irreversibly deleted from both "Google Sheets" and the "Brevo" system.

3.2. Photography and filming during the Festival

What data is collected: your image (wide-shot and close-up photographs, video recordings, and, during interviews, your voice and any statements you give).

Purpose: promoting the Festival, marketing, and archiving on the Organiser's website and social media.

Children: if a recognisable minor may appear in frame, we will ask a parent or guardian for consent before using a close-up image. Where possible, children are photographed in wide shots or from an angle that doesn't clearly show their face.

Retention period: 6 months from the end of the Festival.

Your right to object: information about ongoing photography and filming will be posted at the Festival entrances. If you don't want to be photographed or filmed, you can let the organisers or photographer know on site, or contact us at any time at info@japonukulturosfestivalis.lt to request that your image be removed from published material.

3.3. Cookies and website analytics

Currently the website only uses the "Google Search Console" site-ownership verification tool, which does not collect visitors' personal data and does not set tracking cookies on a visitor's device. The website may use only strictly necessary technical cookies required for it to function properly.

We do not currently use visitor-traffic analytics or marketing cookies (e.g. "Google Analytics", "Meta Pixel"). If this changes in future, we will update this Policy accordingly and put in place a cookie-consent management tool.

We do not sell your personal data. Data may only be shared with the following recipients:

• Google Ireland Limited – for collecting and temporarily storing registration data ("Google Forms", "Google Sheets").
• Brevo SAS (formerly "Sendinblue") – for sending registration confirmation and reminder emails.
• Sponsors and funders – after the Festival, they are given only aggregated, non-identifying data (e.g. the total number of Festival visitors or workshop participants), used to prepare funding reports for future years. Names, contact details or individual images are not shared with sponsors.
• Government authorities (law enforcement, tax, or other supervisory authorities), where required by the laws of the Republic of Lithuania.

Because "Google Forms" and "Google Sheets" are provided by a US-based company, data may be processed outside the EU/EEA. Such transfers rely on safeguards approved by the European Commission (standard contractual clauses and/or the EU–US Data Privacy Framework), as applied by "Google".

Under the GDPR you have the following rights:

1. The right to be informed – to be told how your data is processed.
2. The right of access – to request access to the personal data we hold about you.
3. The right to rectification – to request that inaccurate data be corrected or incomplete data completed.
4. The right to erasure ("the right to be forgotten") – to request that your data be deleted where it is no longer needed for the purposes it was collected for, or if you withdraw your consent.
5. The right to restrict processing – to request that processing of your data be temporarily suspended in certain circumstances.
6. The right to object – to object to your data being processed where processing is based on legitimate interest (e.g. event photography).
7. The right to data portability – to receive your data in a structured, machine-readable format.

To exercise these rights, contact us at info@japonukulturosfestivalis.lt. We will respond to and fulfil your request within no more than 1 month.

If you believe your rights have been violated, you have the right to lodge a complaint with the State Data Protection Inspectorate of Lithuania (VDAI), www.vdai.lrv.lt.

The website japonukulturosfestivalis.lt provides links to our "Facebook" and "Instagram" accounts and other related channels. The website currently does not use any social media content plugins (e.g. embedded posts or feeds) – these are external links only, leading to the respective platforms.

The Organiser is not responsible for the privacy policies of third-party websites or social media platforms. We recommend reviewing their privacy notices separately.

The Organiser reserves the right to update or amend this Privacy Policy at any time. The updated version takes effect from the day it is published on the website.