Updated on 23 October 2026.
This policy explains how we handle your personal data when you use ibar.lt, request a table reservation or contact iBAR. It provides information about processing; it does not ask you to consent to every activity described here.
1. Who is responsible for your data?
The controller is UAB “Ibar LT”, company registration number 305579045, Lithuania. Send privacy questions and requests to info@ibar.lt. Our general contact telephone number is +370 686 58144.
2. Table reservations
You provide your name, phone number, email address, chosen bar, visit date and time, number of guests and seating preference. Comments are optional. The system also records the request reference, submission and modification times, status, assigned tables, notification delivery status and relevant staff actions.
We need your name to identify your reservation, email to send confirmations and changes, and phone number for urgent matters concerning your visit. The online request cannot be submitted without the mandatory fields. You can also arrange a reservation by contacting the bar by telephone. Do not include identity numbers, payment card details, health information or other sensitive data in comments; discuss particular requirements directly with a staff member.
We use this information to receive, arrange and fulfil your requested reservation and send related notifications. The legal basis is taking steps at your request before entering into a contract and performing that contract (GDPR Article 6(1)(b)). For a limited period after your visit, we retain information to resolve reservation-related questions and possible claims (our legitimate interest, Article 6(1)(f)).
Reservation data retention: 90 days after the scheduled end of your visit. After that period, at the next daily deletion check, we remove the reservation record, contact details, comment, related notification copies and activity records from the reservation system. The period for cancelled reservations or no-shows also runs from the scheduled end of the visit. Specific information necessary for a dispute or legal obligation may be kept for longer, solely for that purpose and until it ends; this does not extend retention for other reservations.
Making a reservation does not subscribe you to a newsletter. Reservation confirmations, changes and reminders are service messages. Where marketing requires consent, we request it separately.
3. Enquiries and the chat assistant
When you email us, submit an enquiry form or use “tawk.to” chat, we process the contact details and messages you provide and our replies. Enquiries about a service you request rely on GDPR Article 6(1)(b); other enquiries rely on our legitimate interest in responding and providing customer service (Article 6(1)(f)). Correspondence is kept until the enquiry is resolved, or until a related ongoing service or specific dispute is concluded where further retention is necessary. Copies are then removed from the relevant email or chat system.
Our AI assistant “Apollo” may respond in the chat. Its answers do not constitute automatic confirmation of a reservation. A bar staff member confirms reservations. Chat content and technical information, such as IP address, browser and device information, are processed by “tawk.to” and its service providers, including AI providers. Please avoid sharing sensitive information in chat. You can contact us by telephone or email instead. The reservation database’s deletion function does not clear tawk.to chats: an administrator reviews and deletes those separately. The provider states that copies may remain in its backup systems for up to 90 days after deletion.
4. Cookies, analytics and security
Necessary technologies support website operation, remember age-verification and privacy choices, and maintain signed-in staff sessions. They are not permission to send marketing. For security and troubleshooting, server logs may contain an IP address, request time, requested address and browser information. The basis is our legitimate interest in protecting the website and its visitors.
We activate “Google Analytics” only if you allow analytics (GDPR Article 6(1)(a)). It helps us understand visits, page views and actions such as opening a menu or submitting a reservation request. We do not include the reservation form’s name, phone number, email address or comment in analytics events. Rejecting analytics does not prevent you from making a reservation.
You can change your choice using “Analytics cookie settings” at the bottom of the page. Withdrawing consent does not affect the lawfulness of earlier processing. Your analytics choice stays in your browser’s local storage until you change it or clear browser data. Google Analytics event-data retention is set to 2 months and user-data retention to 14 months; the latter period resets on new activity. These individual-data retention settings do not apply to aggregate reports. The default “_ga” and “_ga_*” cookie lifetime is up to 2 years, renewed when you visit. Login-session and age-choice technologies follow the relevant session and choice. Security logs are reviewed and kept as needed for the particular security or troubleshooting investigation; incident-related records are separated from routine use.
5. Who may receive your data?
Authorised iBAR staff and administrators handling reservations have access to the information they need. UAB “Interneto vizija” (serveriai.lt) provides website hosting and email services. We also use “tawk.to” for chat and, with your permission, “Google Analytics”. Providers receive access as needed to deliver their services. Information may also be disclosed to competent authorities or advisers where necessary for a specific legal obligation or dispute.
“tawk.to”, “Google” and their service providers may process information outside the European Economic Area, including in the United States. Transfers rely on an adequacy decision where it covers the recipient and transfer, or standard contractual clauses and necessary supplementary measures. Contact info@ibar.lt for information about the safeguards applicable to a particular transfer and a copy of them. See tawk.to data protection information and Google’s international transfers information.
Links to “Wolt”, “Bolt” and social networks take you to services operated by other controllers, whose own privacy policies apply.
6. Backups and deletion
Deleting a record from the active reservation system does not automatically delete previously sent emails, staff downloads or backups. These copies are handled separately using the same purpose and necessity principles. Backups are for recovery; their contents must not be returned to routine use without reapplying applicable deletions. Reservation emails in the bars’ mailboxes and reservation copies saved by staff follow the same 90-day period after the visit, except a justified exception for a specific dispute; an administrator clears these copies. We do not control copies of received emails in your own mailbox. Periodic website backups are normally replaced or removed approximately 12 days after creation. Manual backups taken before technical changes have no common automatic expiry: an administrator reviews them after the change has been verified and removes them when no longer needed for recovery. Data in such copies may remain longer than in the active system; these copies are not used for customer service or marketing. Individual erasure requests also trigger a review of copies, and our response explains when the data will be removed.
7. Your rights
Subject to the GDPR’s conditions, you may request access to and a copy of your data, correction, erasure, restriction or portability. You may object to processing based on legitimate interests and withdraw consent at any time. Erasure is not an absolute right: for example, specific information necessary for a legal obligation or legal claim may need to be retained.
Email info@ibar.lt with your request and enough information to locate the relevant reservation. Where possible, use the email address supplied for the reservation. Do not send an identity-document copy in advance; if we have reasonable doubts, we will request proportionate identity verification.
We respond without undue delay and within one month. For complex requests, we may extend the period by up to two further months, explaining the extension and reasons within the first month. Requests are normally free of charge. You may complain directly to the Lithuanian State Data Protection Inspectorate or seek a judicial remedy; contacting iBAR first is not compulsory.
The reservation system does not make solely automated decisions with legal or similarly significant effects. We may update this policy; the current version and date will appear on this page.
