Client privacy notice (template)
Last updated: 2026-07-19
For businesses using DEK. You are the controller of your clients' data, so you must provide your clients with your own privacy notice. This is a template you are free to adapt: replace the fields in square brackets [...] with your details. Responsibility for the final content and its delivery to clients is yours. We recommend having it checked by a lawyer.
[Business name] privacy notice
Who processes your data. The controller of your personal data is [Business name], [legal entity or business certificate code], address [address], email [email]. For booking and calendar services we use the DEK platform (operator Majevski, MB), which acts as our data processor.
What data we collect. Your name, contact details (email, phone), information about your visits and, where relevant, additional service-related information you provide to us.
Purpose and legal basis. We process data to: provide the service and manage your bookings (to perform our contract); send reminders and notifications about visits; where you have consented, send news or offers (on the basis of consent); and meet legal obligations (e.g. accounting).
Whether you must provide data. Providing your name and contact details is necessary to book and receive the service; without them we cannot serve you.
Who we share it with. We share data only with providers necessary to deliver the service (e.g. the booking platform, notification services). We do not sell data. [Where a provider processes data outside the EEA, we rely on appropriate safeguards.]
How long we keep it. We keep data for as long as needed for the stated purposes and as required by law. Afterwards we delete or anonymise it.
Automated decisions. [We do not use automated decision-making or profiling that produces legal or similarly significant effects on you.]
Your rights. You have the right to access, rectify, erase, restrict or object to the processing of your data, to data portability, and to withdraw consent (which does not affect the lawfulness of processing before withdrawal). You may opt out of notifications at any time. To exercise your rights, contact us at [email]. You also have the right to lodge a complaint with the State Data Protection Inspectorate (vdai.lrv.lt).
This notice was prepared using the DEK template. [Business name] is responsible for its content.