Privacy Notice | Frega Group

This notice explains what personal data Frega Group collects through this website, why we collect it, how long we keep it, and the rights you have under the General Data Protection Regulation (EU) 2016/679.

1. Who is responsible for your data

Frega Group is a real estate, brokerage and accommodation agency operating in Vilnius, Republic of Lithuania. Frega Group is the controller of any personal data collected through this website.

For any question about this notice, or to exercise any of the rights set out in section 6, write to info@fregagroup.com. This is the fastest route to a reply, and it reaches us directly.

Frega Group is currently completing its registration as a small partnership (mazoji bendrija) in Lithuania. Once that registration is complete, the registered legal name, company code and registered office address will be published in this section and the date at the top of this page will be updated.

2. What we collect

When you submit the enquiry form on this website, we collect:

Your name — so we can address you correctly.
Your email address — so we can reply to your enquiry.
Your area of interest — the category you select from the form.
Your message — and anything you choose to include in it.

Our hosting provider also processes standard technical data — IP address, browser type, time of request — as part of delivering the site securely and defending it against abuse. We do not use analytics cookies, advertising cookies, or tracking pixels on this website.

3. Why we process it, and on what legal basis

To respond to your enquiry and take steps at your request before entering into a contract — Article 6(1)(b) GDPR.
To keep our website secure and prevent abuse of our forms — Article 6(1)(f) GDPR, our legitimate interest in protecting our systems.
To meet legal obligations — Article 6(1)(c) GDPR. As a real estate intermediary in Lithuania we are subject to obligations under the Law on the Prevention of Money Laundering and Terrorist Financing, which may require us to identify clients and retain records where a transaction proceeds.

We do not use your data for automated decision-making or profiling, and we do not sell it.

4. Who else processes your data

We use a small number of service providers who act as processors on our behalf:

Web3Forms — delivers submissions from the enquiry form to our inbox.
Cloudflare — hosts this website and routes email sent to our address.
Google — provides the mailbox in which enquiries are received. This website also loads its typefaces from Google Fonts, which means your IP address is transmitted to Google when a page loads.

Some of these providers operate outside the European Economic Area. Where that is the case, transfers are made under the European Commission's Standard Contractual Clauses or an equivalent safeguard.

We may also share your data with professional advisers — notaries, lawyers, translators — where doing so is necessary for a transaction you have asked us to work on.

5. How long we keep it

Enquiries that do not lead to an engagement — up to 12 months, then deleted.
Client records where a transaction proceeds — 8 years after the end of the business relationship, as required by Lithuanian anti-money-laundering legislation.
Server and security logs — retained by our hosting provider for a short period under their own retention schedule.

6. Your rights

Under the GDPR you have the right to:

Ask what personal data we hold about you, and receive a copy of it.
Have inaccurate data corrected.
Have your data erased, where we have no overriding legal obligation to keep it.
Ask us to restrict how we use it.
Receive your data in a portable, machine-readable format.
Object to processing carried out on the basis of legitimate interest.
Withdraw consent at any time, where processing is based on consent. This does not affect anything done before you withdrew it.

To exercise any of these, email info@fregagroup.com. We respond within one month.

Right to complain

If you believe we have handled your data improperly, you may lodge a complaint with the State Data Protection Inspectorate of the Republic of Lithuania (Valstybine duomenu apsaugos inspekcija), L. Sapiegos g. 17, Vilnius — vdai.lrv.lt.

7. Cookies

This website sets no cookies of its own. It stores a single flag in your browser's session storage so that the opening animation is not repeated on every page you visit. That flag contains no personal data, is not transmitted anywhere, and is cleared when you close the tab.

8. Changes to this notice

If we change how we handle personal data, we will update this page and revise the date shown at the top. Material changes will be communicated to active clients directly.