Privacy policy

Last updated: 28 October 2026

The data controller is Time Two, UAB, company code 302253717, Kalvarijų g. 1, Vilnius, Lithuania (the organiser of Light Waves).

This Privacy Policy explains how we process your personal data when you visit sviesosbangos.lt, sign up for updates, contact us or use services provided by the organiser of Light Waves.

Tickets are purchased through the Bilietai.lt platform. Data processing carried out on that platform is subject to the Bilietai.lt Privacy Policy.

We process personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable laws.

Purchasing tickets and gift vouchers

Ticket purchases and payments are processed through the Bilietai.lt platform. UAB Bilietai PLG is the controller of the data required to provide ticket distribution services. Its Privacy Policy explains what data it collects, the legal bases for processing it, who it shares it with and how long it retains it.

Payments for tickets are not processed on sviesosbangos.lt, and we do not collect payment card or bank account details.

If you purchase a gift voucher through Bilietai.lt, the purchase and payment are also subject to the distributor’s Privacy Policy.

You can read the distributor’s policy here: Bilietai.lt Privacy Policy and Terms of Service.

What data may the organiser process?

Where necessary to organise the event, manage admission or resolve an order-related enquiry, we may receive data from Bilietai.lt or access it through its system. This may include the buyer’s contact details, order number, session details, ticket or voucher code, and its validity or redemption status, insofar as required for the relevant purpose.

We use this data only to the extent necessary, for example, to:

check whether a ticket is valid and has already been used;
notify visitors of session cancellations or other important changes;
resolve matters relating to orders, voucher redemption, refunds or complaints.

The legal bases for processing are the performance of the contract for the event service, compliance with applicable legal obligations, or our legitimate interests in managing admission, preventing tickets from being reused and defending legal claims.

We are responsible for the data processing we carry out. Purchasing a ticket or voucher does not, in itself, constitute consent to receive Light Waves newsletters.

Enquiries and group visits

When you contact us by email or submit an enquiry through the website, we process your name, contact details, message content and correspondence.

When arranging a group visit, we may also process the organisation’s name, the booking contact’s job title, group size, preferred date and other information necessary for the booking.

We use this data to answer questions, provide an offer and arrange the visit. The legal bases are taking steps at your request before entering into a contract and performing that contract. We handle general enquiries on the basis of our legitimate interest in providing appropriate assistance to those who contact us.

If you arrange the delivery of a physical gift voucher or its packaging directly with us, we also process the recipient’s name, address and contact details required for delivery. We use the recipient’s data for delivery, not for sending newsletters. We process the buyer’s data on the basis of contract performance, and the data of the recipient designated by the buyer on the basis of our legitimate interest in completing the requested delivery.

We process billing details and accounting documents to comply with our legal obligations.

Newsletters and session updates

With your consent, we use your email address and, if provided, your name to send the updates described in the sign-up form. These may include information about ticket sales opening, preview sessions, new dates and offers.

Signing up for a one-off notification does not authorise us to send ongoing newsletters.

You can unsubscribe at any time, free of charge, by clicking the link in an email or contacting info@sviesosbangos.lt. Withdrawing consent does not affect the lawfulness of processing carried out before its withdrawal.

Essential notifications relating to a ticket or order you have already purchased are not newsletters and may be sent on the basis of contract performance.

Website data and cookies

To ensure the website’s operation and security, we may process your IP address, visit time, browser and device information, and technical error logs.

We process this data on the basis of our legitimate interest in maintaining a secure and reliable website.

Strictly necessary cookies support the website’s core functions. Analytics, advertising and other non-essential cookies, as well as similar tracking technologies, are used only with your consent.

You can reject non-essential technologies and change your preferences later in the website’s cookie settings. Simply browsing the website does not constitute consent.

The names, providers, purposes and lifetimes of the cookies used are listed in the cookie policy and in the cookie settings.

When you follow a link to Bilietai.lt, cookies and other data on that platform are managed by its operator in accordance with the information it provides and your preferences.

Where do we obtain data, and who do we share it with?

We obtain data directly from you, from Bilietai.lt where necessary to administer the event, or through your use of our website. For deliveries or group bookings, the necessary data may be provided by the buyer or a group representative. Where we obtain data from another person, we provide information about its processing as required by law.

Where necessary, data may be shared with:

website hosting, IT support and email service providers;
newsletter service providers;
ticket validation and event support service providers;
delivery, accounting and legal service providers;
Bilietai.lt, where necessary to resolve a ticket- or order-related matter;
public authorities, where required by law.

We share only the data needed for the specific function. Data processors acting on our behalf must comply with contractual data protection obligations.

If our service providers transfer data outside the European Economic Area, we use a legally recognised transfer mechanism and safeguards, such as a European Commission adequacy decision or Standard Contractual Clauses and, where necessary, supplementary measures.

For information about specific transfers, the safeguards applied and how to obtain a copy of them, please contact info@sviesosbangos.lt.

How long do we retain data?

This section describes our retention criteria, rather than those applied by Bilietai.lt.

Event and ticket administration data is retained until the service has been provided and related matters have been resolved. We then retain only the data required for legal obligations or potential claims.
Voucher administration data, where we process it, is retained until the voucher has been redeemed or has expired and related matters have been resolved.
Enquiry and group booking data is retained until the enquiry has been resolved or the contract has been performed. Information needed for contractual matters and disputes is retained for the applicable statutory periods.
Delivery data is retained until delivery has been completed and any related matters have been resolved.
Accounting documents are retained for the period required by law.
Subscription data is used until consent is withdrawn or the relevant mailing activity ends.
Data collected for a one-off notification is used to send that notification and then deleted, except for information needed to demonstrate lawful processing.
Records of consent and opt-outs are retained for as long as necessary to demonstrate lawful data use and ensure that marketing messages are not sent to people who have opted out.
Technical logs are retained for as long as necessary to maintain the website’s operation and security and investigate incidents.
Cookie data is retained for the periods specified in the cookie information.

Once the applicable retention period ends, we delete or anonymise the data.

Photography and filming

If the organiser photographs or films visitors at an event, separate information will be provided in advance about the purposes, legal basis, use and retention of the material, and visitors’ rights.

Purchasing a ticket or attending an event does not, in itself, constitute consent to the use of your image for advertising. Where consent is required, we request it separately.

For enquiries about photographs or videos published by the organiser, please contact info@sviesosbangos.lt.

Data security

We apply technical and organisational safeguards appropriate to the nature of the data we process and the associated risks. Access is granted only to employees and service providers who need the data to perform their duties.

Your rights

Subject to the conditions set out in the GDPR, you have the right to:

access your personal data and obtain a copy;
request the correction of inaccurate data;
request the erasure of data or restriction of its processing;
exercise the right to data portability, where applicable;
object to processing based on legitimate interests on grounds relating to your particular situation;
object at any time to the use of your data for direct marketing;
withdraw your consent;
lodge a complaint with the State Data Protection Inspectorate or seek a judicial remedy.

For enquiries about data we process, please contact info@sviesosbangos.lt. For data processing carried out by Bilietai.lt, please use the contact details provided in its Privacy Policy. If your request concerns both parties’ activities, we will cooperate within our respective areas of responsibility.

If we have reasonable doubts about the identity of the person making a request, we may ask for additional information necessary to verify their identity.

We will inform you of the action taken in response to your request within one month. Depending on the complexity or number of requests, we may extend this period by up to two further months. If so, we will notify you within the first month and explain the reasons for the extension.

Information about lodging a complaint is available at vdai.lrv.lt.

Providing data and changes to this policy

Data required to handle an enquiry or provide a service is identified in the relevant form or when requested. If you do not provide it, we may be unable to respond to your enquiry or provide the service. Subscribing to updates is voluntary.

The current version of this Privacy Policy is published on sviesosbangos.lt. Where necessary, we will provide additional notice of significant changes. If a new purpose for using your data requires consent, we will request it separately.