Privacy policy
What the heli.lt website learns about you, what it is used for and how long it is kept. In short: we only collect what you write in the enquiry form yourself.
Your name, email, phone and message when you send an enquiry yourself.
We do not use analytics, advertising or tracking cookies.
We do not sell data. Only the aero club and its service providers see it.
Who processes your data
The operator of the website heli.lt and the data controller is VšĮ „Molėtų aeroklubas“ (Molėtai Aerodrome, EYMO).
- Company code
- 167617159
- VAT number
- LT676171515
- Address
- Tumenčiznos k., 33252 Molėtų r. sav.
- heli@heli.lt
- Phone
- +370 612 40921, +370 686 26918
For any questions about your data, please use these contacts.
Enquiry form
The enquiry form is on the page Contacts and at the bottom of the home page. It is the only place where the website asks for your personal data.
| What we collect | Why |
|---|---|
| Name (required) | So we know how to address you in our reply. |
| Email address (required) | To reply to your enquiry and send an automatic confirmation that it was received. |
| Phone number (optional) | In case you prefer us to call you. |
| Message | Your question or request, e.g. the flight or date you would like. |
| Page address the form was sent from | So we understand what you are asking about. Recorded automatically. |
How it works. A submitted enquiry is emailed to the responsible people at the aero club, and you receive an automatic confirmation. A copy of the enquiry is also stored in the website’s admin area, which only the site administrators can see.
Legal basis. Your request for a reply and steps taken before entering into a contract for a flight, training or another service (GDPR Art. 6(1)(b)).
Spam protection. To keep the form from being flooded by bots, a one-time technical token is checked on sending, and no more than 5 enquiries per 10 minutes are allowed from one IP address. For this, the server keeps only a hashed fingerprint of the IP address and the number of enquiries for 10 minutes, after which they are deleted automatically. The IP address itself is not stored with the enquiry.
Cookies and browser storage
The website does not set cookies for visitors. There is no analytics (e.g. Google Analytics), advertising, Facebook pixel or any other tracking.
| Item | Purpose and duration |
|---|---|
wpEmojiSettingsSupportsbrowser session storage | A WordPress technical entry recording whether your browser can display emoji. It holds no personal data and is deleted when you close the browser tab. |
wordpress_*, wp-settings-*cookies | Only for site administrators logged in to the dashboard. Not set for regular visitors. |
| Google cookiesthird-party | May be set when a Google Maps map is loaded (see below). They are controlled by Google. |
You can delete or block cookies in your browser settings at any time. The website works without them.
Third-party content
Some page elements are loaded from other companies’ servers. When this happens, your browser contacts those servers directly and sends them its IP address and technical information about the browser. This is necessary for the content to be displayed.
- Google Fonts (Google Ireland Ltd.) – the fonts used to display the website text. Loaded on almost every page. Google privacy policy.
- Google Maps – a map of the aerodrome location on the home and Contacts pages. Google may set its own cookies and link the visit to your Google account if you are signed in.
- Facebook and Instagram (Meta) – the bottom of the page contains only plain links to our accounts. Meta receives no data until you click them. After clicking, Meta’s privacy rules apply.
Weather data on the page Information for pilots (Open-Meteo, NOAA Aviation Weather Center) are downloaded by our server, not by your browser, so these providers learn nothing about you. The website’s photos and video are hosted on our own server.
Server logs and security
Like all websites, our server automatically records technical request logs: IP address, time, the address opened, browser type and the previous page. These logs are managed by the hosting provider and used only to keep the website running, fix errors and fend off attacks. We do not analyse visitors with them or link them to other data.
Failed attempts to log in to the website dashboard are recorded together with the IP address so that password guessing can be blocked.
Legal basis. Legitimate interest in keeping the website secure and running (GDPR Art. 6(1)(f)).
The website runs only over an encrypted HTTPS connection, and only authorised administrators can access the dashboard.
Who we share data with
We do not sell your data or use it for advertising. It can only be accessed by the following service providers, who help us and act on our instructions:
- UAB „Interneto vizija“ (Serveriai.lt, Lithuania) – website hosting and email sending services. Data is stored in the European Union.
- Email service providers whose mailboxes the aero club uses to receive enquiries.
- Google – only as described in the section “Third-party content”. Google may transfer data to the USA, covered by the EU–US Data Privacy Framework and standard contractual clauses.
We may disclose data to public authorities only when required by law.
How long we keep data
| Data | Retention period |
|---|---|
| Enquiries and correspondence | Until we reply and provide the service, but no longer than 2 years after the last correspondence. Then we delete it. |
| Hashed IP fingerprint (spam protection) | 10 minutes. |
| Server logs | For a short period set by the hosting provider, then deleted automatically. |
| Website backups | Backups may also contain enquiries. Old backups are replaced by new ones and deleted. |
Your rights
Under the General Data Protection Regulation (GDPR) you have the right to:
- find out what data we hold about you and get a copy of it;
- ask us to correct inaccurate data;
- ask us to delete your data;
- ask us to restrict the processing of your data;
- object to processing based on legitimate interest;
- receive your data in a common electronic format.
Write to heli@heli.lt, and we will reply within one month. If you believe your data is being processed improperly, you can file a complaint with the State Data Protection Inspectorate.
Changes to this policy
If the website or the law changes, we will update this policy and change the date at the top of the page. We recommend that children under 14 fill in the enquiry form together with their parents.