We use cookies on our website to provide you with the most relevant experience. By clicking “I agree” you agree to the use of cookies.
We aim to ensure that entrusting your personal data (hereinafter referred to as the Data) to us is completely safe. We have taken carefully designed measures to ensure that the protection of your data and personal information meets the highest possible standards of privacy.
Closed Joint Stock Company “Rada”, to. k. 152516318, registered office address – Vytauto str. 76, Vilnius (hereinafter – the Data Controller), this Privacy Policy (hereinafter – the Privacy Policy) sets out the conditions for the processing of personal data using the website www.kerpehotel.lt (hereinafter – the Website) managed by the Data Controller and the hotel “Kerpė”. The terms and conditions set forth in the Privacy Policy apply every time you visit the hotel or the Website, regardless of what device (computer, mobile phone, tablet, TV, etc.) you use.
It is very important that you read the Privacy Policy carefully, because every time you visit the Website owned by the Data Controller, you agree to the terms and conditions described in this Privacy Policy. If you do not agree to these terms, you are free to not visit our website or use our content and/or services.
By providing his/her personal data (including data provided directly or indirectly by visiting the Website and using its services), the Data Subject agrees and does not object to the Data Controller’s management and processing for the purposes and procedures specified in this Privacy Policy, and the purposes specified within the Data Subject’s consent..
GENERAL INFORMATION
The controller will collect personal data in accordance with the requirements of the relevant legislations of the European Union and the Republic of Lithuania and the instructions of the controlling authorities. All reasonable technical and administrative measures shall be applied to ensure that data collected on data subjects are protected against loss, unauthorised use and alteration.
Persons under the age of 16 may not provide any personal data via the controller’s website. If you are a person under the age of 16, you must obtain the consent of your parents or other legal guardians before providing personal information.
This Privacy policy is composed in accordance with European Parliament and Council’s regulation 2016/679 on the protection of persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (general data protection regulation), the law of the Republic of Lithuania on legal protection of personal data, and other relevant legislations by the European Union and the Republic of Lithuania. The terms used in the privacy policy are understood as they are defined in the General Data Protection Regulation and the law on the legal protection of personal data of the Republic of Lithuania.
WHAT INFORMATION DO WE COLLECT ABOUT YOU?
Information provided directly by you
Information on how you use our website.
If you visit our website, we also collect information that reveals the features of our services or automatically generates visitation statistics. Read more about this in the section named “Cookies”.
Information from third party sources
We may obtain information about you from public and commercial sources, as far as the relevant legislations allow, and link it to other information we receive from or about you. We can also get information about you from third-party social networking services when you log in to them, for example through accounts on Facebook.
Other information we collect
We may also collect other information about you, your device or your use of our website content with your consent.
You may choose not to provide us with certain information, but in this case you may not be able to use the services we offer.
PROCESSING OF PERSONAL DATA FOR THE PURPOSE OF CONSULTATION AND ENQUIRY
Processing of personal data for the purposes of consultation, enquiry or/and other matters by persons, including telephone callers. The controller shall process the following personal data of applicants, including telephone callers:
If the controller is contacted by a requesting representative, the controller shall process such data of the requesting representative:
The data of applicants shall not be transmitted to third parties.
PROCESSING OF PERSONAL DATA FOR THE PURPOSE OF PROVIDING ACCOMMODATION AND HEALTH SERVICES
Customer data processing. The controller processes the following customer data:
If the customer is represented by another person, the controller shall process such personal data of the customer’s representative:
The controller agrees not to transfer your personal data to any unrelated third parties, except in the following cases:
The controller may provide personal data of customers and other data subjects to processors not covered by this Privacy Policy who provide services/work to the controller and process personal data of customers and data subjects on behalf of the controller. Processors have the right to process personal data only in accordance with the instructions of the controller and only to the extent necessary for the proper fulfilment of the obligations laid down in the contract. The controller shall, through processors, take all necessary measures to ensure that the processors have implemented appropriate organisational and technical security measures and maintain the secrecy of personal data.
Processing of personal data for the provision of accommodation for the purposes of the processing is in accordance with the data subject’s consent and/or the contract with the Data subject and/or mentioned in the Data controller’s legal obligations and/or in order to protect the Data controller’s legitimate interests (General data protection regulation article 6 part 1, (a) p., (B) p., (c) p. and (f) p.)
PROCESSING OF PERSONAL DATA FOR THE PURPOSE OF SELECTING EMPLOYEES
The controller shall, for the purposes of Personnel Selection, Process the personal data voluntarily submitted by the candidate to the extent that the personal data were provided.
The data is obtained directly from the websites of candidates and/or third parties providing job advertisements. This data is not transmitted to third parties.
The data of candidates are processed by the consent expressed in the submission of their data and the desire to act in the candidate’s conciliatory actions and/or request before the conclusion of the contract (Article 6 of the General Data Protection Regulation, part 1 (A) and (B))
PROCESSING OF PERSONAL DATA FOR THE PURPOSE OF ORGANIZING GAMES, PROMOTIONS, COMPETITIONS
The controller may process personal data for the purposes of various promotions only with the consent of the data subject. The controller may collect the following personal data of participants:
Data is obtained directly from data subjects participating in games, promotions, and/or competitions. This data is not transmitted to third parties, but may be made publicly available on the data subject’s website and/or on Facebook channels belonging to the controller. The controller can publish: name, surname, photo.
Personal data are processed by the base of the consent given while presenting of their personal data (Article 6 of the General Data Protection Regulation, part 1, (a) p.)
PROCESSING OF PERSONAL DATA FOR THE PURPOSE OF DIRECT MARKETING
The controller seeks to share with the recipients of newsletters only relevant news about services, discounts, offers, promotions, and other useful information. This is implemented in accordance with this Privacy Policy.
The controller shall process personal data for the purpose of direct marketing only with the clear consent of the data subject. Processing of personal data of customers and other data subjects for the purpose of direct marketing:
After sending a newsletter, The Controller may collect statistics on the behavior of the data subject in relation to the use and content of the newsletter (for example, whether the newsletter has been read, which links have been opened by the data subject, etc.).
Data subject’s email can be used to deliver advertising through Facebook, Google, and other advertising platforms, adapting advertising to the target audience.
According to the personal data you provide, for the purpose of direct marketing, profiling of your personal data may be carried out in order to offer you individually tailored solutions and suggestions. You may at any time withdraw your consent to the processing of personal data by automated processing, including profiling, or object to such processing (if relevant).
Personal data are obtained directly from data subjects. Personal data may only be transferred by the controller to third parties providing specialised services for the purpose of sending an email to the controller. Emails have to be tailored to the nature of the on-demand advertising through advertising platforms.
Personal data of customers and other data subjects are processed on the basis of consent in the presentation of their data and consent to the processing of personal data for the purpose of direct marketing (Article 6 of the General Data Protection Regulation, part 1, (a) p.)
We inform you that the data subject has the right to object or at any time withdraw his/her consent to the processing of the personal data for direct marketing purposes, including profiling, if it relates to direct marketing, without specifying the reasons for the disagreement:
Withdrawal of consent shall not affect the legality of consent-based processing carried out prior to withdrawal of consent.
PROCESSING OF PERSONAL DATA FOR ENSURING THE SECURITY OF PERSONNEL, CUSTOMERS, AND PROPERTY PROTECTION (VIDEO SURVEILLANCE)
The controller shall, for the purposes of ensuring the protection of Personnel, customers, and other persons entering the video surveillance field, as well as protecting the property, process the video data of its personnel and customers and other persons entering the video surveillance field in order to ensure their security and the security of the whole property.
We inform you that your video data is captured by the controller’s video surveillance equipment when you visit the controller’s premises and territory. The video data can only be transmitted to law enforcement authorities in accordance with the procedures provided within the relevant legislations of the Republic of Lithuania.
Personal data are processed for video surveillance on the basis of the controller’s legitimate interest (Article 6 of the General Data Protection Regulation, part 1, (f)p.)
WHAT DO WE DO TO PROTECT YOUR INFORMATION?
Personal data is protected from loss, unauthorized use and any modifications/changes. We have put in place physical and technical measures to protect all information we collect for the purpose of providing our services. We must remind you that although we take appropriate steps to protect your information, no website, online transaction, computer system or wireless connection is completely secure.
The controller shall apply different time limits for the storage of personal data in accordance with the requirements of the country’s relevant legislations and taking into account the purposes of the processing of personal data.
Time period for the storage of personal data:
| Purpose of processing personal data | Time period of storage |
| Processing of personal data of data subjects for the purposes of consultation, execution of inquiries | 1 year from the date of completion of the consultation or request. Unless the data subject applies for the provision of services by the controller. The general term of 10 years shall then apply |
| Personal data of customers are used for the purpose of providing services | 10 years since last contact |
| Processing of personal data of candidates for Personnel Selection purposes | 4 months after the candidate is hired for the job. Longer storage of candidates’ CVs and other data requires special consent |
| Processing of personal data of data subjects for the purpose of video surveillance | 1 month |
| Processing of personal data of data subjects for the purpose of organising games, promotions, competitions | 1 year from the end of the contest or promotion |
| Processing of personal data of data subjects for the purpose of direct marketing | 5 years from receiving the consent, unless the data subject wishes to extend this period |
Exceptions to storage periods may be established to the extent that they do not infringe the rights of data subjects and they still comply with legal requirements and are properly documented.
At the end of the deadlines, if they have not been extended, the data will be erased in such a way that it could not be reproduced.
YOUR RIGHTS
The data subject whose data are processed in the activities of the controller shall have the following rights:
If you no longer want your personal data processed for the purpose of direct marketing, you can write an email to info@kerpehotel.lt or call +37060102944 and object to the processing of your personal data for the purpose of direct marketing, without giving reasons for disagreement.
Any request or instruction relating to the processing of personal data can be made by the data subject in writing to the controller by one of the following means: directly by going to Vytauto str. 76, Palanga; by post – Vytauto str. 76, Palanga; by emailing info@kerpehotel.lt.
The controller shall, on receipt of such a request or instruction, reply and perform or refuse to perform the actions specified in the request no later than one month from the date of the referral. Where appropriate, the period may be extended by two months depending on the complexity and number of applications. In such case, the controller shall inform the data subject of such extension within one month of receipt of the request, together with the reasons for the delay.
The controller may not enable data subjects to exercise the rights listed above, with the exception of refusing to process personal data through direct marketing where, in cases provided for by law, it is necessary to ensure the prevention, investigation and detection of crimes, breaches of official or professional ethics, as well as the protection of the rights and freedoms of the data subject, the controller or other persons.
THIRD-PARTY WEBSITES, SERVICES, AND PRODUCTS ON OUR SITES
The controller’s website may contain third-party billboards, links to their websites, and services over which the controller does not have control, such as a link to the controller’s Facebook profile. The controller shall not be responsible for the security and privacy of information collected by third parties. You must read the privacy provisions for third-party websites and services you use.
If you have submitted your data with the help of Facebook, we understand that you agree that we can contact you and make offers of services via phone or email.
COOKIES
When you visit the controller’s website, we want to provide content and features that are tailored specifically to your needs. This requires cookies. Cookies are small information bits that are automatically created when browsing the site and are saved on your computer or other device. Cookies help the controller to identify you as a previous visitor to a particular website, keep your website history and customize the content especially for you. Cookies also help to ensure the smooth operation of websites, allow you to monitor the duration, frequency of visits to websites, and collect statistical information about the number of visitors to websites.
Descriptions of cookies used on our website
| Name of cookie | Description/purpose of use | Data used | Moment of creation | Expiry date |
| cookies_allowed | User consent to use cookies | Cookies are necessary for the functioning of the website | Entering the page | Until the end of the session |
| tvs_session_id | Ensuring the functionality of the site to improve user experience | Session number | Entering the page | Until the end of the session |
| _ga | The cookie is used to collect statistical information from the website | For keeping records, IP addresses and unique ID numbers are used. Record-keeping results are statistical. Records are kept using Google Analytics | After pressing the “Agree” button | 2 years |
| _gid | The cookie is used to collect statistical information from the website | This cookie collects and updates information about your visited web pages | After pressing the “Agree” button | Until the end of the session |
| _gat | Cookie limiting the number of requests made via Google | Does not record any user information | After pressing the “Agree” button | Until the end of the session |
How to manage and delete cookies
When you use the browser to access our content, you can configure your browser to accept all cookies, reject all cookies, or be notified when a cookie is downloaded. Each browser is different, so if you don’t know how to change cookie preferences, check out its help menu. Your device’s operating system may have additional cookie controls. If you do not want information to be collected through cookies, use the simple procedure available in many browsers that allows you to opt out of using cookies. Norėdami daugiau sužinoti, kaip valdyti slapukus, apsilankykite adresu: http://www.allaboutcookies.org/manage-cookies/.
However, we note that in some cases, deleting cookies can slow down the speed of internet browsing, limit the operation of certain features of the website, or block access to the site.
Our website may contain links to the websites of other individuals, businesses, or organisations. Please note that the controller is not responsible for the content of such websites or the privacy principles they use. So if clicking on a link from the controller’s website takes you to other websites, you should always take a separate look at their privacy policy.
FINAL PROVISIONS
Any additions or changes to the Privacy Policy shall take effect from the date of their publication on the website.
When a data subject uses a website and/or services provided by a controller following an addition or change to a Privacy Policy, the data subject shall be deemed as not objecting to such additions and/or changes.
CONTACT US
If you have any questions regarding the information contained in this Privacy Policy, please contact us in any way that is convenient for you:
By phone: +370 601 02 944
Via email: info@kerpehotel.lt
By post: Vytauto str. 76, Palanga