Privacy policy

Privacy Policy of VENCKAI VENCKUOSE

We have developed a privacy policy to ensure the security of your personal data and the transparent processing of your personal data.

It specifies what personal data we collect, how we receive it, what your rights are, and how they are implemented.

Joint controllers

Your personal data is processed by data controllers:

UAB AR Šiauliai

Legal entity code: 163318017

Address: Kintų g. 6, LT-96348, Venckai village, Priekulė sub-municipal area, Klaipėda district

Tel.: +370 689 78341

E-mail: info@venckaivenckuose.lt

The data controllers are hereinafter referred to as “VENCKAI VENCKUOSE” or “We”.

Personal data means any information about an identified or identifiable natural person (data subject). A natural person is a person who can be identified, directly or indirectly, by an identifier: name, surname, personal identification number, location data, internet identifier, or one or more physical, physiological, genetic, mental, economic, cultural, social or identity features of the person.

Data subject means a person who uses the services of VENCKAI VENCKUOSE, purchases goods, visits the contacts VENCKAI VENCKUOSE for goods/services or for any other purpose, as well as a candidate who participates in a selection process for a job advertised by VENCKAI VENCKUOSE.

Request means a request by a data subject for the exercise of his or her rights.

Regulation – the so-called GDPR Regulation, 2016/679 of the European Parliament and of the Council (EU) of 27 April 2016 on the protection of natural persons with regard to the processing of Personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Regulation on the Protection of Personal Data).

Website means the website of VENCKAI VENCKUOSE www.venckaivenckuose.lt

Other terms may be used in this privacy policy in accordance with the provisions of the Regulation.

General provisions

In this privacy policy, we inform you about the basic principles of the processing of personal data and the exercise of the rights of the data subject. Additional information about the processing of your personal data may also be provided in other agreements: purchase and sale, etc.

By using the VENCKAI VENCKUOSE services, purchasing goods, submitting your data, sending a CV, filling in enquiry or reservation forms, continuing browsing the Website, you confirm that you have read this Privacy Policy and understand its provisions.

Principles of processing personal data

VENCKAI VENCKUOSE processes personal data in accordance with the legal acts of the European Union and the Republic of Lithuania regulating the processing of personal data.

The scope of personal data depends on the services or goods ordered or used, VENCKAI VENCKUOSEs legal relationship with the data subject and other persons, and the information provided by the person when ordering or using services, purchasing goods, visiting the Website or contacting VENCKAI VENCKUOSE.

We only process your personal data under the criterion of legitimate processing – in order to take action at your request before entering into a contract or performing a contract, with your consent, when we are obliged to process personal data by the relevant legal acts, when the processing of personal data is necessary for our legitimate interest or that of a third party.

We aim to process personal data accurately, fairly and lawfully and only for the purposes for which it was collected, in accordance with the clear and transparent principles and requirements for the processing of personal data laid down by law.

How we obtain personal data

We may receive personal data directly from You in the following cases:

• You complete enquiry or booking forms on the Website;
• you send your curriculum vitae (CV), other information related to your employment;
• you place an order for the purchase of services provided by VENCKAI VENCKUOSE;
• you otherwise contact VENCKAI VENCKUOSE;
• you interact with VENCKAI VENCKUOSE via social networks or simply follow VENCKAI VENCKUOSEs activities on social networks;
• VENCKAI VENCKUOSE provides services to you.

We may receive your personal data indirectly:

• from your travel agent or another person who commissions the services provided to you by VENCKAI VENCKUOSE;
• from social media platforms or online reviews;
• from VENCKAI VENCKUOSE data processors or other external sources.

Personal data may be generated when you use or inquire about the services – by phone, sending a text message, e-mail, ordering services, or visiting the Website.

You are not obliged to provide us with any personal data, but it is possible that without your personal data, we will not be able to perform certain actions – providing services, selling goods or invoicing.

RECIPIENTS OF PERSONAL DATA

We do not provide personal data to anyone else without your consent, except:

• in the case of a dispute, to persons providing legal services to VENCKAI VENCKUOSE;
• auditors, other consultants;
• outsourced data processors, reservation service providers;
• public authorities, law enforcement agencies and other persons in accordance with the procedure established by the legislation of the Republic of Lithuania.

If we disclose your personal data to other groups of data recipients than those specified in this privacy policy, we will inform you of this at the latest at the time of the first disclosure of the data, unless we have already provided you with such information in other documents previously provided to you or concluded with you.

Purposes for personal data processing

VENCKAI VENCKUOSE processes your personal data for the following purposes: ordering and providing of services/goods, direct marketing, customer service, room reservation, Website traffic statistics and monitoring, Website improvement, promoting VENCKAI VENCKUOSEs brand awareness, analysing guest opinion, handling complaints, improving services (including monitoring of guest behaviour), protection of property and persons, internal administration, debt collection and administration, legal claims, enforcement and defence, relations with customers and partners, accounting, contract administration and enforcement, enquiry management, employee search and recruitment.

Categories of personal data processed by VENCKAI VENCKUOSE:

The following main categories of personal data may be processed by VENCKAI VENCKUOSE for the purposes set out above:

• Name, surname, date of birth, age of the data subject;
• ID card (passport) number, date and place of issue;
• telephone number, e-mail address, address, signature, IP address;
• service purchased/ product, additional services ordered;
• date of check-in and check-out at the VENCKAI VENCKUOSE hotel, reservation number, information on persons living together;
• website browsing history and date;
• other information necessary for the provision of services, goods, maintenance of relationships, invoicing and administration of contracts, presentation of legal requirements,
• reviews and ratings of VENCKAI VENCKUOSE on social media;
• videos, other categories of data.

PROCESSING OF VIDEO FOOTAGE FOR THE PURPOSE OF PROTECTING PROPERTY AND PERSONS, THEFT PREVENTION

We carry out video surveillance in our common areas in order to protect our property, yours and others property, as well as the health and life of individuals, on the basis of the legitimate interests of VENCKAI VENCKUOSE and third parties.

As part of video surveillance, we collect the following information: video recordings, date and time of video recording, location.

We organise video surveillance in such a way that a larger area (room, part of room) of the VENCKAI VENCKUOSE than is strictly necessary is not covered by the field of surveillance. The interior and entrances of our ballroom facilities are monitored.

Video surveillance is not carried out in rooms and/or areas intended for the private use of individuals, i.e. toilets, showers, changing rooms, etc., nor in our guest rooms.

Video footage may be used only for the purpose of disclosing suspected criminal offences, administrative infringements of law or for the purpose of proof, disclosing and transmitting the damage caused to the health or life of VENCKAI VENCKUOSE employees, service providers, third parties, or the property of VENCKAI VENCKUOSE, only to persons entitled to receive such data in accordance with the procedure established by law.

Video recordings may be made available for viewing at your request, provided that the video relates to you and that the retention period for such video recordings has not expired. If necessary, video recordings may be transferred to law enforcement authorities following a written request or a data request from law enforcement authorities. If the video recordings are viewed outside the premises of law enforcement authorities or a court, the viewing of the video recordings must take place in an enclosed area of VENCKAI VENCKUOSE. The data subject, the responsible employee of VENCKAI VENCKUOSE and representatives of law enforcement authorities shall have the right to be present at such viewing.

At your request, you may be provided with photographs of the video, the video on your own or on the storage media of VENCKAI VENCKUOSE.

Data processing for direct marketing purposes

By providing us with your name, surname, email address or telephone number, you may consent or not to the use of these data for direct marketing purposes.

When processing your personal data for direct marketing purposes, we may also receive information about whether the newsletter has been read: when and how many times it was accessedor a link in it.

With your consent, we will send you information about the services and goods offered by VENCKAI VENCKUOSE and other related companies.

If you have already purchased a product or booked/purchased services from us, or if you have entered into a contract with us and have not objected to the processing of your personal data for direct marketing purposes at the time of collection, we will process your data for this purpose on the basis of a legitimate interest by sending you communications about similar goods or services. In this case, you may at any time unsubscribe from the direct marketing communications provided to you by emailing us at info@venckaivenckuose.lt or by clicking on the unsubscribe link at the bottom of the newsletter you receive from VENCKAI VENCKUOSE.

PROCESSING OF PERSONAL DATA FOR PURPOSES RELATED TO COVID-19S RESTRICTIONS

If you visit the VENCKAI VENCKUOSE restaurant sauna, we process your personal data, including your name and telephone number. The above data is processed on the instructions of the Ministry of Health of the Republic of Lithuania for the purposes of implementing the prevention and control measures for the COVID-19 disease (coronavirus infection). If you do not consent to the processing of your personal data, you will not be admitted to the VENCKAI VENCKUOSE sauna.

Storage term of personal data

Personal data is processed for no longer than necessary for the purpose of data processing or for no longer than required by data subjects and/or provided by law.

Normally, we will process the data during the contract, during the provision of services and for 10 years from the end of the contract, til the end of the the provision of services or the end of the relationship, in order to comply with the requirements related to document archiving laid down in legal acts and in order to assert, enforce or defend the legal requirements of VENCKAI VENCKUOSE.

For direct marketing purposes, on the basis of the data subjects consent, the VENCKAI VENCKUOSE shall process the personal data for a maximum period of 5 years from the receipt of the data subjects consent, or until the data subject withdraws his/her consent to the processing of data.

For direct marketing purposes, when providing the data subject with communications about similar goods or services of VENCKAI VENCKUOSE on the basis of legitimate interest, VENCKAI VENCKUOSE shall process personal data during the term of the contract with the data subject and for a period of 3 years after the end of the contract or the acquisition of the good/service (purchase of one-off goods/ service) or until the data subject objects to the receipt of such communications from VENCKAI VENCKUOSE.

The data provided by candidates shall be retained for 1 (one) year after the end of a specific selection process, where no employment contract is concluded with the candidate, or, if the candidate has provided his/her data without having applied for a specific position within VENCKAI VENCKUOSE, with the consent of the data subject, or until the data subject withdraws his/her consent to the processing of data.

Telephone records made for the purpose of service improvement shall be retained by VENCKAI VENCKUOSE for no longer than 14 days

Data collected from the monitoring of guest behaviour for the purpose of improving and adapting services to the needs of guests shall be retained by VENCKAI VENCKUOSE for a maximum period of 3 years from the last contact with the data subject.

Payment card data is stored for 1000 days.

Your personal data obtained through social media platforms or online reviews for the purpose of investigating your complaints or responding to positive feedback about us, monitoring our online reputation, in order to evaluate and improve the quality of our services through these means, shall be processed by the VENCKAI VENCKUOSE for a maximum of 1 year from the date of collection of such data.

Video surveillance footage containing personal data, and personal data, shall be stored and processed for a maximum period of 1 month from the date of capture/ the date of receipt.

If the data subject withdraws consent to the processing of the data or the term of the processing expires (in the case of processing based on the data subjects consent), only the data evidencing the fact of the data subjects consent shall be retained in this case, but not for more than ten (10) years from the expiry of the term of the consent or the withdrawal of the consent, for the purpose of asserting, exercising or defending legal claims against the VENCKAI VENCKUOSE.

Your personal data obtained in the course of the execution of the instructions of the Ministry of Health of the Republic of Lithuania for the purpose of implementation of the measures for prevention and control of the COVID-19 disease (coronavirus infection) shall be stored and processed for a maximum period of 21 days from the date of recording/receiving such data.

YOUR RIGHTS IN RELATION TO PERSONAL DATA

Where we receive information directly from you about the processing of personal data, we will inform you at the time of receipt of the personal data:

• orally (if we only communicate with you orally, e.g. by telephone);
• in writing (information sent to you by email is considered to be in writing).

If we do not receive your data directly from you, we will inform you orally or in writing (as set out above) about the processing of your personal data at the latest within one month of receipt of the data, and, if we use your personal data to contact you, at the latest at the time of the first contact with you.

You have the following rights in relation to the processing of personal data:

• the right to access your personal data and how they are processed;
• you have the right to be informed about the period of retention of your personal data, from which sources and what personal data have been collected, for what purpose they are processed, to whom they are provided;
• to request the rectification of personal data and the suspension of the processing of such personal data in the event that, after consulting the personal data, you discover that the data are incorrect, incomplete or inaccurate;
• the right to request the destruction of personal data or restriction of processing operations, where the data subject establishes, after having familiarised himself with his personal data, that the processing of personal data is unlawful or fraudulent;
• the right to disagree with the processing of one’s personal data, except where such personal data are processed due to a legitimate interest pursued by the later controller or a third person to whom personal data are provided and if the interests of the data subject are not more important;
• the right to object to the processing of personal data for direct marketing purposes;
• the right to withdraw the consent given to the processing;
• the right to have the data erased;
• right to the portability of personal data
• the right to object to the application to the data subject of only automated processing, including profiling
• the right to lodge a complaint with the State Data Protection Inspectorate or a competent court regarding the processing of personal data;
• the right to compensation for damages suffered as a result of violation of the data subject’s rights

PROCEDURE FOR CONTACTING VENCKAI VENCKUOSE WHEN EXERCISING YOUR RIGHTS AS A DATA SUBJECT

You have the right to apply for the exercise of the rights of the data subject orally or in writing by submitting a request in person, by post or by electronic means using the contacts specified in this Privacy Policy.

If you apply for the exercise of the rights of the data subject verbally or if the application is submitted in writing in person, you must confirm your identity by submitting a personal identity document. Failure to do so will prevent us from accepting your request and will result in the non-enforcement of your data subject rights. This does not apply if you request information about the processing of personal data in accordance with Articles 13 and 14 of the Regulation.

If you decide to apply for the exercise of your data subject rights in writing by submitting your request by post, you must submit with your request a copy of a personal identification document certified by a notary public or other legally established procedure.

If your personal data, such as your name, surname or family name, have changed, you must submit copies of the documents confirming the change of these data together; if sent by post, the copies must be certified by a notary public or in accordance with other procedures laid down by legal acts.

If you decide to submit the application by electronic means, the application must be signed with a qualified electronic signature or it must be formed by electronic means, which allows ensuring the integrity and unalterability of the text. This does not apply if you request information about the processing of personal data in accordance with Articles 13 and 14 of the Regulation.

The request to exercise the rights of the data subject must be legible, signed, and must contain your name, surname, address and/or other contact details for communication or for which a reply on the exercise of the rights of the data subject is requested.

You can exercise your rights yourself or through a representative. If you choose to exercise your rights through a representative, your representative must indicate in the request your name, address and/or other contact details for communication purposes and by which your representative wishes to receive a reply, as well as your name and any other data necessary for the proper identification of the data subject, and must provide a document or a copy of a document confirming representation.

If we have any doubts about your identity, we have the right to request additional information necessary to verify it.

COOKIES

To improve your visit, we use cookies, which are small pieces of text information that are automatically generated when you browse the Website and stored on your computer or other terminal device.

The information collected by cookies allows us to provide you with a more user-friendly browsing experience, to provide suggestions and learn more about the behaviour of our Website users, to analyse trends and improve both the Website and the services we provide, and to save your completed or incomplete reservations so that you can return to them later. Cookies allow VENCKAI VENCKUOSE to provide services tailored to the needs of our users (for example, by displaying only content of interest to a particular user). Where the VENCKAI VENCKUOSE Website contains links to other websites that also use cookies, these are not described here.

Where functional, tracking, advertising cookies and/or third party cookies are recorded, we ask for your consent. Where we use essential cookies, we use them on the basis of legitimate interest and do not ask for your consent to set such cookies.

If we have obtained your consent, we will not ask for your consent again in the future when using the same cookie for the same purpose. This also applies to cookies used by third parties.

If you do not consent to the recording of cookies on your computer or other terminal device, you can change the settings of your web browser to disable all cookies or enable/disable them one by one in the event that we ask for your consent to record cookies. However, please note that in some cases this may slow down your internet browsing speed, restrict the operation of certain features of the Website or block access to the Website.