Legal entity SIA “Relax plus” Data about the data controller is collected and stored at the Kaunas branch of the V\u012e \u201cRegistr\u0173 centras\u201d.<\/p>\n “Gamtos oaz\u0117” ensures that personal data is processed in a lawful, fair, and transparent manner, collected only for purposes specified in this policy. All measures are applied to ensure proper security of personal data. These privacy policy provisions apply regardless of the device used.<\/p>\n Personal Data<\/strong> \u2013 any information related to a living person whose identity is established or can be established. This Privacy Policy may also use other terms whose meaning corresponds to the provisions of the Regulation.<\/p>\n This Privacy Policy informs you about the main principles of personal data processing and the implementation of data subjects’ rights. By using the services of “Gamtos oaz\u0117,” purchasing goods, submitting your data, sending a CV, filling out reservation forms, or submitting inquiries, and continuing to browse the Website, you confirm that you have read this Privacy Policy and understand its provisions. “Gamtos oaz\u0117” processes personal data in accordance with the laws of the European Union and the Republic of Lithuania regulating personal data processing. Personal data is obtained in various ways:<\/p>\n User data is processed for the following purposes:<\/p>\n Your privacy is important to us, so we will not disclose your personal data to others without your consent, except for the following persons:<\/p>\n You are not obliged to provide us with any personal data, but without your personal data, we may not be able to perform certain actions or provide services, such as selling goods or issuing invoices. By making a reservation or ordering services, you express your consent that the Data Controller will process the following user data:<\/p>\n The Data Controller provides the following data to the Lithuanian Department of Statistics:<\/p>\n Personal data is processed no longer than necessary to achieve the purposes of data processing or no longer than required by data subjects and\/or prescribed by law. Your personal data may be processed by data processors providing accounting, legal, website maintenance, data center and\/or server rental, IT maintenance, external audit, and other services. The data subject, whose data is processed in the Data Controller’s activities, has the following rights, depending on the situation:<\/p>\n For all questions related to the processing of the data subject’s personal data and the exercise of their rights, you have the right to contact us via email at info@gamtosoaze.lt<\/a>. If you do not comply with the procedure specified in this section when contacting us, we will inform you within 7 calendar days from the receipt of your request, indicating the deficiencies. If you do not correct the indicated deficiencies or inform us of the reasons why they cannot be corrected, we will not consider your request. If there are objective circumstances that prevent the correction of the indicated deficiencies, we may decide to accept your request and consider it. You can order accommodation and related services not only using our reservation system but also using external reservation systems such as www.booking.com<\/a>, www.airbnb.com<\/a>, etc. We want to point out that the personal data you provide on external reservation systems is primarily processed by the operators of these external reservation systems. We are not responsible for how your personal data is processed by the operators of external reservation systems. Therefore, before providing any data, we recommend thoroughly reviewing their personal data privacy policy.
\nLegal entity code: 40203411572
\nAddress: Dienvidkurzemes nov., Rucavas pag., Pape, “Markusi”, LV-3477
\nPhone number: +370 647 58964
\nEmail: info@gamtosoaze.lt<\/a>
\nWebsite: www.gamtosoaze.lt<\/a><\/p>\nTERMS USED IN THE PRIVACY POLICY<\/h3>\n
\nData Subject<\/strong> \u2013 a person who uses the services provided by “Gamtos oaz\u0117,” purchases goods, or visits the website www.gamtosoaze.lt<\/a>, as well as candidates applying for offered job positions.
\nWebsite<\/strong> \u2013 www.gamtosoaze.lt<\/a>
\nRequest<\/strong> \u2013 a data subject’s request to exercise their rights.
\nRegulation<\/strong> \u2013 the Regulation (EU) 2016\/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95\/46\/EC (General Data Protection Regulation).<\/p>\nGENERAL PROVISIONS<\/h3>\n
\nThis Privacy Policy can be viewed and printed at any time on the website www.gamtosoaze.lt<\/a>.<\/p>\nPRINCIPLES OF PERSONAL DATA PROCESSING<\/h3>\n
\nPersonal data is processed only when there is a legitimate processing criterion \u2013 to take action at the request of the data subject with their consent before concluding a contract or to perform a contract, when personal data processing is required by applicable laws and\/or when personal data needs to be processed for the legitimate interest of “Gamtos oaz\u0117” or a third party.<\/p>\nMETHODS OF PERSONAL DATA COLLECTION<\/h3>\n
\n
PURPOSES OF PERSONAL DATA PROCESSING<\/h3>\n
\n
PERSONAL DATA RECIPIENTS<\/h3>\n
\n
\nThe user has the right to opt-out of receiving direct marketing content at any time by notifying us via email at info@gamtosoaze.lt<\/a> or using the unsubscribe link in the newsletter.<\/p>\nCATEGORIES OF PROCESSED PERSONAL DATA<\/h3>\n
\n
\n
PERSONAL DATA RETENTION PERIOD<\/h3>\n
\nTypically, we will process data during the contract, service provision period, and 10 years from the end of the contract, service provision, or relationship, complying with document archiving requirements set by law and to assert, exercise, or defend legal claims.
\nData provided by candidates is retained for one year after the specific selection ends if no employment contract is concluded with the candidate, or if the candidate submits their data without applying for a specific position, with the data subject’s consent, or until the data subject withdraws their consent for data processing.
\nRecorded telephone conversations for service improvement purposes are retained for no longer than 30 days.
\nData collected during guest behavior monitoring for service improvement and customization to guest needs is processed for no longer than 3 years from the last contact with the data subject.
\nPayment card data is retained for 1000 days.
\nPersonal data obtained through social media platforms or online reviews to address your complaints or respond to positive feedback about us, monitor our online reputation to evaluate and improve our service quality, is processed for no longer than 1 year from the date of data collection.
\nReservation data entered in the reservation system is retained for 10 years from the date of check-out from “Gamtos oaz\u0117.” Credit card data used during registration is retained for 10 days from the date of check-out from “Gamtos oaz\u0117.”
\nVideo surveillance recordings with personal data are retained and processed for no longer than 1 month from the date of data capture\/receipt.
\nIf the data subject withdraws consent for data processing or the data processing term ends (when data is processed based on the data subject’s consent), only data confirming the fact of consent provision will be retained for no longer than 10 years from the end of the consent term or consent withdrawal to assert, exercise, or defend legal claims.
\nPersonal data obtained in compliance with the Ministry of Health of the Republic of Lithuania instructions for implementing COVID-19 disease (coronavirus infection) prevention and control measures is retained and processed for no longer than 21 days from the date of data capture\/receipt.<\/p>\nDATA PROCESSORS<\/h3>\n
\nData processors have the right to process personal data only according to our instructions and only to the extent necessary to properly fulfill the obligations specified in the contract.<\/p>\nYOUR RIGHTS RELATED TO PERSONAL DATA<\/h3>\n
\n
PROCEDURE FOR EXERCISING DATA SUBJECT’S RIGHTS<\/h3>\n
\nA request to exercise the data subject’s rights must be legible, signed, and include your name, surname, address, and other contact details for communication or the preferred way to receive a response regarding the exercise of the data subject’s rights.
\nIf we have doubts about your identity or the accuracy of the provided data, we have the right to request additional information necessary to verify it.
\nThe data subject can withdraw consent to collect, process, and store their personal data at any time, and can withdraw consent for direct marketing purposes without any additional justification by contacting the Data Controller, who will immediately stop processing personal data and destroy the related personal data. The Data Controller has the right not to delete personal data from the server if there is a legitimate basis for retaining it, especially to ensure national security and defense, public order, crime prevention, investigation, detection, or prosecution, protect significant state economic or financial interests, and protect the rights and freedoms of others.
\nYou can exercise your rights yourself or through a representative who must indicate their name, surname, address, and other contact details for communication, as well as your name, surname, and other necessary data for proper identification of the data subject and provide a notarized power of attorney, while data to a lawyer is provided only upon submission of a representation agreement and specifying the purpose of data use.<\/p>\n
\nThe Data Controller, having received a request from the Data Subject to access the processed personal data, will provide a response within 30 calendar days from the date of receipt of the inquiry. The response is provided free of charge.<\/p>\nRESERVATION SYSTEMS, SOCIAL MEDIA<\/h3>\n
\n“Gamtos oaz\u0117” has created and manages accounts on social media platforms such as Instagram and Facebook. All information you provide on social media platforms Instagram and\/or Facebook (including messages, use of “Like” and “Follow” fields, and other communications) or that is received when you visit our accounts (including information obtained through cookies used by social network operators) is controlled not by us, but by the social network operator. Therefore, we recommend reading the privacy notices of the social network operators and contacting them directly regarding the use of your personal data. To learn more about the privacy policy of the Facebook social network operator, click here: https:\/\/www.facebook.com\/policy.php<\/a>.<\/p>\nUSE OF COOKIES<\/h3>\n