1.1           It this Privacy Notice, UAB “KORNEALITA”, company code 305328281, address: Jaunystės str. 21, Visaginas, provide information on how we process your personal data when you visit our website and use our services.

1.2           If you visit our Website for the first time we ask you to agree to use of cookies in accordance with the terms of this Notice.

1.3           This Notice will provide you the answers the follow questions:

(a)        How we use your personal data;

(b)        To whom and when we provide your personal data;

(c)        How long we store your personal data;

(d)        Your rights related to your personal data;

(e)        How we use cookies;

(f)         What’s worth special attention?

1.4           If you have any questions or wish to exercise any of your rights under this Notice, please contact us in the ways specified onthe website.

2.              How do we use your personal data?

2.1           In this Section we have set out:

(a)        The general categories of personal data that we may process;

(b)        If the personal data was not received from you, information on data sources;

(c)        The purposes for which we process your personal data; and

(d)        The legal bases of the processing your personal data

2.2           We process information about your use of our website (“data usage”)The usage data may include your IP address, geographical location, browser type and version, operating system, referral source, duration of website visit, page views and website navigation paths, as well as information about timing and frequency of your service use. We obtain this data using cookies or similar technologies. We process the data in order to better understand your use of the website and the services provided on it. We process this data on the basis of legitimate interest, namely monitoring and improving our website and the services provided.

2.3           We process your access data (“access data”). Access data may include your name, surname, your email address phone number. We receive this data directly from you. We process access data for the purpose of administering our website, providing the services, security of website and services provided, as well as for backing up databases and communicating with you. We process this data in order to fulfil the contract between you and us (or, at your request, take measures to conclude such a contract), as well as for legitimate interest, namely for the proper administration of our website and our related activities.

2.4           We process information related to the services ordered by you and the goods purchased    (“transaction data”). Transaction data may include your contact details, your identification number, date and place of issue, your payment details and transaction details - dates of arrival at the hotel, number of rooms booked, type of room, information on people arriving together, age of children, information on the additional services ordered and the goods purchased. We process transaction data so that we may provide you services and that we may properly account for these transactions. We process this data in order to fulfil the contract between you and us (or, at your request, take measures to conclude such a contract), as well as for legitimate interest, namely for the proper administration of the site and our related activities.

2.5           We process information that you provide to us for the purpose of subscribing to our email notifications and newsletters (“notification data”). We process this data to send you relevant newsletters and/or newsletters. We process this data with your consent, as well as for the purpose of fulfilling the agreement between you and us (or, at your request, taking measures to conclude such an agreement). In addition, if you have already purchased services on our website and you agree we also process the notification data on the basis of legitimate interest, namely to maintain and improve relations with the existing customers. 

2.6           We process relating to any message you send to us (“Communication Data”). Communication data may include both the communication content itself and related metadata. The website automatically creates metadata related to your communication that is provided using the forms on the website. We process data to contact you, as well as for accounting purposes. We process this data on the basis of legitimate interest, namely for the proper administration of the site and our related activities.

2.7           We may process your personal data contained in this Notice where necessary for the establishment, exercise or defence oflegal claims arising from judicial, administrative or other out-of-court procedures. We process your personal data on the basis of legitimate interests, namely, to protect and ensure your and our rights and the rights of others.

2.8           We may process your personal data specified in this Notice where necessary for the obtaining or maintaining insurance coverage, managing risks or obtaining professional advice. For this purpose, we process your personal data on the basis of a legitimate interest, namely, to properly protect our activities from risks.

2.9           In addition to the specific purposes set forth in this Section of the Notice, we may also process your personal data where such processing is necessary to fulfil our legal obligations and to protect your vital interests or the vital interests of other natural persons.

3.              To whom and when do we provide your personal data?

3.1           We may disclose your personal data to any of our group’s companies (including both our subsidiaries and our controlling company and all its subsidiaries) to the extent necessary to achieve the objectives set forth in this Notice.

3.2           We may disclose your personal data to our insurers and professional consultants to the extent that it is necessary to obtain or provide insurance coverage, manage risks, obtain professional advice, as well as to file, execute or defend legal claims arising from legal, administrative or other out-of-court procedures.

3.3           Financial transactions related to the purchase of the services on our website may be carried out by our payment service providers. We share your transaction data with payment service providers only to the extent necessary to make your payments, refunds and process complaints and requests related to such payments and refunds.

3.4           We may disclose your personal data to other service providers for the purpose of providing the specific services to the extent necessary for the provision of such services (for example, website hosting service providers, server service providers, email service providers). Through subcontractors, we take all necessary measures to ensure that our data controllers implement appropriate organizational and technical security measures and maintain the confidentiality of personal data.

3.5           In addition to the specific cases of the possible disclosure of your personal data set forth in this Section of the Notice, we may also disclose your personal data in cases where such disclosure is necessary to fulfil our legal obligations and to protect your vital interests or the vital interests of other natural persons. 

3.6           Persons indicated in this Section may be established outside the Republic of Lithuania, the European Union or the European Economic Area. If we transfer your personal data to such persons, we will take all necessary legal measures to ensure proper protection of your right to privacy.

4.              how long do we store your personal data?

4.1           We process your personal data for any purpose or purpose no longer than it is necessary for this specific purpose or goals, in all cases:

(a)        Access data is stored for no longer than 3 (three) years from the date of last update or for 10 (ten) years from the date of the last transaction (whichever is longer);

(b)        Transaction data is stored for no longer than 10 (ten) years from the date of transaction;

(c)        Notification data is stored for no longer than 2 (two) years from the date of receipt of consent or in case if notifications are sent to the existing customers, for no longer than 2 (two) years from the date of purchase of the relevant services in order to maintain and improve relations with existing customers;

(d)        Communication data should be stored for no longer than 1 (one) year from the date of communication termination.

4.2           In some cases, we can’t indicate in advance the specific periods during which we will store your personal data. For example, usage data will be stored to the extent necessary for the specific purposes for which it is being processed.

4.3           Notwithstanding the conditions set forth in this Section of the Notice, we have the right to store your personal data in cases where such storage is necessary to fulfil our legal obligations and when it is necessary to protect your vital interests or the vital interests of other natural persons.

5.              Your rights

5.1           In this Section, we have summarised the rights that you have under data protection law. Some of the rights are complex and not all of the details have been included in our summaries. Accordingly, you should read the relevant laws and guidance from the regulatory authorities for a full explanation of these rights.

5.2           Your principal rights under data protection law are:

(a)        The right to access to your personal data;

(b)        The right to rectification;

(c)        The right to erasure;

(d)        The right to restrict processing;

(e)        The right to object to processing;

(f)         The right to data portability;

(g)        The right to complain to a supervisory authority;

(h)        The right to withdraw consent

5.3           To right to access to personal data. You have the right to receive confirmation from us whether we process personal data relating to you, and, in the case of processing, you have the right to access the processed personal data and certain additional information. This additional information includes data processing objectives, the categories of personal data, data recipients. Providing the rights and freedoms of others are not affected, we will supply to you a copy of your personal data.

5.4           The right to rectificationYou have the right to have any inaccurate personal data about you rectified and, taking into account the purposes of the processing, to have any incomplete personal data about you completed. 

5.5           In some circumstances you have the right to erasure of your personal data. Those circumstances include: (i) the personal data are no longer necessary in relation to the purposes for which they were processed; (ii) you have withdrawn your consent and there are no other legal grounds for processing the data; (iii) you object to the processing under certain rules of applicable data protection law; (iv) data is processed for direct marketing purposes; (v) data is processed illegally. However, there are exclusions of the right to erasure. The general exclusions include where processing is necessary for: (i) exercising the right of freedom of expression and information; (ii) compliance with our legal obligations; (iii) the establishment, exercise or defence of legal claims.

5.6           In some circumstances you have the right to restrict the processing of your personal data. Those circumstances are: (i) you contest the accuracy of the personal data; (ii) processing is unlawful but you oppose erasure; (iii) we no longer need the personal data for the purposes of our processing, but you require personal data for the establishment, exercise or defence of legal claims; and (iv) you have objected to processing, pending the verification of that objection. Where processing has been restricted on this basis, we may continue to store your personal data. However, we will only otherwise process it: (i) with your consent; (ii) for the establishment, exercise or defence of legal claims; (iii) for the protection of the rights of another natural or legal person; (iv) for reasons of important public interest.

5.7           You have the right to object to our processing of your personal data on grounds relating to your particular situation, but only to the extent that the legal basis for the processing is that the processing is necessary for: the performance of a task carried out in the public interest or in the exercise of any official authority vested in us; or the purposes of the legitimate interests pursued by us or by a third party. If you make such an objection, we will cease to process the personal information unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is for the establishment, exercise or defence of legal claims.

5.8           At any time you have the right to object at any time to the processing of your personal data for direct marketing purposes (including profiling for direct marketing purposes). If you object to such processing of your personal data, we will no longer process your relevant personal data for this purpose.

5.9           You have the right to object to our processing of your personal data for scientific or historical research purposes or statistical purposes, unless the processing is necessary for the performance of a task carried out for reasons of public interest.

5.10         The right to data portability. To the extent that our legal basis for processing is:

(a)        consent; or

(b)        the performance of the contract or the performance of an action at your request prior to the conclusion of the contract,

You have the right to receive your personal data in a structured, commonly used and machine readable format but you cannot exercise this right if it adversely affects the rights and freedoms of other third parties.

5.11         If you believe that the data protection law by processing your personal data, you have the right to file a complaint with the State Data Protection Inspectorate to the address: A. Juozapavičiaus str. 6, LT-09310 Vilnius, www.ada.lt.

5.12         To the extent that the legal basis for our processing of your personal information is consent, you have the right to withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing before the withdrawal.

5.13         In addition to the specific measures given in this Section of the Notice or on our website, you can also exercise any rights mentioned in this Section of the Notice by contacting us using the details provided on the website.

6.              about cookies

6.1           Cookies are small text files containing the identifiers sent by a web server to your web browser and re stored on your computer/device by the browser. The identifier is then sent back to the server each time the browser requests a page from the server.

6.2           Cookies may be either "persistent" cookies or "session" cookies: a persistent cookie will be stored by a web browser and will remain valid until its set expiry date, unless deleted by the user before the expiry date; a session cookie, on the other hand, will expire at the end of the user session, when the web browser is closed.

6.3           Cookies do not typically contain any information that personally identifies a user, but personal information that we store about you may be linked to the information stored in and obtained from cookies.

7.              cookies that we use 

7.1           We use cookies for the following purposes:

(a)        Functional cookies – these cookies allow navigating around our website and using its features and functions, for example, “Add to cart”.

(b)        Analytical cookies – they help us to track and analyse the use of our website in order to improve its functionality, quality and offer users the best possible shopping experience.

(c)        Preference cookies – they enable to remember your preferences when you browse or make purchases on our website. Thus, we can ensure the most coordinated purchase process, more suitable for your needs.

(d)        Targeting and advertising cookies – they are used to display advertisements to you based on relevant topics that interest you. They also limit the number of ads to a limited number of times and help you evaluate the effectiveness of our advertising companies.

8.              Cookies used by our service providers 

8.1           Our service providers use cookies and those cookies may be stored on your computer when you visit our website. 

8.2           We use Google Maps cookies to determine your location with your consent. The cookies used for this purpose help us to customize the website’s settings according to the user's location and improve the interaction with it on our website. You can read Google Maps Privacy Policy  here.

8.3           We use Facebook cookies to manage the advertising impressions of our users. Cookies used for this purpose help us to distinguish between users who use our services and to reduce or stop advertising for them. You can read Facebook's Privacy Notice  here.

9.              Managing cookies

9.1           Most browsers allow you to refuse to accept cookies and to delete cookies. The methods for doing so vary from browser to browser, and from version to version. You can however obtain up-to-date information about blocking and deleting cookies via these links ChromeFirefoxInternet ExplorerSafari.

9.2           Blocking all cookies will have a negative impact upon the usability of many websites.

9.3           If you block cookies, you will not be able to use all the features on our website.

10.           Cookie settings

You can manage cookie settings related to the use of cookies on the website in your browser’s cookie settings.

11.           Third-party websites  

Our website may contain links to external websites of our partners, advertising providers and other related parties. When clicking through to any of those websites, take note that these websites have their own privacy policies and we shall not be responsible for the privacy policies of those websites. We recommend you to read the privacy notices of those websites before providing your personal data on those sites.

12.           Children’s personal data

12.1         The services provided on our website are intended for persons over 16 years of age.

12.2         If we have reasonable doubts that we process the data of a person who is younger than the age specified in this section, we will delete the data of this person from the databases.

13.           Changes in Notice

Any changes to this Notice will be published on our website, and in some cases we will notify you by e-mail.