K. GECO COMPANY PRIVACY POLICY

Updated on 07/10/2024

For us, the K. Geco trading company (hereinafter - the Company), it is very important that potential customers, clients and other persons of our hotel restaurant "Vandenis" can trust our services and ability to protect personal data. We respect and protect your privacy and ensure proper handling of all received personal data.

The name of the cookie

Function

Expiry date

The species

XSRF-TOKEN

svSession

SSR-caching

_wixCIDX

_wix_browser_sess

consent-policy

smSession

TS*

bSession

fedops.logger.sessionId

wixLanguage

Used for security purposes

Necessary

Functional

Until the end of the session

2 years

1 minute

3 months

Until the end of the session

12 months

Until the end of the session

30 minutes

12 months

Used for security purposes

Used during user login

Used to indicate the system from which the site was rendered

Used for system monitoring/debugging

Used for cookie banner settings

Used to identify logged in members of the site

Used for security and anti-fraud purposes

Used to measure system efficiency

Used to measure stability/performance

Used on multilingual websites to save the user's language preferences

Our doors and hearts are open - we welcome everyone.

Facebook

Instagram

TripAdvisor

Newsletter

Birutes al. 47, 00135 Palanga, Lithuania

You will find us

manager@vandenis.lt

+370 613 55551

Restaurant

Reserve a table

Order food with delivery

Music club

+370 620 33998

koncertai@vandenis.lt

Concerts

Gift coupon

VANDENIS

1. What does this Privacy Policy mean?

Taking into account the responsible approach to the processing of personal data, the Company has this privacy policy (hereinafter - the Privacy Policy), which describes the Company's approach to personal data, how we comply with the applicable legal acts regulating the protection of personal data. Further in this Privacy Policy, you can familiarize yourself with how the Company handles your personal data, depending on the relationship the Company has with you.

This Privacy Policy applies to all information that you provide to us and/or that we collect about you, regardless of whether you are a person who has subscribed to our newsletter, or a person who has reserved a table, or a visitor to our website www.vandenis.lt or a candidate for Company employees.

Hereinafter, any person whose personal data is processed by the Company is called a Data Subject.

2. Data controller and contact information

The company is the data controller of the personal data we process about you.

The company's legal entity code is 152621575, registered office address Birutės al. 60, Palanga, Republic of Lithuania. Data about the Company are collected and stored in the Register of Legal Entities of the Republic of Lithuania.

Contact e-mail e-mail regarding personal data protection datanuapsauga@palangahotel.lt If you have any questions about the processing of your personal data, please do not hesitate to contact us using the contact details provided.

3. What is personal data?

Personal data is any information collected by the Company about the Data subject, which can be used to determine the personal identity of the Data subject, both directly and indirectly, and is processed electronically or in another systematic way.

Personal data includes any information, including the name, surname, address of the Data subject, which the Company collects about the Data subjects for the purposes specified in this Privacy Policy or in a separate consent or agreement of the Data subject with the Company.

When processing personal data, the company is guided by the 2016 April 27 European Parliament and Council Regulation no. 2016/679 on the protection of natural persons in the processing of personal data and on the free movement of such data and which repeals Directive 95/46/EC (General Data Protection Regulation) (GDPR), the Law on Legal Protection of Personal Data of the Republic of Lithuania, the Law on Electronic Communications of the Republic of Lithuania and others , legal acts regulating the protection of personal data.

Below you can find out how the Company processes your personal data: what personal data we process, for what purposes we process it, how long we keep it and what rights you have.

We collect data about our Guests using:

electronic marketing and registration forms,

when you order our services,

after you provide your details through the reservation system.

4. Electronic commerce

On our website www.vandenis.lt you can reserve a table, purchase gift vouchers or tickets to events. To reserve a table, we will process your personal data, such as name, surname, phone number, e-mail address, number of guests and children, date and time of reservation.

For the purchase of a gift coupon, we will process your personal data, such as name, surname, phone number, e-mail address, address, your observations, information about the ordered service, the amount due and the amount paid. We ask you to specify the name, number, expiration date, security code (CVV) of the payment card, and we also process information about the amount due and paid. The company does not store sensitive authentication data, such as CVV2/CVC2 codes (three-digit security codes for online payments), PIN code (four-digit security code used in payments with payment cards). Card data are only required to complete the payment for services and are not stored.

To purchase tickets to events, you will be directed to the third-party website www.kakava.lt and your data will be processed in accordance with the privacy policy specified on the website www.kakava.lt .

We will process your personal data on the basis of contract conclusion and performance (GDPR, Article 6, d. 1, p. b).

Personal data processed for the purpose of e-commerce will be stored for 3 years

We will provide the personal data you provide to the following data recipients:

When you purchase a gift voucher for another person, we will ask you to specify the name of the person to whom the voucher is intended and, if you wish us to deliver the gift voucher to this person, their e-mail address.

We will process the personal data of the person to whom the gift voucher is intended for the purpose of legitimate interest - in order to fulfill the contract concluded with the buyer of the gift voucher and to deliver it (GDPR Article 6 d. 1 f p.).

Personal data processed for the purpose of e-commerce, as well as the data of the person to whom the gift voucher is intended, will be stored for 3 years.

The personal data you provide will not be provided to third parties, except in the following cases:

if there is your consent to the disclosure of Personal Data;

to law enforcement authorities in accordance with the procedure provided by the legal acts of the Republic of Lithuania, to prevent, investigate, identify criminal activities, to emergency services, to provide emergency services, etc., as required by legal acts.

To other state institutions that are required by law to provide data.

5. Parking service consent

The company provides parking in the closed parking lot managed by the company, located at Birutės al. 47, Birutė al. 60 and Birutė al. 52, Palanga, access to which is restricted by automatic barriers. For the purpose of providing the parking service, we will process your car's registration number, parking time, the amount due and paid, and a photo of the car's registration number captured by the entry devices.

If you communicate with us by phone for the purpose of providing the parking service, we will also process the records of telephone conversations in accordance with the procedure established in the Company's description of the procedure for recording telephone conversations and managing conversation records. Since the specified parking lot is subject to video surveillance, if you use the parking service, we will also process your video data, the processing of which is subject to the Company's video surveillance rules.

We will process your car's registration number, parking time, the amount due and paid, the photo of the car's registration number captured by the entry devices for the purpose of concluding and executing the contract, as far as they are related to the provision of parking services (GDPR Article 6 d. 1 b p.). The legal bases applicable to the processing of telephone conversations and video recordings are specified in the aforementioned documents regulating the processing of these data.

Personal data processed for the purpose of providing the parking service will be stored: vehicle registration no. records of recording cameras - 1 week, parking time, amount due and paid and a photo of the state registration number - 3 months.

Personal data provided by you will not be provided to third parties, except in the following cases:

if there is your consent to the disclosure of Personal Data;

To other state institutions , which are required by law to provide data.

For data processors (subcontractors) who provide us with services (perform work) and process your personal data on behalf of the K.Geco trading company as a data controller. Data processors have the right to process personal data only in accordance with the instructions of the K. Geco trading company and only to the extent that is necessary in order to properly fulfill the obligations set out in the contract concluded with the K. Geco trading company. The processors we use operate in the following main areas: information technology service providers, providing development, maintenance and other services of K. Geco trading company's information systems; marketing service providers; video surveillance equipment maintenance service providers; parking system equipment providers, hotel and spa center reservation system management providers, software providers for digitizing documents. With the help of data processors, we take all necessary measures to ensure that they have implemented appropriate organizational and technical security measures and maintain the confidentiality of personal data.

If you wish to withdraw your consent to the use of cookies, you can set your browser to reject all cookies or to warn you when a cookie is received. If you want to remove cookies from your device, different web browsers have help pages with information on how to delete cookies. When using multiple browsers, remember to remove cookies from all of them. Additional information on how to change the settings of cookie options in the most commonly used browsers can be found here:

Internet Explorer - https://support.microsoft.com/en-us/windows/delete-and-manage-cookies-168dab11-0753-043d-7c16-ede5947fc64d
Mozilla Firefox - https://support.mozilla.org/en-US/kb/cookies-information-websites-store-on-your-computer?redirectlocale=en-US&redirectslug=Cookies
Google Chrome - https://support.google.com/chrome/answer/95647?hl=en

Safari - https://support.apple.com/et-ee/guide/safari/sfri11471/mac
iOS - https://support.apple.com/en-us/HT201265

Please note that by opting out of cookies, you may not be able to access certain areas or features of our website.

We use the website analysis service Google Analytics, which allows us to record and analyze statistical data on the use of the website. You can learn more about Google Analytics and the information that these tools allow to collect here - https://support.google.com/analytics/answer/6004245?hl=lt . If you prefer that Google Analytics tools do not record information about your internet browsing, you can use the Google Analytics opt-out browser plugin.

In cases where Google and Facebook cookies are used, the data is transferred to the United States of America, which, by the decision of the European Union Commission, is not recognized as a country that ensures an adequate level of personal data protection. We currently base such transfer on the standard data protection conditions approved by the European Commission (GDPR Art. 46 d. 2 d. c), which you can familiarize yourself with here: https://support.google.com/publisherpolicies/answer/10437486?hl=en - GB ; https://www.facebook.com/help/566994660333381 .

Facebook and Instagram icon plugin

This page uses Facebook and Instagram icon plugins.

The website of the company's restaurant www.vandenis.lt has integrated Facebook and Instagram icons (Meta Platforms Ireland Limited, Inc., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland). This plugin is intended for visitors to our website who want to visit Facebook, Instagram social networks and receive advertisements based on the visitor's interests. Through these icons, which are indicated on our website, a direct connection is created with Facebook, Instagram servers. The information that you have visited our website is transmitted to Facebook, Instagram, and Facebook, Instagram assigns this information to the personal subscriber of the Facebook, Instagram user. For more information about the collection and use of data by Facebook, Instagram, as well as your rights in this regard and ways to protect your privacy, please read Facebook's privacy policy at https://www.facebook.com/about/privacy/ and Instagram's privacy policy in the policy https://privacycenter.instagram.com/policy/?entry_point=ig_help_center_data_policy_redirect .

6. Records of telephone conversations

The company makes audio recordings of phone conversations between restaurant administrators and interested parties, which take place on the phone numbers provided to the specified positions by the company for work purposes, in order to ensure the quality of the company's telephone service and the objectivity of the handling of interested parties' requests and complaints, and processes such data as: name and surname of interview participants, voice, conversation record, date and start and end time of the telephone conversation, telephone number to which the call is made and from which the call is made. In more detail, you can familiarize yourself with the procedure for recording, using, storing and destroying the Company's telephone conversations, as well as the procedure for implementing the rights of data subjects here.

7. Video surveillance

The company carries out video surveillance in the premises and territory of the restaurant in order to ensure the safety of guests, employees and property, internal administration and control of persons entering and leaving. You can find out more about the Company's video surveillance here.

8. Direct marketing, sending newsletters

We offer you the opportunity to subscribe to our newsletter, in which case we will ask you to provide us with your e-mail address. We will inform you about our offers, promotions and news in the newsletter.

For the purpose of direct marketing, we will process your personal data on the basis of your consent (GDPR, Art. 6, d. 1, p. a).

We will keep the e-mail address for sending the newsletter for 3 years or until the moment you refuse to receive the newsletters and withdraw the consent given.

As a participant of the Marketing Program, we will store your personal data for 3 years from the date of receipt of your consent.

We will provide the personal data you provide to the following data recipients:

For data processors (subcontractors) who provide us with services (perform work) and process your personal data on behalf of the K.Geco trading company as a data controller. Data processors have the right to process personal data only in accordance with the instructions of the K. Geco trading company and only to the extent that is necessary in order to properly fulfill the obligations set out in the contract concluded with the K. Geco trading company. The processors we use operate in the following main areas: information technology service providers, providing development, maintenance and other services of K. Geco trading company's information systems; marketing service providers; reservation system management providers. With the help of data processors, we take all necessary measures to ensure that they have implemented appropriate organizational and technical security measures and maintain the confidentiality of personal data.

We also use the services of Facebook, Google, and other online advertising providers. You can read about the privacy policies of these service providers, the data collected and the personal data protection measures applied in the privacy policies of the aforementioned service providers. More information about how it works, as well as information about how you can object to the display of such advertisements or such use of data, can be found in the information provided by the aforementioned service providers:

https://lt-lt.facebook.com/policies/ads# ; https://policies.google.com/technologies/ads .

9. Selection of candidates for employees

We collect and process your personal data: workplace, e-mail address, date of birth, address, education, surname, phone number, name, desired job, date of receipt of resume, information about your personal characteristics, work experience (last workplace, length of service workplace, positions held, other work experience), information on foreign language skills (language, reading, writing, speaking levels), ability to work with computer programs, other information provided in the resume, recommendation and/or motivation letter; desired salary (in a specific case, the scope of personal data may vary depending on the requirements set by the Company for you as a candidate), during participation in the selection for the purpose of job selection on the basis of your consent, which you express to the Company by sending your resume and/or motivation letter. If you do not submit your resume and/or motivation letter, we will not be able to assess your suitability for the position offered.

With your consent, we will contact your current employer, and we will contact your former employer on the basis of our legitimate interest (to select a suitable candidate) and on the basis of Article 5, Paragraph 2 of the Law on the Legal Protection of Personal Data of the Republic of Lithuania in order to verify information about your qualifications, professional abilities and professional qualities (for example, work results, relationships with clients and/or colleagues, evaluation of your work, etc.). On the basis of our legitimate interest (to select the right candidate), we will also collect information from public professional social media network profiles. You can at any time withdraw your consent or, accordingly, not agree to us contacting your former employer, by notifying the e-mail specified in point 2 of the Policy. by post

In the event that you do not express your separate consent to process your personal data, after the end of this job selection, we undertake to delete and/or destroy your personal data within 3 days after signing the contract with the selected candidate or taking the decision to end the selection, except when separate consent is given regarding the candidate's person for the period specified in the data storage consent.

Based on your consent to process your personal data for the purpose of offering a job in the Company in the future, if your candidacy is not selected, we will store the data for 12 months. from the execution of the selection.

On the basis of our legitimate interest, we will process the data about the person indicated by the candidate (name, surname, e-mail, telephone, information provided by the person) - former or current employer or the person providing the recommendation, the information provided by him - for the purpose of selecting the candidate. In this case, our legitimate interest is to select the right candidate for the position we are looking for. We will destroy this data within 3 days after signing the contract with the selected candidate or making the decision to end the selection.

Protection of legitimate interests

On the basis of its legitimate interest to defend its rights, including in the case of civil disputes, the company processes the names, surnames, personal codes, case circumstances, other information related to the case, publicly available information of the persons participating in the case or their employees. The data may be transferred to law enforcement authorities, lawyers or bailiffs performing recovery. The data is destroyed 1 year after the final resolution of the case and full satisfaction of the Company's requirements (if the requirements are satisfied).

10. Contact us

There are several ways you can contact the Company: by phone, e-mail by post or by sending a letter to the Company's business address. We receive, review and respond to all messages ourselves. If you contact us, we can process the data you have given us, i.e. e-mail. e-mail address, name, surname (if indicated), date, time, recipient, sender (when the message is addressed to you), content of sent and received messages.

Such data will be processed in order to answer your questions. If you do not provide your contact details, it will not be possible to contact you.

Correspondence is stored for 1 year after receiving the message, with the exception of information for which other terms are set in the Privacy Policy or legal acts.

Any personal data you provide when communicating with us is used only for the above purposes and to view messages and administer and manage communication flows. We undertake not to use your personal data in any publications without your express consent in such a way that it is possible to determine your personal identity.

Please note that we may need to contact you by mail, e-mail. by mail or phone. Please notify us of any changes to your personal data.

11. Use of cookies

Our website uses cookies. A cookie is a small file consisting of letters and numbers that we save on your browser or your computer's hard drive with your consent. We use different cookies for different purposes. Cookies also help us distinguish you from other users of the website, thus ensuring a more pleasant experience of using the website and allowing us to improve the website. The cookies used on the website do not allow the direct identification of the user of the website. A visit to the website is registered by recognizing the personal computer, mobile phone or tablet and the IP address.

Most browsers allow you to reject all cookies, and some browsers have the option to reject only third-party cookies. So you can take advantage of these opportunities. However, please note that blocking all cookies will have a negative impact on the use of the website, and without cookies you will not be able to use all the services provided on the website. More information is available at AllAboutCookies.org or www.google.com/privacy_ads.html .

Necessary cookies are required for the website to function and for you to use at least its minimum functions: to browse it, to agree or disagree with the use of cookies. These cookies cannot be disabled.

Functional cookies allow the website to remember your choices, settings that depend on how and what you see on the website, for example, which language version of the website to show you, etc. They also allow you to display personalized information. If you disable these cookies, some features of the website may not work.

12. Social Media Tools

The information you provide to us through social media (including messages, use of the Like and Follow boxes, and other communications) is controlled by the social network operator.

Our website contains links to our social media accounts (hereinafter referred to as “Social Accounts ”). We currently administer the following social accounts: https://www.facebook.com/muzikosklubasvandenis/ and https://www.instagram.com/muzikoskos_klubas_vandenis/ .

We process the information in the social account for the purpose of account administration on the basis of your consent. We do not store the information in the Social Account separately (when the data is processed for the purpose of administering the Social Account, but the data may be saved if it needs to be processed for another purpose, for example, for the defense of rights).

When you visit the Social Account, the social network administrator places cookies on your device that collect personal data. Cookies are saved both if you are a registered user of social networks and if you do not have an account in the respective social network. We do not have access to your collected personal data and can only receive statistical information about the attendance of the Social Account from the social network administrator.

We recommend that you read the third party's privacy notice and contact the service provider directly if you have any questions about how they use your personal data.

The data controller of the social media networks (Facebook and Instagram) is established in a third country for which the European Commission has not taken an eligibility decision.

The data of European Union residents published on the Facebook and Instagram social network is processed by the data controller Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland). Information on how you can exercise your rights as a data subject can be found at the following address: https://lt-lt.facebook.com/privacy/policy/?entry_point=data_policy_redirect&entry=0 . If you have complaints about the actions of Meta Platforms Ireland Limited in the processing of your personal data or in the implementation (non-implementation) of your rights as a data subject, you have the right to submit a complaint to the supervisory authority in charge of Meta Platforms Ireland Limited - the Irish Data Protection Commission or the State Data Protection Inspectorate .

13. Acquisition and Disclosure of Data

We have indicated the recipients of the data for each of the purposes of personal data processing.

In addition, we may disclose information about you if we are required to do so by law.

Except for the cases provided in this Privacy Policy, we do not provide your personal data to any third parties.

The list of recipients or the categories of recipients specified in the Privacy Policy may change, so if you wish to be informed about changes in the recipients of your personal data, please notify us of this at the e-mail address specified in this Privacy Policy. by mail, indicating in the text of the letter "I would like to receive information about the change of recipients of my personal data, name, surname". We also undertake to update this Privacy Policy in the event of changes.

14. Security of your personal data

Your personal data will be processed in compliance with the General Data Protection Regulation, the Law on Legal Protection of Personal Data of the Republic of Lithuania, the Law on Electronic Communications of the Republic of Lithuania and other legal acts. When processing your personal data, we implement organizational and technical measures that ensure the protection of personal data against accidental or illegal destruction, alteration, disclosure, as well as against any other illegal processing.

15. Your Rights

In this section, we provide information about your rights related to the processing of your personal data by us, and the cases when you can use these rights. If you would like more information about your rights, please contact us at the email address specified in this Privacy Policy. postal address. The e-mail specified in this Privacy Policy You can also apply to exercise your rights.

The institution will provide you with information about the actions taken upon receipt of your request regarding the exercise of your rights without undue delay, but no later than within 1 (one) month from the receipt of the request. Considering the complexity of the request and the number of requests received, the above-mentioned deadline can be extended for another 2 (two) months. In this case, we will inform you about such extension of the deadline and the reasons for it within 1 (one) month after receiving the request. The institution will refuse to exercise your rights only in cases provided for by legal acts.

16. The right to access your personal data

We want you to fully understand how we use your personal data and not experience any inconvenience as a result. You can contact us at any time and ask whether we process any of your personal data. If we store or use your personal data in any way, you have the right to access them. To do so, send us a written request at the email address specified in this Privacy Policy. email address, confirm your personal identity; and observe the principles of fairness and reasonableness in making such a request.

17. Right to withdraw consent

If you have given us your explicit consent for the processing of your data, you can withdraw it at any time. Withdrawal of consent does not affect the lawfulness of consent-based data processing carried out prior to the withdrawal of consent.

18. Additional Rights

Below we provide information about additional rights you have, which you can exercise by following the procedure described below.

(a) You have the right to ask us to correct any inaccuracies in the data we hold. In this case, we may ask you to confirm the corrected information.

(b) You have the right to ask us to delete your personal data. This right is exercised in the cases provided for in Article 17 of the General Data Protection Regulation.

during the period necessary for us to verify the accuracy of your personal data when you submit claims regarding the accuracy of the data;
when our collection, storage or use of your personal data is illegal, but you decide not to request data deletion;
when we no longer need your personal data, but you need it to establish, fulfill or defend a legal claim;
for the period required to determine whether we have an overriding legal basis to continue processing your personal data, if you have exercised your right to object to the processing of personal data.

(d) You have the right to the transfer of data that is processed by automated means and that we have received from you in a structured, commonly used and computer-readable format with your consent or for the purpose of entering into a contract. After you exercise this right, at your request we will transfer a copy of the data you have provided to you or to the data manager you have chosen.

(e) You have the right to object to us using your personal data in accordance with Article 21 of the General Data Protection Regulation. You have the right to object when your personal data is processed on the basis of a legitimate interest (for each purpose of data processing mentioned above, the basis on which the data is processed is indicated) or for the purpose of direct marketing.

19. Right to request more information

We hope that you will understand that it is very difficult to discuss all possible ways of collecting and using personal data. We strive to provide the clearest and most complete information possible and undertake to update this Privacy Policy if the process of using personal data changes. However, if you have any questions about the use of your personal data, we will be happy to answer them or provide you with any additional information that we can disclose. If you have any specific questions or do not understand the information provided, please contact us.

20. Complaints

If you believe that your rights as a data subject are and/or may be violated, please contact us immediately at the e-mail address specified in this Privacy Policy. by post We guarantee that only after receiving your complaint we will contact you within a reasonable period of time and inform you about the progress of the investigation of the complaint, and later about the result.

If you are not satisfied with the results of the investigation, you can submit a complaint to the supervisory authority - the State Data Protection Inspectorate: https://vdai.lrv.lt/ .

22. Changes to the Privacy Policy

We may update or change this Privacy Policy at any time. We undertake to publish the updated Privacy Policy.

21. Liability

You are responsible for the confidentiality of the data you provide, as well as for ensuring that the data you provide to us is accurate, correct and complete. If the data provided by you changes, you must immediately inform us about it by e-mail. by post In no case will we be responsible for any damage caused to you due to the fact that you provided incorrect or incomplete personal data or did not inform us when they changed.