PRIVACY POLICY
DATA CONTROLLERS
MB ELTUVA, registered at Girios g. 114A, LT-47252 Kaunas, email: info@mariosirjura.lt, phone: +37064985903.
This Privacy Policy (“Privacy Policy”) is intended for individuals who use the accommodation and water taxi services provided on the website www.mariosirjura.lt, as well as visitors of the website www.mariosirjura.lt.
TERMS USED IN THIS PRIVACY POLICY
Personal data – any information about an identified or identifiable natural person (data subject); a person whose identity can be identified directly or indirectly, in particular by an identifier such as a name, surname, personal identification number, location data, online identifier, or one or more factors specific to that natural person’s physical, physiological, genetic, mental, economic, cultural or social identity.
Data subject – any person who uses the services provided on www.mariosirjura.lt, visits the website www.mariosirjura.lt, or contacts MB ELTUVA for services, goods, or any other purpose.
Request – a data subject’s request regarding the exercise of their rights.
Regulation – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation – GDPR).
Website – MB ELTUVA website www.mariosirjura.lt.
Other terms used in this Privacy Policy have meanings defined in the GDPR.
GENERAL PROVISIONS
This Privacy Policy is not considered our contract with you regarding your data processing. Through this Privacy Policy, we inform you of the main principles of personal data processing and the exercise of data subject rights. Additional information may be provided in purchase, service, rental, or other agreements.
By using MB ELTUVA services, submitting your data, filling in inquiry or reservation forms, or continuing to browse the Website, you confirm that you have read this Privacy Policy and understand its provisions.
This Privacy Policy does not apply when using services of other companies or third-party booking systems, such as www.booking.com. We recommend reviewing other service providers’ privacy statements.
PRINCIPLES OF PERSONAL DATA PROCESSING
MB ELTUVA processes personal data in accordance with EU and Lithuanian legislation governing personal data protection.
The scope of processed personal data depends on the services ordered or used, the legal relationship between MB ELTUVA and the data subject, and the information provided by the person when ordering or using services, browsing the Website, or contacting MB ELTUVA.
Personal data is processed only when a lawful basis exists – such as taking steps at your request prior to entering into a contract, performing a contract, your consent, compliance with legal obligations, or legitimate interests pursued by us or a third party.
We strive to ensure that personal data is processed accurately, fairly, and lawfully, for specific purposes for which it was collected, and in accordance with applicable legal requirements.
HOW WE OBTAIN PERSONAL DATA
We may receive your personal data directly when you:
• fill in inquiry or reservation forms on the Website;
• place an order for services;
• contact MB ELTUVA by any means;
• communicate with MB ELTUVA via social media;
• receive services from MB ELTUVA.
We may also receive your personal data indirectly:
• via external booking platforms such as www.booking.com;
• from social media platforms or online reviews;
• from MB ELTUVA processors or other external sources.
Personal data may also be generated when you use services—e.g., calling, messaging, emailing, visiting the Website, or placing orders.
You are not obliged to provide personal data, but without it, certain services (e.g., booking or issuing invoices) may not be possible.
RECIPIENTS OF PERSONAL DATA
Your privacy is important to us. We do not disclose personal data without your consent except to:
• legal service providers (in case of disputes);
• auditors and consultants;
• data processors and reservation system providers;
• external booking platform operators such as www.booking.com;
• state institutions, law enforcement, or other authorized parties under Lithuanian law.
If your data is disclosed to groups not specified in this Privacy Policy, we will inform you before disclosure unless previously provided in other documents.
PURPOSES OF PERSONAL DATA PROCESSING
MB ELTUVA processes your data for the following purposes:
• order and provision of services;
• direct marketing;
• customer service;
• apartment reservations;
• Website traffic statistics and monitoring;
• Website improvement;
• brand visibility and reputation management;
• guest behavior analysis;
• complaint handling;
• service improvement (including behavioral insights);
• property and personal security;
• internal administration;
• debt administration and recovery;
• legal claims;
• customer and partner relations;
• accounting;
• contract administration;
• inquiry administration;
• recruitment.
CATEGORIES OF PERSONAL DATA PROCESSED
Examples include (but are not limited to):
• name, surname;
• date of birth, age;
• phone number;
• address, country;
• email;
• purchased service/product;
• check-in and check-out dates;
• information about accompanying guests;
• guest preferences;
• discount codes;
• reservation number;
• ordered additional services;
• signature;
• IP address;
• Website browsing history and timestamps;
• social media reviews;
• behavioral data related to MB ELTUVA services;
• profile information from social networks;
• video footage;
• other data necessary for service provision and contract performance.
DATA RETENTION
Personal data is processed no longer than necessary for its purposes or as required by law.
Typically, data is stored during the contract/service period and for 10 years afterward, to comply with archiving obligations or for legal claims.
Guest behavioral analysis data is kept for up to 3 years.
Payment card data: 1000 days.
Data from social media or review sites is kept for up to 1 year for complaint handling and service improvement.
If consent is withdrawn, only proof of consent is kept for up to 10 years for legal claims.
DATA PROCESSORS
Your data may be processed by accounting, legal, hosting, IT, audit, and other service providers contracted by MB ELTUVA.
Processors act only according to MB ELTUVA’s instructions and must ensure confidentiality and data security.
YOUR RIGHTS
You have the right to:
• Be informed about your data processing;
• Access your personal data and copies of it;
• Request correction of inaccurate or incomplete data;
• Request restriction of processing;
• Request deletion of data (“right to be forgotten”);
• Object to processing;
• Withdraw consent at any time;
• Request data portability;
• Not be subject to automated decision-making;
• File complaints with the Lithuanian Data Protection Authority or courts;
• Seek compensation for damages caused by data violations.
HOW TO CONTACT MB ELTUVA TO EXERCISE YOUR RIGHTS
You may submit requests:
• verbally;
• in writing (in person, by post, or electronically);
• with identity verification as required.
Requests must include your name, surname, address, and contact details.
Requests may also be submitted by an authorized representative.
If requirements are not met, MB ELTUVA will inform you within 7 days.
DATA SECURITY
Only employees and processors who need access to data for their functions may access it.
SOCIAL MEDIA ACCOUNTS
MB ELTUVA manages Instagram and Facebook accounts.
Social media platforms act as independent data controllers of:
• your interactions,
• likes, comments, follows,
• device data, IP address,
• cookies placed by the platform.
We recommend reviewing Facebook and Instagram privacy policies.
MB ELTUVA also receives limited information from these platforms based on selected settings and tools.
BOOKING SYSTEMS
Accommodation can be booked via the MB ELTUVA system or external platforms such as www.booking.com.
Personal data submitted through external systems is first processed by those providers. MB ELTUVA is not responsible for how external platforms handle your data.
COOKIES
The Website uses cookies to:
• improve browsing;
• save reservations;
• analyze user behavior;
• personalize services.
Functional, tracking, advertising, or third-party cookies require your consent.
Necessary cookies operate under legitimate interest.
You may disable cookies through browser settings, but this may affect website functionality.
STATISTICS
Website traffic is analyzed via Google Analytics, which may store data outside the EU.
OTHER PROVISIONS
By contacting us, you express your will for MB ELTUVA to respond to your inquiry.
Lithuanian law applies to this Privacy Policy.
MB ELTUVA may update the Privacy Policy at any time.
It becomes effective upon publication at www.mariosirjura.lt.
This Privacy Policy was last updated on 2024-07-03.