1. General information
This Privacy Policy explains how we collect, use, protect, and process personal data when you visit our website and use the room reservation system.
We respect your privacy and are committed to processing your personal data lawfully, fairly, transparently, and securely, in compliance with applicable legal acts, including Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation, GDPR).
2. Data controller
Data controller: Cryptotekas, UAB
Company code: 304253947
Address: Ateities g. 7-1, Dainų k., LT-77209 Šiaulių r.
Email: info@cryptotekas.lt
Phone: +370 698 34712
If you have any questions regarding this Privacy Policy or the processing of your personal data, you may contact us using the contact details provided above.
3. What data we collect
When you use our reservation system, we may collect the following data:
3.1. Reservation data
- arrival date;
- departure date;
- number of guests / persons;
- selected room;
- selected beds;
- preferred bed arrangement in the room;
- reservation amount;
- order number;
- reservation status.
3.2. Contact and billing data provided by the customer
During reservation and payment, we may collect:
- first name;
- last name;
- email address;
- phone number;
- company name, if the reservation is made on behalf of a company;
- invoice / payment information, if required for order administration.
3.3. Technical data
When browsing the website, the following may be collected automatically:
- IP address;
- browser type;
- device information;
- date and time of visit;
- cookie and session data;
- website usage statistics.
3.4. Payment data
Payments in the online store are processed by the makecommerce.lt platform, operated by Maksekeskus AS (Liivalaia 45, Tallinn 10145, Estonia, registration No. 12268475). Therefore, your personal information required for the execution and confirmation of the payment will be transferred to Maksekeskus AS.
4. The purposes for which we use your data
We use your personal data for the following purposes:
- to accept, administer, and fulfil the reservation;
- to check room and bed availability;
- to save your selected room, bed, and preferred arrangement;
- to create the order and process payment;
- for confirmations, notifications, and reservation-related communication;
- for invoicing and accounting;
- for customer service;
- for the prevention of fraud, abuse, or technical errors;
- to ensure website operation and security;
- to comply with legal obligations.
5. Legal bases for data processing
We process your personal data on the following legal bases:
- performance of a contract – when the data is necessary to complete the reservation and payment;
- compliance with a legal obligation – when we are required to retain certain data for accounting, tax, or other purposes established by law;
- legitimate interest – when we use data for website security, reservation administration, dispute prevention, and service quality improvement;
- consent – when required, for example, for the use of certain cookies or marketing communications.
6. Bed selection and room arrangement preference
In our reservation system, you may:
- select specific beds in the room;
- provide a preferred bed arrangement.
This data is used only for the administration of your reservation and the assessment of your preferences. Your selected beds or arrangement preference does not change the general room plan for all customers, and is stored only in the context of the specific order / reservation.
Please note that the selection of beds or arrangement is considered a preference, which may be adjusted in the final accommodation based on occupancy, technical possibilities, safety requirements, or other operational needs.
7. To whom we may disclose data
We may disclose your data only to the extent necessary for service provision and the implementation of legitimate purposes, for example:
- payment service providers;
- website, server, or IT maintenance service providers;
- accounting, legal, or administrative service providers;
- public authorities, if required by law.
All data processors or service providers must ensure appropriate protection of your data.
8. How long we retain data
We retain personal data for as long as necessary to achieve the purposes set out in this Policy:
- reservation and order data is retained during the reservation administration period and for a reasonable period thereafter;
- accounting documents and payment-related data are retained for the period established by law;
- technical and cookie data is retained according to its nature, purpose, and established expiry periods.
After the retention period expires, the data is deleted, anonymised, or retained only to the extent necessary for legal requirements.
9. Cookies and similar technologies
The website may use cookies and similar technologies for:
- basic website functionality;
- ensuring reservation and cart functionality;
- maintaining the user session;
- statistics and improving website performance;
- security.
If non-essential cookies are used on the website, they are used only after obtaining your consent, where required by law.
10. Data security
We implement appropriate technical and organisational security measures to protect your personal data from:
- unauthorised access;
- loss;
- alteration;
- disclosure;
- destruction.
However, no data transmission over the internet or storage system can be considered completely secure, therefore we cannot guarantee absolute security.
11. Your rights
You have the right to:
- know what data about you we process;
- request access to your personal data;
- request correction of inaccurate or incomplete data;
- request erasure of data where there is a legal basis for doing so;
- request restriction of processing;
- object to processing where it is based on legitimate interest;
- receive the data you have provided in a structured, commonly used format where the right to data portability applies;
- withdraw the consent you have given where processing is based on consent;
- lodge a complaint with the State Data Protection Inspectorate.
To exercise your rights, you may contact us using the contacts specified in this Policy.
12. Data relating to minors
If minors use our services, their data must be provided and the reservation must be made by a legal representative or another authorised adult person. Where necessary, we may ask for confirmation of the right to make a reservation on behalf of a minor.
13. Third-party services
The website may use third-party solutions such as:
- WooCommerce;
- payment service providers;
- analytics or security tools;
- maps, calendar, or other integrated solutions.
Such service providers are subject to their own privacy policies, so we recommend reviewing them separately.
14. Changes to the Privacy Policy
We reserve the right to update or amend this Privacy Policy at any time. The updated version becomes effective from the date it is published on the website. We recommend reviewing this page periodically.
15. Contacts
If you have any questions regarding this Privacy Policy or wish to exercise your rights, please contact:
Cryptotekas, UAB
Email: info@cryptotekas.lt
Phone: +370 698 34712
Address: Ateities g. 7-1, Dainų k., LT-77209 Šiaulių r.