I. Online Booking Process

Steps of booking through the online booking system:
1. The Client may choose from the Packages and standard accommodation offered as stated in the booking table.
2. On familiarisation with the Package and its price, the Client selects the time of stay for the selected room as well as additional terms or a Package.
3. On selection of an offer, the Client proceeds to a form, which needs to be completed by specifying the Client’s personal data and optional comments on the booking.
4. On completion of the form the Client makes an advance payment by one of the following methods:
* Credit card (Visa, Mastercard, Eurocard);
* Electronic bank transfer (UAB Paysera LT).
4a. Having selected one of the first two options the Client is directed to a page where payment can be made by means of UAB Paysera LT payment system. Authorisation starts upon connection to UAB Paysera LT through an encrypted 128 bit protocol. After UAB Paysera LT accepts the payment, the Client receives a confirmation of payment and booking by an automatic email message. The email message will specify the Client’s data, name of the hotel, total price of the accommodation, advance payment made and the remaining amount payable. The Client will pay the remaining amount upon arrival to the hotel. The email message confirming the booking has to be presented at the hotel as a proof of the advance payment and of the remaining amount payable.
4b. Having selected the third option (payment by bank transfer or later payment), the Client will receive a confirmation of initial booking, which will be finally confirmed upon making the advance payment by an ordinary bank transfer or online. The booking has the status of an initial booking 48 hours after its making and may be cancelled if no advance payment is received. On receipt of the advance payment, an email message confirming the booking is sent to the Client. The Client has to present the confirmation email to the hotel manager for final settlement.
4c. Client, who uses an account in the BookingRobot system has the ability to link his credit card (s) to the account. In this case, each time you purchase a hotel service, a monetary amount will be debited from the customer's credit account automatically, once, at the time of purchase. No additional payments are required. A card link can be canceled at any time in account settings, by pressing "Delete" button. The data security of the client’s credit cards is provided by UAB Paysera LT, accredited by the Lithuanian Bank.
5. The Client understands that, in case of a failure/programming error in the online booking system, the published price for the services is unreasonably low/high considering the content of the services; the hotel is entitled to notify the error to the Client within 10 days from the booking confirmation and request payment of the full price. Should the Client refuse to pay the full price, the hotel may cancel the contract/refuse to provide the services. In such a case, the hotel will not indemnify the Client for any losses.

Ia. Booking at Request
In cases where there are no rooms available online, the Client may be offered a room at the Client’s request. Upon completing the form, the Client receives an email confirmation of the time of stay (or information that no rooms are available) with the instructions for the making of the advance payment. The Client may make an advance payment by credit card or by an electronic or ordinary bank transfer. The booking will be confirmed upon receipt of the advance payment. Upon making the advance payment the Client will receive an email confirmation of the booking, which the Client has to present upon arrival to the hotel for final settlement.

II. Payment and Cancellation of Booking

1. The Client makes the advance payment by one of the three methods used by the system and pays the remaining amount upon arrival to the hotel.
2. There are no booking transaction costs for the Client.
3. Cancellation of the booking no later than 3 days prior to the arrival time is free of charge. The hotel will refund the full amount paid within 21 day.
4. Should the Client cancel the booking less than 3 days prior to the arrival time, the advance payment will not be refunded. In case of such cancellation, the Client will lose the advance payment.
5. Should the Client change the booking details after making an online booking at a discount price of the Package offered by the hotel, the hotel is entitled to recalculate the full price of the order at the current prices.

III. Final Provisions

1. The Client is obliged to provide correct details in the booking form. The hotel is not liable for the wrongly chosen check-in or check-out dates or any other details wrongly specified by the Client.
2. Responsibility for the correct servicing of the payment for the online booking lies with UAB Paysera LT electronic payment system.
3 . The hotel and the company servicing online payments are not liable for unavailability of the system and other faults occurring for reasons beyond their control.

IV. Personal Data

By booking a Package at the hotel, the Client agrees to the recording of his/her personal data in a service database. The data will be used for the finalisation of the booking procedure and for marketing purposes under the agreement on personal data protection dated 28/09/1997.

V. Confirmation of Acceptance of Terms and Conditions

By ticking ‘Accept Terms and Conditions’, the Client confirms that he/she understands and accepts the terms of conditions of the booking. The booking is not valid without such confirmation.

Gift coupons reservation rules:

1. The Present coupon(s) confirms the right of the holder of the Present coupon(s) to use servises specified in the amount of coupon(s).
2. The holders of the Present coupon(s) can enjoy the services provided belonging only to Hotel Medūza.
3. If the desired purchase amount exceeds the value of the Present coupon(s), actual difference can be paid in cash.
4. The Present coupon shall not be exchanged to cash.
5. The Present coupon(s) is valid during 3 months period from its purchase date.
6. If the Present coupon was not used until the end of its validity period, it will be regarded as null and void.
7. If the holder of the Present coupon acquires services for the amount lower that the amount specified in the Present coupon(s), remaining amount is not returned to the holder of the Present coupon.
8. The holder of the Present coupon having paid by the Present coupon(s), shall not be given the VAT invoice.
9.The Present coupon you must use at one time.

This Privacy Policy (hereinafter – the Policy) regulates the principles and procedure of personal data processing conditions at Palangos versmė company, operating at Kontininkų g.9, Palanga, company code 152571859 (hereinafter – Data Controller) and the operation conditions of the Data Controller’s website http://www.pkmeduza.lt/ (hereinafter – the Website).

This Policy applies to persons, visiting the Company’s Website http://www.pkmeduza.lt/, using its information and services. For the purposes of this Policy, the concept of Data Subject covers any natural person, whose personal data is processed by Palangos versmė company. By using the services and continuing browsing the Website, the Visitor (user of the Website) confirms that they have read this Policy, understand its provisions and agree to adhere to them.

The Data Controller ensures that upon adopting and implementing this Policy, he aims to implement the following key principles, related to personal data processing:

• The personal data of the Data Subject is processed in a lawful, fair and transparent manner (the principle of lawfulness, fairness and transparency);
• Personal data is collected for established, clearly defined and lawful purposes and will not be processed further in ways that are incompatible with those purposes;
• Further personal data processing for archiving purposes for the benefit of the public interest or statistics is not regarded as incompatible with the primary purposes (the principle of the purpose limitation);
• The personal data is adequate, suitable and complies with the purposes of its processing (the principle of data minimisation);
• Efforts will be made to ensure that personal data is accurate and, where necessary, updated within a reasonable time of the change;
• All reasonable steps will be taken to ensure that the personal data, which is inaccurate in terms of the purposes of its processing, is erased without delay or rectified within a reasonable time (the principle of accuracy);
• Personal data will be stored in a form, which enables to identify the data subjects, no longer than necessary for the purposes of the personal data processing;
• Personal data may be stored for longer periods if the personal data will be process only for archival purposes, the public interest or statistics, upon conducting appropriate technical and organisational measures, needed to protect the rights and freedoms of the Data Subject (the principle of data retention);
• Considering the general type of the data, processed by the Data Controller, the Personal data is processed in a way to ensure appropriate personal data security in application of appropriate technical or organisational measures, including protection against personal data processing without a permission or illegal personal data processing, also from accidental loss, destruction or damage (the principle of uniformity and confidentiality);
•  The Data Controller is responsible for following the above-mentioned principles and must be able to prove that they are adhered to (the principle of accountability).

This Policy has been compiled in accordance with the Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46 / EC (hereinafter referred to as GDPR), the Law on Legal Protection of Personal Data of the Republic of Lithuania (hereinafter – LPPD), and other legislation in fore in the European Union and the Republic of Lithuania. The concepts, used in the Policy are interpreted the same as they are defined in the GDPR and the LPPD.

2. INFORMATION ON THE USE OF COOKIES

The Data Controller’s Website is using cookies in order to differentiate between various users of the website. Cookies enable the Data Controller to ensure a smoother user experience for the Website browsers and improve the Website itself.

Cookies are small text files, stored by the Person’s browser or device (personal computer, mobile phone or tablet).

We are using Google Analytics website analysis service, which enables us to record and analyse the statistics of the use of the website. More information on Google Analytics and the information this tool enables to collect, is available here – https://support.google.com/analytics/answer/6004245?hl=lt.

If you wish to prevent Google Analytics from recording information on your web browsing, you can use Google Analytics Opt-out Browser Add-on.

Http: https://www.pkmeduza.lt website uses the following cookies:

The cookies used on the website do not enable to identify the user of the website. Each visit of the Website is anonymous, recognising the personal computer, mobile phone or tablet and IP address, and such information is not available to the third parties, except for cases, established by the law.

Upon opening the Website and clicking the pop-up button ‘I agree’, the browsing person agrees to have the cookies stored on their computer, mobile phone or tablet.

To revoke the consent, the browsing person can delete or block cookies by selecting appropriate settings on their browser that enable to refuse all or some of the cookies. All users should be aware that using browser settings that block the cookies (including the necessary cookies) may result in issues with using all or some of the Website’s functions.

The Data, collected by cookies, will be processed in accordance with the provisions of the Law on Legal Protection of Personal Data of the Republic of Lithuania, the Law on Electronic Communications of the Republic of Lithuania, the Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46 / EC (hereinafter referred to as GDPR), and other personal data protection legislation.

Following the provisions of the law, this Website applies security measures to prevent illegal Personal data use and revelation.

3. WHAT IS THE BASIS OF OUR USE OF YOUR DATA?

UAB “Palangos Versmė” trade company collects and processes personal data in accordance with the law on personal data protection of the Republic of Lithuania and the EU. The basis of the company’s processing of personal data is as follows:

On the basis of your consent, expressed by active action, i.e. addressing us and provision of personal data, or other active actions;

For the implementation of our lawful interests (e.g. administration of our website and ensuring its proper operation);

Video surveillance at our Hotel and its territory to ensure property and personal security;

To perform our duties in accordance with the law.

The Company aims to ensure precise, fair and lawful data processing, and only for the purposes that it was collected for, in accordance with the clear and transparent principles and requirements of personal data processing, established by the law.

4. PERSONAL DATA PROCESSING FOR DIRECT MARKETING PURPOSES

The company processes your personal data for the purpose of direct marketing upon receiving your explicit consent to such data processing, e.g. as you subscribe to our newsletters, etc. (the basis of data processing – your voluntary consent for data processing);

The purpose of our direct marketing includes processing of your name, e-mail address and phone number.

For the purposes of direct marketing, your personal data may be processed as follows:

• You may receive e-mails about our offers, campaigns and news;
• You may receive e-mails with invitations to events, offers and similar information.
• You can unsubscribe from our newsletters any time by clicking on the link at the bottom of the newsletters we send.

We also use Facebook, Google and other online advertising providers. The privacy policies of these providers, the information on the data they collect and applicable data protection measures are available in the privacy policies of the said providers. More information on how it works and also on how you can object to the display of such adds or other data use, is available in the information, provided by the said providers:

https://lt-lt.facebook.com/policies/ads#; https://policies.google.com/technologies/ads.

5. PERSONAL DATA PROCESSING FOR VIDEO SURVEILLANCE PURPOSES

Seeking to protect the property, health and lives of the Hotel, our guests, staff and other persons, the premises and territory of our Hotel are under video surveillance.

Video surveillance and the data of the Guests, entering the video surveillance field (video data), is processed on the basis of our lawful interest. Our video surveillance systems do not use face recognition and (or) analysis technology, the data recorded is not grouped or profiled according to a specific data subject (person).

The Guests are informed of the video surveillance by information signs with a video surveillance camera symbol and details of the data controller, provided before entering the territory and (or) premises under surveillance.

The video surveillance field does not include premises, where the Guests expect full personal data protection (changing rooms, resting rooms, bathrooms, etc.).

The personal data of our Guests, collected by video surveillance (video data) are stored for up to 30 (thirty) calendar days since the date of recording.

6. PERSONAL DATA PROCESSING FOR OTHER PURPOSES

We can also process your personal data by providing you with other services, e.g. taking and processing your reservations, fulfilling the obligations of the services we offer, issuing invoices and (or) other accounting documents for our services. Usually this type of personal data processing is implemented on the basis of a service provision agreement, your consent or provisions, established by the law.

We can also process data for other purposes if we have obtained your (the data subject’s) consent of when the personal data processing is based on other lawful criteria for processing, established in other legislation.

7. HOW LONG DO WE PROCESS AND STORE YOUR DATA?

We will process and store your personal data no longer than necessary for the purposes that this data was collected for, or for a period, established by the law.

Your personal data processing may take longer than established in the Policy in the following cases:

• There is a reasonable suspicion of illegal activity, which is subject to an investigation;
• Your data is necessary for a proper solving of a dispute or claim.
• If we have received complaints, related to violations of our Guests or if we have noticed violations of a certain Guest ourselves;
• For back-up copies and other similar purposes, related to the operation and maintenance of information systems;

For other special reasons, conditions and cases, established by the law.

8. WHAT THIRD PARTIES DO WE DISCLOSE YOUR DATA TO AND IN WHAT CASES?

The Company will not disclose your personal data to any third parties without your prior consent, except for the cases, listed below:

We can disclose your data to be processed by third persons that assist us in our business and the administration of the Service provision. These persons may include data centres, companies, developing, providing and supporting software, companies, providing information technology infrastructure services, internet browsing or internet activity analysis and service companies, security services, etc.

In each case we provide the data processor with the data only to the extent it is necessary to complete a specific task or provide a certain service.

Our data processors may process your personal data only under our instructions. Moreover, they must ensure your data safety in accordance with the applicable legislation and written agreements, signed with us.

Data may also be disclosed to competent state or law enforcement institutions, e.g. the police or supervisory institutions, but only upon demand and only if the demand complies with the applicable legislation or only in cases and procedures, established by the law, to ensure our rights, the safety of our guests, staff and resources, and to make a claim, to provide and to defend our legal claims.

9. YOUR RIGHTS

Data protection legislation provides you with many rights, related to your personal data processing.

You have a right to get acquainted with your personal data that we process:

• You have a right to request for our confirmation if we process your personal data and, in such case, request to get acquainted with your personal data that we process. In order to use the right, indicated above, we ask to submit a written request by e-mail to info@pkmeduza.lt

You have a right to demand to correct your personal data that is incorrect.

If you believe that information about you is incorrect or insufficient, you have a right to ask to correct it. In order to use the right, indicated above, we ask to submit a written request by e-mail to info@pkmeduza.lt.

You have a right to disagree with your personal data processing:

You have a right to disagree with your personal data processing, when the personal data is processed based on our lawful interests. Nevertheless, despite your disagreement, we will continue your data processing in case of reasonable and motivated reasons to do so. In order to use the right, indicated above, we ask to submit a written request by e-mail to info@pkmeduza.lt

You have a right to demand to delete your personal data (the right to be forgotten):

Under certain circumstances, you have a right to request to have your personal data deleted. However, this provision does not apply if we must store the data in accordance with the law. In order to use the right, indicated above, we ask to submit a written request by e-mail to info@pkmeduza.lt

You have a right to limit with your personal data processing:

• Under certain circumstances, you also have a right to limit with your personal data processing. In order to use the right, indicated above, we ask to submit a written request by e-mail to info@pkmeduza.lt

10. FINAL PROVISIONS

The legal relationship, related to this Policy, is subject to the law of the Republic of Lithuania.

The Data Controller holds no liability for the damage, including the damage, caused by disruptions of the website use, for the loss or damage to the data, caused by the actions or lack thereof, mistakes, intentional harm or other improper use of the Website by the person himself/herself or third persons, acting under the said person’s knowledge.

The Data Controller also holds no liability for the disruptions of connecting to and/or use of the Website and (or) the damage caused by them due to the actions or lack thereof of the third persons, unrelated to the Data Controller or the person, including power supply, internet access disruptions, etc.

The Data Controller has a right to change this Policy in part or in full.

Supplementations or changes to this Policy come into force on the date of publishing on the Website.

If the person continues to use the Website and/or the services, provided by the Data Controller, after the Policy has been supplemented or changed, it will be regarded that the said person does not object to such supplementations and/or changes.

You may contact us regarding all issues of data processing by e-mail: info@pkmeduza.lt