Privacy Policy | Europa Royale Druskininkai

PRIVACY POLICY

By this Privacy Policy (hereinafter – the Policy), we establish and explain how we process Your personal data.

Your data controller is UAB "Druskų miestas", legal entity code 303409927, address Vilniaus al. 7, Druskininkai, whom you may contact by phone at +370 680 18 909 or by email at fo.druskininkai@europaroyale.com (hereinafter – the Data Controller or We, Our, Us).

The Data Controller is the manager of the website https://www.europaroyaledruskininkai.lt/ and the subdomains https://booking.europaroyaledruskininkai.lt/?lang=lt and https://www.europaroyale.com/ (hereinafter collectively – the Website).

Currently, You can book Our services via www.booking.com, www.online-reservations.com, www.noriunoriunoriu.lt, www.geradovana.lt, www.laisvalaikiodovanos.lt, www.dovanusala.lt and other websites. We note that We are not responsible for the processing of Your personal data on these websites; therefore, before visiting them and ordering Our services, we recommend that You familiarize Yourself with their privacy policies.

GENERAL PROVISIONS

The Policy applies to all persons visiting the UAB "Druskų miestas" hotel and SPA center „Europa Royale Druskininkai“, when You submit inquiries to Us on the Website or call the general telephone number, as well as when You visit the Website. By visiting the Website, You confirm that You have familiarized Yourself with the Policy, the purposes, grounds, methods, and procedures for processing Your personal data specified therein.

We ensure that while processing Your personal data, we implement the following essential principles related to the processing of Your personal data:

We process personal data in a lawful, fair, and transparent manner (principle of lawfulness, fairness, and transparency);
We collect personal data for specified, clearly defined, and legitimate purposes and do not further process it in a manner incompatible with those purposes;
Further processing of personal data for archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes is not considered incompatible with the original purposes (principle of purpose limitation);
Personal data is adequate, relevant, and limited to what is necessary in relation to the purposes for which they are processed (principle of data minimisation);
We make efforts to ensure that personal data is accurate and, where necessary, updated within a reasonable period from the fact of change;
We take every reasonable step to ensure that personal data that is inaccurate, having regard to the purposes for which they are processed, is erased or rectified without delay or within a reasonable period (principle of accuracy);
Personal data is kept in a form which permits identification of Your identity for no longer than is necessary for the purposes for which the personal data are processed;
Personal data may be stored for longer periods insofar as the personal data will be processed solely for archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes, subject to implementation of the appropriate technical and organisational measures required to safeguard the rights and freedoms of the data subject (principle of storage limitation);
Personal data, taking into account the general nature of the personal data We process, is processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction, or damage, using appropriate technical or organisational measures (principle of integrity and confidentiality);
We are responsible for, and must be able to demonstrate compliance with, the principles listed above (principle of accountability).

The Policy is prepared in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter – the Regulation), the Law on Legal Protection of Personal Data of the Republic of Lithuania, and other legal acts of the European Union and the Republic of Lithuania.

DEFINITIONS

Definitions used in the Policy:

Personal data – any information relating to an identified or identifiable natural person;
Data processing – any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;
Cookie – a small text file that the Website [https://www.europaroyaledruskininkai.lt/, https://www.europaroyale.com/ and https://booking.europaroyaledruskininkai.lt/?lang=lt] saves on the visitor's terminal device (computer, mobile phone, etc.);
Terminal device – any device that can access the Website, such as a computer, mobile phone, or digital tablet;
Other terms as defined in the Regulation, the Law on Legal Protection of Personal Data of the Republic of Lithuania, and other legal acts of the Republic of Lithuania regulating the processing and protection of personal data.

PURPOSES AND GROUNDS FOR PERSONAL DATA PROCESSING

We process Your personal data for the following purposes:

Fulfilling reservations submitted by You and gift vouchers purchased, and providing accommodation services;
Fulfilling inquiries submitted by You, including inquiries made when calling Our general telephone number;
Aiming to inform You about Our services, ongoing promotions, special offers, etc.;
Aiming to ensure the safety of You, Us, staff, and property, and the protection of legitimate interests;
Performing internal data analysis, identifying Website usage trends.

We process Your personal data on the following grounds:

Based on Your consent (Art. 6(1)(a) of the Regulation);
Based on the implementation of Our legitimate interests (Art. 6(1)(f) of the Regulation);
Based on the performance of a contract (Art. 6(1)(b) of the Regulation);
Based on a legal obligation applicable to Us (Art. 6(1)(c) of the Regulation).

METHODS OF PERSONAL DATA PROCESSING

We process Your personal data:

When You book services and (or) purchase gift vouchers on the Website, and when we provide accommodation services to You;
When You submit an inquiry, including inquiries when You call Our general telephone number and We perform audio recording of these conversations;
When You subscribe to Our newsletters;
By conducting video surveillance in Our territory and premises that You visit to receive the services We provide;
By recording cookies used on the Website into Your terminal device which You use to visit the Website.

The Website contains links to external sites, i.e., Our page on the social network „Facebook“ [https://www.facebook.com/EuropaRoyaleDruskininkai], „Instagram“ [https://www.instagram.com/europa_royale_druskininkai/]. We are not responsible for the proper processing and protection of Your personal data on other websites to which the Website links redirect.

SUBMISSION OF RESERVATIONS AND PURCHASE OF GIFT VOUCHERS. PROVISION OF ACCOMMODATION SERVICES

In order for Us to provide You with accommodation services, You must provide Us with Your name, surname, date of birth, nationality, the state that issued the identity document, the number of the identity document, residential address, arrival date, departure date, names and surnames of the accompanying spouse and (or) minor child(ren), the number of accompanying children, an indication of whether arrived through a travel organizer, the main purpose of the trip (leisure, work, health, other), email address, phone number.

We process Your personal data for the purpose of providing accommodation services in accordance with the legal obligation applicable to Us, as provided in Art. 45(1)(b) of the Convention implementing the Schengen Agreement of 14 June 1985, the Law on Tourism of the Republic of Lithuania Art. 43(3), and the Regulations of the National Tourism Information System approved by the order of the Minister of Economy and Innovation of the Republic of Lithuania.

We also process Your personal data, which You provided to Us in order to receive accommodation services, on the basis of the contract concluded with You. To cancel a reservation, You must provide Us with Your email address on the Website, which was specified in the reservation submission form.

We process Your personal data for the purpose of providing accommodation services for a period of 5 years until a legal obligation arises for Us to provide Your personal data to the National Tourism Information System in accordance with the procedure established by the Law on Tourism of the Republic of Lithuania. When We are obliged to provide Your personal data to the National Tourism Information System, Your personal data will be processed until we provide this data. Subsequently, We will process this personal data of Yours until all mutual obligations with You are fulfilled.

If You wish to purchase a gift voucher on the Website, You must provide Us with Your name, surname, email address, and phone number. In the gift voucher purchase form, You may also optionally personalize the gift voucher and specify to whom it will be addressed, and write a greeting.

Your personal data provided in the gift voucher purchase form will be processed as long as necessary to provide suitable and high-quality ordered services.

We process this personal data of Yours on the basis of the contract concluded with You.

SUBMISSION OF INQUIRIES. RECORDING OF TELEPHONE CONVERSATIONS

To submit an inquiry to Us regarding services provided or other matters of interest, You can do so in the special section on the Website.

In order to submit an inquiry, You must provide Us with Your phone number and (or) email. Upon submitting Your personal data in the inquiry form, Your personal data is stored in Our email.

We process this personal data of Yours on the basis of Our legitimate interests, i.e., aiming to answer all Your questions as quickly and efficiently as possible, and to provide the necessary consultation regarding Our services to the correct recipient.

After providing an answer to the inquiry to Your specified email address, Your personal data is stored for 10 years and, upon expiry of this term, is deleted automatically.

To inquire about services provided or other matters of interest, You can also call Our general telephone number indicated on the Website. We inform You that we record conversations with You to ensure Your proper service and the quality of consultations provided by phone, internal administration, coordination of Our business, management of decisions, proper and objective response to unforeseen circumstances, collection of evidence, and in order to evaluate Your expressed dissatisfaction, remarks, or opinion regarding the services provided by Us.

Audio recordings of telephone conversations, in which Your voice and other information disclosed during the conversation are captured, are processed on the basis of Your consent, expressed by unambiguous actions (continuation of the conversation), for the personal data to be processed for the purposes specified during the call. We also process audio recordings of telephone conversations on the basis of the legitimate interests of Ours and third parties.

We process audio recordings of telephone conversations for 30 days and, upon expiry of this term, destroy them automatically, except in cases where audio recordings are used as evidence to protect Our legitimate interests and are submitted to a pre-trial investigation body, prosecutor, or court, as well as to insurance companies, other companies, and state institutions or bodies in accordance with the procedure established by law.

NEWSLETTER SUBSCRIPTION

To find out news about the services we provide, ongoing promotions, special offers, etc., You can subscribe to newsletters.

When conducting direct marketing, We process Your email address and (or) mobile phone number, depending on which contact personal data You provide to Us.

We send You newsletters for the purpose of direct marketing based on Your consent.

We process Your personal data for the purpose of direct marketing until You withdraw Your consent or unsubscribe from newsletters. You can unsubscribe from newsletters at any time by contacting Us in writing by email at fo.druskininkai@europaroyale.com.

VIDEO SURVEILLANCE AND VIDEO DATA PROCESSING

To ensure the safety of You and Our property, record conflict situations, and protect Our property interests, we conduct video surveillance in Our premises and territory.

Your personal data is captured by Our video surveillance cameras when You visit Us. You are informed about specific premises and territories where video surveillance is conducted by warning signs.

We conduct video surveillance on the basis of Our legitimate interests.

We process Your personal data captured by video surveillance cameras for two weeks, and upon expiry of this term, we delete them, except in cases where video data is collected as evidence for a legal dispute. In such a case, video data is deleted after the legal dispute has ended.

COOKIES USED ON THE WEBSITE

By using cookies, we process the following data of Yours:

The type of browser, operating system, and device You use;
Your browsing history;
The Internet Protocol (IP) address assigned to Your terminal device;
The number of visits to the Website;
The duration of browsing on the Website;
Viewed sections of the Website;
Other information about the actions You performed on the Website.

We use cookies to:

Ensure Website functionality;
Improve and develop the Website so that it meets Your browsing needs;
Implement new functions on the Website that would facilitate the use of the Website, searching for information on the Website, and also enable a wider range of users to use the Website;
Analyze user behavior while browsing the Website;
Offer You our goods that correspond to Your browsing behavior and needs;
Keep statistics on how the Website is used.

The following categories of cookies are used on the Website:

Strictly Necessary cookies – intended to allow You to browse the Website and use its functions, such as access to secure areas of the Website. Without these cookies, Your requested services, for example, online purchasing, could not be provided;
Performance cookies – these cookies collect information about how You use a certain Website, for example, which pages are visited most often and (or) if visitors receive error messages from webpages. These cookies do not collect information that allows identifying a visitor. All information collected by these cookies is aggregated and therefore anonymous. It is used only to improve the performance of the Website;
Functional cookies – these cookies allow the Website to remember Your choices (such as Your name, language, or region) and offer improved, personally tailored functions. The information collected by these cookies can be made anonymous, and they cannot track Your browsing activity on other websites;
Targeting or Advertising cookies – these cookies are used to display advertisements that should be specifically interesting to You and match Your interests. They are also used so that You see certain advertisements only a certain number of times and to help measure the effectiveness of an advertising campaign.

Cookie storage periods
Cookie Name	Purpose	Creation Moment	Expiry Term
XSRF-TOKEN	Enhancing application security	securityUpon entering the website	2 hours
laravel_session	Generating a session cookie	Upon entering the website	websiteUntil the browser window is closed
_ga	Google Analytics	Upon entering the website	2 years
_gid	Google Analytics	Upon entering the website	4 years
agree_with_cookies	Indicates that the user has agreed to the use of cookies	Upon clicking the "I agree" button	4 years
extend_reservation_in	Saves the time remaining until the end of the room reservation	Upon creating a room reservation	1 day

Cookies are used on the basis of Your consent. When You visit the main Website, in a pop-up window You can agree to all cookies used on the Website being recorded on Your terminal device. If You do not want to give consent for the recording of all cookies used on the Website, You must go to the cookie management settings, where You can mark which categories of cookies You agree to be recorded. You can refuse cookies at any time by deleting them from Your browser where they are installed. Mandatory cookies are recorded on Your terminal device regardless of whether You gave consent, as the Website would not function properly without these cookies. If You do not give consent for the recording of other cookies used on the Website, Your selected settings will not be saved when visiting the Website repeatedly.

TRANSFER OF PERSONAL DATA

Your personal data processed by Us is not disclosed to third parties, except in cases where we are obliged to transfer them in accordance with the legal acts of the Republic of Lithuania or seeking to fulfill contractual obligations. List of categories of data recipients (the list provided is not exhaustive):

Data processors engaged by Us (IT service providers, reservation system developers, marketing service providers, Website content hosting providers, etc.);
UAB „EVP International“ (EVP International system), transferring information about payments made for services;
The Ministry of Economy and Innovation of the Republic of Lithuania and the public institution „Keliauk Lietuvoje“, transferring these data through the National Tourism Information System (NTIS);
Courts, law enforcement, and other state institutions.

RIGHTS OF WEBSITE VISITORS

You have the following rights:

The right to access Your processed personal data;
The right to request rectification, completion, or erasure of Your processed personal data;
The right to restrict the processing of Your personal data;
The right to receive personal data related to You, which You provided to Us, in a structured, commonly used, and machine-readable format, and to transmit these data to another data controller (right to data portability);
The right to withdraw Your consent at any time;
The right to object to the processing of Your personal data;
The right to lodge a complaint with the State Data Protection Inspectorate (at the address L. Sapiegos g. 17, Vilnius or by email ada@ada.lt).

FINAL PROVISIONS

We may update or change this Policy at any time. Such updated or changed Policy will take effect from the day of its publication on the Website. You should check it occasionally to ensure that You are satisfied with the current version of the Policy.

Last updated: 2026-01-02