1. Online reservation process

The reservation of goods and services (hereinafter - the Order) using the reservation system of UAB "Upa MCT" (Ltd.) (hereinafter - the Seller) website booking.upa.lt (upa.lt) is carried out in the following order:

1.1.The Customer is given the opportunity to choose the services and goods offered by the Seller on the Seller's website: accommodation with the selected type of board, program packages, packages or gift vouchers for services, and to choose the dates of arrival and departure. The content of the selected Order is presented in the reservation table before its confirmation and payment.

1.2. After familiarizing himself/herself with the composition and price of the Order, the Client can adjust the arrival and departure dates, selected room type, program package, select and add additional services, etc.

1.3. After completing the order (reservation), the Customer moves to the next step - filling out the Customer information form necessary for the order, in which he/she indicates his/her personal data and other information necessary for the reservation, as well as his/her wishes and comments regarding the reservation. The rules for processing personal data, the storage of this data and the rights of data subjects can be found on the Seller's website: upa.lt/apie-mus/privatumo-politika (hereinafter - Privacy Policy).

1.4. After filling in all the mandatory data, the Customer can make the mandatory advance payment by debit/ credit card (Visa, Mastercard, Eurocard) or electronic bank transfer. Payments are made through UAB Paysera payment initiation service (MIP).

1.5. After the customer has chosen the payment method, familiarized himself/herself with the order rules and confirmed it accordingly, he/she is directed to the Paysera MIP page, where he/she can make a payment in the selected method. Data authorization begins after connecting to the Paysera system using an encrypted 128-bit protocol. After the Paysera system accepts the payment, the Customer receives an automatically created notification about the payment made in the Paysera system by e-mail.

1.6. In the BookingRobot system used on the Seller's online booking website booking.upa.lt, the Customer can create a personal account, which provides the opportunity to link his/her debit/ credit card to his/ her account. In this case, the next time you purchase the Seller's services, you will no longer need to provide your payment card details during the checkout process. The customers can cancel linking the card to the account at any time by logging in to their personal account and clicking the "Delete" button in the "Payment cards" section of the settings. The customer's debit/ credit card data is stored and data security is guaranteed by UAB Paysera LT, a company registered with the Bank of Lithuania.

1.7. After the Customer has properly placed the Order and made the advance payment, the Seller will send an order confirmation by e-mail, which will include the following information: Personal data specified in the Customer's order, dates of arrival and departure, name of the hotel, total price of the order, advance payment and amount to be paid at the hotel, other important information.

1.8. The Client pays the remaining amount for the purchased accommodation at the hotel. We recommend you to save the e-mail confirming the reservation of the Order in case there are any uncertainties about the details of the order or the advance payment upon arrival.

1.9. The Customer understands that in the event of a malfunction or programming error in the online reservation system, if, taking into account the composition of the services, the published price of the services is unreasonably low or high, the hotel has the right to inform the Customer of such errors within 10 days from the confirmation of the reservation and demand payment of the price difference or set off or return the overpayment. If the customer refuses to pay the price difference, the Seller has the right to cancel the Order and refuse to provide services. In this case, the advance paid by the customer, if the service was not provided, will be returned to the customer within 10 days from the date of submission of the request.

2. Reservation by request

The Customer may be offered a room upon request if there is no room available when ordering online. After filling in the form, the Customer will receive a corresponding offer on the desired reservation dates or a notification that it is not possible to make a reservation on the scheduled dates by e-mail. The Order Confirmation sent to the customer will include information on how to pay the advance payment. The customer can pay the advance by debit/ credit card or bank transfer as described above in the rules. The order will be finally confirmed only after receiving the advance payment.

3. Payment and cancellation of the Order (reservation)

3.1. When forming an Order or making a reservation, the Customer makes the specified advance payment in the system using one of the methods provided in the system. The Client undertakes to pay the remaining part of the Order amount upon arrival at the hotel.

3.2. The Seller does not charge any additional booking fees when booking an order.

3.3. If the Customer cancels the Order and cancels the reservation at least 3 days in advance (at least 10 days during the high season) before the scheduled arrival date, no cancellation fees apply. In this case, the Seller undertakes to return the entire advance payment as soon as possible, but no later than within 10 (ten) working days.

3.4. If the Customer cancels the Order less than 3 days (less than 10 days during the high season) before the scheduled arrival date, or if the Order is not canceled and the Customer does not arrive on the scheduled arrival day without warning, the advance payment by the Customer will not be refunded. In such cases, the Customer loses the entire amount of the advance payment.

3.5. If the Customer made an Order (reservation) at the price of a special promotion offered by the Hotel, which is valid only for a specific service package and on certain dates, if the Customer changes the conditions of such Order, the Seller has the right to recalculate the price of the order. The customer is informed about such change in the terms of the Order at the time of the change of the dates or terms of the Order. If the customer does not agree with the recalculated price, the conditions for canceling or changing orders specified during the promotion and provided for in these rules apply.

3.6. The Customer can guarantee or pay for the order (reservation) with the Seller's gift voucher until the expiration date of such voucher. If services have been reserved using a gift voucher and the Customer has not canceled or moved to another agreed date at least 3 days before the date of arrival, such gift voucher is considered used.

4. Final Provisions

4.1. At the time of ordering, the Customer must correctly indicate all mandatory data in the reservation form. The hotel is not responsible for the Client's wrongly chosen arrival or departure dates or wrongly specified other data of the Client.

4.2. When arriving with children, the Client must provide information about the children during the Order (reservation). Children up to 5 years are provided with free accommodation and meals. Children above 5 are charged for an overnight stay, selected type of meal (corresponds to the choice of adults), one visit per day to the pool and sauna complex. If children arriving together are not indicated at the time of booking , the Client undertakes to pay additionally for the children's stay according to the prices valid on the day of arrival.

4.2. UAB Paysera LT ensures and is responsible for correct scanning of advance payments and administration of payments. In case of errors during settlement, the Client must first contact UAB Paysera LT.

3. The seller and the online reservation service company are not responsible for the unavailability of the reservation system, technical malfunctions and other problems beyond their control.
4. Personal data and Order regulations

5.1. By reserving a stay or service package at the hotel, the Customer agrees that his/her personal data will be included in the database of the reservation system. The Seller collects and further processes the Customer's personal data only on the basis of the legal grounds defined in the legal acts governing the protection of personal data: the customer's consent and in order to conclude and/or execute the contract concluded with the Customer.

5.2. The customer's personal data will be used for the reservation procedure and to complete the Order. The Client will have the opportunity to express his/her consent to the processing of data for marketing purposes by filling in the registration card upon arrival at the hotel. Before confirming the Order, the Customer has familiarized himself / herself with the "privacy rules" and confirms it.

5.3. Before confirming the Order and making an advance payment, the Customer familiarizes himself/ herself with the "ordering rules" and confirms that he/she has understood the terms and conditions contained in the rules and agrees with them. Without confirming the agreement with the "privacy policy" and "order rules", the Customer cannot place an Order on the Seller's website.

6.Gift voucher ordering rules

6.1. Gift voucher(s) confirm the right of the holder of the gift voucher(s) to use the services specified in such voucher or to order services for the amount specified in the gift voucher(s).

6.2. Holders of the seller's gift voucher(s) can only use services provided by Upa Medical SPA and Medea apartments. The Customer must inform the service provider about paying for services with gift voucher(s) during the Order (reservation).

6.3. If the amount of services ordered by the Customer exceeds the value of the gift voucher(s), the resulting price difference can be paid upon arrival at the hotel by debit/ credit card or cash.

6.4. Gift voucher(s) are valid for 12 months. from the date of purchase, unless otherwise stated in the terms of purchase or coupon(s). If the gift voucher(s) has not been used within its (their) validity period, it (they) shall be considered invalid thereafter.

6.5. If the gift voucher(s) holder purchases services for less than the amount specified in the gift voucher(s), the remaining amount is not refunded to the gift voucher(s) holder. The total amount of gift voucher(s) must be used during one stay or one purchase of services.

6.6. A VAT invoice is not issued to the holder of the gift voucher(s) paying with the gift voucher(s).

6.7. When paying for services with gift voucher(s), no additional discounts are applied to the amount or services specified in it (them).

6.8. When arriving at the hotel to use the services specified in the gift voucher(s) or when paying for the services provided with the combined gift voucher(s), the Customer must have the gift voucher with him/ her.

6.4. Gift voucher(s) cannot be exchanged for cash.

This Privacy policy presents basic information about personal data processing, performed by UPA, its protection and rights of data subjects.

THE MAIN CONCEPTS

Personal data – any information concerning natural person, whose identity is set or could be set (data subject). Such natural person, whose identity could be set, is a person, whose identity can be directly or indirectly set according to the identificator, such as name, surname, personal identification number, location data and the Internet identificator or according to one or several physical, physiological, genetic, psychological, economic, cultural or social characteristics of that natural person;

Data subject – natural person, whose personal data is processed;

Data subject agreement – any free will, concrete and unequivocal properly informed data subject’s expression of will or unequivocal actions with which he/she agrees with his/her personal data processing.

Data processing – any automated or not automated means of processing personal data or personal data sets with a transaction or sequence of operations, such as collecting, recording, sorting, sorting, storing, adapting or otherwise making it available, as well as matching or linking with other data, limiting, deleting or destroying it.

Data recipient – natural or juridical person, public authority, agency or another institution, whom personal data is revieled, no matter if it is a third party or not. However, public authorities, which according to the Union or state membership right can get personal data while performing some particular research, are not considered to be data recipients; while proceeding the data, public authorities follow data protection rules, set according to the data processing objectives;

The third party – natural or juridical person, public authority, agency or another institution, which is not a data subject, data manager, data processor or people, who are authorized by direct data manager or data processor to proceed personal data;

Special cathegory data – personal data, which reveals racial or ethnic origin, political views, religious or philosophic beliefs, membership in professional associations, as well as data, revealing health data, data, related to natural person’s sexual life and/or his/her sexual orientation.

PERSONAL DATA

Legal criteria to administer personal data

UPA collects and further administers your personal data just referring to legal basis, defining personal data protection, regulatory legal acts:

-your agreement;

-making and (or) proceeding your contract.

Aims of personal data proceeding

UPA proceeds data for accomodation and rehabilitation centre service aims.

Processed personal data

UPA proceeds the following data:

• personal data, which you agreed to present in the forms, presented in the website upa.lt (that is basic information, for example: name, surname, e-mail address);
• personal data, which is received while making business (cooperation) contract (name, surname, e-mail address, telephone number);
• another data, which is collected with your agreement and which is specifically described at the time when you are asked for agreement;
• another data, which is received while trying to provide service, make and (or) proceed a contact, which was made with you;
• video surveillance data when you visit UPA center, located at the address: Sveikatos Str.36, LT-66251, Druskininkai

Cookies

To improve your experience while visiting UPA websites, we use cookies – small files which are automatically created while browsing websites and are stored in your computer or another piece of equipment. Information, which is collected by cookies, enables us to guarantee fluent operation of the website, your possibility to browse in a comfortable way as well as to get to know more about our website visitors’ behaviour, analyse tendencies and improve the website and service, provided by UPA.

You can choose if to accept cookies on the website. If you do not agree to receive cookies to your computer or another piece of equipment you will be able to change settings in the Internet browser or switch off all cookies or switch on/off them one by one. However, you should pay attention that in some cases it can slow down the Internet speed, limit some functions in some websites or block the access to the website.

Cookies data is not transferred to any third party.

Period to save personal data

We save your personal data  not longer than it is necessary for administrating the data or as it is set by legal acts, if the protection period is prolonged.

We do our best not to save out of date or unnecessary information and guarantee that personal data and another information, concerning clients, was always renewed and correct.

Personal data presentation

UPA provides your data:

• when you agree to clearly defined data recipients;
• companies or organizations, according to legal act requirements;
• when you agree to other third persons, concerning some particular case.

PERSOANAL DATA SAFETY MEANS USED BY UPA

UPA carries out online activity which meets all appropriate international legal acts, legal acts of the European Union and the laws of the Republic of Lithuania.

General data protection regulation (GDPR)

UPA processing data subject personal data follows the provisions of the General data protection regulation and has implemented the appropriate organizational and technical measures ensuring the security of personal data that helps to protect personal data against accidental or illegal destruction, replacement, disclosure as well as any other illegal processing.

Implementation of the rights of data subjects

You have a right to:

• address UPA with a request to provide information about your processed personal data by UPA (“right to know” and “right to get to get information”)
• address UPA with a request to correct or destroy your personal data when you identify that the data is not right, incomplete or inaccurate (“right to correct and destroy”);
• address UPA with a request to suspend proceeding your personal data if you identify that personal data is processed illegally or dishonestly (“right to suspend”)
• address UPA with a request to disagree on further procession of your personal data (“right to disagree”);
• address UPA with a request to limit the procession of your data, if personal data is processed illegally (“right to limit”);
• address UPA with a request to delete your data when personal data has been processed illegally or personal data is not necessary to achieve goals for which it has been collected or processed in different ways (“right to be forgotten”);
• address UPA with a request to provide information about personal data, processed by UPA and get data in a systematized, commonly used and computer readable format (“right to data portability”).

Implementing Genderal Data Protection Regulation UPA signed an agreement concerning data protection officer service with a company MB“Legitima”. Data subjects and other concerned people can contact UPA officer, responsible for data protection, using the following contacts:

• E-mail:dap@legitima.lt;
• Telephone: + 370 607 97014
• Address: Perkūnkiemio Str. 5, LT – 12129,Vilnius

If you fail to resolve the issue with UPA and if you have any doubts about UPA’s actions which is potentially in violation of this Privacy notice or legal requirements you have a right to address the Compliance Authority, which is in charge of personal data protection regulating legal acts and its control.