Privacy Policy
Astrum Palace Hotel respects the privacy of people who visit this website. We process personal data in line with applicable data protection law, including the General Data Protection Regulation (GDPR). This page explains what data we may receive, why we use it, and what rights you have.
Data controller
The controller of personal data about website visitors and people who send a reservation request is:
UAB „Edval“
- Company code: 301845623
- VAT number: LT100004912914
- Address: Laisvės g. 7-9, LT-89222 Mažeikiai, Lithuania
- Email: info@astrum.lt
- Phone: +370 620 30003
What data we collect
When you send a reservation request, we may receive the details you provide:
- full name
- email address
- phone number
- arrival date
- departure date
- room type
- number of rooms
- number of guests
- additional requests or other information you choose to include
We may also process limited technical data about use of the website, where that is needed for the site to work and for anonymous or privacy-preserving visitor statistics.
Why we use the data
We use the data for these purposes:
- to review a reservation request
- to contact the guest
- to answer questions
- to administer a reservation
- to keep the website secure and working
- to understand overall use of the website through privacy-preserving statistics
Submitting the reservation form does not itself confirm a reservation. A reservation is confirmed only when the hotel confirms it separately, usually by email.
Legal bases for processing
We process personal data only where the GDPR provides a basis. We do not apply one basis to all processing, and we do not treat consent as the basis in every case.
- When you send a reservation request, we process the data in order to take steps before entering into a contract and, if the reservation is later confirmed, to perform that contract.
- We rely on legitimate interests to keep the website secure and working properly.
- Where a particular case requires it, we process data to comply with a legal obligation.
- We rely on consent only where it is actually required, for example if an optional feature is added later that cannot be switched on without it.
Recipients and service providers
Data may be shared with trusted technical service providers only as far as needed to run the website, hosting, and email infrastructure. Those providers process data on our instructions, or under their own legal duties where that is required to deliver the service.
Email delivery providers may be used to prepare and send a reservation request by email. No specific visitor-statistics provider has been chosen, so none is named here.
How long we keep data
We keep personal data no longer than necessary for the purposes for which it was collected, and for as long as applicable law and the protection of legitimate interests require. When the data is no longer needed, we delete it or anonymise it so that it cannot be restored.
Cookies and visitor statistics
The website does not use advertising tracking technologies, Google Analytics or Meta Pixel.
We intend to measure visits in a privacy-preserving way, avoiding visitor profiling and advertising cookies as far as possible. Technical cookies or similar tools may still be used where they are needed for the site to function or for the statistics we choose. This page does not state that the website uses no cookies at all, because that also depends on hosting and other technical service settings.
Third-party services
The website shows an OpenStreetMap map. When you use the embedded map, technical information, such as the connection request, may be passed to the map service infrastructure. This page does not describe specific processing by the OpenStreetMap Foundation that we cannot confirm. Use of the map is also subject to that service’s own terms.
Your rights
Under the GDPR you have the right to:
- access your personal data
- ask us to correct it
- ask us to delete it in certain cases
- restrict processing
- object to processing in certain cases
- receive your data in a structured format and have it transmitted, where this right applies
- withdraw consent at any time where processing is based on consent, without affecting processing carried out before the withdrawal
To exercise these rights, email info@astrum.lt.
You also have the right to lodge a complaint with the State Data Protection Inspectorate of Lithuania (VDAI).
Changes to this privacy policy
We may update this policy if the website, the technologies we use, or legal requirements change. The current version is published on this page.
Last updated: 28 September 2026.