PRIVACY POLICY
Gamtos kodas, UAB
Company registration number 300060776
VAT registration number LT100018585113
53 Užupio Street, Bezdonys village, Vilnius District, Lithuania
Email: info@sanctumnature.com
Last updated: June 2026
1. General Provisions
This privacy policy sets out how Gamtos kodas, UAB (hereinafter referred to as ‘we’ or ‘Sanctum Nature’) collects, uses, stores and protects your personal data when you use our website sanctumnature.com and our services.
We process personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR) and the laws of the Republic of Lithuania.
2. Data controller
Gamtos kodas, UAB
Company registration number: 300060776
VAT number: LT100018585113
Address: 53 Užupio Street, Bezdonys village, Vilnius District, Lithuania
Email: info@sanctumnature.com
Please send any enquiries regarding the processing of personal data by email to info@sanctumnature.com.
3. What data is collected and why
3.1 Purchasing event tickets
When you purchase tickets for events, we collect:
- First name and surname
- Email address
- Payment details (processed via a payment service provider – we do not store full card details)
- Order amount and date
Purpose: performance of the contract, issuing an invoice, sending the ticket.
Legal basis: Article 6(1)(b) of the GDPR (performance of a contract).
Retention period: 10 years (accounting requirements).
3.2 Booking of accommodation and services
When you book a cottage, a sauna session or other services, we collect:
- First name and surname
- Email address
- Telephone number
- Preferred date and service
- Any additional requests (if specified)
Purpose: booking confirmation, communication regarding your stay.
Legal basis: Article 6(1)(b) of the GDPR (performance of a contract).
Retention period: 3 years after your last visit.
3.3 Newsletter subscription
When you subscribe to the newsletter, we collect:
- First name
- Email address
- Date and source of consent
We use the Omnisend platform (omnisend.com) to send the newsletter. Your data is transferred to Omnisend and stored on their servers within and outside the EU in accordance with standard contractual clauses.
Purpose: marketing communications, sending news and offers.
Legal basis: Article 6(1)(a) of the GDPR (consent).
Retention period: until you withdraw your consent or unsubscribe.
You can unsubscribe from the newsletter at any time by clicking the ‘Unsubscribe’ link at the bottom of the email or by emailing info@sanctumnature.com.
3.4 Contact form and direct enquiries
When you send an enquiry via the website or by email, we collect:
- First name
- Email address
- Message content
Purpose: to respond to your enquiry.
Legal basis: Article 6(1)(f) of the GDPR (legitimate interest – to respond to your enquiry).
Retention period: 2 years.
4. Cookies and analytics tools
Our website uses cookies and third-party tools to help improve the website’s performance and analyse visitor behaviour.
4.1 Google Analytics 4
We use Google Analytics 4 to collect visitor statistics: how many people visit the website, which pages they view, and where they came from. The data is anonymous and aggregated.
Further information: policies.google.com/privacy
4.2 Google Tag Manager
We use Google Tag Manager to manage tools. GTM itself does not collect data, but other tracking tools may be activated through it.
4.3 Meta Pixel (Facebook)
We use Meta Pixel to optimise advertising and track the behaviour of website visitors. This allows us to display relevant adverts on Meta platforms (Facebook, Instagram).
Further information: facebook.com/privacy/policy
You can opt out of Meta Pixel tracking: facebook.com/ads/preferences
4.4 Cookie management
The first time you visit the website, you will see a cookie consent banner. You can choose which cookies to accept. Essential cookies (required for the website to function) are always active.
You can also manage cookies in your browser settings.
5. Transfer of data to third parties
Your data may be transferred to the following service providers, who process data on our behalf:
| Provider | Purpose | Registered office |
| Omnisend | Sending newsletters | EU / US (SCC) |
| Google LLC | Analytics (GA4, GTM) | US (SCC) |
| Meta Platforms | Advertising tracking (Pixel) | USA (SCC) |
| Payment service provider | Payment processing | EU |
| Resend / email system | Transactional email delivery | USA (SCC) |
SCC – the European Commission’s Standard Contractual Clauses, which ensure an adequate level of protection for data transfers outside the EU.
We do not sell or pass on your personal data to third parties for marketing purposes.
6. Your rights
Under the GDPR, you have the following rights:
- Right of access – you may request at any time to find out what data we hold about you.
- Right to rectification – if the data is inaccurate, you may request that it be corrected.
- Right to erasure – you may request that your data be erased if there is no legal basis for storing it.
- Right to restrict processing – you may request that the processing of your data be temporarily restricted.
- Right to data portability – you can receive your data in a structured, commonly used format.
- Right to withdraw consent – if data is processed on the basis of consent (e.g. a newsletter), you may withdraw your consent at any time.
- Right to object – you may object to the processing of your data on the basis of a legitimate interest.
To exercise your rights, please email us at: info@sanctumnature.com
We will respond within 30 calendar days.
7. Complaints
If you believe that your data is being processed in breach of the GDPR, you have the right to lodge a complaint with the supervisory authority:
State Data Protection Inspectorate (VDAI)
L. Sapiegos g. 17, Vilnius
ada@ada.lt
www.ada.lt
8. Data security
We implement appropriate technical and organisational measures to protect your data from unauthorised access, loss or destruction. Access to personal data is restricted to authorised staff and service providers.
Payment details are transmitted via an encrypted (SSL/HTTPS) connection and processed within the system of a certified payment service provider.
9. Minors
Our services are intended for individuals aged 18 and over. We do not knowingly collect data from children under the age of 16. If we become aware that we have received such data without parental consent, we will delete it.
10. Changes to this policy
We reserve the right to amend this privacy policy. We will notify you of any significant changes on our website and/or by email. We recommend that you review this document periodically.
This policy is effective from 25 June 2026.
Gamtos kodas, UAB | info@sanctumnature.com | sanctumnature.com