This privacy policy explains which personal data we collect on sonnos.lt, why we do so, how long we keep it and what rights you have under the General Data Protection Regulation (GDPR, EU Regulation 2016/679).
1. Data controller
Sonnos klausos centras, MB
Company code 306738372, VAT number LT100017060413
Laisvės pr. 60, LT-05120 Vilnius, Lithuania
Tel. +370 600 77 400, email info@sonnos.lt
2. What we collect and why
Booking form
When you send a request through the website we collect your name, phone number, email address (if you give one), your message and the specialist you chose, plus the time of the request, the page it came from and the site language. We use this data only to contact you and agree a visit time.
The legal basis is your consent (GDPR Art. 6(1)(a)), which you give by ticking the box in the form, and steps taken at your request before entering into a contract (GDPR Art. 6(1)(b)). Providing the data is voluntary, but without a name and phone number we cannot call you back.
Requests are stored in the website’s administration area and emailed to info@sonnos.lt. We keep them for no longer than 12 months from submission. If you become our patient, your data is then processed under the laws governing healthcare services.
Call buttons
When you tap a phone number on the website, only the fact of the tap is recorded: time, button, page and device type. No personal data (IP address, phone number) is stored. This helps us see which parts of the website are most useful to visitors.
Visitor statistics
Anonymised visitor statistics. Website traffic is measured by NDA.lt. The data is anonymised: your IP address and other identifiers are not stored, so no individual can be identified. These statistics are always collected because they are necessary to run and improve the website (GDPR Art. 6(1)(f), legitimate interest).
Marketing statistics (Google Analytics) are used only with your consent given in the cookie banner. Google Analytics cookies help us understand how visitors use and find the website. The data is processed by Google Ireland Ltd. (Gordon House, Barrow Street, Dublin 4, Ireland) and may be transferred to the USA under the EU-US Data Privacy Framework. You can withdraw your consent at any time in the cookie settings below.
3. Cookies
Cookies are small text files the website stores on your device. Strictly necessary cookies (for the website to work and to remember your cookie choice) are used without consent. Statistics and marketing cookies are set only if you agree. The full list of cookies and your choice:
YouTube videos. The website shows our YouTube videos. The YouTube player (Google Ireland Ltd.) loads only when you press “Play”; until then no data is sent to YouTube. Once a video plays, YouTube may set its own cookies under its own privacy policy; we use the privacy-enhanced embed (youtube-nocookie.com).
4. Who we share data with
We do not sell your data or pass it to third parties for marketing. No payments are made on the website, so we collect no payment data. Your data is seen only by our staff who need it for their work and by the following service providers (processors) acting under contracts with us:
- the hosting provider Hostinger (servers in the European Union) – hosting the website and storing requests;
- NDA.lt – anonymised visitor statistics;
- Google Ireland Ltd. – Google Analytics marketing statistics (only with your consent).
Data may be disclosed to public authorities only where the law requires it.
5. Data security
The website runs over a secure HTTPS connection, requests are accessible only to authorised staff, and the form is protected against automated (bot) submissions. Data is stored in the European Union.
6. Your rights
Under the GDPR you have the right to:
- access your personal data and receive a copy;
- have inaccurate data corrected;
- have your data erased (the “right to be forgotten”);
- restrict processing;
- receive your data in a portable format;
- object to processing based on legitimate interest;
- withdraw consent at any time (this does not affect the lawfulness of processing carried out before withdrawal).
Send your request to info@sonnos.lt or hand it in at the centre. We reply within 30 days at the latest. If you believe your data is processed unlawfully, you may lodge a complaint with the State Data Protection Inspectorate of Lithuania (L. Sapiegos g. 17, 10312 Vilnius, email ada@ada.lt, vdai.lrv.lt).
7. Changes to this policy
We may update this policy when the law or our services change. The current version is always published on this page. Last updated 8 October 2026.