Privacy policy

1. Who is responsible

VšĮ DOMUS SOLIS, company code 302609241, registered at Melioratorių g. 3-2, Žiežmariai, LT-56243, Lithuania. For anything about your personal data, write to info@domussolis.org.

2. What we collect and why

• Account: your name, email address, password (kept only encrypted) and two-factor settings – so your account works.
• Profile: a photo and a few words about you, if you put them up yourself. The name, photo and description of lecturers who lead courses and events show publicly beside their courses and events.
• Membership and payments: your Stripe customer number, plan, status and dates. Card details are handled by Stripe – we never see them.
• Orders and invoices: the buyer’s name or organisation, company and VAT codes, address, email, amounts and dates – to fulfil the order and keep the accounts the law requires.
• Events: sign-ups, chosen dates and attendance, and the email addresses of people an organisation names – so we can invite them.
• Courses: your progress and your messages to lecturers.
• Notifications: emails about sign-ups, orders, new lessons and upcoming events.
• Newsletter: your email address, the language of the site and when you confirmed, if you asked for the news – to tell you of our news. Those with an account find the news among their notifications and get it by email only if they choose to.
• Inquiries and messages: your name, email address, school or organization and messages, when you write to us through the contact form or from your account, and our answers – so we can write to each other.
• Technical data: IP address and browser details in server logs, and your login session – to keep the website safe and working.

We handle data to perform our contract with you, inquiries at your request, the newsletter with your consent, which you confirm with the link in an email and can withdraw at any time with the link in every email or in your notification settings, to meet legal duties such as accounting, and in our legitimate interest in keeping the website secure. We do not sell data or use it for advertising.

3. Who receives data

We share data only with the providers the website cannot work without, and only as much as they need:

• Stripe (Stripe Payments Europe, Ltd., Ireland) – card payments and membership subscriptions;
• Mailtrap – sending emails;
• Hostinger – the server that runs the website and its database;
• Bunny.net (BunnyWay d.o.o., Slovenia) – video streaming and encrypted backups;
• Zoom (Zoom Communications, Inc., USA) – meetings of online events, which you join yourself through the event’s link. The sessions and meetings the website arranges on Zoom are recorded in Zoom’s cloud from when the first person joins, before the start too: the recording keeps the name you show, your picture and your voice. We move the recording to Bunny.net and show it only to those taking part in that event or meeting. Before you join, the website says the session is recorded, and Zoom tells you when it starts recording. To stay out of the recording, turn off your camera and microphone;
• our accountant – invoices.

Where a provider handles data outside the European Economic Area, this is done under the standard contractual clauses approved by the European Commission or other safeguards the law provides.

4. How long we keep it

• Account data – while you use your account. If you ask to delete your account, the data is anonymised after 30 days.
• Newsletter address – until you stop the news; it is deleted at once when you do, and after 7 days if it is never confirmed.
• Invoices and the data on them – 10 years, as accounting law requires.
• Inquiries and messages – 2 years after the last message, or until your account is deleted.
• Notifications on the site and in the app – 6 months once read and 12 months while unread, counted from when they arrive, or until your account is deleted.
• Encrypted backups – no longer than 6 months.
• Recordings of sessions and meetings – as long as those taking part in the event or meeting need them. The copy left in Zoom’s cloud is kept as the settings of our Zoom account say.

5. Cookies and content from others

We use only the cookies the website needs: for your login session, for protection against forged requests, and for “remember me”. We use no analytics or advertising cookies, so we do not ask for consent to them.

The contact page shows a Google Maps map, and articles may include YouTube videos, which load only once you play them. These services are provided by Google, which handles data under its own privacy policy.

6. The mobile app

With the Domus Solis app you sign in to the same account as on the website, so we handle the data you see and change in it as this policy describes. In addition:

• Kept on the phone: your sign-in key, name and email address – in the phone’s secure storage, and deleted when you sign out. Article bookmarks, your reading and listening place, text size and playback speed stay on the phone and are not sent to us.
• Lock: you can protect the app with your phone’s lock (a code, pattern, fingerprint or face). The phone’s system does this – the app never receives or stores biometric data.
• Permissions: the app uses the internet and plays audio with the screen off. It adds an event to your calendar only when you ask. It does not read your location, camera, microphone or contacts.
• Connection: the app exchanges data with our server only over an encrypted connection (HTTPS).
• Videos: when you play a video, the provider that delivers it (Bunny.net or YouTube) receives your IP address and device details, as on the website.
• Advertising and tracking: the app has no advertising, analytics or tracking tools.
• Stores: the app is distributed through Google Play and the Apple App Store; their operators handle download data under their own policies.

You can also delete your account in the app – how, and what we erase, is described on the account deletion page.

7. Your rights

You have the right to see your data, correct it, delete it, restrict its use, take it with you and object to its use. You can delete your account yourself in the app or on the website – see the account deletion page. Most of it you can change or delete yourself in your account settings; for anything else write to info@domussolis.org – we answer within a month. If you believe your data is handled unlawfully, you may complain to the State Data Protection Inspectorate of Lithuania (vdai.lrv.lt).

8. Changes

We may update this policy; the new version is published on this page. The terms of membership and purchases are in the terms.