Privacy policy | Kamratowo

I. Data of the Personal Data Administrator

We would like to inform you that the administrator of your personal data is the company Firma Usługowa Małgorzata Lamczak, 63-400 Ostrów Wielkopolski, ul.Makowa 48, NIP 622-268-82-18, REGON 383049848 "Company". Contact with the Company regarding the protection of personal data is possible at the following e-mail address: wisla@kamratowo.pl

II. Goals and basics of personal data processing

In order to provide services in accordance with the activity profile, the Company processes your personal data - for various purposes, but always in accordance with the law. Below you will find specific purposes for the processing of personal data together with the legal bases and categories of recipients of the data.

In order to accept a reservation, we process such personal data as:

first name and last name,
phone number or email address
date of stay,
room number.

The legal basis for such data processing is art. 6 par. 1 lit. b RODO, which allows personal data to be processed, if it is necessary to perform the contract or take steps to conclude the contract. Providing personal data is voluntary (there is no statutory obligation), however, without providing them, we can not reserve a room and confirm the contract or clarify its terms, e.g. after paying a deposit within a specified period. For this purpose, we forward your data to the company providing the online booking system. We process the data until the moment of checking in or cancellation.

In order to accept an online reservation, we process such personal data as:

first name and last name,
phone number,
email address,
address of residence,
date of stay,
room number.

n order to issue an invoice and fulfill other obligations resulting from tax law provisions, such as storing accounting records for 6 years, we process personal data such as:

first name and last name,
company name,
address of residence or headquarters address,
number nip,

The legal basis for such data processing is art. 6 par. 1 lit. c RODO, which allows personal data to be processed, if such processing is necessary for the Personal Data Administrator to comply with the obligations arising from the law. Providing personal data is voluntary (there is no statutory obligation), however, without providing them, we are unable to issue an invoice. To achieve this goal, we pass your data to a company that provides IT services. We process data for a period of 6 years.

In order to make financial settlements, such as, for example, financial settlement of a contract or storage of bank statements, we process personal data such as:

name and surname or company name
address of residence or business address
Bank account number,

The legal basis for such data processing is art. 6 par. 1 lit. c RODO, which allows personal data to be processed, if such processing is necessary for the Personal Data Administrator to comply with the obligations arising from the law. Providing personal data is voluntary (there is no statutory obligation), however, without providing them, we are unable to make a financial settlement of the concluded contract. To achieve this goal, we pass your data to a company that provides IT services. We process data for a period of 6 years.

In order to check-in a guest, we process personal data such as:

first name and last name,
PESEL number
address,
date of stay,
room number,
company name, registered address and tax identification number,
Phone number
car registration number

The legal basis for such data processing is art. 6 par. 1 lit. b RODO, which allows personal data to be processed, if it is necessary to perform the contract or take steps to conclude the contract. In addition, art. 6 par. 1 lit. f RODO allows personal data to be processed if, in this way, the Personal Data Controller performs its legitimate interest (in this case, the interest of the customer is the possibility of contacting the customer in emergency situations during his stay and caring for car parking rules in the Kamratowo Estate). Providing personal data is voluntary (there is no statutory obligation), however, we can not provide hotel services without providing them. We do not forward your data to other recipients for this purpose. We process the data until the end of your stay.

In order to send notifications about the booking status, we process personal data such as:

e-mail adress,
Phone number,
reservation ID.

The legal basis for such data processing is art. 6 par. 1 lit. f RODO, which allows personal data to be processed, if, in this way, the Personal Data Administrator performs its legitimate interest (in this case, the interest of the Company is to inform the client about activities related to the provision of the service in order to increase the comfort of using the services). Providing personal data is voluntary (there is no statutory obligation), however without providing an e-mail address or telephone number, we are unable to send notifications about the change of order status. For this purpose, we forward your data to the company providing the online booking system. We process your data until you file an objection or until you start your stay.

In order to send editions of the newsletter, we process personal data such as:

e-mail adress,

- if you are interested in receiving regular newsletters with the news and promotions of the Kamranieowo settlement. The legal basis for such data processing is art. 6 par. 1 lit. and the RODO, which allows personal data to be processed on the basis of a voluntary consent. Providing personal data is voluntary (there is no statutory obligation), however without providing an e-mail address we are not able to send newsletter editions. To achieve this goal, we forward your data to the company providing the e-mail marketing system. We process the data until the consent is withdrawn.

In order to answer e-mail inquiries, we process personal data such as:

first name and last name,
name and address of the company's headquarters,
official position,
Phone number,
e-mail adress,

The legal basis for such data processing is art. 6 par. 1 lit. and the RODO, which allows personal data to be processed on the basis of a voluntary consent (in this case the consent is a conscious act consisting in sending your inquiry to the Company's e-mail address). Providing personal data is voluntary (there is no statutory obligation), however, without providing an e-mail address, we are unable to answer your inquiry. To achieve this goal, we transmit your data to the following categories of entities: a hosting company and a company providing IT services. We process the data until the consent is withdrawn.

In order to store valuables of guests during their stay:

first name and last name,
room number,

The legal basis for such data processing is art. 6 par. 1 lit. f RODO, which allows personal data to be processed, if in this way the Personal Data Controller performs its legitimate interest (in this case, the interest of the Company is to have personal data that will allow to meet the obligation to accept valuable items for storing Article 849 paragraph 3 of the Civil Code ). Providing personal data is voluntary (there is no statutory obligation), however, without providing them, we are unable to identify the person authorized to receive the stored items. We do not pass on your data to other recipients for this purpose. We process the data until the end of your stay.

In order to store lost things of guests who have completed their stay:

first name and last name,
address
Phone number
room number,

The legal basis for such data processing is art. 6 par. 1 lit. f RODO, which allows personal data to be processed, if in this way the Personal Data Administrator performs its legitimate interest (in this case, the interest of the Company is to have personal data that will allow to notify the person entitled to receive the item found in Article 183 of the Civil Code) . Providing personal data is voluntary (there is no statutory obligation), however, without providing them, we are unable to identify the person authorized to pick up the lost item. We do not pass on your data to other recipients for this purpose. The data is processed until you receive the lost item by the authorized person, but not longer than for 2 years.

In order to provide a discount for an overnight stay, we process personal data such as:

first name and last name,
phone number or email address,
date of stay.

The legal basis for such data processing is art. 6 par. 1 lit. and the RODO, which allows personal data to be processed on the basis of a voluntary consent. Providing personal data is voluntary (there is no statutory obligation), but without providing them we are not able to identify the person entitled to receive the discount. We process the data until the consent is withdrawn.

In order to process a complaint, we process personal data such as:

first name and last name,
e-mail address (if given),
address,
bank account number (if there is a refund).

The legal basis for such data processing is art. 6 par. 1 lit. b RODO, which allows personal data to be processed, if it is necessary to perform the contract or take steps to conclude the contract. Providing personal data is voluntary (there is no statutory obligation), however, without providing them, we can not decide whether you are entitled to a complaint or withdrawal from the contract. To achieve this goal, we transmit your data to the following categories of entities: a hosting company, a company providing IT services and a law company. We process the data until the complaint process is completed.

In order to establish, investigate or defend against claims, we process personal data such as:

first name and last name,
address,
PESEL number,
company name, registered address and tax identification number,
room number
Phone number,
e-mail adress,
IP address,
reservation ID.

The legal basis for such data processing is art. 6 par. 1 lit. f RODO, which allows personal data to be processed, if, in this way, the Personal Data Controller performs its legitimate interest (in this case, the interest of the Company is to have personal data that can identify, assert or defend against claims, including customers and third parties). We obtain this data when placing an order and during the performance of the contract. To achieve this goal, we transmit your data to the following categories of entities: a hosting company, a company providing IT services and a law firm. We process data for a period of 3 years.

In order to process applications related to the GDP, including, for example, the register of clients who raised objections in accordance with the RODO, we process personal data such as:

first name and last name,
address,
company name, registered address and tax identification number,
e-mail adress,
Phone number.

because, firstly, the provisions of the RODO impose certain documentary obligations on us to demonstrate compliance and accountability, and secondly, if you object to the processing of your personal data for marketing purposes, we need to know who should not use direct marketing, because he does not want it.

The legal basis for such data processing is, first, art. 6 par. 1 lit. c RODO, which allows personal data to be processed, if such processing is necessary to fulfill the obligations arising from the law by the Administrator of Personal Data; secondly, art. 6 par. 1 lit. f RODO, which allows personal data to be processed, if, in this way, the Personal Data Administrator performs its legitimate interest (in this case, the interest of the Company is to have knowledge about people who fulfill their rights resulting from the GDPR). Providing personal data is voluntary (there is no statutory obligation), however, without providing them, we can not determine if you are entitled to submit an application. To achieve this goal, we transmit your data to the following categories of entities: the hosting company and the company providing IT services. We process the data until the conclusion of processing the application.

In order to administer the website www.kamratowo.pl, we process such personal data as:

IP address,
server date and time,
information about the web browser,
information about the operating system

- these data are automatically saved in the so-called server logs, each time a website belonging to the Company is used. It would not be possible to administer the website without using the server and without this automatic saving. The legal basis for such data processing is art. 6 par. 1 lit. f RODO, which allows personal data to be processed, if, in this way, the Personal Data Administrator performs its legitimate interest (in this case, the Company's interest is to administer the website). To achieve this goal, we pass your data to the following categories of entities: hosting company. We process data for a period of one month.

III. Cookies

On its website, like other entities, the company uses the so-called cookies, i.e. short text information, saved on a computer, phone, tablet or other user device. They can be read by our system, as well as by systems belonging to other entities that we use (eg Facebook, Google).

Cookies meet a lot of functions on the website, most often useful, which we will try to describe below (if the information is insufficient, please contact us):

ensuring security - cookies are used to authenticate users and prevent unauthorized use of the client's panel. They are therefore used to protect the user's personal data against unauthorized access;
impact on the processes and efficiency of using the website - cookies are used to ensure that the website works efficiently and that you can use the features available on it, which is possible, among other things, by remembering the settings between subsequent visits on the website. Thanks to them, you can efficiently navigate the website and individual subpages;
state of the session - cookies often record information about how visitors use the website, for example which subpages are displayed most often. They also enable identification of errors displayed on some subpages. Cookies used to save the so-called "Session state" helps, therefore, improve services and increase the comfort of browsing;
maintaining session status - if the client logs in to his panel, cookies allow the session to be sustained. This means that after switching to another subpage, you do not have to enter your login and password again each time, which contributes to the comfort of using the website;
creating statistics - cookies are used to analyze how users use the website (how many websites open, how long they stay on the website, which content arouses the most interest, etc.). Thanks to this, you can constantly improve the website and adapt its operation to the preferences of users. In order to track activity and create statistics, we use the Google Analytics tool (described in a separate section of the privacy policy);
using social functions - on the website we have so-called Page Plugin, which allows you to like our fanpage on Facebook while using the site. However, to make this possible, we need to use the cookies provided by Facebook.

Your web browser allows cookies to be used on your device by default, so please ensure that you agree to the use of cookies at the first visit. However, if you do not wish to use cookies while browsing the website, you can change the settings in the web browser - completely block the automatic support for cookies or request notification whenever cookies are placed on the device. Settings can be changed at any time.

While respecting the autonomy of all people using the website, we feel, however, that we must notify you that disabling or limiting the use of cookies may cause quite serious difficulties in using the website, eg in the form of having to log in to any subpage, a longer period of page loading , restrictions on the use of functionality, restrictions on liking the Facebook page etc.

IV. Google Analytics

In order to create statistics that allow you to understand how users use our site, we use the Google Analytics tool from Google. Thanks to this, we can improve its structure and content to make it more functional and user-friendly.
We use only the basic functionality of Google Analytics, which uses cookies to compile reports on the activity of users on our site. We do not combine them with features that can identify a single person such as demographic and interest reports, remarketing features, impression reports on the Display Network, or integration with other Google services.
We protect the privacy of our users by enabling the IP anonymisation feature, which allows Google Analytics to use only a fragment of the user's IP address.
You can block the use of your data in the Google Analytics tool by installing an add-on in your browser, which you can download from https://tools.google.com/dlpage/gaoptout/

V. The right to withdraw consent

If the processing of personal data takes place on the basis of consent, you can withdraw your consent at any time - at its sole discretion.

If you would like to withdraw your consent to the processing of personal data, it is sufficient for this purpose:

send e-mail directly to the Company to the address wisla@kamratowo.pl or
click the link attached at the end of the newsletter,

If the processing of your personal data took place on the basis of consent, its withdrawal does not mean that the processing of personal data up to this point was illegal. In other words, until the withdrawal of consent, we have the right to process your personal data and its appeal does not affect the legality of the current processing.

VI. Automated decision making and profiling

We kindly inform you that we do not make automated decision-making, including on the basis of profiling, except for data processing in order to send newsletter editions.

VII. Recipients of personal data

In addition to the above-mentioned recipients of the data, it may happen that, for example, under the appropriate law or decision of the competent authority, we will have to transfer your personal data to other entities, be it public or private. That is why it is extremely difficult for us to predict who may apply for the disclosure of personal data. Nevertheless, we assure you that every request to disclose your personal data is analyzed very carefully and very carefully, so that you do not inadvertently inform the unauthorized person.

VIII. Transfer of personal data to third countries

We kindly inform you that we do not provide personal data to entities from "third countries", that is, operating outside the European Economic Area.

IX. The period of personal data processing

    In accordance with applicable law, we do not process your personal information "infinitely," but for the time that is needed to achieve the goal. After this period, your personal data will be irretrievably deleted or destroyed.
    The exact periods of processing of personal data are provided in point II regarding the objectives and legal basis.
    We count the periods in years from the end of the year in which we started processing personal data to improve the process of removing or destroying personal data. Separate calculation of the deadline for each concluded contract would entail significant organizational and technical difficulties, as well as significant financial outlay, therefore establishing one date of removing or destroying personal data allows us to manage this process more efficiently. Of course, if you use the right to be forgotten, such situations are considered individually.

X. Data subjects' rights

We kindly inform you that you have the right to:

access to your personal data;
correcting personal data;
deletion of personal data;
restrictions on the processing of personal data;
opposition to the processing of personal data;
transfer of personal data.

We respect your rights under the provisions on the protection of personal data and we strive to facilitate their implementation to the highest possible extent.

We indicate that these rights are not absolute and therefore we may legally refuse you to comply with the law in certain situations. However, if we refuse to accept the request, then only after careful consideration and only if the refusal to take into account the request is necessary.

Regarding the right to raise an objection, we explain that you have the right to oppose the processing of your personal data at any time based on the legitimate interests of the Personal Data Administrator (listed in point II) in relation to your particular situation. However, you must remember that in accordance with the law, we may refuse to take into account the objection, if we demonstrate that:

there are legitimate grounds for processing that override your interests, rights and freedoms or
there are grounds for establishing, investigating or defending claims.
In addition, you may object to the processing of your personal data for marketing purposes at any time. In this situation, after receiving the objection, we will stop processing for this purpose.

You can execute your rights by:

sending an e-mail directly to the Company to the address wisla@kamratowo.pl or
sending a letter to the Company's postal address or
clicking on the link attached at the end of the newsletter.

XI. The right to lodge a complaint

If you believe that your personal data is being processed contrary to the law in force, you can complain to the President of the Office of Personal Data Protection.

XII. Final Provisions

    To the extent not covered by this Privacy Policy, there are provisions regarding the protection of personal data.
    The Company reserves the right to change the above Privacy Policy by publishing a new Privacy Policy on this page.
    This Privacy Policy applies from May 24, 2018.