Privacy policy - Stary Młyn Strzeszyn

Personal data protection policy
in Stary Młyn Strzeszyn, Strzeszyn 7,
78-445 Łubowo, hereinafter referred to as the Facility.

Personal Data Administrator

A Personal Data Administrator with regard to the performance of services in accordance with the Regulations and the performance of obligations resulting from GDPR is Gul Marek, based in Strzeszyn 7, 78-445 Łubowo; Tax Identification Number: 526-217-48-44, National Business Registry Number: 140635833, which is the owner of Stary Młyn Strzeszyn;
Any inquiries, comments and objections concerning the Privacy Policy should be sent to rodo@starymlynstrzeszyn.pl

Data collection

We obtain your personal data in connection with the process of booking/entering into the contract, applying for the execution of the product/service of the Facility, or arising from the provision of these data using the contact form available at the Website and the Web Portals cooperating with the Facility, or using other direct communication channels.
We will never obtain data from chargeable databases or other sources not directly related to you.

Purpose and legal basis of personal data processing

Processing of your personal data is necessary for the Facility to implement the contract/the application for the service you booked – the legal basis for processing is a contract concluded in any form.
Legal regulations require us to process your data for tax and accounting purposes.
We also process your personal data on the basis of the legally justified interest of the Facility, that is:
- ensuring delivery, safety and settlement of services/reservations/transactions we offer to you, including enforcement of the compliance with the internal principles of the Facility;
- responding to your inquiries sent to the Facility, unless they are directly related to the execution of the contract;
- conducting statistical research and analyses of the Website of the Facility, among others, in terms of its functionality, improvement in services or estimation of main interests and needs of our visitors;
- conducting research and analyses of the Web Portals mediating in concluding contracts/reservations for the service you booked with the Facility, among others, in terms of their functionality, improvement in services or estimation of main interests and needs of visitors;
- recovery; conduct of court, arbitration and mediation proceedings;
- storage of data for archive purposes and for the purpose of demonstrating our fulfilment of obligations resulting from legal regulations;
- processing of your data as part of direct marketing of products and services of the Facility, e.g. to send commercial information on the basis of you consent.

What data we may collect from you?

Data we ask for depend on:

the purpose of contacting you (booking the stay or event, other services, complaints, returns);
forms of communication when responding to enquiries concerning reservations (e.g. on-line, telephone, e-mail (via Booking.com); a written agreement);
forms of payment and receipt (e.g. cash, payment card, bank transfer, payment confirmation, VAT invoice, simplified receipt);
depending on the form, we may collect from you the following data:

Full name
Address of residence
ID/Passport no.
PESEL
Phone no., e-mail address
Company name, address, Tax Identification Number
Payment card no., bank account no.

Do you need to provide your personal data?

Specification of personal details is voluntary, however, necessary for the implementation of the above mentioned goals.

How long do we keep your personal data?

The Facility will keep your personal data for no longer that necessary to achieve the goals for which data are collected, or for no longer than required by law.
The Facility stores your personal data as a result of your contract/application for time necessary to implement a given contract/application and also for time in which it is possible to pursue claims as a result of the implementation of the contract/application.
Additionally, we may keep data to prevent abuses and frauds, for statistical and archiving purposes, for the period of 10 years from the date of termination of the contract/application or from an event causing the need for such processing.
For the purpose of ensuring mutual accountability we will keep data for a period in which the Facility is obliged to keep data or documents containing them for the purpose of documenting the fulfilment of legal requirements, i.a. to enable public authorities to control the fulfilment.
Personal data processed on the basis of the consent you expressed will be kept until you withdraw this consent.

What are your rights with regard to processed data?

You are entitled to:
- access your data;
- request correction of incorrect data;
- request removal of data;
- request limitation of data processing;
- withdraw the consent, however, with no effect on the legality of processing made on the basis of the consent prior to its withdrawal;
- transfer personal data, i.e. obtain your personal data from the administrator in a structured, commonly used, computer-readable format. You may transfer these data to another administrator;
- file a complaint regarding processing of your personal data by us to the supervision authority, i.e. the General Inspector of Personal Data Protection (address: Generalny Inspektor Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa).
To exercise the aforementioned rights please contact the administrator of data by traditional mail: Stary Młyn Strzeszyn, Strzeszyn 7, 78-445 Łubowo, or at the address dedicated to personal data protection - rodo@starymlynstrzeszyn.pl
After you exercise the right to object, we cease to process your personal data, unless we demonstrate important, legally justified grounds for processing that prevail over your interests and rights, or data processing serves the purpose of seeking, enforcing or defending claims.
The above does not apply to data processed for the purposes of direct marketing. In such a case we will continue to process your personal data for this purpose.*

What are situations in which you may object against processing of your data?

You have the right to object against processing of your personal data if processing is made on the basis of the legally justified interest or for statistical purposes, and the objection is justified by your particular situation.

Who do we share your personal data with?

We share your personal data only with those entities that need to access them, so that we could guarantee the high quality of service, both with regard to the implementation of the contract/application and pre-sales and post-sales service. Data are processed by these entities under an agreement signed with the Administrator and only on instructions from the Administrator. We do not share your data with any external entities for their own use – only for the purpose of implementing our services;
All entities that process your personal data ensure the safety of data and fulfil all obligations with regard to protection of personal data;
Data may be transferred to processing entities on instructions from the administrator; those will be authorised employees of the administrator, organisers of events from the Facility's offer and contractors providing management, accounting, marketing, IT and legal services for the benefit of the administrator;
The Facility may transfer your personal data to public authorities that counteract abuses and frauds.

Do we send your data to countries outside the European Economic Area?

Your personal data will be transferred beyond the European Economic Area only if such data need to be transferred for the purposes of implementing the contract/application you signed.

Do we process your personal data automatically (e.g. by profiling) in a manner affecting your rights?

Your personal data will be processed automatically (including in the form of profiling), however, this will not affect your rights, nor will it significantly affect your situation.
Profiling of personal data by the Facility consists in processing of your data (also automatically), by using them to assess information on you, in particular to analyse and forecast your personal preferences and interests.

Do we use cookies and plugins to other Portals?

Cookies – files saved by your web browser on the hard drive of your computer – are used by the Facility to collect data related to the way you use our webpages, so as to improve services we offer to visitors and users of the website. The process involves the use of cookies. By adjusting settings of your browser, users may, at any time, block cookies or select an option to save cookies only should they be clearly accepted by the user.
Cookies do not contain any information that would identify a person. Data in cookie files contain information on websites you visit, date and time of visits and other information on your activity on websites.
In order to conduct the said analysis, aggregated anonymous statistical data are collected. In the course of gathering and processing of data a shortened IP address of a person visiting the website may also be reviewed.
Data are analysed, in particular, for the following purposes:
- calculation of the number of visits,
- tracking of areas of the website that particularly interest a given visitor,
- detecting the location of visitors in order to optimise provided services,
- adaptation of the offer to particular target groups.

Plugins to other websites

Our website uses "plugins" to social networking platforms and websites of other service providers.
When viewing a website that contains such plugin, your browser establishes a direct connection with Facebook or TripAdvisor servers.
The content of a plugin is transferred by a given service provider directly to your browser and is integrated with the website. Through this integration service providers obtain information that our website was viewed in your browser, even if you do not have a profile at a given service provider or you are not logged in with it.
This information (along with your IP address) is sent by your browser directly to a server of a given service provider and stored there.
The purpose and the scope of data collection and their further processing and use by service providers, as well as contact details and your rights in this regard, and the possibility to adjust your privacy settings are described in privacy policies of service providers.

How do we protect your personal data?

The Facility took measures designed to ensure the confidentiality, safety and integrity of your personal data, including:
- protection of computers where data are kept in an electronic form;
- protection of the places of data storage in the paper form and as an electronic copy.
Your personal data may be accessed by persons who need to know them, who are required to comply with the present rules, as well as by entities who need to know them and with whom "Data Processing Agreement" was signed, so that we could guarantee the high quality of service, both with regard to the implementation of the contract/application and pre-sales and post-sales service, and the fulfilment of legally justified goals.
The Facility attaches great importance to ensure that your personal data are not changed, affected or improperly used by third parties, which are not authorised to access them.