Personal Data Protection Policy of Willa Edytka, ul. Harenda 15i, 34-500 Zakopane, Poland, hereinafter referred to as the "Property".
The controller of your personal data is Willa Edytka Edyta Bystrzycka, ul. Harenda 15i, 34-500 Zakopane, Poland, Tax ID (NIP) 8711558982, REGON 382564293, the owner of the Property.
Please send any questions, comments or objections regarding this Privacy Policy to: edytabystrzycka1@gmail.com.
We only process personal data that you provide to us voluntarily.
We receive data in connection with the booking process at the Property, when you enter your details in the booking or contact form on our website www.willaedytka.pl, on the booking portals we work with, or through other direct communication channels (telephone, e-mail, messages).
We process your personal data for the following purposes:
The legal basis for data processing is Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (GDPR).
Depending on the purpose and method of collection, we may ask you for information such as:
Providing personal data is voluntary but necessary for us to provide the services intended for you, i.e. to handle your booking or provide other services covered by the contract. Without this data we cannot complete your booking.
Consent to receive information about special offers, promotions, discounts and other marketing campaigns is also voluntary. If you do not consent to receiving such materials, we simply will not send them. You can withdraw or change your consent at any time; withdrawing consent does not affect the lawfulness of processing carried out before its withdrawal.
First of all, we keep it until the booking or other service we provide for you has been completed, and until the limitation period for any claims relating to these services has expired.
Data contained in accounting and tax documents is kept for the period required by law, i.e. 5 years from the end of the tax year in which the tax obligation arose.
Data processed on the basis of consent (e.g. for marketing purposes) is kept until consent is withdrawn.
Video surveillance recordings are kept for no longer than 30 days and are then automatically overwritten, unless they constitute evidence in proceedings.
For accountability purposes, we keep data for the period during which the Property is required to keep data or documents containing it in order to demonstrate compliance with legal requirements, including to allow public authorities to verify such compliance.
You have the following rights:
To exercise your rights, please contact us at: edytabystrzycka1@gmail.com.
We only share data with those who work with us and need access to it so that we can guarantee high-quality services, both in handling your booking or contract and in responding to your enquiry.
If the data you have provided to us is processed by an external entity, this is done only on our instructions and on the basis of a contract concluded with that entity. We do not share your data with external entities for their own use, but only to perform our services. All entities processing your personal data ensure its security and meet all data protection obligations.
In addition to authorised persons working with us, access to data may be granted in particular to: the provider of the booking system and website hosting (Hotres), the operators of the booking portals through which a booking was made, the bank handling payments, and entities providing accounting, IT, marketing and legal services to us.
If necessary, we may share your data with public authorities, including law enforcement and tax authorities, where required by law.
Your personal data will be transferred outside the European Economic Area only if this is necessary to perform the contract concluded with you or to fulfil your request, with the appropriate safeguards provided for in the GDPR (e.g. standard contractual clauses).
Your personal data may be processed by automated means (including profiling), but this will not produce any legal effects concerning you or similarly significantly affect your situation.
Profiling of personal data by the Property consists of processing your data (including by automated means) in particular to analyse or predict personal preferences and interests.
The Property is covered by video surveillance to ensure the safety of persons and property. Surveillance covers common areas and the outside of the Property (including the entrance, corridors and car park); there are no cameras in the rooms, the apartment or the bathrooms. Areas under surveillance are marked with appropriate information signs.
The legal basis for processing is the legitimate interest of the controller (Article 6(1)(f) GDPR). The retention period for recordings is set out above.
Cookies
Using cookies, i.e. files saved by your web browser on your device, the Property collects data on how the website is used in order to improve the services offered to visitors and users of the Property's websites. Users can block cookies at any time by changing their browser settings, or choose to allow cookies only after explicit acceptance.
You give your consent to cookies other than those necessary for the website to function via the consent banner displayed on the website (MyCookies). You can change or withdraw your consent at any time.
Cookies do not allow us to identify you. The data stored in cookies includes information about the pages you visit, the date and time of your visit and other information about your activity on the website.
For the purposes of this analysis, aggregated and anonymous statistical data is collected. A shortened version of the visitor's IP address may also be displayed during the collection and processing of data.
The data is analysed in particular in order to:
Plug-ins from other platforms
Our website uses "plug-ins" from social networks and other service providers (including Google).
When you view a page of our website that contains such a plug-in, your browser establishes a direct connection with the servers of the relevant provider.
The content of the plug-in is sent by the provider directly to your browser and embedded in the page. Through this integration, providers receive information that your browser has displayed our page, even if you do not have a profile with that provider or are not currently logged in.
This information (including your IP address) is sent by your browser directly to the provider's server and stored there.
The purpose and scope of data collection and the further processing and use of data by the providers, how to contact them, your rights in this respect and the settings available to protect your privacy are described in the privacy policies of the individual providers.