en

Privacy

Privacy Policy of www.szczawnica-park.pl and use of cookies

We hereby inform you that in connection with your use of www.szczawnica-park.pl, hereinafter Service, we process your personal data. Details can be found below.

§1. ADMINISTRATOR OF PERSONAL DATA

The administrator of your personal data is HSP Management sp. z.o.o. with its registered office in Szczawnica, registered and commercial address: 34-460 Szczawnica, ul. Główna 25, entered in the register of entrepreneurs of the National Register Court, kept by the District Court for the city of Krakow, XII Economic Division of the KRS, under KRS number 0000731486, NIP 7352876841, REGON 380248168, e-mail address: iod@szczawnica-park.pl. If you have any questions or concerns, you can contact us through the contact form available on the website.

§2. PURPOSES, BASIS FOR PROCESSING AND DURATION OF PROCESSING

The processing of your personal data is in compliance with the law, including with the Regulation of the European Parliament and of the Council (EU) 2016/679 of April 27, 2016 on the protection of natural persons in relation to the processing of personal data and on the free flow of such data and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as GDPR

  1. We process your data in order to:
    1. handle your reservations for hotel services in the hotel operated by us, Hotel Szczawnica Park Resort & Spa*****, located at ul. Główna 25, 34-460 Szczawnica, hereinafter referred to as Hotel, as well as the provision of hotel services to you at the Hotel for the purpose of performing the contract concluded by you with us - on the basis of Article 6(1)(b) of the GDPR (processing is necessary for the performance of a contract to which the data subject is a party, or to take action at the request of the data subject prior to entering into a contract) until the expiration of the statute of limitations for potential claims under provisions of law,
    2. to process complaints - on the basis of Article 6(1)(f) of the GDPR (legitimate legal interest of the administrator) - until the expiration of the limitation period for potential claims resulting from legal regulations,
    3. if you give your consent, for the purpose of storing data in cookies and collecting data from websites and mobile applications - on the basis of Article 6(1)(a) GDPR - until the time the consent is withdrawn,
    4. if you give your consent, for the purpose of conducting promotional or marketing actions or other activities - on the basis of Article 6(1)(a) of the GDPR - until you withdraw your consent, except when sometimes, the data may also be processed after this period on the basis of our legitimate interest described in the following paragraphs, however, only if permitted or required by applicable law e.g., processing for archival purposes or to ensure accountability,
    5. if you consent, for the purpose of sending commercial information about our products and services, promotions, as well as products and services of our cooperating entities, by means of electronic communication (SMS, MMS, e-mail) or direct marketing performed by means of telecommunication devices terminal devices (telephone, tablet) to the e-mail address or telephone number indicated by you -. based on Article 6(1)(a) of the GDPR - until you withdraw your consent,
    6. direct marketing in traditional (paper) form - on the basis of Article 6 (1)(f) of the GDPR (legitimate legal interest of the administrator) - until you file an objection,
    7. for archival (evidential) purposes to secure information in case of legal need to prove facts - on the basis of Article 6(1)(f) GDPR (legitimate legal interest of the administrator) - for the period in which the administrator is obliged to retain the data or documents containing them for the purpose of documenting compliance with legal requirements and to enable public authorities to control their fulfillment,
    8. for the purpose of possible establishment, investigation or defense against claims - on the basis of Article 6(1)(f) GDPR (legitimate legal interest of the administrator) – until the expiration of the statute of limitations for potential claims under the law. §1.
  2. What data do we process?
    We process the data you provide as part of your use of the Website. These are primarily identification data provided in connection with your reservation of hotel services at the Hotel or in connection with the provision of hotel services to you at the Hotel, including your first name, last name, home address, e-mail address. We would like to inform you that during use of the website, other information may also be accessed automatically through cookies or the Google Analytics system as indicated below.
  3. Recipients of data
    We may share your personal data with the following categories of entities:
    - subcontractors, including entities with whom we cooperate in the operation of the Hotel's electronic reservation system for hotel services,
    - entities with which we cooperate in the context of promotional activities or marketing or other actions, such as organizers of promotions, contests or other promotional activities,
    - accounting firms,
    - law firms,
    - entities related by capital or organization to the Company,
    - IT companies,
    - banks,
    - entities providing postal and courier services.

    Please be advised that we may share your personal information with competent authorities, courts or third parties who request such information, based on the appropriate legal basis and in accordance with the provisions of applicable law.
  4. Transfer of data to third countries
    We do not transfer your personal data outside the European Economic Area.
  5. Your rights

You are entitled to:

  • The right to access your data and receive a copy of it,
  • The right to rectify (amend) your personal data,
  • The right to erasure of personal data - if in your opinion there are no grounds for us to process your data, you can request that we erase it,
  • The right to restrict processing - you can request that we restrict the processing of your personal data only to their storage or to perform activities agreed with you, if in your opinion we have incorrect data or we are processing them unduly; or if you do not want us to delete them because you need them for the establishment, investigation or defense of claims; or for the duration of any objection you bring or for the time during which you object to the processing,
  • The right to object to processing - marketing objection: you have the right to object to the processing of your data for the purpose of direct marketing - if you exercise this right we will stop processing your data for this purpose; objection on grounds of special situation: you should then indicate to us your particular situation, which in your opinion justifies us to stop processing covered by the objection; we will stop processing your data unless we demonstrate that the grounds for our processing override your rights or that your data is necessary for us to establish, assert or defend claims,
  • The right to move the data - you have the right to receive data from us in a structured, commonly used machine-readable format, the personal data concerning you that you have provided to us on the basis of a contract or your consent; or have us send that data directly to another entity,
  • The right to lodge a complaint with a supervisory authority (the President of the Data Protection Authority, Personal Data Protection Authority, or other competent supervisory authority),
  • The right to withdraw consent to the processing of personal data at any time - withdrawal of consent will not affect the lawfulness of the processing that was performed on the basis of your consent before its withdrawal.

To exercise your rights, you can direct your request to our mailing address or e-mail address indicated above, or through the contact form available on the Site Service in case such form is made available on the Site. Please note that before exercising your rights, we will need to make sure that you are you, i.e., able to adequately identify yourself.

§3. COOKIES

The website uses cookies. Cookies are IT data, in particular text files, which are stored on the end device (e.g. in the memory of a computer) and are intended for use of the websites of the Service. Cookies do not cause configuration changes in the device or software installed on the User's device.

We use cookies to:

  • adapting the content of the Website to individual User preferences, first of all these files allow to recognize User's device, in order to appropriately display the website, tailored to his preferences (cookies are associated only with the browser of a particular device, without providing the user's name or surname - anonymous user),
  • to prepare statistics that help to know how Users use the websites, which makes it possible to improve their structure and content,
  • ensuring the security of the operation of the Website. You can at any time configure your browser to receive information regarding cookie settings and accept cookies individually, disable acceptance of cookies or delete the cookies on your device, and after deleting them we will no longer have the ability to process the information stored in such a cookie. Deactivating cookies may limit the functionality of the Website.

§4. GOOGLE ANALYTICS

The Service uses Google Analytics, which is a web-based tool for analyzing the statistics of of websites and web analytics giving insight into the Service's data traffic, used for the to conduct marketing activities provided by Google Inc. (1600 Amphitheater Parkway, Mountain View, CA 94043, USA. The privacy policy of Google Inc. can be found at: https://policies.google.com/privacy?hl=pl.

§5. GOOGLE ANALYTICS

The Website may contain links to external social networks such as Facebook, Instagram. Functions assigned to individual links, in particular transfer of information and personal data, are activated only after clicking on the given link. Then the so-called social plug-in of the individual social networks, and your browser connects you to this service.

If you click on a selected link during your visit to the Service, a transfer of your personal data and their processing by the respective social network. If during visiting the Website you click on a selected link while logged in to the respective social network. The transfer of information about your visit to our Website and the recording of your personal data by the respective social network may take place via your account on that portal. To avoid such an action, you should log out of your account on the given social network before clicking on the respective link.

Purpose and scope of processing of personal data by social networks and related rights and obligations of the administrator of such a portal to protect the privacy of of users can be found in the data protection section of the respective portal. The processing of data that is triggered after clicking on a given link is the responsibility of the given social network.

§6. SECURITY

All data we collect is protected using reasonable technical and organizational measures and security procedures to protect them from unauthorized access or unauthorized use. Entities affiliated with the Company, trusted partners and third-party service providers have committed to manage data in accordance with the security and privacy requirements we have adopted.