Privacy Policy (RODO), cookies and website www.marinajastarnia.pl

Information on the manner and purposes of obtaining and processing personal data for Clients: „MARINA JASTARNIA APARTAMENTY”

1. WHAT IS RODO

RODO is an acronym for the Personal Data Protection Regulation. The full name of the act that regulates the processing of personal data is: “Regulation 2016/679 of the European Parliament and of the Council of the EU of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC.”

The main purpose of the introduction of RODO is to reduce the disparity in data protection laws between EU countries and to increase safeguards for the processing of personal data protection, so that the laws keep pace with changing technology.

2. WHEN WILL THE RODO BE IN EFFECT

27.04.2016r. The European Parliament has adopted by regulation an amendment to the law on personal data protection. All European Union countries, including Poland, must adapt their laws to the new regulations, which will be directly applicable as of 25.05.2018.

The new regulations are directly applicable, which means that they will not require national implementation (deployment) regardless of the current Data Protection Act of August 29, 1997, which will be completely revised to align it with the RODO.

3. WHAT IS PERSONAL DATA

This is information about an identified or identifiable natural person (data subject). An identifiable natural person is one who can be identified directly or indirectly, in particular by an identifier such as a name, an identification number, location data, an online identifier or one or more specific factors that determine the physical, physiological, genetic, mental, economic, cultural or social identity of the natural person.

In practice, it can be any data relating to an individual. It is worth remembering that we can find personal data not only in an ID card or passport. Data will also be a phone number or email address, information that is often not protected with due diligence.

4. PERSONAL DATA CONTROLLER

The administrator of personal data of “Marina Jastarnia Apartments” Ul. Floriana Ceynowy 13, 84-140 Jastarnia, is PORTJASTAR Bielawski Spółka Komandytowa, Ul. Władysława Reymonta 16, 80-290 Gdańsk NIP: 525-254-43-28

5. CONTACT WITH THE CONTROLLER OF PERSONAL DATA

Contact with the Administrator regarding data protection is possible at e-mail: iod@marinajastarnia.pl

6. PURPOSES AND LEGAL BASIS FOR PROCESSING PERSONAL DATA:

The purpose for which the company processes personal data is the conclusion and execution of the contract for the provision of hotel services and in particular:

1. In order to make a reservation, personal data are processed:

• first and last name
• e-mail address
• phone no.

The legal basis for data processing is Article 6(1)(b) of the RODO, which allows processing of personal data, if the processing is necessary for the performance of a contract to which the data subject is a party, or to take action at the request of the data subject prior to entering into a contract.

2. For the purpose of registration, personal data is processed:

• Name,
• document number or pesel,
• vehicle registration no,
• phone no,
• e-mail address,

The legal basis for data processing is Article 6(1)(b) of the RODO, which allows processing of personal data, if the processing is necessary for the performance of a contract, to which the data subject is a party, to whom the data subject is a party, or to take action at the request of the data subject prior to entering into a contract.

3. In order to issue a bill or VAT invoice for the service, personal data is processed:

• name / company name,
• residence / business address,
• TIN,

The legal basis for data processing is Article 6(1)(c) of the RODO, which allows processing of personal data, if the processing is necessary for the fulfillment of a legal obligation incumbent on the controller.

4. Personal data is processed for marketing purposes:

• name and surname / company name
• phone no.
• e-mail address

The legal basis for data processing is Art. 6(1)(a) RODO, which allows personal data to be processed if the data subject has consented to the processing of his or her personal data for one or more specified purposes.

5. In order to implement the newsletter service, personal data is processed:

• email address,

The legal basis for the processing is Article 6(1)(a) of the RODO, which allows personal data to be processed if the data subject has consented to the processing of his or her personal data for one or more specified purposes

6. For the purpose of issuing a bill and fulfilling obligations under tax law:

• name
• company details
• residential or business address
• NIP

The legal basis for data processing is Article 6(1)(c) of the RODO, which allows processing of personal data, if such processing is necessary for fulfill the Personal Data Controller’s obligations under the law.

7 To create records of processing activities and other records related to the RODO Regulation:

• first and last name
• e-mail address

The legal basis for processing is Article 6(1)(c) of the RODO, which allows processing of personal data if such processing is necessary for the Data Controller to comply with its obligations under the law, and Article 6(1)(f) of the RODO, which allows processing of personal data if by doing so the Data Controller pursues its legitimate interest (the Company’s interest is to have knowledge of individuals who are exercising their rights under the RODO). The RODO regulations impose documentation obligations to demonstrate compliance and accountability. If you object, for example, to the processing of your personal data for marketing purposes, the controller will have knowledge of whom not to use direct marketing against, You also have the right to request from the controller access to your personal data, the right to rectify, erase or restrict processing, and the right to data portability.

8. For the purpose of establishing, investigating or defending against claims:

• Name or company data,
• residential address (if provided),
• document number or pesel,
• e-mail address,

The legal basis for data processing is Article 6(1)(f) of the RODO, which allows the processing of personal data, if, by doing so, the Personal Data Controller pursues its legitimate interest (the Company’s interest is to having personal data to establish, assert or defend against claims, including customers and third parties).

9. For archival and evidentiary purposes:

• name,
• residential address,
• document number or pesel,
• e-mail address,
• image from monitoring

The legal basis for data processing is Article 6(1)(f) of the RODO, which allows the processing of personal data, if, by doing so, the Personal Data Controller pursues its legitimate interest (the Company’s interest is to have personal data, which will allow to prove certain facts related to the performance of services, e.g. a state authority requests it). Also for the purpose of securing information , which can serve to prove facts of legal significance. The data controller processes the personal data of clients collected by monitoring at the apartments in order to ensure the security of clients using the apartments and other persons staying at the apartments. The data acquired in connection with the monitoring will be archived for 30 days from the date of recording, after which it will be permanently deleted.

10. For analytics, website activity research and use of cookie information:

• date and time of page visit,
• info about the user’s operating system,
• location, type of device,
• information about the web browser,
• time of visiting the site and bookmarks,
• IP address,

The legal basis for data processing is Article 6(1) lit. f RODO, which allows processing of personal data, if by doing so the Administrator Personal Data realizes its legitimate interest (the Company’s interest is to learn about customer activity on the website and to manage the website)

7. ENTITIES TO WHICH PERSONAL DATA MAY BE TRANSFERRED

The administrator of “Marina Jastarnia Apartments” transfers the acquired personal data for the purpose of offering the best service to the Client only to the authorized employees to process personal data, and like most entrepreneurs, in our business we use the help of other entities, which involves the necessity of transferring personal data. Accordingly, we may transfer your data to booking services cooperating with us, an accounting company, lawyers, a company that handles quick payments, a hosting company, a transportation company, an IT company, an insurance company (e.g., the need to repair a damage), a security company.

Personal data may also be transferred to public authorities, as long as they are authorized to do so by applicable laws and present an appropriate request.

As an entrepreneur, we also use popular services and technologies offered by entities based outside the European Union (Microsoft, Google, Facebook). Consequently, the collected data may be transferred to third countries. Therefore, each controller of personal data is obliged to establish the legal basis for such transfer. For our part, we ensure that when using our services and technologies, we transfer personal data to entities in the United States and only to those that have joined the Privacy Shield program, based on the European Commission’s Executive Decision of July 12, 2016. For more Information, please visit the European Commission website available at https://ec.europa.eu

Entities that have joined the Privacy Shield program guarantee that they will adhere to the high standards of personal data protection that apply in the European Union, so the use of their services and offered technologies in the processing of personal data is lawful.

8. PERIOD OF PROCESSING OF PERSONAL DATA

1. Personal data obtained in connection with a contract for the provision of hotel services will be processed for the period of the statute of limitations for tax claims (5 years) or civil law claims of the company or the customer, whichever is later. The length of the period also depends on whether both parties are entrepreneurs or not (3 years or 10 + 1 year).
2. Personal data obtained on the basis of consent for marketing purposes will be processed for the period of validity of the consent for marketing purposes, but no longer than for 5 years.
3. Personal data processed mainly for analytical purposes, use of “cookies” and administration of the site until obsolete or no longer useful, but no longer than for 3 years.
4. Personal data obtained in connection with monitoring will be archived for 30 days from the date of recording, and then permanently deleted.

9. RIGHTS CUSTOMER RIGHTS REGARDING THE PROCESSING OF PERSONAL DATA

Each Customer has the right to access his/her personal data processed by the Company and trusted partners, and to rectify, delete (right to forget), withdraw or limit processing over time. In addition, each Customer has the right to object to the processing of his/her data by writing to the contact address: iod@marinajastarnia.pl The Customer also has the right to lodge a complaint regarding the processing of his/her personal data to the competent supervisory authority.

10. REQUIREMENT TO PROVIDE PERSONAL DATA

Provision of personal data in terms of name, email address, telephone contact number, age of the child, in case of staying in the apartments with a child, and vehicle registration number, in case of parking in the apartments is a requirement to conclude a contract for hotel services but providing personal data is also voluntary and at your discretion. Optionally, the customer may be asked to provide a document number or pesel number. Failure to provide personal data will prevent the company from entering into a contract for hotel services.

11. AUTOMATED DECISIONS BASED ON PERSONAL DATA, INCLUDING PROFILING

The administrator does not make fully automated decisions based on personal data, including profiling. The content of the inquiry, which is sent via the contact form, is not evaluated by the IT system. The proposed price of the service is in no way the result of an evaluation by the information system.