We hereby inform you that in connection with using the www.szczawnica-park.pl website, hereinafter referred to as the Service, we process your personal data. Details can be found below.
The controller of your personal data is HSP Management Spółka z ograniczoną odpowiedzialnością with its registered office in Szczawnica, registered and business address: 34-460 Szczawnica, ul. Główna 25, entered into the register of entrepreneurs of the National Court Register maintained by the District Court for Kraków, 12th Commercial Division of the National Court Register, under number KRS 0000731486, NIP 7352876841, REGON 380248168, e-mail address: iod@hotelwanda.pl. In case of questions or doubts, you can also contact us via the contact form available on the Service website, if such a form is provided on the Service.
Processing of your personal data is in compliance with the law, including compliance with the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons concerning the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as GDPR.
We process your data for the purpose of:
handling the hotel service reservations you made at the Wanda Luxury Boutique Hotel located at ul. Główna 25, 34-460 Szczawnica, hereinafter the Hotel, as well as providing hotel services to you at the Hotel for the performance of the contract concluded by you with us – on the basis of Art. 6(1)(b) GDPR (processing is necessary for the performance of a contract to which the data subject is party or to take steps at the data subject's request prior to entering into a contract) – until the limitation period of potential claims arising from law expires,
considering complaints – on the basis of Art. 6(1)(f) GDPR (legitimate interest of the controller) – until the limitation period of potential claims arising from law expires,
if you give consent, for storing data in cookies and collecting data from websites and mobile applications – on the basis of Art. 6(1)(a) GDPR – until withdrawal of consent,
if you give consent, for conducting promotional or marketing campaigns or other activities – on the basis of Art. 6(1)(a) GDPR – until withdrawal of consent, with the reservation that sometimes this data may also be processed after this period based on our legitimate interest described below, but only if allowed or required by applicable law e.g. processing for archival or accountability purposes,
if you give consent, for sending commercial information about our products and services, promotions, as well as products and services of entities cooperating with us via electronic means of communication (SMS, MMS, e-mail) or direct marketing carried out using telecommunication terminal equipment (phone, tablet) to the e-mail address or phone number you indicated – on the basis of Art. 6(1)(a) GDPR – until withdrawal of consent,
direct marketing in traditional (paper) form – on the basis of Art. 6(1)(f) GDPR (legitimate interest of the controller) – until objection is raised,
We process data that you provide while using the Service. These are primarily identification data given in connection with your hotel service reservation at the Hotel or in connection with providing hotel services to you at the Hotel, including your first name, last name, residential address, and e-mail address. We inform you that while using the Service, access may also be obtained automatically to data through cookies or the Google Analytics system as described below.
We may share your personal data with the following categories of entities:
We inform you that we may share your personal data with appropriate authorities, courts, or third parties who request such information, based on an appropriate legal basis and in accordance with applicable law.
We do not transfer your personal data outside the European Economic Area.
You have the rights to:
To exercise your rights, you can submit a request to our correspondence address or the e-mail address mentioned above, or via the contact form available on the Service website if such a form is provided. Please remember that before fulfilling your rights, we must verify that you are the person concerned, i.e., properly identify you.
The Service uses cookies. Cookies are IT data, in particular text files, which are stored in the end device (e.g., computer memory) and are used to access the websites of the Service. Cookies do not cause configuration changes in the device or software installed on the User's device.
We use cookies to:
You can configure your browser at any time to receive information about cookie settings and accept cookies individually, disable cookie acceptance, or delete cookies on your device, after which we will no longer be able to process information stored in such a cookie.
Deactivating cookies may cause limitation of the Service's functionality.
The Service uses Google Analytics, which is an online tool for analyzing the statistics of websites and web analytics providing insight into the traffic of the Service data, used for marketing activities provided by Google Inc. (1600 Amphitheater Parkway, Mountain View, CA 94043, USA). Google Inc. privacy policy is available at: https://policies.google.com/privacy?hl=pl.
The Service may contain links to external social media platforms such as Facebook, Instagram. Functions assigned to specific links, especially transferring information and personal data, activate only after clicking the given link. At that point, social plugins of respective social networks are activated, and your browser connects you to that service.
If during your visit to the Service you click on a chosen link, your personal data is transmitted and processed by that social network. If while visiting the Service you click a chosen link while logged into that social network, information about visiting our Service may be transmitted via your account on that network and this fact may be recorded on your account on that social media. To avoid this, you should log out of your account on the social media platform before clicking the link.
The purpose and scope of personal data processing by social media platforms, as well as related rights and obligations of the controller protecting user privacy, can be found in the data protection section of the respective platform. The social media platform is responsible for processing data triggered by clicking the link.
All data collected by us is protected using reasonable technical and organizational security measures and procedures to safeguard it against unauthorized access or unauthorized use. Entities related to the Company, trusted partners, and external service providers are committed to managing data according to our adopted security and privacy protection requirements.