Polityka prywatności i cookies
This document will inform you about how and on what basis we process your personal data when you contact us or use one of our services. You will learn, among other: things:
- why we can process your data;
- the purposes for which we process it;
- whether you are obliged to provide us with your data;
- how long we store it;
- whether there are other recipients of your personal data;
- whether we process your data outside the European Economic Area;
- whether we process your data in an automated manner, including profiling.
The following information applies to all of our services, i.e. the websites nosalowy-dwor.eu, nosalowypark.pl, and apartamentyparkresidence.nosalowy.pl.
The first part of the Privacy Policy contains information that we are required to provide to everyone, regardless of the purpose of data processing.
The second part provides information for individuals using our website.
The third part contains information for individuals subscribing to our free newsletter.
The fourth part contains information for individuals who contact us directly by sending an email, calling us, or using the contact form available on the website.
The fifth part contains information for individuals participating in our recruitment process.
The sixth part contains information for individuals purchasing services through our website and making reservations for specific offers.
The seventh part contains information for individuals interested in our services through our marketing activities, including through social media.
Part I – General Information
Contact details of the data controller
The controller of your personal data is: Nosalowy Dwór Limited Liability Company, located at Zakopane, ul. Balzera 21D, 34-500 Zakopane, registered in the National Court Register under number 0000398651, NIP 7361714598. To ensure the security of your data, we have appointed a Data Protection Officer, Ms. Katarzyna Rodacka. You can contact us regarding any matters related to the processing of your personal data by writing to:
iodo@nosalowy.pl
How we obtain your personal data
The personal data we collect via our website comes directly from you.
This occurs when you:
- browse our website;
- subscribe to our free newsletter;
- send us inquiries or requests for offers;
- decide to participate in the recruitment process;
- make a purchase through our website or book an offer;
- visit our social media profiles – Instagram, Facebook, TripAdvisor, YouTube, LinkedIn – and contact us via these platforms. Your rights related to the processing of personal data.
Below we present your rights related to personal data protection and the processing of your personal data by us. The rights that apply to you in a specific situation depend on the purpose and legal basis for which we process your data.
Right of access to data
You have the right to obtain information about the personal data we hold about you. By submitting a request for access to your data, you will receive information about the processing of your personal data, including the purposes and legal bases for processing, the scope of the data we hold, the entities to which your data is disclosed, and the planned date of its deletion.
Right to rectification
You have the right to promptly rectify and/or supplement your personal data held by us. It is our obligation to ensure that our communication with you is based on accurate, complete, and up-to-date data.
Right to restriction of processing
You have the right to request us to restrict the processing of your personal data if you contest the accuracy of the data we hold, if the processing is carried out unlawfully, or if you have objected to the processing.
Right to erasure
You have the right to request the deletion of your personal data held by us, unless retaining the data is necessary for ensuring freedom of speech, access to information, compliance with a legal obligation, in the public interest, for the establishment or defense of legal claims, or for exercising rights under law.
Right to notification
If you have requested rectification, deletion, or restriction of processing of your data, we will inform all recipients of your personal data about the correction, deletion, or imposition of processing restrictions, unless this is impossible or requires disproportionate effort.
Right to data portability
You have the right to obtain a copy of the data you have provided to us, which will be sent to you or to a third party in a structured, commonly used, machine-readable format. If you request the data to be sent to another data controller, we will do so if technically feasible. This right applies only when we process your data based on your consent or in connection with the performance of a contract.
Right to object
If your personal data is processed based on our legitimate interest, you have the right to object to further processing at any time. We will consider your request in accordance with applicable law.
Right to withdraw consent
If your data is processed based on your consent, you have the right to withdraw it at any time, with future effect. This does not affect the legality of data processing before the consent is withdrawn.
Right to lodge a complaint with a supervisory authority
If you believe that the processing of your personal data violates data protection laws or if your data protection rights have been violated in any way, you may lodge a complaint with the supervisory authority. The supervisory authority in Poland is the President of the Office for Personal Data Protection (UODO), located at ul. Stawki 2, Warsaw. Before filing a complaint, we encourage you to contact us first so we can clarify any issues.
Processing of your request
If you submit a request to exercise a specific right, we will respond to your request within one month of receiving it. If we need more time, we will inform you of the reasons for the delay.
The response will be sent to the email address from which the request was made. If the request was submitted by post, the response will be sent to the address you provided, unless the letter indicates a preference for receiving the response by email (in that case, please provide your email address). This text appears to be an excerpt from a privacy policy, providing information about various rights related to the protection of personal data. It outlines the rights of individuals under data protection laws (such as GDPR) in relation to their personal data. Here's a brief summary of the key rights mentioned:
Right of Access:
You have the right to request information about your personal data held by an organization, including the purpose and legal basis for processing, the data’s scope, and to whom it has been disclosed. Right to Rectification: You can request the correction or completion of inaccurate or incomplete personal data.
Right to Restriction of Processing:
You may ask for the processing of your data to be limited if you contest its accuracy or legality.
Right to Erasure (Right to be Forgotten):
You can request the deletion of your personal data, except where retention is necessary for legal reasons or other justified grounds.
Right to Information:
If you request rectification, erasure, or restriction of processing, the organization must inform other recipients of the data about the changes, unless it's impossible or involves disproportionate effort.
Right to Data Portability:
You can request a copy of your data in a structured, machine-readable format and transfer it to another data controller if applicable.
Right to Object:
You can object to the processing of your data if it's based on legitimate interests, and the organization must consider your request.
Right to Withdraw Consent:
If your data is being processed based on consent, you can withdraw that consent at any time with future effect.
Right to Lodge a Complaint:
If you believe your rights are being violated, you can file a complaint with the relevant supervisory authority (in Poland, the President of the Personal Data Protection Office).
Response Time:
The organization must respond to your requests within a month, and if additional time is needed, they must notify you.
The document also discusses the use of cookies on the website for functionality, security, and analytical purposes. It advises users to read the cookie policy for more details.
Would you like help with anything specific from this policy, or do you need assistance translating or understanding any parts of it?
Google Analytics
On our website, we use tools from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, specifically Google Analytics, which allows us to collect statistical information about your use of our service, such as IP address, type of device, and type of browser. We do this to gather knowledge about, among other things, the number of users visiting our website. This information is processed in a way that does not allow us to directly identify anyone. However, please note that Google may process your data on servers in the United States. In these cases, Google may process your personal data outside of the European Economic Area, but this occurs based on standard contractual clauses, as stipulated in the agreement between us and Google, which ensure an adequate level of security for processing your personal data. If you are interested in more details about data processing in the context of Google Analytics, we encourage you to read the explanations prepared by Google here.
Facebook Pixel
We use marketing tools available through the Facebook service, provided by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Dublin. Using these tools, we direct ads to you on Facebook. To deliver personalized ads based on your behavior on our website, we have implemented the Facebook Pixel on our website, which automatically collects information about your use of our site, such as the pages viewed.
The information collected via the Facebook Pixel is anonymous, meaning it does not allow us to identify you. We only know what actions you have taken on our site. However, please be informed that Facebook may link this information with other data about you collected through your use of Facebook and use it for its own purposes, including marketing. These actions by Facebook are not controlled by us, and you can find more information about them in Facebook’s privacy policy at https://www.facebook.com/privacy/explanation. From your Facebook account, you can also manage your privacy settings.
Privacy Policy Changes
The Privacy Policy is periodically reviewed and updated when necessary. Below you can review previous changes. June 2023 We published this version of the Privacy Policy.
Part II. Processing of Data When Using Nosalowy Dwór Services
Below we present the rules for processing personal data (including IP address or other identifiers and information collected through cookies or other similar technologies), which apply when you use our websites, i.e., nosalowy-dwor.eu, nosalowypark.pl, and apartamentyparkresidence.nosalowy.pl.
What purpose do we process your data for? We process your personal data to provide electronic services for sharing content collected on the respective website, as well as for analytical and advertising purposes. On what legal basis do we process your data? The legal basis for processing your personal data is:
- For sharing content collected on our website – the legal basis for processing is the necessity of processing to perform the contract (Article 6(1)(b) GDPR);
- For analytical and marketing purposes – the legal basis for processing is your consent (Article 6(1)(a) GDPR).
How long do we process your data?
We will process your personal data for as long as necessary to achieve the purposes described in this Privacy Policy, in particular, to fulfill our contractual and legal obligations, unless you withdraw your consent to the processing of your data earlier.
Who are the recipients of your personal data?
The recipients of your personal data, i.e., external entities that may participate in the data processing process, will be our trusted subcontractors – IT service providers, including companies whose statistical and marketing tools we use, as indicated in Part I of this Privacy Policy.
Nature of Data Provision
Your personal data – including the IP address, other identifiers, and other information – is collected via cookies or other similar technologies as soon as you connect to our website. You can read more about how we use cookies and how to change your cookie preferences on our Cookie Policy page.
Other Important Information
Your data may be processed outside the European Economic Area – Google may process your data on servers in the United States. In such cases, Google may process your personal data outside the European Economic Area, but this occurs based on standard contractual clauses, as stipulated in the agreement between us and Google, which ensure an adequate level of security for processing your personal data.
What rights do you have?
Your rights are indicated in Part I of this Privacy Policy.
Part III. Data Processing in the Context of Free Newsletter Service
Below we present the rules for processing personal data that apply when you decide to subscribe to our free newsletter service.
What purpose do we process your data for?
We process your personal data to provide the services offered by us and inform you about current promotions, new offers, and services. Through the newsletter service, we will provide you with personalized commercial information about our activities and those of our business partners.
On what legal basis do we process your data?
The legal basis for processing your personal data is your consent for processing granted pursuant to Article 6(1)(a) GDPR. The consent is given by entering your email address in the designated field on the website or by clicking the appropriate button confirming your consent.
How long do we process your data?
We will process your personal data until you withdraw your consent for processing. Upon withdrawal of consent, your data will be promptly deleted.
Who are the recipients of your personal data?
The recipients of your personal data, i.e., external entities that may participate in the data processing process, will be our trusted subcontractors – IT service providers. To send our newsletter, we will use the tools of Profitroom S.A. based in Poznań, registered in the KRS under no. 0000793213.
What personal data do we need from you?
We will need your email address. Subscribing to the newsletter requires confirmation of the request by clicking on the activation link that will be sent to your provided email address.
Why do we need your personal data?
We use your email address to send you our newsletter.
What will we do with your data?
We will use your data solely for the purpose of providing the newsletter service.
Nature of Data Provision
Providing your data is voluntary.
Other Important Information
Your data will not be processed outside the European Economic Area.
What rights do you have?
Your rights are indicated in Part I of this Privacy Policy.
Profiling
To ensure the best possible tailored, personalized offer, we have the option, using Profitroom functionality, of sending commercial information to specific groups of people, based on general characteristics provided when making a reservation, such as gender or having children. Based on this information, we may send personalized commercial information to specific groups, offering a discount or encouraging a visit to the hotel during specific periods (e.g., Valentine's Day, winter holidays, summer). We do not make decisions solely based on automated processing, including profiling, that significantly affect the individual concerned.
Part IV. Data Processing via Communication Channels
Below we present the rules for processing personal data when you call us or send us an email with a question or request for an offer or information about a service, or when you contact us via the data available on our website or through the contact form available on our website.
What purpose do we process your data for?
We process your personal data to respond to your questions, present our hotel’s offer and services, and take further steps aimed at entering into a contract.
On what legal basis do we process your data?
The legal basis for processing your personal data depends on your inquiry: Your consent expressed by sending us a specific question; The necessity of actions aimed at entering into a contract, in terms of presenting an offer and communication leading to the conclusion of the contract.
How long do we process your data?
We will process your data until you withdraw your consent, and in the case of actions aimed at entering into a contract, for the duration of the contract, the period of limitation for claims, and the period required by law for retaining accounting documents.
Who are the recipients of your personal data?
The recipients of your personal data, i.e., external entities that may participate in the data processing process, will be our trusted subcontractors – IT service providers, including Profitroom S.A., whose reservation system we use, and in the case of concluding a contract and placing an order, entities whose activities support our business, such as banks and payment operators, entities providing accounting, legal, auditing, and consulting services.
Nature of Data Provision
Providing your data is voluntary.
Other Important Information
Your data will not be processed outside the European Economic Area.
What rights do you have?
Your rights are indicated in Part I of this Privacy Policy.
Part V. Data Processing for Recruitment Purposes
The following information applies to individuals with whom we contact using data sent to us via email for recruitment purposes, aiming to start cooperation. What purpose do we process your data for? We process your contact details to consider your candidacy in our recruitment process.
On what legal basis do we process your data? The legal basis for processing your personal data is:
- The legal obligation to provide data necessary for conducting the recruitment process;
- Consent for data other than mandatory data;
- Consent for future recruitment processes.
How long do we process your data?
We process basic contact details obtained directly from you only for the period necessary to conduct the recruitment process and for a period of 3 months after the end of this process. In the case of consent to participate in future recruitment processes - no longer than 12 months.
Who is the recipient of your personal data?
The recipient of your personal data, i.e. the external entity that participates in the process of processing your data, are our subcontractors, IT service providers.
Nature of providing data
Providing data is voluntary. However, remember that if you do not provide us with your data, we will not be able to contact you for the purpose of conducting the recruitment process aimed at establishing cooperation.
What rights do you have?
Your rights are indicated in Part I of this Information on data processing.Part VI. Data processing as part of ordering services, making reservationsBelow we present to you the principles of personal data processing, which apply when you purchase services offered by us or make reservations via our website.
For what purpose do we process your data?
We process your personal data to accept and process your order and to confirm your reservation.
On what legal basis do we process your data? The legal basis for processing your personal data is:
- in order to fulfil your order – the legal basis for processing is the necessity of processing to fulfil the contract (Article 6, paragraph 1, letter b of the GDPR);
- in order to fulfil the statutory obligations incumbent on us as the administrator, resulting in particular from tax and accounting regulations – the legal basis for processing is the fulfilment of our legal obligation (Article 6, paragraph 1, letter c of the GDPR);
- in order to handle complaints – then the legal basis for processing is our legitimate legal interest (Article 6, paragraph 1, letter f of the GDPR);
- in order to possibly establish and pursue claims or defend against them – the legal basis for processing is our legitimate interest (Article 6, paragraph 1, letter f of the GDPR) consisting in the protection of our rights.
How long do we process your data?
We will process your data until you withdraw your consent, and in the scope of activities aimed at concluding a contract for the duration of the contract, the limitation period for claims, the period resulting from legal regulations determining the period of storing accounting documents.
Who is the recipient of your personal data?
The recipient of your personal data, i.e. an external entity that will be able to participate in the process of processing your data, will be our trusted subcontractors - IT service providers, as well as other entities whose activities are auxiliary to our activities, including in particular entities such as banks and payment operators, entities providing accounting, legal, auditing and consulting services. In order to process your orders and reservations, we will use the Profitroom tool of Profitroom S.A. with its registered office in Poznań, ul. Franklina Roosevelta 9 (60-829), entered into the register of entrepreneurs of the National Court Register by the District Court Poznań - Nowe Miasto and Wilda in Poznań, 8th Commercial Division of the National Court Register under KRS number: 0000793213.
Nature of providing data
Providing your data is voluntary, although data marked as mandatory is required in order to accept and process your order and complete the booking process, and failure to provide it results in the inability to conclude a contract. Providing the remaining data is optional. Other important informationYour data will not be processed outside the European Economic Area.
What rights do you have?
Your rights are indicated in Part I of this Privacy Policy.
Part VI. Data processing as part of marketing activities
Below we present the principles of personal data processing, which apply when you use and communicate with us using our profiles on social networking sites Facebook, Instagram, TripAdvisor, YouTube and LinkedIn (referred to as "fanpages"). On our fan pages, we regularly publish and share content, offers and recommendations for the services we provide.
For what purpose are your data processed?
We process your data solely in connection with maintaining our profiles in social media, including to inform you about our activities and to promote various types of events, services and offers, as well as to communicate with you via the functionalities available in social media.
Remember that social media administrators record your activity using cookies and other similar technologies whenever you interact with our fan pages and other Facebook, Instagram, TripAdvisor, YouTube and LinkedIn websites. Fan page administrators have access to general statistics regarding your (as a fan page visitor) interests and demographic data (such as age, gender, region) . As part of the use of social networking sites, the scope and purposes of data processing in social networking sites have been determined by the administrators of these sites. On what legal basis do we process your data? The legal basis for the processing of your personal data is:
- our legitimate interest (Article 6, paragraph 1, letter f of the GDPR) in promoting our own brand and building and maintaining a brand-related community;
- Your consent to the creation of data for the purposes of page statistics on Facebook (Article 6, paragraph 1, letter a of the GDPR).
How long do we process your data? We will process your personal data for as long as it is necessary to achieve the purposes described in this Privacy Policy, in particular to fulfill our contractual and statutory obligations, unless you withdraw your consent to the processing of your data earlier. Facebook, TripAdvisor, YouTube and LinkedIn process your data when you use our fan pages for their own purposes, which are not covered by this Privacy Policy. We have no influence on the activities of these services related to the aforementioned data processing. In this matter, we refer to the privacy policies of the individual social networking sites:
Facebook Data Policy: https://www.facebook.com/about/privacy/
Instagram Data Policy: https://help.instagram.com/519522125107875
TripAdvisor Data Policy: https://tripadvisor.mediaroom.com/us-privacy-policy
YouTube Data Policy: https://policies.google.com/privacy?hl=pl
LinkedIn Data Policy: https://pl.linkedin.com/legal/privacy-policy
Who is the recipient of your personal data?
The recipient of your personal data, i.e. an external entity that will be able to participate in the processing of your data, will be our trusted subcontractors - IT service providers in the field of data hosting and business email services, Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland, which administers the social networking sites Facebook and Instagram, Tripadvisor LLC, 400 1st Avenue, Needham, MA 02494, USA, which administers the TripAdvisor service; Google Ireland, Gordon House, Barrow Street, Dublin 4, Ireland, which administers the YouTube service; LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland, which administers the LinkedIn service. Nature of data provisionYour personal data - including IP address, other identifiers and other information, when you connect to our fan pages, are collected via cookies or other similar technologies.As part of the use of our fan pages, the scope and purposes of data processing in social networking sites are determined by the administrators of these sites.In this matter, we refer to the privacy policies of individual social networking sites:
Facebook Data Policy: https://www.facebook.com/about/privacy/
Instagram Data Policy: https://help.instagram.com/519522125107875
TripAdvisor Data Policy: https://tripadvisor.mediaroom.com/us-privacy-policy
YouTube Data Policy: https://policies.google.com/privacy?hl=pl
LinkedIn Data Policy: https://pl.linkedin.com/legal/privacy-policy
Other important informationYour data may be processed outside the European Economic Area, but this takes place on the basis of so-called standard contractual clauses, which guarantee an adequate level of secure processing of your personal data. What rights do you have?Your rights are indicated in Part I of this Privacy Policy.In order to ensure the highest quality of services provided, we have appointed a Personal Data Protection Inspector, who can be contacted by sending messages to the following address e-mail: iodo@nosalowy.pl
