Privacy policy
WEBSITE PRIVACY POLICY
This Privacy Policy (hereinafter referred to as the "Policy") contains information on the processing of your personal data in connection with the use of the following websites:
-
Golden Apartments (operating at the website www.golden.apartments)
hereinafter collectively referred to as the "Services".
Personal data administrator
The administrator of your personal data is GOLDEN APARTMENTS & GLAMPING limited liability company with its registered office in Warsaw (registered address: ul. Józefa Sowińskiego 24 / 45, 01-251Warsaw) entered into the register of entrepreneurs of the National Court Register kept by the District Court for the Capital City of Warsaw in Warsaw, 13th Commercial Division of the National Court Register under the number KRS: 0000947610 with NIP: 9662158354 REGON number: 520998295 (hereinafter: "Administrator").
Contact the Administrator
In all matters related to the processing of personal data, you can contact the Administrator via:
a) e-mail - at: info@golden.apartments
Personal data protection measures
The Administrator applies modern organizational and technical security measures to ensure the best possible protection of your personal data and guarantees that it is processed in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons in connection with with the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter: "GDPR"), the Act of May 10, 2018 on the protection of personal data and other provisions on data protection personal data.
Information about processed personal data
The use of the Websites requires the processing of your personal data. Below you will find detailed information about the purposes and legal basis of processing, as well as the processing period and the obligation or voluntary nature of providing it.
Purpose of processing
Processed personal data
Legal basis
Conducting communication via chat
1) first name and last name;
2) e-mail address;
3) optional - other personal data that you provide during the chat.
art. 6 section 1 letter a GDPR
(personal data processing takes place on the basis of consent granted)
Providing the above personal data is voluntary, but necessary in order to contact the Administrator via chat and receive answers to the questions asked (the consequence of not providing them will be the inability to establish contact and receive an answer).
The administrator will process the above. personal data until the consent is withdrawn or they become no longer useful for the purposes for which they were collected (depending on which of these events occurs first).
Purpose of processing
Processed personal data
Legal basis
Conclusion and execution of the apartment rental agreement
1) first name and last name;
2) e-mail address;
3) Phone number;
4) residential address (street, house number, apartment number, city, postal code, country).
art. 6 section 1 letter b GDPR
(processing is necessary to perform the contract concluded with the data subject or to take steps to conclude it)
Providing the above personal data is a condition for concluding and performing the apartment rental agreement (providing them is voluntary, but failure to provide them will result in the inability to conclude and perform the above-mentioned agreement).
The administrator will process the above. personal data until the statute of limitations for claims arising from the above expires. contracts.
Purpose of processing
Processed personal data
Legal basis
Conducting e-mail communication
1) first name and last name;
2) e-mail address;
3) optionally - other personal data that you provide during e-mail communication.
art. 6 section 1 letter a GDPR
(personal data processing takes place on the basis of consent granted)
Providing the above personal data is voluntary, but necessary in order to conduct e-mail communication with the Administrator (the consequence of not providing them will be the inability to conduct e-mail communication with the Administrator).
The administrator will process the above. personal data until the consent is withdrawn or they become no longer useful for the purposes for which they were collected (depending on which of these events occurs first).
Purpose of processing
Processed personal data
Legal basis
Sending the newsletter
e-mail address
art. 6 section 1 letter f GDPR
(processing is necessary to implement the legitimate interest of the Administrator, in this case, informing about new products and promotions available on the Websites)
Providing an e-mail address is voluntary, but necessary to receive the newsletter (failure to provide it will result in the inability to receive the newsletter).
The Administrator will process the e-mail address until the objection is effectively raised or the purpose of processing is achieved (depending on which of these events occurs first).
Purpose of processing
Processed personal data
Legal basis
Conducting telephone communication (direct conversation, SMS)
1) Phone number;
2) optionally - other personal data that you provide during telephone communication.
art. 6 section 1 letter a GDPR
(personal data processing takes place on the basis of consent granted)
Providing the above personal data is voluntary, but necessary in order to conduct telephone communication with the Administrator (the consequence of not providing them will be the inability to conduct telephone communication with the Administrator).
The administrator will process the above. personal data until the consent is withdrawn or they become no longer useful for the purposes for which they were collected (depending on which of these events occurs first).
Purpose of processing
Processed personal data
Legal basis
Handling contact forms (including a form for providing information about the apartment and an inquiry form about a specific apartment)
1) first name and last name;
2) business;
3) e-mail address;
4) Phone number;
5) address of residence/apartment;
6) optionally - other personal data that you provide in the contact form.
art. 6 section 1 letter a GDPR
(personal data processing takes place on the basis of consent granted)
Providing the above personal data is voluntary, but necessary in order to receive a response to the inquiry sent via the contact form (the consequence of not providing it will be the inability to receive a response).
The administrator will process the above. personal data until the consent is withdrawn or they become no longer useful for the purposes for which they were collected (depending on which of these events occurs first).
Purpose of processing
Processed personal data
Legal basis
Fulfillment of obligations related to the protection of personal data
1) first name and last name;
2) contact details provided by you (e-mail address; correspondence address; telephone number).
art. 6 section 1 letter c GDPR
(processing is necessary to fulfill the legal obligation imposed on the Administrator, in this case the obligations arising from the provisions on the protection of personal data)
Providing the above personal data is voluntary, but necessary in order for the Administrator to properly perform the obligations arising from the provisions on the protection of personal data, including: exercise the rights granted to you by the GDPR (the consequence of failure to provide the above-mentioned data will be the inability to properly exercise the above-mentioned rights).
The administrator will process the above. personal data until the limitation periods for claims for violation of personal data protection provisions expire.
Purpose of processing
Processed personal data
Legal basis
Establishing, pursuing or defending against claims
1) name;
2) last name;
3) business;
4) e-mail address;
5) residential/registered address;
6) PESEL/KRS number;
7) Tax Identification Number.
art. 6 section 1 letter f GDPR
(processing is necessary to pursue the legitimate interest of the Administrator, in this case determining, pursuing or defending against claims)
Providing the above personal data is voluntary, but necessary in order to establish, pursue or defend against claims (the consequence of failure to provide the above-mentioned data will be the Administrator's inability to take the above-mentioned actions)
The administrator will process the above. personal data until the limitation periods for claims expire.
Purpose of processing
Processed personal data
Legal basis
Analysis of your activity on the Websites
1) date and time of visit;
2) device IP number;
3) type of device operating system;
4) approximate location;
5) type of web browser;
6) time spent on the Services;
7) visited subpages and other activities undertaken within the Websites.
art. 6 section 1 letter f GDPR
(processing is necessary to implement the legitimate interest of the Administrator, in this case obtaining information about your activity on the Websites)
Providing the above personal data is voluntary, but necessary in order for the Administrator to obtain information about your activity on the Websites (the consequence of not providing them will be the Administrator's inability to obtain the above-mentioned information).
The administrator will process the above. personal data until an effective objection is raised or the purpose of processing is achieved.
Purpose of processing
Processed personal data
Legal basis
Administration of the Services
1) IP address;
2) server date and time;
3) information about your web browser;
4) information about the operating system.
The above data is saved automatically in the so-called server logs each time you use the Websites (administrating it without the use of server logs and automatic saving would not be possible).
art. 6 section 1 letter f GDPR
(processing is necessary to pursue the legitimate interest of the Administrator, in this case ensuring the proper operation of the Websites)
Providing the above personal data is voluntary, but necessary to ensure the proper operation of the Websites (the consequence of not providing them will be the inability to ensure the proper operation of the Websites).
The administrator will process the above. personal data until an effective objection is raised or the purpose of processing is achieved.
Profiling
In order to create your profile for marketing purposes and direct marketing to you tailored to your preferences, the Administrator will process your personal data in an automated manner, including profiling - however, this will not cause any legal or similar effects towards you. significantly influence your situation.
The scope of profiled personal data corresponds to the scope indicated above in relation to the analysis of your activity on the Websites.
The legal basis for the processing of personal data for the above purpose is Art. 6 section 1 letter f GDPR, according to which the Administrator may process personal data in order to pursue its legitimate interest, in this case conducting marketing activities tailored to the recipients' preferences. Providing the above personal data is voluntary, but necessary to implement the above-mentioned. purpose (the consequence of not providing them will be the Administrator's inability to conduct marketing activities tailored to the recipients' preferences).
The administrator will process personal data for the purpose of profiling until an effective objection is raised or the purpose of processing is achieved.
Recipients of personal data
The recipients of personal data will be the following external entities cooperating with the Administrator:
a) a company providing accounting services;
b) hosting companies;
c) a company providing a contact platform;
d) instant messaging companies;
e) companies providing tools for analyzing activity on the Websites and directing direct marketing to people using them (including Google Analytics);
f) newsletter service provider.
In addition, personal data may also be transferred to public or private entities if such an obligation results from generally applicable provisions of law, a final court judgment or a valid administrative decision.
Transferring personal data to a third country
Due to the Administrator's use of tools such as Google Analytics, your personal data may be transferred to the following third countries: USA, Chile, Singapore and Taiwan (Republic of China). The basis for transferring data to the above-mentioned third countries are contractual clauses ensuring an adequate level of protection, consistent with the standard contractual clauses set out in the European Commission Decision of 5 February 2010 on standard contractual clauses for the transfer of personal data to data processors established in third countries under Directive 95/46 /EC of the European Parliament and of the Council.
You can obtain from the Administrator a copy of the data transferred to a third country.
Right
In connection with the processing of personal data, you have the following rights:
1) the right to information about what personal data concerning you are processed by the Administrator and to receive a copy of this data (the so-called right of access). Issuing the first copy of the data is free of charge, for subsequent copies the Administrator may charge a fee;
2) if the processed data becomes outdated or incomplete (or otherwise incorrect), you have the right to request its rectification;
3) in certain situations, you can ask the Administrator to delete your personal data, e.g. when:
a) the data will no longer be needed by the Administrator for the purposes he informed about;
b) you have effectively withdrawn your consent to data processing - unless the Administrator has the right to process data on another legal basis;
c) the processing is unlawful;
d) the need to delete data results from the legal obligation imposed on the Administrator;
4) if personal data are processed by the Administrator on the basis of consent to processing or in order to perform the Agreement concluded with him, you have the right to transfer your data to another administrator;
5) if personal data are processed by the Administrator on the basis of your consent to processing, you have the right to withdraw this consent at any time (withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal);
6) if you find that the personal data being processed is incorrect, their processing is unlawful, or the Administrator no longer needs specific data, you may request that the Administrator not make any changes to the data for a specific period of time (e.g. to check the correctness of the data or pursue claims). operations, but only stored them;
7) you have the right to object to the processing of personal data whose processing is based on the legitimate interest of the Administrator. In the event of an effective objection, the Administrator will stop processing personal data in the above-mentioned. purpose;
8) you have the right to lodge a complaint with the President of the Personal Data Protection Office if you believe that the processing of personal data violates the provisions of the GDPR.
Cookies
-
The Administrator informs that the Websites use "cookies" files installed on your end device. These are small text files that can be read by the Administrator's system, as well as by systems belonging to other entities whose services the Administrator uses (e.g. Facebook, Google).
-
The administrator uses cookies for the following purposes:
a) ensuring the proper operation of the Websites - thanks to cookies, it is possible to operate the Websites efficiently, use its functions and conveniently move between individual subpages;
b) increasing the comfort of browsing the Websites - thanks to cookies, it is possible to detect errors on some subpages and constantly improve them;
c) creating statistics – cookies are used to analyze how users use the Websites. This makes it possible to constantly improve the Website and adapt its operation to users' preferences;
d) conducting marketing activities - thanks to cookies, the Administrator can direct advertising to users tailored to their preferences.
-
The administrator can place both permanent and temporary (session) files on your device. Session files are usually deleted when you close the browser, but closing the browser does not delete persistent files.
-
Information about cookies used by the Administrator is displayed in the panel located at the bottom of the Website. Depending on your decision, you can enable or disable cookies of individual categories (except essential cookies) and change these settings at any time.
-
Data collected using cookies does not allow the Administrator to identify you.
-
The administrator uses the following cookies or tools that use them:
TOOL
SUPPLIER
FUNCTIONS AND SCOPE OF DOWNLOADED DATA
OPERATION PERIOD
Necessary cookies
Administrator
The operation of these files is necessary for the proper functioning of the websites of the Services, so you cannot disable them. Thanks to these files (which collect, among others, the IP number of your device), it is possible, among others, to: informing you about cookies operating on the websites of the Services
Most necessary cookies are session cookies, but some remain on your end device for a period of 2 weeks or until they are deleted;
Google Analytics
This tool enables the collection of statistical data on how customers use the Websites, including: about the number of visits, duration of visits, search engine used, location. The collected data helps improve the Website and make it more customer-friendly.
up to 2 years or until they are removed (depending on which of the following events occurs first)
-
Through most commonly used browsers, you can check whether cookies have been installed on your end device, as well as delete installed cookies and block their installation in the future by the Websites. However, disabling or limiting the use of cookies may cause quite serious difficulties in using the Websites, e.g. the need to log in on each subpage, a longer loading time for the Websites' pages, and restrictions on the use of some functionalities.
Final Provisions
To the extent not regulated by the Policy, generally applicable provisions on the protection of personal data shall apply.
The policy is valid from January 1, 2023.