PRIVACY POLICY
Service: www.apartamenty.nawyspie.eu
1. General information
- The controller of personal data is: Apartamenty na Wyspie, ul. Uzdrowiskowa 9/1, 72-600 Świnoujście. Contact e-mail address: biuro@nawyspie.eu
- Personal data is processed in accordance with:
- By Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR),
- Personal Data Protection Act of May 10, 2018,
- the Telecommunications Law act.
- The controller processes users' personal data for the following purposes:
- fulfillment of ordered services (e.g., apartment reservation),
- handling of inquiries submitted via the contact form,
- performance of accounting and tax duties,
- marketing of one's own services,
- ensuring the proper functioning of the website,
- conducting traffic statistics and analysis.
- Legal bases for data processing (Article 6 GDPR):
- Article 6(1)(b) of the GDPR – performance of a contract or steps prior to entering into a contract,
- Article 6 paragraph 1 letter c of the GDPR – legal obligation (e.g., accounting),
- Article 6 paragraph 1 letter f GDPR – legitimate interest of the Controller (own marketing, statistics),
- Art. 6(1)(a) GDPR – user consent (e.g., marketing, cookies).
2. Data collection method
The service collects data:
- through voluntary data entered in the forms,
- via email or phone contact,
- by saving cookies,
- via server logs (IP address, date, time, browser, operating system).
3. Selected data protection methods
The administrator implements appropriate technical and organizational measures ensuring data protection:
- SSL certificate (data transmission encryption),
- server and IT systems security,
- restricted data access exclusively for authorized persons,
- regular software updates,
- protections against unauthorized access.
4. Hosting
The service is hosted by: home.pl S.A., ul. Zbożowa 4, 70-653 Szczecin
The hosting company processes data solely to the extent necessary to provide the hosting service.
5. Data recipients
Data may be transferred:
- accounting firm,
- to entities providing IT and hosting services,
- to marketing tool providers (Google, Meta),
- authorized employees and associates.
Data are not sold to third parties.
6. Data retention period
Data is processed for the period of:
- the duration of the contract and after its termination for the period required by law (e.g., 5 years – accounting documentation),
- until the consent is withdrawn (in the case of processing based on consent),
- until the submission of an effective objection,
- maximum 3 years in the case of own marketing.
7. Your rights
The user has the right to:
- access to your data,
- rectification of data,
- erasure of data („right to be forgotten”),
- restriction of processing,
- data transfer,
- objecting to the processing,
- withdrawal of consent at any time,
- lodging a complaint with the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warszawa, www.uodo.gov.pl
Providing data is voluntary, but necessary for the provision of services.
Automated decision-making
The administrator does not make automated decisions that produce legal effects concerning the user.
9. Transfer of data outside the EU
In connection with the use of tools such as:
- Google Analytics (Google LLC),
- Meta Pixel (Meta Platforms Inc.),
Data may be transferred to third countries (USA). The transfer is based on standard contractual clauses (SCC) or an adequacy decision (e.g., the EU-US Data Privacy Framework).
10. Information about forms
The data provided in the forms is processed for the purpose resulting from the function of a given form (e.g., reservation, contact).
The service may save:
- IP address,
- date and time the form was submitted,
- browser specifications.
11. Server logs
The service automatically saves data in the server logs, such as:
- IP address,
- date and time of the query,
- browser type,
- operating system.
These data are used solely for the purpose of administering the website and ensuring its security.
12. Cookie files information
The website uses cookies for the purpose of:
- user session maintenance,
- realization of service functions,
- statistical analysis,
- marketing.
Cookies are used:
- sessional,
- permanent,
- analytical,
- marketing.
During their first visit, the user can consent to the use of cookies using the cookie banner mechanism.
13. Cookie management
The user can at any time:
- change cookie settings in the browser,
- delete saved cookies,
- withdraw consent by changing the settings in the cookie banner.
Browser instructions:
- Google Chrome – https://support.google.com/chrome/answer/95647
- Firefox – https://support.mozilla.org/pl/kb/usuwanie-ciasteczek
- Safari – https://support.apple.com/en-us/guide/safari
- Edge – https://support.microsoft.com/pl-pl/microsoft-edge