1. This Privacy Policy sets out the rules for the processing and protection of personal data provided by users in connection with their use of the services offered via the website (hereinafter: the “Service”).
2. In accordance with the obligations arising from the General Data Protection Regulation of 27 April 2016 (Official Journal of the EU L 119 of 04.05.2016), the controller of the Client’s personal data is the Hotel – the company SANHAUS A. J. ZIÓŁEK SPÓŁKA JAWNA, Bałtycka 6/1, 81-707 Sopot, NIP 5851478572.
In order to protect the security of the personal data entrusted to it, the Controller operates on the basis of internal procedures and guidelines compliant with the relevant legal acts on the protection of personal data, in particular with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC.
3. The Controller exercises particular care to protect the interests of data subjects, and in particular ensures that personal data:
a. is processed lawfully;
b. is collected for specified, legitimate purposes and not further processed in a way incompatible with those purposes;
c. is factually correct and adequate in relation to the purposes for which it is processed;
d. is kept in a form which permits identification of data subjects for no longer than is necessary for the purposes of processing.
4. Personal data is processed on the basis of consent given by users of the Service and in cases where the provisions of applicable law authorize the Controller to process personal data.
5. The Controller processes personal data voluntarily provided by users of the Service solely for the purpose of responding to users’ enquiries submitted via the contact form, to the following extent:
a. first name and surname,
b. email address,
c. telephone number.
6. Personal data of users of the Service is not sold or disclosed to third parties and is subject to profiling, i.e. automated processing in order to assess and determine users’ personal characteristics or needs.
7. The user of the Service who has provided data has the right to access such data. The user also has the right to modify this data, request its transfer to another entity, and to restrict or cease the processing of their personal data at any time. At any time, the user may also withdraw previously granted consent to the processing of their data and request the deletion of their personal data from the Service.
8. In order to exercise their rights indicated in point 8 above, the user of the Service should contact the Controller using the same email address or telephone number that was provided to the Service, by contacting the address of the facility.
9. The Controller obtains information about users and their behaviour in the following ways:
a. through information voluntarily entered in the form,
b. through the collection of “cookies” files.
10. When visiting the website for the first time, the user is informed about the use of cookies. By remaining on the website, the user accepts the use of standard cookies on the website. Failure to change the browser settings on the user’s side is equivalent to consenting to the use of “cookies”.
11. The installation of “cookies” is necessary for the proper provision of services within the Service. “Cookies” contain information necessary for the correct functioning of the website, in particular those requiring authorization. The user may change their browser settings at any time so that cookies are either accepted or rejected, or so that the user is notified that such files are not being placed on their computer.
12. The following types of “cookies” are used within the Service:
a. session cookies – remain in the browser until it is switched off or the user logs out of the website on which they were placed,
b. persistent cookies – remain in the device’s web browser until they are deleted by the user or until a pre-defined time specified in the cookie parameters.
13. The Service may contain links to other websites which operate independently of the Service and are in no way supervised by the Service. These websites may have their own privacy policies and terms of use, which we recommend that you read carefully.
14. The Controller reserves the right to amend the Privacy Policy of the Service, which may be caused by the development of Internet technology, possible changes in the law regarding personal data protection, and the development of the Service. Users will be informed of any changes in a clear and easily noticeable manner.