Privacy policy

§1

In accordance with the requirements of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as GDPR), as well as other applicable laws concerning the protection of personal data, we commit to ensuring the security and confidentiality of the personal data obtained.

§2 Data Controller

The administrator of personal data is Adam Szczepanik running an individual business, NIP: 7271803223, REGON: 472951238 at ul. Lipowa 21/21, 90-743 in Łódź. In all matters relating to the processing of personal data and the exercise of rights related to this processing, you can contact the following e-mail address: kontakt@wyrajnadpilica.pl

§3 Purposes of Processing Personal Data

The purpose of processing personal data by us is to conclude and perform a contract for the provision of hotel services. Personal data obtained by Wyraj will be processed for the purpose and to the extent necessary to submit inquiries, provide follow-up communication such as delivering information about offers to the email address provided on the website www.wyrajnadpilica.pl, and to fulfill reservation services.

In cases where the guest has consented to the processing of personal data for marketing purposes, Wyraj processes personal data for this purpose, i.e., to send marketing information and offers about its products and services to the guest.

Additionally, Wyraj processes guest personal data collected through hotel monitoring to ensure the safety of hotel guests and other individuals on the premises.

The processing of personal data by us may also include the pursuit of any claims by Wyraj related to damage caused by the guest or defense against claims by the guest against Wyraj.

§4 Legal Basis for Processing Personal Data

1. The legal basis for processing guest personal data obtained by Wyraj is the contract for the provision of hotel services.
2. The legal basis for processing guest personal data for marketing purposes is the guest’s consent. Wyraj informs that consent can be withdrawn at any time. Withdrawal of consent does not affect the validity of processing that occurred before the consent was withdrawn.
3. The legal basis for processing guest personal data through monitoring is the protection of their vital interests and the vital interests of other natural persons, as well as the legitimate interests of the controller.
4. The legal basis for processing guest personal data for the pursuit of any claims is the legitimate interest of the controller.

§5 Principles of Personal Data Processing

When processing guest personal data, we adhere to the principles of:

1. lawfulness, fairness, and transparency: processing personal data in compliance with regulations,
2. data minimization and adequacy: processing only the necessary and relevant data to achieve the intended purpose,
3. accuracy of data: ensuring that the processed data are accurate and up-to-date,
4. purpose limitation and secure data storage: collecting personal data only for specific and lawful purposes. We store data in a form that allows identification of the data subject and process them only for as long as necessary to achieve the purpose for which they were collected (unless further processing is required by law),
5. integrity and confidentiality of data: providing technical and organizational solutions to ensure the security of processed personal data,
6. accountability: being able to demonstrate compliance with applicable laws when processing personal data.

§6 Types of Processed Data

On our website www.wyrajnadpilica.pl, we collect the following personal data from guests:

• name – when filling out the contact and reservation form; necessary for contact; necessary for data entry and service delivery;
• surname – when filling out the reservation form; necessary for contact; necessary for data entry and service delivery;
• email address – when filling out the contact and reservation form; contact is possible via email;
• phone number – when filling out the reservation form; quick contact is possible via phone number;
• company address – optionally – in case of receiving an invoice (street name, building number, apartment number, postal code, city, Tax Identification Number (NIP)) – when filling out the reservation form; necessary for service delivery;
• company name – optionally – in case of receiving an invoice;
• IP address (and other information contained in system logs);
• cookies – the website uses cookies to customize the service to individual needs and for service delivery.

Providing the above data is voluntary but necessary for communication and service delivery. Failure to provide data will result in the inability to contact the guest and provide the service.

§7 Entities Authorized to Access Data

We do not disclose the personal data obtained from guests to third parties, except for entities cooperating with Wyraj:

1. IT service providers for the hotel and providers of IT software,
2. accounting firms providing accounting services,
3. law firms providing legal advice and representation services.

In such cases, the amount of data transferred is limited to a minimum. Personal data of guests held by us may be disclosed to competent public authorities if required by applicable law.

§8 Transfer of Data outside the European Economic Area

Personal data obtained from guests are not transferred outside the European Economic Area.

§9 Guest Rights Regarding Personal Data Processing

Guests have the following rights regarding the processing of their personal data by us:

• the right to access their data, including obtaining a copy of the data,
• the right to request rectification of data,
• the right to erasure of data (in certain situations),
• the right to lodge a complaint with the supervisory authority responsible for data protection,
• the right to restrict data processing,
• the right to object (in certain situations).

If data are processed based on consent, guests may also exercise the right to withdraw consent to the extent that data are processed on this basis. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. To withdraw consent, please contact us at the email address provided in this Privacy Policy.

To exercise the above rights, please contact the data controller at the provided email address: kontakt@wyrajnadpilica.pl

§10 Automated Decisions Based on Personal Data, Including Profiling

Wyraj does not make automated decisions based on personal data, including profiling.

§11 Data Processing Period

Personal data:

1. obtained in connection with a concluded contract for the provision of hotel services will be processed until the expiry of Wyraj’s or the guest’s claims limitation period, whichever occurs later,
2. obtained based on consent for marketing purposes will be processed for the duration of the consent validity for marketing purposes,
3. obtained in connection with monitoring will be processed for 30 days from the date of recording, and then permanently deleted.

§12

This Privacy Policy applies to the website www.wyrajnadpilica.pl, for which the Data Controller has implemented an appropriate level of security for the processing of personal data in the IT system. The Controller employs technical and organizational measures to ensure the protection of processed personal data appropriate to the threats and categories of data protected, in particular, to prevent unauthorized access to data, their acquisition by an unauthorized person, processing in violation of applicable laws, as well as alteration, loss, damage, or destruction.