valid from 07/11/2024.
1. Introduction. This Privacy Policy defines the principles of our processing of your personal data. To make it easier for you to understand it, we have explained the terms we use most often below:
a. Administrator - the entity that determines the purposes and methods of Processing your personal data.
b. Personal Data - any information that allows us to identify you, e.g. name and surname, e-mail address.
c. Hotel Folga - a hotel located at ul. Tadeusza Kościuszki 14C, 72-315 Resko, run by the Administrator.
d. Client - a person who has concluded an Agreement with us.
e. Contractor - our business partner with whom we cooperate.
f. Privacy Policy - this document.
g. Processing - performing any actions on Personal Data (e.g. copying, storing, sending Personal Data).
h. GDPR - Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).
i. Regulations - Regulations for reservations and sales at the Folga Hotel and the Folga Hotel Regulations.
j. Website - www.folgagryfice.pl.
k. You - the person whose Personal Data We Process as their Administrator.
l. Agreement - the agreement concluded between us and you on the terms specified in the Regulations (e.g. reservation agreement, hotel agreement).
m. Recipient - the person for whom the Customer purchased the voucher.
2. Who is the administrator of your personal data? The administrator of your Personal Data is AWEST Plucińscy Sp. K. with its registered office in Resko, ul. Tadeusza Kościuszki 14C, 72-315 Resko, registered in the register of entrepreneurs, registry court: District Court Szczecin–Centrum in Szczecin, XIII Commercial Pision of the National Court Register, NIP: 2530341980, REGON: 367725523, KRS: 0000685816 (“we”).
3. What is the easiest way to contact us? You can contact us by sending an e-mail to recepcja@folgagryfice.pl.
4. For what purpose, on what legal basis and for how long do we process your Personal Data? The legal basis and the period for which we process your Personal Data depend on the purpose for which we collected it.
5. Information for the person who visits our Website:
a. We process your Personal Data for the purpose of:
i. ensuring the proper technical functioning of our Website (including guaranteeing an appropriate level of security), which constitutes our legitimate interest (Article 6, paragraph 1, letter f of the GDPR).
ii. conducting research and analysis (including statistical) of our Website, including in terms of its functionality, improving the operation of available services, which constitutes our legitimate interest (Article 6, paragraph 1, letter f of the GDPR).
iii. enabling you to communicate with us, through the communication channel selected by you (e.g. via the contact form, by e-mail, by telephone), which constitutes our legitimate interest (Article 6, paragraph 1, letter f of the GDPR).
iv. conducting marketing activities (e.g. sending a newsletter), which constitutes our legitimate interest (Article 6, paragraph 1, letter f of the GDPR).
b. We process your Personal Data for the above purposes for the period necessary to perform them. We will stop Processing your Personal Data if you file an effective objection. In the case of Processing your Personal Data for marketing purposes, we will always stop Processing your Personal Data if you withdraw your consent to receive marketing information from us.
6. Information for the person who visits our social media (Facebook and Instagram):
a. We process your Personal Data for the purpose of:
i. informing you about our activities and building our positive image, which constitutes our legitimate interest (Article 6 paragraph 1 letter f of the GDPR).
ii. responding to questions and comments received via our social media (Article 6 paragraph 1 letter f of the GDPR).
iii. conducting marketing activities, which constitutes our legitimate interest (Article 6 paragraph 1 letter f of the GDPR).
b. We process your Personal Data for the above purposes for the period necessary to perform them. We will stop Processing your Personal Data if you file an effective objection. In the case of Processing your Personal Data for marketing purposes, we will always stop Processing your Personal Data if you withdraw your consent to such processing.receiving marketing information from us. Please note that if you post a comment under our post and you no longer want it to appear on our profile, you should delete it yourself.
7. Information for the Client:
a. We process your Personal Data for the purpose of:
i. concluding and implementing the Agreement, pursuant to art. 6 sec. 1 letter b of the GDPR.
ii. fulfilling obligations arising from legal regulations, in particular tax regulations, accounting regulations, regulations concerning consumer rights, pursuant to art. 6 sec. 1 letter c of the GDPR.
iii. establishing, pursuing or defending against claims that may arise in connection with the Agreement concluded between you and us.
iv. conducting marketing activities, which constitutes our legitimate interest (art. 6 sec. 1 letter f of the GDPR).
b. We process your Personal Data for the above-mentioned purposes. purposes for the period of performance of the Agreement, and after its termination or expiration for the period of limitation of claims and the period specified in the provisions of law, in particular tax law and accounting regulations. We store your Personal Data for a maximum period of 6 years from the date of expiration or termination of the Agreement. In the case of Processing your Personal Data for marketing purposes, we will always stop Processing your Personal Data if you withdraw your consent to receive marketing information from us.
8. Information for the person covered by the reservation who has not concluded an Agreement with us:
a. We Process your Personal Data necessary to use the service of our Hotel for the purpose of:
i. concluding and implementing the Agreement in which you were indicated as the person covered by the reservation, which constitutes our legitimate interest (Article 6, paragraph 1, letter f of the GDPR). We obtained your contact details and data identifying you from the Client who indicated you as the person covered by the reservation.
ii. to establish, pursue or defend against claims that may arise in connection with the Agreement concluded between us and the Client.
b. We process your Personal Data for the above purposes for the period of performance of the Agreement, and after its termination or expiration for the period of limitation of claims.
9. Information for the Gifted Person:
a. We received your Personal Data in the form of your name and surname from the Client who purchased the voucher for you. We process your Personal Data for the purpose of:
i. to perform the Agreement with the Client who purchased the voucher for you, which constitutes our legitimate interest (Article 6, paragraph 1, letter f of the GDPR).
ii. to establish, pursue or defend against claims that may arise in connection with the Agreement concluded between us and the Client who purchased the voucher for you, which constitutes our legitimate interest (Article 6, paragraph 1, letter f of the GDPR).
b. We process your Personal Data for the above purposes. purposes for the period of performance of the Agreement concluded with the Client who purchased the voucher for you, and after its termination or expiration for the period of limitation of claims.
10. Information for the participant of the event organized at the Folga Hotel:
a. Your Personal Data necessary to organize the event in which you participate, We process for the purpose of:
i. organizing the event in which you participate, which constitutes our legitimate interest (art. 6 sec. 1 letter f of the GDPR).
ii. determining, pursuing or defending against claims that may arise in connection with your participation in the event organized by us, which constitutes our legitimate interest (art. 6 sec. 1 letter f of the GDPR).
b. We delete your Personal Data after we organize the event in which you participated. However, we may store it longer if we determine that you caused damage during the event organized by us. In such case, we store your Personal Data for the period of limitation of claims.
11. Information for the Contractor:
a. We process your Personal Data for the purpose of:
i. concluding and implementing a contract with you - if you have concluded a contract with us - based on art. 6 sec. 1 letter b of the GDPR. If you are a representative or contact person of the Contractor - concluding and implementing a contract with the Contractor, which constitutes our legitimate interest (art. 6 sec. 1 letter f of the GDPR). In such case, we obtained your contact details and data identifying you from the Contractor with whom you cooperate.ii. fulfillment of obligations resulting from legal regulations, in particular tax regulations, accounting regulations, pursuant to art. 6 sec. 1 letter c of the GDPR.
iii. determination, investigation or defense against claims that may arise in connection with the agreement concluded between you and us or the agreement concluded between the Contractor with whom you cooperate and us.
b. We process your Personal Data for the above purposes for the period of performance of the agreement, and after its termination or expiration for the period of limitation of claims and the period specified in the provisions of law, in particular tax law and accounting regulations. We store your Personal Data for a maximum period of 6 years from the date of expiration or termination of the agreement.
12. Who can we transfer your Personal Data to? We can transfer your Personal Data to providers of IT services and systems, e-mail providers, entities that support us in the performance of hotel services, couriers, as well as our advisors (e.g. lawyers, accounting and accounting office, IT company).
13. What rights do you have in connection with our Processing of your Personal Data?
a. The right to access Personal Data (Article 15 of the GDPR), i.e. you have the right to obtain information from us as to whether we are Processing your Personal Data, and if so, you can also obtain access to it, including receiving a copy of it and obtaining information regarding its Processing (this information is included in the Privacy Policy).
b. The right to rectify Personal Data (Article 16 of the GDPR), i.e. you have the right to rectify your Personal Data that is incorrect. In addition, you have the right to request that incomplete Personal Data be supplemented if the purpose of their Processing requires it.
c. The right to "be forgotten" (Article 17 of the GDPR), i.e. you have the right to request the immediate deletion of your Personal Data, and we are obliged to delete it, if one of the following circumstances applies:
i. The Processing of your Personal Data is no longer necessary for the purposes for which it was collected or otherwise Processed.
ii. you have objected to the Processing of your Personal Data and we do not have an overriding legitimate interest in continuing to Process your Personal Data.
iii. you have objected to the Processing of your Personal Data for the purposes of direct marketing.
iv. your Personal Data has been Processed unlawfully.
v. your Personal Data must be deleted in order to comply with a legal obligation under EU or Polish law.
vi. you have withdrawn the consent that forms the basis for the Processing of your Personal Data and there is no other legal basis for its processing.
vii. we may refuse to exercise your right to delete Personal Data if one of the conditions provided for in Article 17, paragraph 3 of the GDPR occurs (e.g. the establishment, pursuit or defense of claims).
d. The right to restrict the Processing of Personal Data (Article 18 of the GDPR), which you can exercise when one of the following circumstances occurs:
i. you dispute the accuracy of your Personal Data - then we will Process your Personal Data to a limited extent for a period allowing us to verify their accuracy.
ii. the Processing of your Personal Data is unlawful and you object to their deletion, requesting their limited Processing.
iii. we no longer need your Personal Data to achieve the purposes of Processing, but you need them to establish, pursue or defend claims.
iv. you have objected to the Processing of your Personal Data - then we will Process your Personal Data to a limited extent until it is determined whether the legitimate grounds on our side override the grounds for your objection.
e. The right to transfer personal data (Article 20 of the GDPR), this right applies to you if We process your Personal Data on the basis of consent or in connection with the performance of a contract and the Processing is carried out in an automated manner. Then you can request that we transfer your Personal Data to you or another controller in a structured, commonly used, machine-readable format.
f. The right to object to the Processing of your Personal Data (Article 21 GDPR), you have this right if We process your Personal Data on the basis of the legitimate interest of the administrator (Article 6 paragraph 1 letter f of the GDPR). We are not obliged to take your objection into account if we prove the existence of our important legitimate grounds for Processing, overriding your interests, rights and freedoms or grounds for establishing, pursuing or defending claims.
g. The right to lodge a complaint with the President of the Personal Data Protection Office (Article 77 of the GDPR) - if in your opinion We process Personal Data in violation of the provisions of the GDPR, you can lodge a complaint with the President of the UODO. Current contact details to the President of the UODO can be found on the office's website: https://uodo.gov.pl/pl/p/kontakt.
14. Do we make automated decisions based on your Personal Data or use your personal data for profiling purposes? No.
15. Can we transfer your Personal Data outside the European Economic Area? To the extent possible, we use IT service providers who Process Personal Data within the European Economic Area. However, if we cooperate with an entity outside the European Economic Area, we secure the transfer of data in accordance with the requirements of the GDPR, including in particular by entering into standard contractual clauses. If you have any questions, please write to us at the e-mail address indicated in point 3 above.
16. Do we use cookies on the Website? Yes, we use cookies that are necessary to ensure the proper functioning of our Website. You can change your settings for collected cookies at any time when using the Internet. Detailed information for the Chrome browser can be found here, for Safari here, for Internet Explorer here, for the Mozilla FireFox browser here.
17. Is providing Personal Data necessary? Providing Personal Data is completely voluntary. However, remember that failure to provide Personal Data will prevent us from fulfilling your request (e.g. responding to an e-mail, entering into a contract with you).
18. When do we send you marketing information? We send you marketing information if you have previously given your marketing consent to such action. You can withdraw your consent at any time by writing to the e-mail address indicated in point 3 above or by using the functionality of the tools we use for marketing activities.
19. Changes to the Policy. We may change the content of the Privacy Policy. The latest version of the Privacy Policy can always be found on the Website.