Dear Guests,
In connection with the entry into force of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR) on 25 May 2018, we hereby inform you that we may process your personal data as a data controller if there is a legal basis for doing so.
—
1. DATA CONTROLLER
The data controller for personal data of guests of Chalet Pine Tree (hereinafter: “Facility”) is Domki Górskie Anna Szewczyk, headquartered at ul. Słoneczna 14/45, 32-050 Skawina, NIP: 9442219102.
—
2. DATA PROTECTION OFFICER
—
3. PURPOSES OF PERSONAL DATA PROCESSING
The personal data of guests are processed for the following purposes:
Reservation of stay – to process reservations and manage guest stays (based on Art. 6(1)(b) GDPR).
Compliance with legal obligations – for obligations arising from legal provisions, e.g., tax and accounting obligations, guest registry management (based on Art. 6(1)(c) GDPR).
Safety assurance – monitoring the facility grounds (based on the legitimate interest of the data controller, Art. 6(1)(f) GDPR), ensuring the safety of guests and property.
Direct marketing – sending marketing information, e.g., promotions or special offers, with the guest’s consent (based on Art. 6(1)(a) GDPR).
Website traffic analysis – through the use of cookies, to improve website functionality, enhance user experience, and support marketing efforts.
Handling complaints and claims – to process potential complaints and claims related to services provided by the Facility (based on Art. 6(1)(f) GDPR).
—
4. SCOPE OF PERSONAL DATA
Depending on the purpose of processing, the following data may be processed:
Name and surname
Address of residence
Phone number and email address
Identification data (e.g., ID card number)
Payment details and bank account number
Image (recorded via monitoring)
Child’s age in case of stays with children
Additional information voluntarily provided by the guest, e.g., stay preferences.
—
5. GUESTS’ RIGHTS REGARDING PERSONAL DATA PROCESSING
Each guest whose data is processed has the following rights:
Right of access – to obtain information about the processing and access to their data.
Right to rectification – to correct incorrect or outdated data.
Right to erasure (“right to be forgotten”) – to request data deletion if processing is no longer necessary or consent is withdrawn.
Right to restriction of processing – to limit data processing in specific cases.
Right to data portability – to receive data in a machine-readable format or transfer it to another controller.
Right to object – against processing based on the legitimate interest of the controller or for marketing purposes.
Right to withdraw consent – to withdraw consent for processing at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
—
6. REQUIREMENT TO PROVIDE PERSONAL DATA
Providing personal data is voluntary but necessary to enter into a service agreement at the Facility and to comply with the controller’s legal obligations. Failure to provide data will make it impossible to use the Facility’s services.
—
7. DATA RETENTION PERIOD
Personal data will be processed for as long as necessary to achieve the purposes for which they were collected, specifically:
Reservation and stay-related data – for the duration of the agreement and as required by legal obligations, including accounting (usually up to 5 years from the end of the year in which the stay occurred).
Marketing and cookies – until the guest withdraws consent or the data is no longer useful for their purpose.
Safety-related data (monitoring) – up to 3 months, after which recordings are automatically deleted unless they serve as evidence in proceedings.
Data processed for legitimate interests – as long as necessary to secure claims, but no longer than 6 years.
—
8. DISCLOSURE OF PERSONAL DATA
Guest personal data may be disclosed to:
Entities providing services to the Facility, e.g., accounting firms, IT service providers, marketing support entities, payment service providers, entities with whom the Facility has data processing agreements.
Public authorities if required by applicable law.
—
9. COOKIES
The Facility’s website uses cookies. Cookies are small text files stored on the user’s device that enable:
Improved website performance and user experience
Collection of website traffic statistics
Customization of content and advertisements to user preferences
—
10. DATA SECURITY
The administrator employs appropriate technical and organizational measures to protect personal data against unauthorized access, accidental loss, or destruction, in accordance with applicable legal requirements.
—
11. CHANGES TO THE PRIVACY POLICY
The privacy policy may be updated in case of changes in legal regulations or data protection practices. The updated version will be available on the Facility’s website.
—
Contact:
