Personal Data Protection Policy at Apartamenty Kierpcówka 5, ul. Kierpcówka 5, 34-511 Kościelisko, and at Domki Hacienda ul. Nędzy-Kubińca 131, hereinafter referred to as the Facility.

Who is the controller of your personal data?

The controller of your personal data is Usługowa Hacienda Andrzej Skupień, headquartered at ul. Nędzy-Kubińca 131; NIP: 7361644142, REGON: 367398001, owner of the Facility.

All inquiries, comments, and objections regarding our Personal Data Protection Policy should be sent to domekhacienda@gmail.com or: ul. Nędzy-Kubińca 131, 34-511 Kościelisko.

What data are we referring to? How do we obtain it?

We process only personal data that you voluntarily provide to us.

We obtain your personal data in connection with the reservation process / contract conclusion / service request at the Facility or as a result of you providing such data via the contact form available on our website, partner booking portals, or other direct communication channels.

For what purpose do we process your data and on what basis?

The processing of your personal data is necessary for the performance of the contract concluded with you / handling your reservation / responding to your inquiries.

Legal regulations require us to process your data for tax and accounting purposes.

We also process your personal data based on the legitimate interest of the Facility, which includes:

• ensuring the delivery, security, and settlement of services / reservations / transactions related to the services we provide, including enforcing compliance with internal Facility rules;
• handling your inquiries submitted to the Facility when they are not directly related to contract performance;
• conducting research and statistical analysis of the Facility’s website, including functionality improvement, service enhancement, and assessing visitors’ main interests and needs;
• conducting research and analysis of booking platforms intermediating the conclusion of contracts / service bookings, including functionality improvement and assessing visitors’ interests and needs;
• debt recovery; conducting court, arbitration, and mediation proceedings;
• data storage for archiving purposes and to demonstrate compliance with legal obligations;
• processing your data for direct marketing of the Facility’s products and services, including sending commercial information based on your consent.

The legal basis for processing your data is Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR).

What data may we request from you?

Depending on the purpose and method of data collection, we may request:

• First and last name
• Residential address
• ID card / passport number
• Vehicle registration number
• Phone number, email address
• Company name, address, tax ID (NIP)
• Payment card number, bank account number

Do you have to provide your data?

Providing personal data is voluntary, but necessary for the provision of services we offer, i.e. handling your reservation or performing other services covered by the contract.

Consent to receive information about special offers, promotions, discounts, and other marketing campaigns is also voluntary. It allows us to send you our newsletter. If you do not consent, we will not send such materials. You may change your consent at any time.

How long do we store your personal data?

We store data until we complete the execution of your reservation or other service, and until the limitation period for potential claims has expired.

Additionally, data may be stored for fraud prevention, statistical, and archiving purposes for up to 10 years from the end of the contract / stay.

For accountability purposes, we store data for the period required by law to document compliance with legal obligations.

What rights do you have regarding your data?

You may:

• access and correct your data,
• in justified cases request deletion or restriction of processing, or object to certain uses of your data,
• in justified and properly documented cases request transfer of your data to third parties.

Who has access to your data? To whom do we not disclose it?

Your personal data is disclosed only to employees and collaborators who need access to it to ensure proper service delivery.

If your data is processed by external entities, it is only done on our behalf under relevant agreements. We do not share data for their own use.

Authorized entities include event organizers and service providers such as administration, accounting, marketing, IT, and legal services.

If necessary, we may share data with public authorities combating fraud and abuse.

Do we transfer data outside the European Economic Area?

Your personal data will only be transferred outside the EEA if necessary for contract execution / service provision.

Do we process your data automatically (including profiling)?

Your data may be processed automatically (including profiling), but it will not produce legal effects or significantly affect your situation.

Profiling involves analyzing your data to assess preferences and interests.

Do we use cookies and plugins from other services?

Cookies

We use cookies stored on your browser to collect data about how you use our website in order to improve our services.

Users can block cookies or allow them only with explicit consent.

Cookies do not identify your identity directly. They store information about visited pages, time of visit, and activity.

Data may include anonymized statistics and shortened IP addresses.

Data is used for:

• counting website visitors,
• tracking interesting sections of the site,
• analyzing traffic sources,
• adapting offers to target groups.

Plugins from other services

On our website, “plugins” from social media services and other service providers are used.

When viewing our website containing such a plugin, your browser establishes a direct connection to the servers of Facebook, Google, or TripAdvisor.

The content of the plugin is transmitted by the respective service provider directly to your browser and integrated into the website. Thanks to this integration, service providers receive information that your browser has displayed our website, even if you do not have a profile with the provider or are not currently logged in.

This information (together with your IP address) is transmitted directly from your browser to the server of the respective provider and stored there.

The purpose and scope of data collection and its further processing and use by service providers, as well as contact options and your rights in this regard and settings options to protect your privacy, are described in the privacy policies of the respective service providers.