Dear Sir or Madam,We take care to protect the personal data we collect in accordance with national regulations and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ EU L 119 of 04.05.2016, p. 1, as amended in OJ EU L 127 of 23.05.2018, p. 2), (hereinafter referred to as "GDPR").
We present our Privacy Policy to you so that each person with whom we establish a relationship is aware of:
The Privacy Policy may be supplemented with information provided when collecting personal data (e.g. in booking, contact or newsletter subscription forms) or within a reasonable period - no later than within one month - in the case of collecting data from indirect sources, i.e. not directly from the persons to whom it relates.
II. PERSONAL DATA CONTROLLER
1. The personal data controller is Apartamenty Na Wydmach sp. z o.o. with its registered office in Warsaw at ul. Wioślarska 8, 00-411 Warsaw, registered in the Register of Entrepreneurs of the National Court Register maintained by the District Court for the capital city of Warsaw in Warsaw, XII Commercial Division of the National Court Register under the KRS number 0000816696, share capital PLN 5,000.00, REGON 384989453, NIP 7010957938.2.In certain cases, we may also process data as their recipient, co-controller or processor.
III. JOINT DATA CONTROLLERS FORMING THE CONDO.PL HOTEL GROUP
1. If the data subject expresses consent by checking the appropriate box (e.g. in the content of the consent clause) or providing an e-mail address in the appropriate form (e.g. for the newsletter, to contact us) and activation (e.g. by clicking "send message"), their personal data will be processed for the purpose of receiving commercial information by e-mail about news, events and promotions from the joint controllers forming the Condo.pl Hotel Group (Article 6, paragraph 1, letter a of the GDPR).
2. The Condo.pl Hotel Group is a commercial initiative created by the following joint controllers:
a. Orkan Real Estate sp. z o.o. with its registered office in Warsaw at ul. Mińska 25, 03-808 Warsaw, registered in the Register of Entrepreneurs of the National Court Register maintained by the District Court for the capital city of Warsaw in Warsaw, 14th Commercial Division of the National Court Register under the KRS number 0000737396, Regon 380574867, Tax Identification Number (NIP) 1132977442, represented by the general partner Oak Real Estate sp. z o.o. with its registered office in Warsaw at ul. Mińska 25, 03-808 Warsaw, registered in the Register of Entrepreneurs of the National Court Register maintained by the District Court for the capital city of Warsaw in Warsaw, 14th Commercial Division of the National Court Register under the KRS number 0000740375, share capital: PLN 5,000.00, with the Regon number: 380749255, Tax Identification Number: 1132978967,
b. Oak Real Estate sp. z o.o. with its registered office in Warsaw at ul. Mińska 25, 03-808 Warsaw, registered in the Register of Entrepreneurs of the National Court Register maintained by the District Court for the capital city of Warsaw in Warsaw, 14th Commercial Division of the National Court Register under the KRS number 0000740375, share capital: PLN 5,000.00, with the Regon number: 380749255, Tax Identification Number: 1132978967,
c. Apartamenty Na Wydmach sp. z o.o. with its registered office in Warsaw at ul. Wioślarska 8, 00-411 Warsaw, registered in the Register of Entrepreneurs of the National Court Register maintained by the District Court for the capital city of Warsaw in Warsaw, XII Commercial Division of the National Court Register under KRS number 0000816696, share capital PLN 5,000.00, with Regon 384989453, Tax Identification Number 7010957938,
d. House Cloud sp. z o.o. with its registered office in Warsaw at ul. Wioślarska 8, 00-411 Warsaw, registered in the Register of Entrepreneurs of the National Court Register maintained by the District Court for the capital city of Warsaw in Warsaw, XII Commercial Division of the National Court Register under KRS number 0000544057, share capital PLN 5,000.00, with Regon 360823620, Tax Identification Number 7010468493,
e. HP Szklarska sp. z o.o. with its registered office in Warsaw at ul. Wioślarska 8, 00-411 Warsaw, registered in the Register of Entrepreneurs of the National Court Register maintained by the District Court for the capital city of Warsaw in Warsaw, XII Commercial Division of the National Court Register under KRS number 0000887951, share capital PLN 5,000.00, with Regon 388388199, Tax Identification Number 7011024048,
f. Piemonte sp. z o.o. with its registered office in Warsaw at ul. Wioślarska 8, 00-411 Warsaw, registered in the Register of Entrepreneurs of the National Court Register maintained by the District Court for the capital city of Warsaw in Warsaw, XII Commercial Division of the National Court Register under the KRS number 0000877696, share capital PLN 5,000.00, with Regon 387925689, Tax Identification Number 7011013205,
g. Tremonti sp. z o.o. with its registered office in Warsaw at ul. Wioślarska 8, 00-411 Warsaw, registered in the Register of Entrepreneurs of the National Court Register maintained by the District Court for the capital city of Warsaw in Warsaw, XII Commercial Division of the National Court Register under KRS number 0000751396, share capital PLN 5,000.00, with Regon number 381466387, Tax Identification Number 7010871131.
3. The purpose of the Condo.pl Hotel Group is to provide current commercial information on news, events and promotions of co-administrators within the Condo.pl brand. III. DATA PROTECTION INSPECTOR (DPO) 1. In order to supervise matters related to the protection of personal data and provide detailed information, we have appointed, as the administrator or co-administrator, a data protection inspector (DPO), who is Maciej Strycharz.2. You can contact the DPO by e-mail at iod@condo.pl or in writing to our registered office address.
IV. PERSONS TO WHOM THE DATA CONCERN
1. Reserver or buyer
a. As the administrator, we process personal data for the purpose of concluding and/or implementing a contract (Article 6, paragraph 1, letter b of the GDPR) concerning the provision of hotel and accommodation services, rental of rooms and the organization of events (business meetings, conferences, trainings, banquets, integrations, receptions and special events). This also includes related or additional catering, entertainment, care, sports, cosmetics, care, relaxation, parking and gift services. In addition, data are processed for the purposes of achieving the purposes resulting from legitimate interests (Article 6, paragraph 1, letter f of the GDPR), such as communication, answering questions, conducting sales analyses (analytical profiling: sales or marketing regarding booked or ordered services) and determining, defending and pursuing claims.
b. The categories of processed data may include: identification data, such as name and surname; contact and address details, such as e-mail address, telephone number and address.
c. Data will be stored for at least 5 years, counted from the end of the calendar year in which the tax payment deadline expired. After the end of our relationship, data will be archived for a standard period of 6 years, ending at the end of the last day of the calendar year, unless the law provides otherwise. In the event of an ongoing dispute or proceedings, the archiving period is counted from the date of the final termination of the last of them. If the law provides for a longer period of data storage or limitation of claims, we apply this longer period.
d. The person reserving has the right to access the data, rectify it, delete it, limit its processing and the right to object to the processing of data. They also have the right to lodge a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw). Detailed information on the rights is provided later in the Privacy Policy.
e. Personal data may be processed in the form of analytical, sales and marketing profiling.
2. Guests
a. As the administrator, we process personal data for the purpose of concluding and/or implementing a contract (Article 6, paragraph 1, letter b of the GDPR) regarding the provision of services: hotel, accommodation, room rental and organization of events (business meetings, conferences, training, banquets, integration, receptions and special events). This also includes related or additional catering, entertainment, care, sports, cosmetics, care, relaxation, parking and gift services. Additionally, data are processed for the purpose of implementing legally justified interests (Article 6, paragraph 1, letter f of the GDPR), such as: conducting sales analyses (analytical, sales and marketing profiling), determining, defending and pursuing claims and conducting video monitoring to ensure the safety of people and property in our facility. In addition, based on separate consent (Article 6, paragraph 1, letter a of the GDPR), we may send commercial information to the e-mail address provided. Consent may be withdrawn at any time, without affecting the lawfulness of processing that took place before its withdrawal.
b. The categories of data processed may include: identification data, such as name and surname, PESEL or ID number; contact and address data, such as e-mail address, telephone number and address of residence; and additional information in the case of persons conducting business activity.
c. The data will be stored for at least 5 years, counted from the end of the calendar year in which the tax payment deadline expired. After the end of our relationship, the data will be archived for a standard period of 6 years, ending at the end of the last day of the calendar year, unless the law provides otherwise. In the event of a pending dispute or proceedings, the archiving period is counted from the date of the final termination of the last of them. If the law provides for a longer period of data storage or limitation of claims, we apply this longer period.
d. Guests have the right to access, rectify, delete, limit processing of data and the right to object to data processing, as well as the right to file a complaint to the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw). Detailed information on the rights is provided in the further part of the Privacy Policy.
e. Personal data may be processed in the form of analytical, sales and marketing profiling.
3. Recipients of commercial information, including subscribers to the administrator's newsletters
a. As the administrator, we process personal data on the basis of voluntary consent (Article 6, paragraph 1, letter a of the GDPR). Consent may be expressed by checking the appropriate checkbox or by an implied action, such as providing an e-mail address in a form. We process data for the purpose of sending commercial information, in particular about news, events and promotions. Consent may be withdrawn at any time by clicking the appropriate link in the received message or by sending a notification to the e-mail addressiod@condo.pl. Withdrawal of consent does not affect the lawfulness of processing that took place before its withdrawal.
b. The categories of data processed may include identification data, such as name and surname, and contact details, such as e-mail address.
c. The data will be stored until the consent is withdrawn.
d. Recipients of commercial information, including newsletter subscribers, have the right to withdraw consent, access data, rectify it, limit processing, object to processing and the right to file a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw). Detailed information on the rights is provided in the further part of the Privacy Policy.
4. Recipients of commercial information, including subscribers to newsletters of the joint administrators forming the Condo.pl Hotel Group
a. As a joint administrator, we process personal data on the basis of voluntarily granted consent (Article 6, paragraph 1, letter a of the GDPR). Consent may be expressed by checking the appropriate checkbox or by implied action, such as providing an e-mail address in a form. We process data for the purpose of sending commercial information, in particular about news, events and promotions. Consent may be withdrawn at any time by clicking on the appropriate link in the message received or by sending a request to the e-mail address iod@condo.pl. Withdrawal of consent does not affect the lawfulness of processing that took place before its withdrawal.
b. The categories of data processed may include identification data, such as name and surname, and contact details, such as e-mail address.
c. The data will be stored until the consent is withdrawn.
d. Recipients of commercial information, including subscribers to newsletters of the co-administrators forming the Condo.pl Hotel Group, have the right to withdraw consent, access data, rectify it, limit processing, object to processing and the right to lodge a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw). Detailed information on the rights is provided in the further part of the Privacy Policy.
5. Suppliers of goods and services, contractors and partners
a. As the controller, we process personal data in order to perform the contract or take action before its conclusion (Article 6 paragraph 1 letter b of the GDPR) and in order to pursue legitimate interests (Article 6 paragraph 1 letter f of the GDPR).
b. The categories of processed data may include: identification data, such as name and surname, PESEL, NIP, REGON, KRS; contact and address data of a professional/business nature, such as e-mail address, telephone number, business or registered office address, position or function.
c. The data will be stored for a minimum period of 5 years from the end of the calendar year in which the tax payment deadline expired. After the expiry of our relationship, the data is stored for an archiving period of standard 6 years, ending on the last day of the calendar year, unless the law provides otherwise. In the event of a pending dispute or proceeding, the archiving period is counted from the date of the final termination of the last of them. If the law provides for a longer period of data storage or a limitation period for claims, we apply this longer period.
d. Providing personal data is a contractual requirement. Failure to provide data may prevent the conclusion or performance of the contract.
e. Suppliers, contractors or partners have the right to access the data, rectify it, delete it, limit its processing, object to processing and the right to lodge a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw). Detailed information on the rights you are entitled to can be found in the Privacy Policy.
V. RECIPIENTS OF PERSONAL DATA
1. The recipients of personal data may be independent administrators, joint administrators or entities processing in accordance with Article 28 of the GDPR, such as providers of reservation, communication, marketing and hosting services.
2. Each partner to whom we entrust the processing of personal data (processor) or to whom we provide data (separate administrator) will process it in accordance with the relevant legal provisions, agreements and for the purpose of implementing the agreement, understanding or cooperation. Such processing will take place in accordance with applicable law and our internal policies, procedures and standards.
3. Public authorities may also have access to personal data, in accordance with applicable law.
VI. TRANSFER OF DATA OUTSIDE THE EUROPEAN ECONOMIC AREA (EEA)
1. As a rule, we process personal data locally on the territory of Poland or the European Economic Area. This also applies to partners whose services we use or will use in the future. 2. In the event that it is necessary to transfer data outside the EEA, we will provide appropriate safeguards in accordance with Articles 44-49 of the GDPR.
VII. RIGHTS IN CONNECTION WITH THE PROCESSING OF PERSONAL DATA
1. The right to withdraw consent at any time (Article 7, paragraph 3 of the GDPR). If the data is processed on the basis of voluntary consent, you may at any time withdraw from further processing of the data on this basis. In such case, we will immediately cease processing the data for the purpose for which the consent was granted. However, we would like to point out that the withdrawal of consent does not affect the lawfulness of the processing of personal data that took place before its withdrawal.
2. The right to access personal data and obtain a copy thereof (Article 15 of the GDPR). You can obtain information from us regarding the processing of personal data and obtain a copy thereof. This copy will be made available in a popular file format. The first copy is available free of charge, but we may charge a fee for issuing another copy in accordance with the terms specified in the GDPR.
3. Right to rectification (Article 16 of the GDPR). We are obliged to ensure the accuracy of the data processed. You can request that your data be corrected or deleted if it is inaccurate, incomplete or collected unlawfully. The burden of proof for such inaccuracies lies with the data subject.
4. Right to erasure, including the "right to be forgotten" (Article 17 of the GDPR). Upon request, we are obliged to delete personal data in the following cases:
a. The purposes for which the data was collected have already been fulfilled.
b. The sole legal basis for the processing of personal data was consent, which was subsequently withdrawn, and there are no other legal grounds for further processing of this data.
c. The sole legal basis for the processing was the consent given by a person under the age of thirteen. d. An objection to the processing was lodged pursuant to Article 21 of the GDPR and we have no overriding legal grounds for further processing of the personal data. e. Personal data were processed unlawfully, i.e. for unlawful purposes or without any basis for processing.
5. "Right to be forgotten" as a special form of the right to delete data. If data has been published, for example on this website, and the right to delete it is available, we are obliged to delete all copies and links to this data. We must also take steps to ensure that other entities that have processed this data also delete it from their resources. However, it should be remembered that this right is not absolute - when exercising it, we must take into account the available technology and costs, which may affect the scope of its application.
6. Right to restrict processing (Article 18 of the GDPR). We are obliged to restrict the processing of personal data upon request. In such a case, we must refrain from any operations on the data, apart from storing it. If the data subject has doubts about its accuracy, we will restrict processing for a period enabling this matter to be verified. We will also restrict processing if the data subject objects to processing.
7. Right to data portability (Article 20 of the GDPR). The data subject has the right to receive personal data and to have it transferred to another, selected personal data controller. The right to data portability applies when we process personal data based on consent (Article 6, paragraph 1, letter a of the GDPR) or when it is necessary for the performance of the contract (Article 6, paragraph 1, letter b of the GDPR), and data operations are performed in an automated manner, i.e. without human intervention.
8. Right to object (Article 21 of the GDPR). The data subject may request that the processing of personal data ceases, in particular for reasons related to their specific situation. However, the objection does not apply if the processing is based on consent. In such a case, the consent must be withdrawn - the effect will be the same, but from a legal point of view, objection and withdrawal of consent are two different institutions, applied in different situations. An effective objection cannot be filed if: a. the processing of personal data is necessary for the performance of the contract (Article 6, paragraph 1, letter b of the GDPR); b. processing is necessary to fulfil a legal obligation to which we are subject (Article 6 paragraph 1 letter c of the GDPR); c. processing is necessary to protect the vital interests of the data subject or another natural person (Article 6 paragraph 1 letter d of the GDPR).
9. Right not to be subject to automated decisions in individual cases, including profiling (Article 22 of the GDPR). The data subject has the right not to be subject to decisions based solely on automated processing, including profiling, if such decisions have legal effects on them or significantly affect their situation in a similar manner. However, automated data processing, including profiling, is permissible if: a. it is necessary for the conclusion or performance of a contract; b. it is permitted by European Union law or the law of a Member State to which we are subject and which provides for appropriate measures to protect the rights, freedoms and legitimate interests; c. it is based on explicit (not implied) consent.
10. The right to lodge a complaint with a supervisory authority (Article 77 of the GDPR). If the data subject believes that our actions related to the processing of personal data violate their rights, they may lodge a complaint with a supervisory authority, i.e. an independent public authority responsible for monitoring the application of the GDPR. In Poland, this function is performed by the President of the Office for Personal Data Protection. Contact with the supervisory authority is possible: a. by correspondence: ul. Stawki 2, 00-193 Warsaw; b. electronically via the ePUAP electronic mailbox of the Office for Personal Data Protection: /UODO/SkrytkaESP; c. by telephone at the hotline number: 606 950 000.
11. The rights listed above may be limited in certain situations, for example when we can demonstrate that we are legally obliged to process the data. To exercise your rights, please send an appropriate request using our contact details provided in the Privacy Policy.
VIII. OBTAINING PERSONAL DATA
1. Personal data, as a rule, comes directly from the persons to whom it relates (section IV of the Privacy Policy). In some cases, it may be obtained from other sources, such as:
a. Booker – personal data of guests other than the booker may be obtained directly from the person making the reservation.
b. Third parties – personal data may be obtained from third parties, for example in the case of a recommendation of a supplier, contractor or partner by a person who knows them and recommends them for cooperation.
c. Other business partners – personal data may be transferred by business partners with whom we cooperate as part of the implementation of contracts, projects or other ventures or sales activities (e.g. Booksy.com, Booking.com operators).
2. In each case of obtaining data from other sources, we take steps to ensure that this data has been transferred in accordance with applicable law and that the person to whom the data relates has been appropriately informed about the processing of their personal data.
IX. TYPES AND PURPOSES OF USED COOKIES
1. The Administrator uses the following types of cookies for the purpose of:
a. Proper functioning of the website and its security. We call these cookies necessary because they enable browsing offers, making reservations, authentication and detecting abuse. We will use them without asking for the user's consent.
b. Collecting information about how the website is used and the user's activity, optimizing its content and functioning and adapting the website to the user's expectations. We call these cookies analytical. We will use them when you consent to this.
c. Displaying marketing content to the user tailored to their preferences and sending them notifications about marketing offers that correspond to their interests (personalization of advertisements and analysis of the effectiveness of marketing campaigns), including information about the user's activity, products and services of the administrator and third parties. We call these cookies marketing. We will use them when you consent to this.
2. The user has the option of limiting or disabling access to cookies on their device.
X. COOKIE SETTINGS
1. The User may choose which of the cookies proposed during the first visit to the website he/she agrees to, excluding the files referred to in point IX 1 letter a of the Privacy Policy.
2. The User may change the cookie settings at any time using the web browser settings, excluding the files referred to in point IX 1 letter a of the Privacy Policy.
3. The User may delete the cookies at any time, excluding the files referred to in point IX 1 letter a of the Privacy Policy, using the functions available in the web browser.
XI. CHANGES TO THE POLICY
1. We reserve the right to update the Privacy Policy in the following cases:
a. The need to adapt to applicable legal regulations.
b. Changes in the interpretation of legal regulations.
c. The need to adapt to court rulings, decisions, recommendations or recommendations of the relevant offices or bodies.
d. The need to remove errors or typographical errors.
e. Changes to identification or contact data.
f. Changes to the services provided or channels for obtaining personal data.
2. Any changes will be made available on our websites and will take effect immediately upon publication.
Last updated: September 2, 2024
