Privacy Policy

This Privacy Policy sets out the rules for processing the personal data
of users of the Dolina Białki Guest House website, in particular data
provided during telephone contact, by email and through the contact form.

1. Personal Data Controller

The Controller of personal data is:

Wynajem Pokoi i Żywienie „Dolina Białki” – Halina Korkosz
13B Kaniówka Street
34-405 Białka Tatrzańska

The Controller can be contacted:

  • by phone: +48 696 609 417,
  • by phone: +48 600 746 779,
  • by email: kontakt@dolinabialki.net.

For matters related to the processing of personal data, you may contact
the Controller using the contact details provided above.

2. Scope of Data Processed

Depending on how the website is used and the selected form of contact,
the Controller may process, in particular, the following data:

  • full name,
  • email address,
  • telephone number,
  • subject and content of the message,
  • information concerning the planned stay voluntarily provided by the user,
  • technical data related to the use of the website, such as the IP address,
    device type, browser type, operating system and information contained
    in server logs.

The scope of the data depends on the information voluntarily provided
by the user. Please do not submit data that is not necessary to handle
an inquiry or booking.

3. Purposes and Legal Grounds for Data Processing

Personal data may be processed for the following purposes:

Handling Inquiries and Contacting the User

Data submitted through the contact form, by email or provided during
a telephone conversation is processed in order to provide a response,
present information concerning room availability, meals, conditions
of stay and other elements of the offer.

The legal basis for processing is Article 6(1)(f) of the GDPR, meaning
the legitimate interest of the Controller in maintaining communication
and handling inquiries.

Taking Steps Before Entering into a Contract and Providing the Stay

If the contact concerns a booking, the data may be processed in order
to take steps before entering into a contract and to carry out the
arrangements connected with the stay.

The legal basis for processing is Article 6(1)(b) of the GDPR.

Compliance with Legal Obligations

Data may be processed to the extent required by law, in particular
tax, accounting or other regulations connected with conducting business.

The legal basis for processing is Article 6(1)(c) of the GDPR.

Establishing, Pursuing or Defending Legal Claims

In justified cases, data may be stored and processed in order to establish,
pursue or defend against claims connected with contact, booking or the
provision of the stay.

The legal basis for processing is Article 6(1)(f) of the GDPR.

Processing Based on Consent

Where, in a particular case, data processing is based on the user’s consent,
the legal basis is Article 6(1)(a) of the GDPR. The user may withdraw consent
at any time without affecting the lawfulness of processing carried out
before its withdrawal.

4. Contact Form

The website allows users to submit an inquiry using the contact form.
Data provided in the form is used solely for handling the message,
contacting the user and, where the inquiry concerns it, arranging
the details of a stay or booking.

Providing data is voluntary. However, failure to provide the information
necessary for contact, such as an email address or telephone number,
may make it impossible to provide a response or continue handling
the inquiry.

Users should provide only the data required to handle a specific inquiry.

5. Telephone and Email Contact

In the event of contact by telephone or email, the Controller processes
the data provided by the person making contact to the extent necessary
to provide a response, present the offer, check availability and make
arrangements concerning the stay.

Correspondence data may be stored for the period required to conclude
the matter and subsequently for the period necessary to secure possible
claims or comply with obligations arising from applicable law.

6. Data Retention Period

Personal data is stored no longer than necessary to fulfil the purpose
for which it was collected.

In particular:

  • data connected with an inquiry may be stored for the period required
    to handle the matter and then until the expiry of the period during
    which related claims may arise;
  • data connected with a booking and the provision of a stay is processed
    for the period required to fulfil the arrangements and subsequently
    for the period resulting from applicable law or the limitation period
    for claims;
  • data processed on the basis of consent is processed until consent is
    withdrawn, unless another legal basis exists for further processing;
  • technical data and server logs are stored for the period necessary
    to ensure the security and proper operation of the website.

7. Recipients of Personal Data

Personal data may be transferred to entities supporting the Controller
in operating the website and conducting business activities, solely
to the extent necessary to perform specific tasks.

These may include, in particular:

  • hosting and server infrastructure providers,
  • email service providers,
  • entities providing IT and technical services,
  • providers of tools used to operate the contact form,
  • entities providing accounting, legal or administrative services,
    where necessary,
  • public authorities authorised to receive data under applicable law.

Entities processing data on behalf of the Controller may process it only
within the scope of the tasks entrusted to them and in accordance with
applicable personal data protection regulations.

8. Cookies

The website may use cookies and similar technologies. These are small
pieces of information stored on the user’s device or read from the device
while the website is being used.

Cookies may be used, among other purposes, to:

  • ensure the proper operation of the website,
  • ensure website security,
  • remember user settings,
  • support functions available on the website,
  • compile visitor statistics where appropriate analytical tools are active,
  • support external content where such elements are embedded on the website.

Cookies necessary for the proper functioning of the website may be used
to the extent permitted by law. Cookies or similar technologies requiring
consent are activated in accordance with the choice made by the user
through the consent management mechanism.

Users may change cookie settings using the tool available on the website,
where implemented, and through their browser settings. Restricting certain
cookies may affect the operation of selected website functions.

9. Server Logs

Using the website may involve recording technical information in server
logs. This information may include, among other things, the IP address,
date and time of connection, browser information, operating system
and the address of the requested resource.

Information contained in server logs may be used to administer the website,
detect errors, ensure security and create aggregate technical statistics.

10. External Services and Content

The website may contain links to external services and elements supplied
by third parties, such as maps, multimedia content or links to social media.

The use of such services may involve data processing under the rules
established by the provider of the relevant service. Users should review
the privacy policy of the appropriate provider.

Where the use of a service requires prior consent to additional cookies
or similar technologies, the service should be activated in accordance
with the user’s choice.

11. User Rights

The data subject has the following rights, to the extent provided for
by applicable law:

  • the right to access their personal data,
  • the right to request correction of inaccurate data,
  • the right to request deletion of data,
  • the right to request restriction of processing,
  • the right to data portability where such a right is provided by law,
  • the right to object to processing based on the legitimate interests
    of the Controller,
  • the right to withdraw consent at any time where processing is based
    on consent.

To exercise these rights, users may contact the Controller using the
contact details provided in this Privacy Policy.

12. Right to Lodge a Complaint

A person who believes that their personal data is being processed
in breach of applicable law has the right to lodge a complaint with
the President of the Personal Data Protection Office in Poland.

13. Voluntary Provision of Data

Providing personal data through the contact form, by email or during
a telephone conversation is voluntary.

Failure to provide data necessary for contact or preparation of a response
may make it impossible to handle the inquiry, provide information concerning
availability or make arrangements connected with the stay.

14. Data Security

The Controller applies appropriate organisational and technical measures
to protect personal data against unauthorised access, loss, alteration,
destruction or unauthorised disclosure.

Access to the data should be granted only to persons and entities for whom
it is necessary to perform the tasks entrusted to them.

15. Changes to the Privacy Policy

This Privacy Policy may be updated in the event of changes to the operation
of the website, methods of data processing, tools used or applicable law.

The current version of this document is published on the Dolina Białki
Guest House website.