Personal Data Administrator

Acting in accordance with Article 13 (1) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons (Journal of Laws UE.L.2016.119.1), we would like to inform you that:
the administrator of your personal data is WARMIŃSKO-MAZURSKIE SERVICE CENTER MARCIN WOJDAK. with headquarters in Barczewo at ul. Os. Zielone Wzgórze 3/42 11-010 Barczewo VAT ID 845-185-87-75, hereinafter referred to as the "Lessor" "

Purpose and basis of personal data processing
Your data is processed for various purposes, but always in accordance with the Regulation of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46 / EC (General Data Protection Regulation), shortly referred to as GDPR.
We obtain personal data from you in the process of concluding a contract or from our partners from booking portals, if you have given such consent, in accordance with art. 6 sec. 1 lit. b GDPR
a / to evaluate the service, book the service and perform the service, in the case of concluding other contracts related to the business profile
b / to consider the complaint
we can process personal data such as:
name and surname (also of the child); address (street, house / flat number, zip code and city); Phone number; e-mail adress; the child's date of birth; company data, including VAT ID number (in the case of issuing a VAT invoice for the company); registration number of the vehicle belonging to the customer (in the case of using the car park belonging to the rented property); bank account details to confirm the transfer; ID document number / PESEL number; payment card number and other card details; booking number, room access management
WARNING ! data of children are collected in order to determine their discounts, and for statistical purposes (obligation of the Central Statistical Office and local tax)
We obtain personal data from you on the basis of a voluntarily given consent. in accordance with Art. 6 sec. 1 lit. a GDPR
a / managing access to rooms
b / to use cookies (the first time you enter the website, you are asked for consent to their use)

We obtain personal data from you in order to fulfill other obligations arising from tax law, such as, for example, keeping accounting records for 5 years or creating registers and records related to the GDPR, including, for example, a register of customers who have objected to data processing personal data for marketing purposes. According to Art. 6 sec. 1 lit. c GDPR which allows the processing of personal data, if such processing is necessary for the Personal Data Administrator to fulfill the obligations arising from the law.

We also collect personal data (including comments and suggestions from guests) from you in order to improve and modify the services offered by our company, audits, ensure the safety of employees and guests, to establish, investigate or defend against claims, administer the website in accordance with art. 6 sec. 1 lit. f GDPR, if in this way the Personal Data Administrator implements his legitimate interest (in this case, the interest of the Property Owners is to know the opinions of customers on the services provided, to adapt them to the needs and expectations of interested parties and to prevent fraud).

If the processing of personal data is based on consent, you may withdraw this consent at any time.
If you would like to withdraw your consent to the processing of personal data, then you should follow point 6. If the processing of your personal data was based on consent, its withdrawal does not mean that the processing of personal data until then was illegal, i.e. until the consent is withdrawn, we have the right to process your personal data and its revocation does not affect the lawfulness of the current processing.

Recipients of personal data

Like most entrepreneurs, we use the help of other entities in our activities, which sometimes requires the transfer of personal data. In connection with the above, if necessary, we transfer your personal data to companies cooperating with us that support quick payments, an insurance company (if it is necessary to repair the damage).

We also use various popular services and technologies offered by entities such as Facebook, Microsoft, Google. These companies are based outside the European Union, and therefore in the light of the provisions of the GDPR, they are treated as third countries.
The period of personal data processing

We kindly inform you that we process personal data for the period of:
duration of the contract - in relation to personal data processed for the conclusion and performance of the contract;
3 years or 10 years + 1 year - in relation to personal data processed for the purpose of establishing, investigating or defending claims (the length of the period depends on whether both parties are entrepreneurs or not);
6 months - in relation to personal data that were collected in the valuation of the service, and at the same time the contract was not concluded immediately;
5 years - in relation to personal data related to the fulfillment of obligations under tax law;
until the consent is withdrawn or the purpose of processing is achieved, but no longer than for 5 years - in relation to personal data processed on the basis of consent;
until the objection is effectively raised or the purpose of processing is achieved, but not longer than for 5 years - in relation to personal data processed on the basis of the legitimate interest of the Personal Data Administrator or for marketing purposes;
until they become obsolete or lose their usefulness, but not longer than for 3 years - in relation to personal data processed mainly for analytical purposes, the use of cookies and website administration.

WARNING! if you exercise your right to be forgotten, such situations are considered individually.

Vested rights:

We kindly inform you that you have the right to:

access to your personal data;
rectification of personal data;
deletion of personal data;
restrictions on the processing of personal data;
object to the processing of personal data;
to be forgotten in case other legal provisions allow it;
receiving a copy of the data
transferring personal data.

WARNING! in some situations, we may legally refuse you to fulfill your rights, only after careful analysis and only in a situation where the refusal to accept the request is necessary.
You can exercise your rights
by sending a letter to the following address:
Warmia and Mazury Service Center Marcin Wojdak, Os. Zielone Wzgórze 3/42 11-010 Barczewo
by sending an e-mail: drabdomek.wegorzewo@gmail.com

Right to lodge a complaint

If you believe that your personal data is being processed contrary to the applicable law, you may lodge a complaint with the President of the Personal Data Protection Office.

Final Provisions

In matters not covered by this Privacy Policy, the provisions on the protection of personal data shall apply.
Warmia and Mazury Service Center Marcin Wojdak. reserves the right to amend this Privacy Policy, with the proviso that the version applicable at the time of booking the service shall apply to services performed prior to the amendment of the Privacy Policy.
Information about the change in the Privacy Policy will be published on the website https://szarydomek-wegorzewo.wixsite.com/home 14 calendar days before the changes come into force.
This Privacy Policy applies from July 18, 2020.