Privacy Policy This document explains how and under what rules we process your personal data when you contact us or use one of our services. You will learn, among other things:
with its registered office in Zakopane, ul. Balzera 21D, 34-500 Zakopane, Poland, entered into the Register of Entrepreneurs of the National Court Register maintained by the District Court for Kraków-Śródmieście, 12th Commercial Division of the National Court Register under number 0000398651, VAT No. (NIP): 7361714598. In order to ensure the security of your personal data, we have appointed a Data Protection Officer, Ms. Katarzyna Rodacka. For all matters relating to the processing of your personal data, you may contact us at: iodo@nosalowy.pl Where do we obtain your personal data from? The personal data collected through our website comes directly from you. This happens when you:
Google Analitics We use tools provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, namely Google Analytics, which enable us to collect statistical information regarding the use of our website, such as IP address, device type, and browser type. We do this to understand, among other things, the number of users visiting our website. This information is processed only in a manner that does not directly identify individuals. However, Google may process your data on servers located in the United States. In such cases, Google processes data outside the European Economic Area on the basis of standard contractual clauses ensuring an adequate level of protection. For more details regarding Google Analytics data processing, please refer to Google's explanations. Google Here.
Facebook Pixel We use marketing tools available within Facebook and provided by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. Through these tools we direct advertisements to you on Facebook. To display personalized advertisements based on your behavior on our website, we have implemented the Facebook Pixel, which automatically collects information about your use of our website, including viewed pages. The information collected through Facebook Pixel is anonymous from our perspective and does not allow us to identify you directly. However, Facebook may combine this information with other data collected about you and use it for its own purposes, including marketing purposes. Such actions are independent of us. You can find more information in Facebook’s Privacy Policy:
https://www.facebook.com/privacy/explanation You may also manage your privacy settings directly through your Facebook account.
- why we may process your data;
- for what purposes we process it;
- whether you are required to provide your data;
- how long we store your data;
- whether there are other recipients of your personal data;
- whether we process your data outside the European Economic Area; and
- whether we process your data in an automated manner, including profiling.
Part I – General Information
Contact details of the controller of your personal data
with its registered office in Zakopane, ul. Balzera 21D, 34-500 Zakopane, Poland, entered into the Register of Entrepreneurs of the National Court Register maintained by the District Court for Kraków-Śródmieście, 12th Commercial Division of the National Court Register under number 0000398651, VAT No. (NIP): 7361714598. In order to ensure the security of your personal data, we have appointed a Data Protection Officer, Ms. Katarzyna Rodacka. For all matters relating to the processing of your personal data, you may contact us at: iodo@nosalowy.pl Where do we obtain your personal data from? The personal data collected through our website comes directly from you. This happens when you:
- browse our website;
- subscribe to our free newsletter;
- send us questions or requests for offers;
- decide to participate in a recruitment process;
- purchase services through our website or make reservations;
- visit our social media accounts on Instagram, Facebook, TripAdvisor, YouTube, and LinkedIn, and contact us through these platforms.
Right of access
You have the right to obtain information regarding the personal data we store about you. By submitting a request for access to your data, you will receive information about the processing of your personal data, including in particular the purposes and legal bases of processing, the scope of data held, entities to whom the data is disclosed, and the planned retention period. Right to rectification You have the right to request immediate correction and/or completion of personal data stored about you. We are obliged to ensure that our communication is based on accurate, complete, and up-to-date data.Right to restriction of processing
You have the right to request restriction of the processing of your personal data if you contest the accuracy of the data, if the processing is unlawful, or if you have objected to the processing.Right to erasure
You have the right to request the deletion of your personal data stored by us, unless retaining the data is necessary for freedom of expression and information, compliance with legal obligations, public interest purposes, establishment or defense of legal claims, or enforcement of rights under the law.Right to information
If you exercise your right to rectification, deletion, or restriction of processing, we will notify all recipients of your personal data about the rectification, deletion, or restriction unless this proves impossible or requires disproportionate effort.Right to data portability
You have the right to receive a copy of the data you provided to us in a structured, commonly used, machine-readable format, and to have it transmitted to another controller where technically feasible. This right applies only when processing is based on your consent or on a contract. Right to object If your personal data is processed based on our legitimate interest, you have the right to object at any time to further processing. We will assess your request in accordance with applicable law.Right to withdraw consent
If your data is processed on the basis of consent, you have the right to withdraw that consent at any time with future effect. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.Right to lodge a complaint with a supervisory authority
If the processing of your personal data violates data protection regulations or your data protection rights have otherwise been infringed, you may lodge a complaint with the supervisory authority. In Poland, the competent authority is the President of the Personal Data Protection Office in Warsaw (ul. Stawki 2). Before lodging a complaint, we encourage you to contact us first so that we may address any concerns.Response to requests
If you submit a request regarding your rights, we will respond within one month of receipt. If an extension is necessary, we will inform you of the reasons for the delay. Responses will be sent to the e-mail address from which the request was submitted or, in the case of written requests, by regular mail to the address provided by you unless you specify otherwise. Links to other websites Where we provide links to websites operated by third parties, this Privacy Policy does not apply and does not describe how those entities process your personal data. We encourage you to review their respective privacy policies.Visiting our website
Cookies
| Name | Purpose | Category | Expiration | Provider |
|---|---|---|---|---|
| PHPSESSID | Stores the user's session ID on the website | Necessary | Session | restauracjamarilor.pl |
| _bm | Detects and mitigates bot traffic on the Profitroom font CDN (fraud prevention / security) | Necessary | Session | Profitroom CDN (Akamai) |
| _BEAcceptedCookies_restauracjamarilornosalowypark | Stores information about the cookie categories accepted by the user | Necessary | 1 year | Website CMP |
| _cm_consent_restauracjamarilornosalowypark | Stores the user's encoded consent decisions (Consent Manager) | Necessary | 1 year | Website CMP |
| euconsent-v2_restauracjamarilornosalowypark | Stores the user's IAB TCF v2 consent string for advertising partners | Necessary | 1 year | IAB Europe TCF |
| test_cookie | Checks whether the web browser accepts cookies | Necessary | 15 minutes | Google (DoubleClick) |
| _ga | Stores and counts page views and distinguishes unique users | Analytics | 2 years | Google Analytics |
| ga* | Persists GA4 session information for a specific property | Analytics | 2 years | Google Analytics (GA4) |
| _fbp | Stores and tracks user visits for Facebook advertising purposes | Marketing | 3 months | |
| _gcl_au | Stores information required to track Google Ads conversions (Conversion Linker) | Marketing | 3 months | Google Ads |
Facebook Pixel We use marketing tools available within Facebook and provided by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. Through these tools we direct advertisements to you on Facebook. To display personalized advertisements based on your behavior on our website, we have implemented the Facebook Pixel, which automatically collects information about your use of our website, including viewed pages. The information collected through Facebook Pixel is anonymous from our perspective and does not allow us to identify you directly. However, Facebook may combine this information with other data collected about you and use it for its own purposes, including marketing purposes. Such actions are independent of us. You can find more information in Facebook’s Privacy Policy:
https://www.facebook.com/privacy/explanation You may also manage your privacy settings directly through your Facebook account.
Changes to the Privacy Policy
The Privacy Policy is periodically reviewed and updated whenever necessary.June 2023
We published this version of the Privacy Policy.Part II – Processing of data when using Nosalowy Dwór websites
Below we present the rules for processing personal data (including IP addresses or other identifiers and information collected through cookies or similar technologies) applicable when using our websites: nosalowy-dwor.eu, nosalowypark.pl, and apartamentyparkresidence.nosalowy.pl.For what purpose do we process your data?
We process your personal data in order to provide electronic services consisting of making the content available on our websites, as well as for analytical and advertising purposes.Legal basis for processing
- To provide website content – processing is necessary for the performance of a contract (Article 6(1)(b) GDPR);
- For analytical and marketing purposes – processing is based on your consent (Article 6(1)(a) GDPR).
Retention period
We process your personal data for as long as necessary to achieve the purposes described in this Privacy Policy, including fulfilling contractual and statutory obligations, unless you withdraw your consent earlier.Recipients of personal data
Recipients of your personal data may include our trusted subcontractors and IT service providers, including providers of analytical and marketing tools mentioned in Part I of this Privacy Policy.Nature of providing data
Your personal data, including IP addresses and other identifiers, is collected automatically through cookies and similar technologies when you connect to our website.Part III – Processing of data within the free newsletter service
Purpose of processing
Legal basis
Processing is based on your consent pursuant to Article 6(1)(a) GDPR.Retention period
We process your data until you withdraw your consent. Upon withdrawal, the relevant data will be deleted immediately.Data recipients
Recipients may include our IT service providers and Profitroom S.A., headquartered in Poznań, which provides the newsletter distribution system.What data do we need?
We require your e-mail address. Newsletter subscription also requires confirmation via an activation link sent to your e-mail address.Profiling
Using Profitroom functionalities, we may send commercial information tailored to groups distinguished based on general characteristics provided during booking, such as gender or having children. We do not make decisions based solely on automated processing that significantly affect individuals.Part IV – Processing of data through communication channels
Purpose of processing
Legal basis
Processing may be based on:- your consent expressed by sending an inquiry;
- actions necessary prior to entering into a contract.
Retention period
We process your data until withdrawal of consent or for the duration required by applicable legal obligations and limitation periods.Recipients
Recipients may include trusted IT providers, including Profitroom S.A., as well as banks, payment operators, accounting, legal, audit, and consulting service providers.Part V. Processing of Data for Recruitment Purposes
The following information applies to individuals whom we contact using the data submitted to us via e-mail for recruitment purposes aimed at establishing cooperation. We collect information, including your personal data, in order to communicate with you and conduct the recruitment process.For what purpose do we process your data?
We process your contact data in order to consider your application in our recruitment process.On what legal basis do we process your data?
The legal basis for processing your personal data is:- the legal obligation to provide data necessary for conducting the recruitment process;
- your consent regarding data other than mandatory data;
- your consent for future recruitment processes.
How long do we process your data?
Basic contact data obtained directly from you is processed only for the period necessary to conduct the recruitment process and for 3 months after the end of that process. If you consent to participate in future recruitment processes, your data will be processed for no longer than 12 months.Who are the recipients of your personal data?
Recipients of your personal data, i.e. external entities participating in the processing of your data, are our subcontractors and IT service providers.Nature of providing data
Providing data is voluntary. However, please note that if you do not provide your data, we will not be able to contact you for the purpose of conducting the recruitment process aimed at establishing cooperation.What rights do you have?
Your rights are described in Part I of this Information on Data Processing.Part VI. Processing of Data in Connection with Ordering Services and Making Reservations
Below we present the rules for processing personal data that apply when you purchase services offered by us or make reservations through our website.For what purpose do we process your data?
We process your personal data in order to accept and handle your order and to confirm your reservation.On what legal basis do we process your data?
The legal basis for processing your personal data is:- for the purpose of fulfilling your order – processing is necessary for the performance of a contract (Article 6(1)(b) GDPR);
- for the purpose of fulfilling legal obligations imposed on us as the controller, particularly under tax and accounting regulations – processing is necessary for compliance with a legal obligation (Article 6(1)(c) GDPR);
- for handling complaints – processing is based on our legitimate legal interest (Article 6(1)(f) GDPR);
- for the establishment, exercise, or defense of legal claims – processing is based on our legitimate interest (Article 6(1)(f) GDPR) consisting in the protection of our rights.
How long do we process your data?
We will process your personal data until you withdraw your consent, and with regard to activities related to the conclusion and performance of a contract, for the duration of the contract, the limitation period for claims, and the retention periods required by accounting and tax regulations.Who are the recipients of your personal data?
Recipients of your personal data, i.e. external entities that may participate in the processing of your data, include our trusted subcontractors – IT service providers – as well as other entities supporting our business operations, including in particular banks and payment operators, accounting, legal, audit, and consulting service providers. For the purpose of handling your orders and reservations, we use the Profitroom system provided by Profitroom S.A., with its registered office in Poznań, ul. Franklina Roosevelta 9 (60-829), entered into the Register of Entrepreneurs of the National Court Register maintained by the District Court Poznań – Nowe Miasto i Wilda in Poznań, 8th Commercial Division of the National Court Register under KRS number 0000793213.Nature of providing data
Providing your data is voluntary; however, data marked as mandatory is required in order to accept and process your order and complete the reservation process. Failure to provide such data will make it impossible to conclude the contract. Providing other data is optional.Other important information
Your data will not be processed outside the European Economic Area.What rights do you have?
Your rights are described in Part I of this Privacy Policy.Part VII. Processing of Data for Marketing Activities
Below we present the rules for processing personal data applicable when you use and communicate with us through our social media profiles on Facebook, Instagram, TripAdvisor, YouTube, and LinkedIn (hereinafter referred to as “fan pages”). On our fan pages, we regularly publish and share content, offers, and recommendations concerning our services.For what purpose is your data processed?
We process your personal data solely in connection with operating our social media profiles, including informing you about our activities, promoting various events, services, and offers, and communicating with you via functionalities available on social media platforms. Please note that administrators of social media platforms record your activity using cookies and similar technologies each time you interact with our fan pages and other websites of Facebook, Instagram, TripAdvisor, YouTube, and LinkedIn. Fan page administrators have access to general statistics concerning your interests and demographic data (such as age, gender, and region). When using social media platforms, the scope and purposes of data processing are determined by the administrators of those platforms.On what legal basis do we process your data?
The legal basis for processing your personal data is:- our legitimate interest (Article 6(1)(f) GDPR) consisting in promoting our brand and building and maintaining a community associated with the brand;
- your consent for creating page statistics data on Facebook (Article 6(1)(a) GDPR).
How long do we process your data?
We process your personal data for as long as necessary to achieve the purposes described in this Privacy Policy, in particular to fulfill our contractual and legal obligations, unless you withdraw your consent earlier. Facebook, TripAdvisor, YouTube, and LinkedIn process your data independently for their own purposes, which are not covered by this Privacy Policy. We have no influence over the processing activities carried out by these services. For more information, please refer to the privacy policies of the respective social media platforms:- Facebook Data Policy: https://www.facebook.com/about/privacy/
- Instagram Privacy Policy: https://help.instagram.com/519522125107875
- TripAdvisor Privacy Policy: https://tripadvisor.mediaroom.com/us-privacy-policy
- YouTube Privacy Policy: https://policies.google.com/privacy?hl=en
- LinkedIn Privacy Policy: https://www.linkedin.com/legal/privacy-policy
Who are the recipients of your personal data?
Recipients of your personal data, i.e. external entities participating in the processing of your data, include our trusted subcontractors – IT service providers in the field of data hosting and corporate e-mail services – as well as:- Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland, administering Facebook and Instagram;
- Tripadvisor LLC, 400 1st Avenue, Needham, MA 02494, USA, administering TripAdvisor;
- Google Ireland, Gordon House, Barrow Street, Dublin 4, Ireland, administering YouTube;
- LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland, administering LinkedIn.
Nature of providing data
Your personal data – including your IP address, other identifiers, and other information – is collected through cookies and similar technologies when you connect to our fan pages. When using our fan pages, the scope and purposes of processing data within social media services are determined by the administrators of those platforms. For more information, please refer to the privacy policies of the respective social media platforms:- Facebook Data Policy: https://www.facebook.com/about/privacy/
- Instagram Privacy Policy: https://help.instagram.com/519522125107875
- TripAdvisor Privacy Policy: https://tripadvisor.mediaroom.com/us-privacy-policy
- YouTube Privacy Policy: https://policies.google.com/privacy?hl=en
- LinkedIn Privacy Policy: https://www.linkedin.com/legal/privacy-policy
Other important information
Your data may be processed outside the European Economic Area on the basis of standard contractual clauses ensuring an adequate level of protection for your personal data.What rights do you have?
Your rights are described in Part I of this Privacy Policy. In order to ensure the highest quality of our services, we have appointed a Data Protection Officer, who can be contacted by sending an e-mail to: iodo@nosalowy.pl List of data processors- We use the following analytical tools: Google Analytics - to find out how Google will use your personal data, please visit: https://policies.google.com/technologies/partner-sites
- We use the following marketing tools: Facebook Google Ads - to find out how Google will use your personal data, please visit: https://policies.google.com/technologies/partner-sites