This information document sets out the rules for the processing of personal data in connection with the use of the website, the conclusion and performance of short-term property rental agreements, and the use of booking platforms.
- Personal data controller
The personal data controller is Prime Auditors & Accountants Krzysztof Wasilewski with its registered office in Warsaw, 00-193, ul. Stawki 4A lok. 7, NIP 6571133482, email: recepcja@pustelniaszymonka.pl, tel. +48 508 047 511.The controller has not appointed a Data Protection Officer, as there is no such obligation under Article 37 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as ‘GDPR’). In matters related to the protection of personal data, you can contact the Administrator at the e-mail address provided.
- Purposes, scope and legal basis for data processing
Personal data may be processed for the following purposes:
1) Handling enquiries sent via the contact form on the website. Scope of data: name and surname, email address, telephone number, message content. Legal basis: Article 6(1)(b) of the GDPR – in order to take action prior to entering into a contract at the request of the data subject.
2) Conclusion and performance of a short-term property rental contract. Scope of data: identification and registration details of guests (e.g. name and surname, address of residence or registered address, contact details). Legal basis: Article 6(1)(b) of the GDPR – processing necessary for taking steps prior to entering into a contract or for the performance of a contract.
3) Handling of bookings made through booking platforms. Scope of data: data provided by the Booking.com booking platform, in particular name and surname, contact details, booking information and other data necessary for the stay. Legal basis: Article 6(1)(b) of the GDPR – processing necessary for the performance of a rental agreement concluded via a booking platform.
4) Video surveillance of the property. Scope of data: images of persons staying on the premises. Legal basis: Article 6(1)(f) of the GDPR – the legitimate interest of the Controller in protecting property and ensuring the safety of persons staying on the premises.
- Data retention period
Personal data will be stored for the following periods:- data from the contact form – for the period necessary to respond and conduct correspondence, no longer than 12 months;
- data processed in connection with the performance of a rental agreement (including data provided by booking platforms) – for the duration of the agreement and for the period required by law or until any claims become time-barred;
- CCTV recordings – for a maximum period of 7 days, unless the recording constitutes evidence in proceedings conducted under the law.
- Data recipients
The recipients of the data may be:- entities providing hosting and IT services to the Controller;
- analytical service providers, in particular Google Ireland Limited (Google Analytics);
- booking platforms mediating in the conclusion of rental agreements, in particular Booking.com B.V. based in Amsterdam (Booking.com booking platform);
- entities authorised to receive data on the basis of legal provisions.
- Transfer of data outside the EEA
As a rule, personal data is processed within the European Economic Area (EEA). When using the services of technology providers, it is possible that data may be transferred outside the EEA. In such cases, the transfer is based on appropriate legal safeguards in accordance with the GDPR, in particular standard contractual clauses approved by the European Commission or a decision confirming an adequate level of protection.
- Automated decision-making
Personal data will not be used for automated decision-making, including profiling.
- Rights of data subjects
In accordance with the GDPR, you have the following rights:- the right to access your data and receive a copy thereof;
- the right to rectify (correct) your data;
- the right to erase data, restrict data processing;
- the right to object to data processing;
- the right to transfer your data;
- the right to lodge a complaint with a supervisory authority.
Supervisory authority: President of the Personal Data Protection Office (PUODO) ul. Stawki 2, 00-193 Warsaw https://uodo.gov.pl.
- Information on the requirement to provide data
Providing personal data is voluntary, but in some cases it may be necessary to take action prior to concluding a contract or to perform a short-term property lease agreement. Failure to provide data may make it impossible to respond to an enquiry or conclude a lease agreement.
