Privacy policy (GDPR)
Pursuant to Article 13(1) and (2) of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation; hereinafter: GDPR), we inform you that:
- he data controller of your personal data is Małgorzata Kurkowska, ul. Polna 33, 32-310 Kwaśniów Górny, REGON: 356864851, NIP: 6371771634.
- For matters related to your personal data, please contact us by e-mail at: kontakt@jurajskiejurty.pl.
- Your personal data are processed for the purposes of:
- concluding and performing a contract or taking steps prior to entering into a contract, including providing information regarding accommodation services at the Jurajskie Jurty Tourist Centre, Stawowa St., Golczowice,
- purposes resulting from the legitimate interests pursued by the Controller, in particular for the establishment and pursuit of claims or defence against claims, as well as for archival and security purposes, for handling any complaints or claims, and to comply with the accountability principle referred to in Article 5(2) GDPR.
- Recipients of your personal data will be authorised employees of the Jurajskie Jurty Tourist Centre, Stawowa St., Golczowice, as well as other entities and persons authorised by the Controller and acting on its instructions.
- Your personal data will be processed until the correspondence related to the reservation and the organisation of accommodation is concluded, and in the case of a reservation being made and accepted — for the period necessary for proper performance of the contract, and after its termination until the expiry of the limitation period for any claims that may be brought against the Controller or that the Controller may bring. In any case, personal data will not be processed for longer than 6 years from the termination of the contract. Personal data processed on the basis of consent (e.g., e-mail address for the newsletter service) will be processed until consent is withdrawn, and after its withdrawal until the expiry of the limitation period for any claims that may be brought against the Controller or that the Controller may bring.
- In connection with the processing of personal data, you have the following rights:
- the right of access to personal data and to receive a copy — you may obtain from the Controller confirmation as to whether personal data concerning you are being processed, as well as information about the purposes of processing, the categories of personal data processed, the recipients or categories of recipients, the planned period of storage of personal data or the criteria for determining that period, and the rights available under the GDPR, including the right to lodge a complaint with a supervisory authority. You are also entitled to request a copy of the personal data processed by the Controller,
- the right to rectification (correction) — you have the right to have inaccurate or incomplete personal data rectified,
- the right to request erasure — you have the right to request that the Controller erase personal data where one of the following applies:
- the personal data are no longer necessary for the purposes for which they were collected or otherwise processed,
- you withdraw your consent and there is no other legal basis for the processing,
- you object to the processing of personal data; the objection must be considered well-founded in light of the GDPR,
- the personal data have been unlawfully processed; in some cases the Controller may require that this be established by an appropriate court ruling or decision of an authority. Notwithstanding a request for erasure, the Controller may retain certain personal data if they are necessary for establishing, pursuing or defending claims. The Controller may also retain personal data if such retention is required by applicable national or EU law.
- the right to restriction of processing — you have the right to request restriction of processing of personal data where:
- you contest the accuracy of the personal data — for a period enabling the Controller to verify the accuracy of the data,
- the processing is unlawful and you oppose the erasure of the personal data and instead request restriction of their use,
- the Controller no longer needs the personal data for the purposes of processing, but they are required by you for the establishment, exercise or defence of legal claims,
- you have objected to processing pending the verification whether the Controller’s legitimate grounds override those of the objection. In cases specified by the GDPR the restriction of processing may nevertheless not be applied (for example, where the data are processed by the Controller for the establishment, exercise or defence of claims).
- the right to object to processing — where the processing of personal data is based on the legitimate interests of the Controller or the interests of a third party, you have the right to object. The right to object does not apply if the processing is necessary for the establishment, exercise or defence of legal claims,
- the right to lodge a complaint with a supervisory authority — if you consider that the processing of personal data infringes the GDPR or other applicable law in this area, you have the right to lodge a complaint with the supervisory authority (President of the Personal Data Protection Office),
- the right to withdraw consent to the processing of personal data — where processing is based on consent, that consent may be withdrawn at any time. Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of the consent prior to its withdrawal,
- Providing your personal data is a condition for receiving information via the contact form available on the website jurajskiejurty.pl. Providing your personal data is voluntary, but failure to provide personal data in the contact form will make it impossible to provide information regarding the accommodation services of the Jurajskie Jurty Centre, Stawowa St., Golczowice.
Jurajskie Jurty takes all possible measures to ensure physical, technical and organisational protection of personal data against accidental or intentional destruction, accidental loss, alteration, unauthorised disclosure, use or access, in accordance with all applicable regulations.
