Privacy Policy
What does the Privacy Policy contain?
Privacy Policy is information regarding the processing of personal data and other information concerning Customers. The Privacy Policy sets out the rules for processing personal data obtained through the www.tarasnamorze.pl Website.
The purpose of the Privacy Policy is to define the actions taken by Us, regarding personal data collected through the Website and related services and tools, used by Customers to perform activities such as creating an Account, making reservations and performing other activities related to their stay at Our Apartments.
Expressions appearing in the Privacy Policy that begin with a capital letter should be understood as follows:
- Privacy Policy - this Privacy Policy
- RODO - Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation)
- Customer - a person making a reservation through the Website or by telephone or using other services offered on the Website
- Account - a registered account of the Customer on the Website
- Strona internetowa – strona tarasnamorze.pl
- Apartment - the villa offered for rent on the Website
Personal Data Administrator
IT Fashion Polska Properties spółka z ograniczoną odpowiedzialnością with its registered office in Warsaw at Moliera 2/4, 00-076 Warsaw, entered into the Register of Entrepreneurs kept by the District Court for the Capital City of Warsaw in Warsaw XII Commercial Division of the National Court Register under KRS number 0000626270, NIP 5242804561, REGON 364871260.
The Administrator can be contacted:
- By correspondence to the Administrator's registered address
- By email to: rezerwacja@tarasnamorze.pl
- By phone at 519-431-142
Data Protection Officer
In order to ensure adequate protection of Customers' personal data, the Administrator has appointed a Data Protection Officer. You can contact the Data Protection Officer directly on all matters related to the processing of personal data and the implementation of the RODO at email address: iod@tarasnamorze.pl
What personal data do We collect, for what purpose? What is the basis and duration of our processing of personal data?
Account registration
Data
In order to set up an Account, we collect and use identifying information such as your first and last name, and contact information: e-mail address, telephone number and home address, as well as a password of your choice. The e-mail address is used to use the Website and log in to it.
Purpose of data processing
We use the above personal information to create and maintain your Account, including processing the reservations you have made.
Basis for data processing
Podstawę prawną do przetwarzania danych w ramach korzystania z Konta stanowi art. 6 ust. 1 lit. b) RODO czyli świadczenie przez Nas usługi prowadzenia Konta w celu dokonywania rezerwacji Apartamentu.
Data retention period/criteria for determining retention period
Your personal data contained in the Account will be processed for the duration of the operation of the Account, i.e. for the duration of the provision of the Account service. At any time you may decide to delete your Account, which will also result in the deletion of your personal data from the database. Please note that deletion of your Account does not result in deletion of your booking data made through the Website.
Reservations - with and without login
Data
When you make a reservation for a stay without logging in, in addition to identification data (such as name and surname) and contact data (such as phone number, e-mail address) we also collect information regarding your stay (e.g. information about the value of the order, method of payment, invoice data). We will require this data from you each time you make a reservation without logging in, in other words without creating an Account, or one time when you create an Account.
When you make a reservation for a stay with login, in addition to your identification data (such as name and surname) and contact data (such as phone number, address, e-mail address), we also collect the above-mentioned data of the guest who will be using the apartment and information about the stay (e.g. information about the value of the order, method of payment, invoice data).
Purpose of data processing
The processing of data in the situations specified above will be carried out for the purpose of executing the rental agreement or in connection with the intention to conclude it, as well as fulfilling the obligations imposed on Us by applicable laws (e.g. issuance of a sales document).
Basis for data processing
Podstawą prawną do przetwarzania danych dotyczących zakupów jest zawarcie i realizacja umowy, której jesteś stroną, zgodnie z art. 6 ust. 1 lit. b) RODO.
Data retention period/criteria for determining retention period
We process your personal data until the conclusion of the contract, and after that, for other lawful purposes related to the contract, e.g. the period for securing possible claims for damages, i.e. until the end of the calendar year in which the 6-year statute of limitations expires. In the absence of a contract, we process your data - until the application is processed and for 3 years for possible complaints and claims.
Contact form, helpline, complaint reports
Data
When you want to contact us, you send us a contact form or contact us via a hotline. The data you provide us with include: identification data (such as your name) and contact data (such as your phone number, address or e-mail address), as well as other information provided in the course of correspondence or conversation. Phone calls are recorded.
In the case of withdrawal from the contract concluded through the reservation system Ido Sell and Booking.com or submission of a complaint regarding the Apartment, the data contained in the withdrawal form or the complaint form are transferred to the company that processes the data in order to carry out the withdrawal procedure or the complaint procedure.
Purpose of data processing
We use personal information only to respond to your inquiries submitted in the contact form or during a phone call or complaint request.
Basis for data processing
Podstawę prawną do przetwarzania danych stanowi art. 6 ust. 1 lit. f) RODO. Prawnie uzasadniony interes realizowany przez Administratora wynika z chęci odpowiedzi na Twoje zapytania i zgłoszenia, a tym samym z chęci utrzymania i zapewnienia wysokiej satysfakcji klientów. Zachowujemy całkowitą poufność danych osobowych przekazywanych przez Ciebie podczas wypełniania formularzy kontaktowych oraz połączeń telefonicznych.
Data retention period/criteria for determining retention period
We will process data for the time it takes to handle a question submitted on a form, contact form, hotline, and then for 3 years to protect against possible claims. In the case of complaint requests, we will process personal data until we respond to the complaint request, and then until the end of the calendar year in which the 6-year statute of limitations expires in order to protect against possible claims. In the event that a dispute is pending or a proceeding is in progress, particularly a court proceeding, the retention period will be calculated from the date the dispute ends or the proceeding becomes final.
The period of storage of call recordings does not exceed 3 months from the date of recording, and after this date the data are deleted (the deadline for deletion of data is extended until the legal conclusion of proceedings conducted under the provisions of law or when the Administrator became aware that they may constitute evidence in such proceedings).
Staying in an Apartment
Data
When you visit our Apartment, your image may be captured by our surveillance cameras.
Purpose of data processing
With the monitoring we use on the outside of the Apartment, we try to ensure the safety of all people in the Apartment (and we also want to protect our property, located on the premises of the Apartment, as well as the property of our customers). We do not conduct monitoring in areas where it could lead to an invasion of your privacy. We also do not use the recorded video for any other purpose. The recordings can only be accessed by authorized employees and are not made available to anyone, except authorized government authorities, as evidence for ongoing investigations.
Basis for data processing
Podstawę prawną do przetwarzania danych stanowi art. 6 ust. 1 lit. f) RODO czyli prawnie uzasadniony interes realizowany przez Administratora.
Data retention period/criteria for determining retention period
Okres przechowywania nagrań z monitoringu wizyjnego nie przekracza 3 miesięcy od dnia nagrania, a po tym terminie dane są usuwane (termin usunięcia danych ulega przedłużeniu do czasu prawomocnego zakończenia postępowania prowadzonego na postawie przepisów prawa lub gdy Administrator powziął informację, iż mogą one stanowić dowód w takim postępowaniu).
Registration Card
Data
In this case, we collect your data such as Name, home address, email address and phone number of the person booking the Apartment.
Purpose of data processing
The processing of data in the situations specified above will be done for the purpose of executing the lease agreement as well as fulfilling the obligations imposed on Us by applicable laws.
Basis for data processing
Podstawą prawną do przetwarzania danych jest zawarcie i realizacja umowy, której jesteś stroną, zgodnie z art. 6 ust. 1 lit. b) oraz c) RODO.
Data retention period/criteria for determining retention period
We process your personal data until the conclusion of the contract, and after that, for other lawful purposes related to the contract, e.g. the period for securing possible claims for damages, i.e. until the end of the calendar year in which the 6-year statute of limitations expires. In the absence of a contract, we process your data - until the application is processed and for 3 years for possible complaints and claims.
Newsletter
Data
W przypadku zapisania się na newsletter, podajesz Nam tylko adres e-mail.
Purpose of data processing
Dane osobowe przekazywane w ramach usługi newsletter przetwarzane są w celu przesyłania informacji zawierających informację o akcjach specjalnych, promocyjnych i konkursowych. Należy mieć na uwadze, że tego rodzaju przetwarzanie danych niesie za sobą analizę Twojego profilu, aby określić jakie są jego preferencje celem wysłania odpowiednich dla Ciebie informacji. Możesz w każdej chwili bezpłatnie zrezygnować z otrzymywania newslettera.
Basis for data processing
Podstawę prawną do przetwarzania danych w ramach wysyłki newsletter stanowi zasadniczo zgoda udzielana zgodnie z art. 6 ust. 1 lit. a) RODO.
Data retention period/criteria for determining retention period
W przypadku wycofania zgody na otrzymywanie newslettera, Twoje dane zostaną niezwłocznie zablokowane, a następnie usunięte. W efekcie nie będą już wysyłane żadne spersonalizowane reklamy (np. spersonalizowany newsletter, wiadomości e-mail z informacjami itp.).
Sharing personal data
Your personal data may be disclosed to third parties who support us in providing the services we offer, among other suppliers and partners:
- Technology-related services (for example, support of our Website and other systems we use to provide you with our services)
- providing logistics, transportation and delivery services
- providing services related to marketing and advertising (including newsletters)
- providing legal and other specialized services, which also includes partners who run our hotline , or manage video surveillance
- Other services related to customer service.
We only provide our suppliers and partners with personal data that enables them to provide services to us, and we require them to maintain the confidentiality and security of the information. We also verify that they provide adequate measures to protect personal information.
In addition, your personal data may be disclosed to entities authorized to obtain them under applicable law, such as law enforcement agencies. To the extent permitted by applicable law, we may also share your personal data with debt collection and debt trading institutions.
Our partners, suppliers and service providers are located in countries in the European Economic Area (countries of the European Union and Iceland, Liechtenstein and Norway) - EEA or in Switzerland, recognized as a country that meets an adequate level of personal data protection. Whenever we share your personal information internally or with third parties in other countries, we apply the necessary safeguards to protect it. We rely on:
- standard contractual clauses adopted within the European Union, (these relate to the transfer of data by an entity within the EU outside the European Economic Area to ensure compliance with EU data protection laws)
- EU-US Privacy Shield agreement, which protects personal data transferred to the United States.
Use of cookies and other technologies
We use cookies, which is information sent by the Website you visit. They are stored on the terminal device (computer, laptop, smartphone) you use when browsing the Website. We use cookies for:
- ensure the smooth functioning of the Website
- statistical and analytical for the purpose of improving the structure and content of the Website
- advertising, adapting the content of the Internet Store's website to your preferences and optimizing the use of the website
- optimize advertising and marketing offerings for you
The cookies we use can be found here.
Cookies and the information stored in them or accessing them do not cause any configuration changes in the device and software installed on that device. The information we obtain through cookies is not attributed to a specific person and does not identify him or her. You can change your browser's use of cookies, including blocking or deleting those from the Website. To do this, change your browser settings. Failure to change these settings means that you accept the use of cookies.
Most browsers offer the option of accepting or rejecting all cookies, accepting only certain types, or notifying you every time a website tries to save them. You can also easily delete cookies that have already been stored on your device by the browser. Managing and deleting cookies varies depending on the browser you use. See details on cookie management for some browsers:
More information on cookie management can be found at www.wszystkoociasteczkach.pl or on the European platform website www.allaboutcookies.org.
We would like to inform you that we use the tool https://www.cookiebot.com/en/, which scans the website for cookies in a selected period of time and displays appropriate information about cookies on this basis.
Profiling and tracking online
We track your traffic on Our Website and then use the collected information, among other things, to create so-called personalized advertising, as well as to optimize the Website in order to increase its usability. For this purpose, we use tools such as: Google AdWords or Google Analytics.
How do we use Google AdWords?
Profiling of Customer data using Google AdWords is done using the following tools: Remarketing and the Similar Audiences function. Both of these tools allow us to direct advertising messages to Customers who have already visited Our Website or to Customers similar to them, as well as to prepare an appropriate message for them, e.g. about products or services in which these Customers were interested when visiting the Website.
Below we provide a detailed description of how tools work using Google AdWords, such as Remarketing and Similar Audiences.
How do we use remarketing or Similar Audiences in online advertising?
We use remarketing tools to track Customers' movements on the network and to direct personalized advertising to them, based on their preferences and previously revealed needs for a specific service or product that these Customers were looking for on the Website. Thanks to this, we can also provide such Customers with information, e.g. about existing promotions or special offers for goods or services that the Customer was previously interested in.
Similar recipients are people who have not viewed the Website, but their general characteristics are similar to the characteristics of Customers who have viewed the Website. Google, based on the actions performed on the network by such Customers, called similar, categorizes them accordingly in terms of similarity to Customers. Customers similar to Customers who have visited the Website may be sent Our advertisement by Google, and this is on its express, separate request.
How do third-party vendors, including Google, display Our ads across the internet?
Our ads are displayed by third-party vendors, including Google, on websites such as the Google Display Network, i.e. websites that enable the display of ad boxes with ads targeted via Google AdWords.
How do third-party vendors, including Google, use cookies to serve ads based on past customer visits to Our Site?
An auction is held on the website of an external provider of advertising space. Several advertisers, including us, are competing for a place in a specific box. When competing for advertising space, we use our own list of recipients, which is based on "cookies" files that we have collected.
How can you opt out of cookies?
Customers of the Website may opt out of Google cookies by using the following link, which enables changing the settings of advertisements displayed by Google on Customers’ devices: https://adssettings.google.pl/authenticated.
Website customers may also opt out of third-party vendors’ cookies by visiting the Network Advertising Initiative website at the following link: http://optout.networkadvertising.org/?c=1#!/.
We use DoubleClick Remarketing Pixels. Customers may opt out of DoubleClick cookies via the DoubleClick website or the Network Advertising Initiative.
How do we use Google Analytics?
The Google Analytics system is used by Us to track traffic on Our Website, as well as to create market and statistical analyses, and to improve the quality of information presented on the Website. Additionally, using the Google Analytics System, We also create marketing lists based on specific actions taken by the Client on the Website.
The Google Analytics tool we use retains data for 50 months from the date of collection. This retention period applies to customer-level and event-level data associated with cookies, customer identifiers (e.g., User-ID), and advertising identifiers (e.g., DoubleClick cookies, Android Advertising ID, and Apple ID for Advertisers).
The customer can independently disable tracking of movements on the IT FASHION website using the following device: https://tools.google.com/dlpage/gaoptout.
Each Customer may express consent to the use of cookies (within the scope of profiling) by clicking the "Continue" button or by clicking "X" on the pop-up that appears after launching the IT FASHION website.
Consent to profiling may be withdrawn at any time – however, this will not affect the lawfulness of personal data processing activities carried out before its withdrawal.
You can withdraw your consent to profiling by clicking on the button below: https://tools.google.com/dlpage/gaoptout.
What are the consequences of opting out of our use of profiling cookies?
Opting out of cookies that allow for the display of advertisements tailored to the interests of the Website's Customers means that Customers will not receive Our advertisements that are related to the activity of these Customers on the Website. In other words, Customers who disable cookies will not see Our advertisements based on cookies at all. They may, however, see other advertisements, but their targeting method will not use cookies.
How will the Website work without consent to the use of cookies?
In the event that Customers do not consent to the use of cookies for the purpose of so-called profiling, only cookies necessary to ensure the proper operation of the Website will still be saved on Customers' devices (related to, for example, preferred language settings, filling out shopping forms, etc.). Each Customer can modify these settings within the web browser they use, but then some parts of the Website will not function properly.
Data Subject Rights
The person whose personal data is being processed has the right to:
- Right of access (Article 15 of the GDPR), i.e. request information from the Controller about the processing of his or her personal data, i.e. confirmation as to whether the personal data of the person concerned are being processed. If personal data are being processed, he or she is entitled to access them, obtain copies thereof and to obtain the following information: about the purposes of processing, categories of personal data, information about the recipients or categories of recipients to whom the data have been or will be disclosed, the period of data storage or the criteria for determining them, the rights of the person related to the processing of his or her personal data, the possibility of filing a complaint with the supervisory authority, the source of the personal data, if they were not obtained directly from the data subject and about profiling and automated decision-making;
- Right to rectification (Article 16 of the GDPR), i.e. if a person obtains information that his or her personal data processed by the Controller are incorrect, outdated or incomplete, he or she has the right to request their immediate rectification or supplementation;
- The right to delete data (Article 17 of the GDPR), i.e. they may request the deletion of their personal data, and if the person has consented to the processing of personal data, the request for deletion will have the same effect as the withdrawal of consent;
- The right to restrict data processing (Article 18 of the GDPR), i.e. requesting that their processing be discontinued, with the exception of their storage, in situations where:
a. the data subject contests the accuracy of the personal data;
b. the data subject questions the lawfulness of the processing of personal data by the Controller;
c. The controller no longer needs the data, but they are required by the data subject to establish, pursue or defend his or her claims;
d. the data subject has objected to the processing and this objection has been accepted by the Controller;
- The right to transfer data (Article 20 of the GDPR) which means the right to receive personal data made available to the Controller in a structured, commonly used format that can be read by a specific device, so that it can be transferred directly to another entity, provided that this is technically possible;
- The right to object to processing (Article 21 of the GDPR) which means the right of the data subject to object to the use of his or her personal data for purposes related to direct marketing of products and services, as well as other marketing activities carried out by the Administrator via e-mail or text messages). The objection does not result in the deletion of the data, but only in the cessation of their use by the Administrator for marketing purposes.
- The right to withdraw consent which means that in cases where data processing is based on consent, the data subject has the right to withdraw the consents granted for individual purposes of processing at any time. Withdrawal of consent does not affect the lawfulness of the processing carried out until the consent is withdrawn;
- The right to lodge a complaint with the competent supervisory authorityIf the data subject believes that their data is being processed illegally, they have the right to lodge a complaint with the competent supervisory authority:
Urząd Ochrony Danych Osobowych
Stawki 2, 00-193 Warszawa
tel. 22 531 03 00, fax. 22 531 03 01
Changes to Privacy Policy
The provisions of the Privacy Policy may be changed or updated, so we recommend that you regularly monitor changes. We will inform you about any changes or additions by posting appropriate information on the Website, and in the case of significant changes, we may also send you separate notifications to the e-mail address you provided.