This Privacy Policy defines the rules for the processing and protection of personal data provided by users in connection with their use of the services offered by the Zalesie Mazury Active Spa website (hereinafter: the Service).
The Administrator of the personal data contained in the Service is ZALESIE MAZURY Mariusz Czeszejko-Sochacki Spółka Komandytowa, Zalesie 12, 11-010 Barczewo, entered into the register of entrepreneurs under the Tax Identification Number (NIP): 7393617378 (hereinafter: the Administrator).
Out of concern for the security of the entrusted personal data, the Administrator operates based on internal procedures and recommendations consistent with relevant legal acts regarding personal data protection, in particular with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation – GDPR).
The Administrator takes special care to protect the interests of the data subjects, and in particular ensures that personal data are:
processed lawfully;
collected for specified, explicit, and legitimate purposes and not further processed in a manner that is incompatible with those purposes;
factually correct and adequate in relation to the purposes for which they are processed;
kept in a form which permits identification of data subjects for no longer than is necessary for the purposes of processing.
Personal data are processed on the basis of consent expressed by the Service users and in cases where the provisions of applicable law authorize the Administrator to process personal data.
The Administrator processes personal data provided voluntarily by the Service users solely for the purpose of:
responding to user inquiries submitted via the contact form;
accepting reservations made through the online booking system;
performing services provided by the Administrator on the basis of Art. 6(1)(b) of the GDPR;
marketing, including sending commercial information to an e-mail address, if the Client has consented to it by checking the appropriate box during the reservation process or when submitting an inquiry via the contact form. Consent to data processing for marketing purposes and sending commercial information may be withdrawn by clicking the appropriate link in the received message or by sending such a notification to the Administrator's e-mail address;
fulfilling the legitimate interest of the personal data Administrator in specific cases on the basis of Art. 6(1)(f) of the GDPR, e.g., debt collection or video monitoring of traffic on the premises of the Facility.
Recipients of personal data may include authorities, institutions, and entities authorized by law, as well as entities providing services to the data Administrator (e.g., legal, IT, marketing, accounting services, and other entities involved in the realization of the ordered service).
The Administrator may use automated decision-making, including profiling, for marketing purposes and to customize the offer.
The Service user who provided the data has the right to access the data processed by the Administrator. The user also has the right to modify these data, request their deletion, and limit or stop the processing of their personal data at any time. At any time, the user may also request the removal of their personal data from the service. The right to data portability does not apply, as no standard for the exchange of such data between hotel facilities has been established.
The Service user has the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
To exercise their rights indicated in point 8 above, the Service user should contact the Administrator using the same e-mail address or telephone number provided to the Service, by contacting marketing@zalesiemazury.pl.
Every Service user may lodge a complaint with the Personal Data Protection Office (UODO).
The Administrator performs the functions of obtaining information about users and their behavior in the following ways:
through information voluntarily entered in forms;
through the collection of "cookies".
Upon the first visit to the Zalesie Mazury Active Spa website, the user is informed about the use of cookies. By remaining on the site, the user accepts the use of cookies on the website. The absence of changes to the browser settings on the user's part is equivalent to consenting to the use of "cookies".
The installation of "cookies" is necessary for the proper provision of services in the Service. "Cookies" contain information necessary for the proper functioning of the website, especially those requiring authorization. The user can change their browser settings regarding the handling and storage of cookies at any time.
The following types of "cookies" are used within the Service:
session cookies – remain in the browser until it is turned off or until logging out of the website where they were placed;
persistent cookies – remain in the device's web browser until they are deleted by the user or for a predetermined time specified in the cookie parameters.
In terms of functionality, each cookie can be divided into:
conversion files, which allow analyzing the performance of various sales channels;
tracking files, which, in combination with conversions, help analyze the performance of various sales channels;
marketing files, used to personalize advertising content and its proper targeting;
analytical tools, which help improve the comfort of using the site by understanding how users use it;
essential files, which are fundamental for the basic functionality of the site. The cookies we use allow us to develop our website.
Some "cookies" may be placed by the provider of the website and the online booking system solely for the purpose of:
improving and supporting the booking process;
analyzing and collecting statistical data regarding the use of the website and the online booking system to improve them.
The Service may contain links to other websites that operate independently of the Service and are not supervised by the Service in any way. These sites may have their own privacy policies and regulations, which we recommend you read carefully.
The Administrator reserves the right to change the privacy policy of the service, which may be caused by the development of internet technology, possible changes in the law regarding personal data protection, and the development of the Service. We will inform users about any changes in a visible and understandable way.
