Privacy Policy

Privacy policy Hotel Hanza Palac Wellness & SPA in Rulewo

 

1.      This Privacy Policy defines the rules on the processing and protection of personal data provided by users (visitors to the website) in relation to their use of services offered by the Hotel Hanza Palac Wellness & SPA in Rulewo (hereinafter: the Website).

 

2.      The Administrator of the Website www.hanzapalac.pl and thus the Controller of personal data contained in the Website is Przedsiębiorstwo Usługowo - Handlowe „Chemirol” sp. z o.o., 88-300 Mogilno, ul. Przemysłowa 3, Hotel Hanza Pałac Wellness & SPA w Rulewie, 86-160 Warlubie, Rulewo 13, NIP: 557-15-89-655 (hereinafter: Controller of personal data). Regarding the personal data protection agreement and to obtain detailed information about the processing of your data, please contact us at the e-mail address: ksiegowosc@hanzapalac.pl.

 

3.      In order to ensure the security of the personal data processed, the Controller shall act on the basis of internal procedures, in accordance with the relevant legal acts on personal data protection, and in particular with the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46 EC. (General Data Protection Regulation, GDPR)

 

4.      The Controller takes the utmost care to protect the interests of data subjects, and in particular ensures that personal data are:

a.       processed lawfully;

b.      collected for specified, lawful purposes and not further processed in a way incompatible with those purposes;

c.       substantially correct and adequate in relation to the purposes for which they are processed;

d.      kept in a form which permits identification of the persons concerned, no longer than it is necessary to achieve the purpose of the processing.

 

5.      All data are protected against unauthorized access by third parties, and therefore your cooperation with the Hotel Hanza Palac Wellness & SPA in Rulewo is always secure. Personal data protection means that:

a.       We will never misuse your personal information.

b.     We will never disclose your contact or other personal information to an unauthorized third party.

c.       We may transfer your personal information to a third party only upon your consent or when we are legally entitled or obliged to do so.

d.      You can quickly and easily opt out from receiving e-mails and other forms of communication.

 

6.      We have received your data:

a.       during the booking process via the www.hanzapalac.pl website,

b.      when you subscribed for the newsletter,

c. when you sent a message using the form on the website www.hanzapalac.pl,

d.      by means of the cookies we use.

 

7.      Personal data are processed when you make a reservation through the Hotel Hanza Palac Wellness & SPA in Rulewo because it is necessary to perform the agreement concluded with you, and more precisely:

a.       to enable the provision of electronic services and the full use of www.hanzapalac.pl, including transactions and payments,

b.      to handle your requests (e.g. via the contact form),

c.    to contact you, including the purposes related to the provision of services.

d.     Additionally, the law requires us to process your data for tax and accounting purposes.

 

The legal basis for data processing in this respect is the provision of Article 6(1)(b) of GDPR, indicating the possibility of processing personal data when it is necessary for the conclusion and performance of the agreement, and the provision of Article 6(1)(c) of GDPR, which makes it possible to process data when it is necessary to perform obligations imposed on us by law (e.g. tax law).

 

We may also process your personal data on the basis of your consent to be notified of current promotions, new options and offers of Hanza Palace by e-mail and by phone - if you have consented to the sending of commercial information by e-mail and to be contacted by phone. The legal basis for the processing of your data is Article 10(2) of the Act of 18 July 2002 on the provision of services by electronic means (i.e. Journal of Laws of 2017, item 1219) and Article 172(1) of the Act dated 16 July 2004 on on telecommunications (i.e. Journal of Laws of of 2017, item 1907, 2201.) and the provision of Article 6(1)(a) of GDPR, which states that personal data may be processed if the data subject has given their consent.

 

In the remainder, e.g. in the case of some electronic advertisements or certain categories of cookies, and in order to respond to user inquiries made on the contact form, personal data are processed on the basis of our legitimate interest in controlling the website traffic, marketing activities or responding to messages sent to us. The legal basis in this scope is Article 6(1)(f) of GDPR, which provides that processing of personal data is allowed where it is necessary for the fulfilment of purposes arising from legitimate interests pursued by the Controller.

 

8.      Providing the data necessary to make a reservation at the Hotel Hanza Palac Wellness & SPA in Rulewo is voluntary, but failure to provide such data makes it impossible to make a reservation.

Providing personal data necessary for the performance of concluded agreements is a condition for the performance of the contract. Otherwise, it will not be possible to perform the services due to the lack of data necessary for the order processing.

Providing personal data necessary to issue an invoice is a legal obligation resulting from relevant legal provisions.

Providing personal data for marketing purposes carried out using electronic messages (e-mail) and telecommunication devices (telephone) is entirely voluntary. At any time you may withdraw your consent given for these purposes, which does not affect the validity of the data processing before the withdrawal.

 

9.      For the purpose of concluding and performing an agreement between the Hotel and you (e.g. at the time of making a reservation), we process such personal data as your name, e-mail address, telephone number, address and information on when and how you will use our services.

 

10.  We process personal data voluntarily provided by users of the Website on the contact form in the following scope:

a.       Name and surname

b.      e-mail address

c.       telephone number

d.      information contained in the message sent to us.

 

11.  If you agree to receive the Newsletter, the Hotel Hanza Palac Wellness & SPA in Rulewo will be the sender of the Newsletter. In this respect, we process your name and e‑mail address.

 

12.  When you visit our website, we also process your IP address, data about the device you use and other information contained in system logs as part of cookies, as the Hotel's website Administrator. IP addresses can also be used for statistical purposes - to collect general demographic information (e.g. about the region from which the connection is made). The hanzapalac.pl website does not automatically collect any other information except for information contained in cookies. Cookies are IT data in a text form, stored on the user's terminal device. The Administrator uses the cookies technology to adjust the Website to your individual needs (e.g. you may agree that the data you have entered will be stored and you will not have to enter them again during the next use of the Website) and for statistical purposes.

 

13.  Cookies are used to:

a.       adjust the website layout to the unique preferences of the user,

b.      create statistics for the needs of the website owner,

c.       maintain the user's session,

d.      prevent errors on the website.

The following types of cookies are used on the website:

a)      cookies making it possible to use the services available on the website,

b)      cookies making it possible to collect information and statistical data concerning the manner of using the website,

c)       cookies making it possible to display the website correctly, depending on the individual specification of the user's terminal device,

d)      cookies providing users with advertising content tailored to their individual preferences.

By default, web browsers allow cookies to be stored on the user's terminal device. Each user can change the settings for cookies so as to block their automatic use. You can find detailed information on how to disable the cookies in the "Help" section of your web browser menu.

Restriction of cookies in your web browser may affect the functionality and correctness of the website display.

 

14.  Personal data of Website users are neither sold or made available to third parties nor are subject to profiling, i.e. automated processing in order to assess and determine the personal characteristics or needs of users.

 

15. Your authority in the scope of processing personal data:

We guarantee the fulfilment of all your rights under GDPR, i.e. the right of access, rectification and deletion of your data, restrictions on their processing, the right to their transfer, the right not to be subject to automated decision making, including profiling, and the right to object to the processing of your personal data.

 

Right of access to personal data: as a user you have the right to obtain confirmation from the Controller of personal data whether your personal data are processed, and if so, you are entitled to access them and the following information to the extent that concerns you:

        purposes of processing,

        categories of personal data concerned,

        their recipients (if any),

•         the period of keeping personal data or the criteria for determining that period,
•         information about the right to request the rectification, deletion or limitation of personal data and to object to the processing,
•         information about the right to lodge a complaint with the supervisory authority,
•         information about the source of the data if the data have not been collected from the user,
•         information about automated decision making, including profiling, and important information about the logic of the process to which it relates, as well as the relevance and expected consequences of such processing for the user in accordance with Article 15 of GDPR;

 

Right of data rectification: as a user, you have the right to demand from the Controller of your personal data to immediately correct any inaccurate personal data. Taking into account the purposes of processing, you have the right to complement incomplete personal data, also by providing an additional statement;

 

Right to delete personal data ("right to be forgotten"): you have the right to demand from the Controller to delete your personal data without undue delay when one of the following circumstances occurs:

•         personal data are no longer necessary for the purposes for which they were collected or otherwise processed,
•         you have withdrawn your consent and there is no other legal basis for further processing,
•         you have objected to the processing of personal data and there are no reasonable grounds for processing them,

        your personal data are processed unlawfully,

•         personal data must be deleted in order to comply with a legal obligation under the EU law or the law of the Member State to which the Controller is subject,
•         personal data were collected in connection with the provision of information society services referred to in Article 8(1) of GDPR.

 

In certain circumstances, resulting from Article 17(3) of GDPR, the right to be forgotten does not apply to the extent that processing is still required.

 

Right to limit data processing: as a user, you have the right to demand from the Controller of personal data to limit the processing when one of the following situations occurs:

•         you question the correctness of your data - a limitation for a period allowing the Controller of personal data to check the correctness of these data,
•         the processing is unlawful and you object to the deletion of personal data and instead demand a limitation of their use,
•         The Controller of personal data no longer needs personal data for processing purposes, but you need them to establish, assert or defend legal claims,
•         you object to the processing of your data pursuant to Article 21(1) of GDPR - limitation until it is determined whether legitimate grounds on the part of the Controller of personal data take precedence over the grounds for your objection.

 

Right to transfer data: you have the right to receive, in a structured, commonly used machine-readable format, your personal data, which you have provided to the Controller of personal data, and you have the right to transfer these personal data to another controller without hindrance from the Controller of personal data, if all of the following requirements are met:

•         processing takes place on the basis of a consent or an agreement; and
•         processing takes place in an automated manner.

Exercising the right to transfer data, you have the right to demand that personal data be sent by the Controller to another controller directly, if technically possible.

 

Right to object to data processing: as a user, at any time you have the right to object – for reasons related to your specific situation - to the processing of your personal data if the Controller of personal data processes your data in its legitimate interests (Article 6(1)(e) or (f) of GDPR), including profiling based on data. Should your objection be justified, the Controller of personal data will not be able to process these personal data any longer, unless they prove the existence of valid legal grounds for processing, taking precedence over your interests, rights and freedoms or grounds for establishing, asserting or defending claims - yours or of the Controller of personal data.

 

16.  You have the right to lodge a complaint in relation to our processing of your personal data with the supervisory authority, which is the President of the Office for the Protection of Personal Data.

 

17.  Who do we share your personal data with?

The recipients of your data may be the Service Providers who, as contractors, have access to your data and process them for the purposes we specified in detail. Contractors may be courier companies, marketing service providers, providers of website hosting, IT support or website analysis.

 

18. How long do we store your personal data?

We store your personal data for the duration of the agreement concluded with you, as well as after its termination for the following purposes:

•         to claim damages in relation to the performance of the agreement,
•         to perform duties resulting from the provisions of law, including in particular tax and accounting obligations,
•         to prevent abuse and fraud,
•         statistical and archiving,

 

We store your personal data for marketing purposes for the duration of the agreement/consent or until you object to such processing/withdraw your consent, whichever occurs first.

 

To the extent that we process your personal data in connection with our use of cookies, we store them for the period in which you use our website, and after you leave it - for up to 6 months. After this time we delete them.

 

19.  The Controller reserves the right to make changes in the privacy policy of the Website, which may result from the development of Internet technology, possible changes in the law on personal data protection, and the development of the Website. We will inform users of any changes in a visible and understandable way.