Privacy Policy

1. The controller of personal data processed to the extent and for the purposes necessary to provide services is:

Tadeusz Żółtek — SILVERTON
Business owner: Tadeusz Żółtek
Tax ID (NIP): 7361426675, business registration number (REGON): 120840840

2. The Controller collects, stores and uses personal data with the consent of the individuals concerned, in accordance with the law, appropriate procedures and safeguards for its security. The Controller may use personal data solely to provide proper service to website users, particularly for online registration, communication with users, providing services, performing a contract, including a sales contract, or another purpose to which the user has consented.

3. Legal basis for processing:
Depending on your activities, the legal basis may be:

  • a service contract or steps taken at your request before entering into a contract (Article 6(1)(b) GDPR);
  • a legal obligation, for example an accounting obligation (Article 6(1)(c) GDPR);
  • your consent given through the website, if you choose to give it (Article 6(1)(a) GDPR);
  • our legitimate interest in processing data for analytical and statistical purposes (Article 6(1)(f) GDPR);
  • our legitimate interest in measuring customer satisfaction (Article 6(1)(f) GDPR);
  • our legitimate interest in establishing, pursuing or defending potential claims (Article 6(1)(f) GDPR);
  • our legitimate interest in direct marketing (Article 6(1)(f) GDPR).

4. The Controller processes data lawfully, collects it for specified lawful purposes and does not further process it in a way incompatible with those purposes. Only data that is adequate, relevant and necessary for those purposes is collected. The Controller does not process special categories of personal data.

5. Retention period:
We process your data only for as long as we have a legal basis to do so, until:

  • our legal obligation to process your data ends;
  • processing is no longer necessary;
  • it is no longer possible to establish, pursue or defend potential claims relating to the contract between the parties;
  • you withdraw your consent, where consent was the basis for processing;
  • your objection to processing is upheld, where processing was based on the Controller’s legitimate interest or was for direct marketing, including profiling.

6. Data security
When processing your personal data, we use organisational and technical measures required by applicable law, including an encrypted connection using an SSL certificate.

7. Depending on the purpose of collection, not providing data or withholding consent may mean that:
– services cannot be used;
– registration cannot be completed;
– the activities described in section 2 of this Privacy Policy cannot be carried out.

8. Right to withdraw consent
a) Where personal data is processed on the basis of consent, you may withdraw that consent at any time.
b) To withdraw consent to the processing of personal data, you can:
– delete your comment under an article; or
– delete your review of the services; or
– email the Controller at rezerwacja@pensjonat-silverton.pl

9. Your rights:

  • access to your personal data;
  • rectification of your personal data;
  • erasure;
  • restriction of processing;
  • requesting portability of your data to another controller.

10. Right to lodge a complaint
If you believe your data is being processed unlawfully, you may lodge a complaint with the supervisory authority.

11. External services / data recipients

We use external service providers to whom your data may be transferred. Possible recipients include:

  • the provider of software needed to operate the website;
  • the payment provider;
  • the accounting office;
  • a website optimisation provider;
  • an email system provider;
  • a marketing services provider;
  • a statistical services provider;
  • the booking service provider;
  • relevant public authorities, to the extent that the Controller is required to disclose data to them.

12. Final provisions
– Matters not covered by this Privacy Policy are governed by applicable personal data protection law.
– If you have agreed to electronic communication, changes to this Privacy Policy will be communicated by email or on our website.
– This Privacy Policy has been in force since 25 May 2018.