+ 48 889 255 301
Privacy Policy (GDPR)
VILLA TATRA SKY
Villa Tatra Sky
In accordance with Article 13, paragraphs 1-2 of the GDPR, we inform you that:
I. The administrator of your personal data is Villa Tatra Sky ul. Kasprusie 35, 34-500 Zakopane Tax Identification Number: 7361727218, as the data administrator, we make every effort to ensure the confidentiality and security of your personal data and process it in accordance with the law.
II. Purposes and basis of processing
As the administrator, we will process your data:
- based on your consent (basis in Article 6(1)(a) of the GDPR):
- in order to conclude a contract based on your interest in our offer (legal basis: Art. 6(1)(b) of the GDPR);
- for the proper performance and on the basis of a contract, if we have concluded it with you (basis in Article 6(1)(b) of the GDPR);
- in order to enable you to make reservations and purchase the services provided (basis in Article 6(1)(b) of the GDPR);
- for tax purposes and in connection with other legal obligations of the administrator (legal basis: Article 6(1)(c) of the GDPR);
- for analytical purposes (better selection of services to the needs of our clients, general optimization of our products, optimization of service processes, building knowledge about our clients, financial analysis of our company) being the implementation of our legitimate interest (basis in Art. 6(1)(f) of the GDPR);
- for archival (evidential) purposes, which are the implementation of our legitimate interest in securing information in the event of a legal need to prove facts (Article 6(1)(f) of the GDPR);
- in order to determine, pursue or defend against claims, which is our legitimate interest (basis in Article 6(1)(f) of the GDPR);
- to the extent necessary to clarify the circumstances and to establish liability in connection with the use of our services contrary to the law or the regulations governing the provision of services (basis in Article 6(1)(f) of the GDPR);
- to offer you products and services directly (direct marketing), as part of our legitimate interest (basis in Art. 6(1)(f) of the GDPR).
III. Data sharing
1. We do not trade your personal data, nor do we share it with other parties or transfer it to third countries, except when:
a) you consent to its disclosure to other parties or transfer to a third country,
b) it is necessary for the performance of contracts between Us and the data subject, or when it is necessary for the performance of contracts concluded in the interests of the data subject between Us and another party,
c) the law permits it.
2. In particular, your data can be accessed by other entities if they are parties to contracts with you, participate in the performance of the services stipulated in the contracts with you, fulfil your orders (in particular other tourism organisers, providers of hotel, transport, travel services, banking or insurance services).
IV. The right to object
1. You have the right to object to the processing of your data described above at any time. We will cease processing your data for these purposes unless we can demonstrate that there are compelling legitimate grounds for doing so or that the data is necessary for us to establish, pursue or defend any claims.
2. You have the right to object to the processing of your data for direct marketing purposes at any time. If you exercise this right, we will cease processing your data for this purpose.
V. Data storage period
Your personal data will be processed by Us for the entire period during which the contract will be performed, as well as afterwards, i.e. until the expiry of the limitation period for any contractual claims and in connection with the fulfilment of the 5-year archiving obligation.
VI. Recipients of data
The recipients of your personal data will be those entities to whom we are obliged to provide data under applicable law, as well as entities providing accounting, human resources, IT, transport, courier and postal delivery services to us, or our subcontractors or distributors. Your personal data may also be disclosed to our partners, i.e. companies with which we cooperate by combining products or services, including our distributors.
VII. Rights of data subjects:
In accordance with the GDPR, you have: a) the right to access your data and receive a copy thereof; b) the right to rectify (correct) your data; c) the right to delete data, limit data processing; d) the right to object to data processing; e) the right to transfer data; f) the right to lodge a complaint with the supervisory authority; g) where applicable, you have the right to withdraw your consent to the processing of personal data at any time without affecting the lawfulness of processing based on consent given before its withdrawal.
VIII. Information on the requirement/voluntariness of providing data
Providing us with your personal data is voluntary, but necessary to conclude and execute the contract.
IX. Automated decision-making
Your data will not be processed in an automated manner, including in the form of profiling.
PRIVACY POLICY (GDPR)
+48 889 255 301
ul. Kasprusie 35,
34-500 Zakopane
Villa Tatra Sky