Maloves SPA&Resort

Privacy

  1. This Privacy Policy defines the principles of processing and protecting personal data provided by users in connection with their use of services offered by the Maloves Resort&SPA website (hereinafter: the Service)
  2. The administrator of the personal data contained on the Service is H7B Sp. z o.o., Władysławowo 84-120, Hryniewieckiego 7B registered in the business register under the number NIP: 5871722727 (hereinafter: the Data Controller).
  3. In order to ensure the security of entrusted personal data, the Data Controller operates based on internal procedures and recommendations, compliant with relevant legal acts regarding personal data protection, especially Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC.
  4. The Data Controller exercises special care to protect the interests of the data subjects and especially ensures that personal data are:
    1. processed lawfully,
    2. collected for specified, lawful purposes and not further processed in a way incompatible with those purposes,
    3. factually correct and adequate with respect to the purposes for which they are processed,
    4. stored in a form allowing identification of the data subjects no longer than necessary to achieve the purpose of processing.
  5. The Data Controller collects information about users and their behavior through voluntary entry of information in forms for the purpose of:
    1. responding to user inquiries submitted via the contact form based on Article 6(1)(f) of GDPR,
    2. accepting reservations through the online booking system based on Article 6(1)(b) of GDPR,
    3. providing services offered by the Data Controller based on Article 6(1)(b) of GDPR,
    4. marketing, including sending commercial information to the email address, if the Client has consented by ticking the appropriate box during the booking process based on Article 6(1)(a) of GDPR. Consent to the processing of data for marketing purposes and sending commercial information can be withdrawn by clicking the appropriate link in the received message or by sending such a request to the Data Controller's email address,
    5. realizing the legitimate interest of the Data Controller in specific cases based on Article 6(1)(f) of GDPR, e.g., debt collection,
  6. Upon the first visit to the Maloves Resort&SPA website, the user is informed about the use of cookies. By remaining on the website, the user accepts the use of cookies. Failure to change browser settings on the user's part is equivalent to consenting to the use of cookies.
  7. Changing cookie settings will take effect after restarting or refreshing the session on the Data Controller's website.
  8. The installation of "cookies necessary for the basic functionality of the Service" is required for its proper operation, particularly for authentication.
  9. Essential cookies for website operation can be changed by modifying browser settings, but keep in mind that changing settings may cause improper website functioning.
  10. More information about cookies is available in the “Help” section of the user's internet browser menu.
  11. Users who, after reviewing the information available on the Service, do not want cookies to remain stored in their browser should delete them from their browser after visiting the Service. The following types of cookies are used within the Service:
    1. session cookies - remain in the browser until it is closed or the user logs out of the Service,
    2. persistent cookies - remain in the device's browser until deleted by the user or until the pre-set time defined in the cookie file parameters expires.
  12. Functionally, each cookie can be divided into:
    1. analytical cookies, which help improve user experience by understanding how users use and convert on the site,
    2. marketing cookies, used to personalize ad content, properly target, and analyze the performance of marketing and sales channels,
    3. essential cookies, fundamental for the basic functionality of the Service.
  13. The cookies we use allow us to develop our website.
  14. Some cookies may be placed by the provider of the Online Booking System only for the purpose of:
    1. improving and supporting the booking process,
    2. analyzing and collecting statistical data on the use of the website and the online booking system, aiming to improve them,
    3. the Online Booking System provider informs about the cookies installed in the user interface of this system
  15. The Data Controller may use automated decision-making, including profiling, for marketing purposes (including automated ad matching to your interests and measuring their effectiveness) and offer customization based on Article 6(1)(a) of GDPR.
  16. Recipients of personal data may be authorities, institutions, and entities entitled under legal regulations, as well as entities providing services to the Data Controller (e.g., legal, IT, marketing, accounting services, and other entities involved in fulfilling the ordered service).
  17. We use the following analytical tools:
    Google Analytics
  18. We use the following marketing tools:
  19. Users who have provided data to the Data Controller have the right to access their data. Users also have the right to modify these data, request their deletion, restriction, or cessation of processing at any time. Users may also request the deletion of their personal data from the service at any time. The right to data portability does not apply, as no data exchange standard has been established between hotel facilities.
  20. To exercise the rights indicated above, Service users should contact the Data Controller using the same email address or phone number provided to the Service, by contacting: rezerwacje@maloves.pl
  21. Service users have the right to withdraw their consent at any time without affecting the lawfulness of processing based on consent before its withdrawal by direct contact with the Data Controller or, in the case of technology, by changing cookie settings.
  22. Any Service user may file a complaint to the Personal Data Protection Office.
  23. The Service may include links to other websites that operate independently and are not in any way supervised by the Service. These websites may have their own privacy policies and terms of service, which we recommend reviewing carefully.
  24. The Data Controller reserves the right to change the privacy policy of the Service, which may be caused by the development of internet technology, possible changes in personal data protection law, and Service development. Users will be informed about any changes in a visible and clear manner.