Privacy Policy

Privacy Policy

This document explains how and under what rules we process your personal data when you contact us or use one of our services.

You will learn, among other things:

The following information applies to all of our websites, i.e. nosalowy-dwor.eu, nosalowypark.pl, and apartamentyparkresidence.nosalowy.pl.

The first part of the Privacy Policy contains information that we are required to provide to everyone, regardless of the purpose of data processing.

The second part contains information for users of our website.

The third part contains information for users subscribing to our free newsletter.

The fourth part contains information for individuals communicating with us directly by e-mail, telephone, or via the contact form available on our website.

The fifth part contains information for individuals participating in our recruitment processes.

The sixth part contains information for individuals purchasing services through our website and making reservations.

The seventh part contains information for individuals interested in our services as a result of our marketing activities, including social media activities.

Part I – General Information

Contact details of the controller of your personal data

The controller of your personal data is:

Nosalowy Dwór Spółka z ograniczoną odpowiedzialnością
with its registered office in Zakopane, ul. Balzera 21D, 34-500 Zakopane, Poland, entered into the Register of Entrepreneurs of the National Court Register maintained by the District Court for Kraków-Śródmieście, 12th Commercial Division of the National Court Register under number 0000398651, VAT No. (NIP): 7361714598.

In order to ensure the security of your personal data, we have appointed a Data Protection Officer, Ms. Katarzyna Rodacka. For all matters relating to the processing of your personal data, you may contact us at: iodo@nosalowy.pl

 

Where do we obtain your personal data from?

The personal data collected through our website comes directly from you. This happens when you:

What rights do you have regarding the processing of your personal data?

Below we present your rights related to personal data protection and the processing of your data by us. The rights available to you in a specific situation depend on the purpose and legal basis of the processing.

Right of access

You have the right to obtain information regarding the personal data we store about you. By submitting a request for access to your data, you will receive information about the processing of your personal data, including in particular the purposes and legal bases of processing, the scope of data held, entities to whom the data is disclosed, and the planned retention period.

Right to rectification

You have the right to request immediate correction and/or completion of personal data stored about you. We are obliged to ensure that our communication is based on accurate, complete, and up-to-date data.

Right to restriction of processing

You have the right to request restriction of the processing of your personal data if you contest the accuracy of the data, if the processing is unlawful, or if you have objected to the processing.

Right to erasure

You have the right to request the deletion of your personal data stored by us, unless retaining the data is necessary for freedom of expression and information, compliance with legal obligations, public interest purposes, establishment or defense of legal claims, or enforcement of rights under the law.

Right to information

If you exercise your right to rectification, deletion, or restriction of processing, we will notify all recipients of your personal data about the rectification, deletion, or restriction unless this proves impossible or requires disproportionate effort.

Right to data portability

You have the right to receive a copy of the data you provided to us in a structured, commonly used, machine-readable format, and to have it transmitted to another controller where technically feasible. This right applies only when processing is based on your consent or on a contract.

Right to object

If your personal data is processed based on our legitimate interest, you have the right to object at any time to further processing. We will assess your request in accordance with applicable law.

Right to withdraw consent

If your data is processed on the basis of consent, you have the right to withdraw that consent at any time with future effect. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

Right to lodge a complaint with a supervisory authority

If the processing of your personal data violates data protection regulations or your data protection rights have otherwise been infringed, you may lodge a complaint with the supervisory authority. In Poland, the competent authority is the President of the Personal Data Protection Office in Warsaw (ul. Stawki 2). Before lodging a complaint, we encourage you to contact us first so that we may address any concerns.

Response to requests

If you submit a request regarding your rights, we will respond within one month of receipt. If an extension is necessary, we will inform you of the reasons for the delay.

Responses will be sent to the e-mail address from which the request was submitted or, in the case of written requests, by regular mail to the address provided by you unless you specify otherwise.

Links to other websites

Where we provide links to websites operated by third parties, this Privacy Policy does not apply and does not describe how those entities process your personal data. We encourage you to review their respective privacy policies.

Visiting our website

Cookies

Like almost all websites, we use cookies.

Cookies necessary for the functionality, security, and accessibility of the website are essential for its proper operation. Through these cookies we know that you have accepted our Privacy Policy and Cookie Policy. These cookies are processed on the basis of our legitimate interest.

We also use cookies for analytical and marketing purposes. They allow us to measure advertising effectiveness by analyzing user activity on the website. Such tools are used on the basis of your consent.

You can read more about how we use cookies and how to change your preferences in our Cookie Policy.

Google Analitics

We use tools provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, namely Google Analytics, which enable us to collect statistical information regarding the use of our website, such as IP address, device type, and browser type. We do this to understand, among other things, the number of users visiting our website.

This information is processed only in a manner that does not directly identify individuals. However, Google may process your data on servers located in the United States. In such cases, Google processes data outside the European Economic Area on the basis of standard contractual clauses ensuring an adequate level of protection.

For more details regarding Google Analytics data processing, please refer to Google's explanations.

Google Here.


Facebook Pixel

We use marketing tools available within Facebook and provided by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. Through these tools we direct advertisements to you on Facebook.

To display personalized advertisements based on your behavior on our website, we have implemented the Facebook Pixel, which automatically collects information about your use of our website, including viewed pages.

The information collected through Facebook Pixel is anonymous from our perspective and does not allow us to identify you directly. However, Facebook may combine this information with other data collected about you and use it for its own purposes, including marketing purposes. Such actions are independent of us. You can find more information in Facebook’s Privacy Policy:
https://www.facebook.com/privacy/explanation

You may also manage your privacy settings directly through your Facebook account.

Changes to the Privacy Policy

The Privacy Policy is periodically reviewed and updated whenever necessary.

June 2023

We published this version of the Privacy Policy.

Part II – Processing of data when using Nosalowy Dwór websites

Below we present the rules for processing personal data (including IP addresses or other identifiers and information collected through cookies or similar technologies) applicable when using our websites: nosalowy-dwor.eu, nosalowypark.pl, and apartamentyparkresidence.nosalowy.pl.

For what purpose do we process your data?

We process your personal data in order to provide electronic services consisting of making the content available on our websites, as well as for analytical and advertising purposes.

Legal basis for processing

Retention period

We process your personal data for as long as necessary to achieve the purposes described in this Privacy Policy, including fulfilling contractual and statutory obligations, unless you withdraw your consent earlier.

Recipients of personal data

Recipients of your personal data may include our trusted subcontractors and IT service providers, including providers of analytical and marketing tools mentioned in Part I of this Privacy Policy.

Nature of providing data

Your personal data, including IP addresses and other identifiers, is collected automatically through cookies and similar technologies when you connect to our website.

 

Part III – Processing of data within the free newsletter service

Purpose of processing

We process your personal data to provide our services and inform you about promotions, new offers, and services. As part of the newsletter service, we may send personalized commercial information regarding our activities and those of our business partners.

Legal basis

Processing is based on your consent pursuant to Article 6(1)(a) GDPR.

Retention period

We process your data until you withdraw your consent. Upon withdrawal, the relevant data will be deleted immediately.

Data recipients

Recipients may include our IT service providers and Profitroom S.A., headquartered in Poznań, which provides the newsletter distribution system.

What data do we need?

We require your e-mail address. Newsletter subscription also requires confirmation via an activation link sent to your e-mail address.

Profiling

Using Profitroom functionalities, we may send commercial information tailored to groups distinguished based on general characteristics provided during booking, such as gender or having children. We do not make decisions based solely on automated processing that significantly affect individuals.

 

Part IV – Processing of data through communication channels

Purpose of processing

We process your personal data to respond to your inquiries, present hotel offers and services, and undertake actions aimed at concluding a contract.

Legal basis

Processing may be based on:

Retention period

We process your data until withdrawal of consent or for the duration required by applicable legal obligations and limitation periods.

Recipients

Recipients may include trusted IT providers, including Profitroom S.A., as well as banks, payment operators, accounting, legal, audit, and consulting service providers.

 

Part V. Processing of Data for Recruitment Purposes

The following information applies to individuals whom we contact using the data submitted to us via e-mail for recruitment purposes aimed at establishing cooperation.

We collect information, including your personal data, in order to communicate with you and conduct the recruitment process.

For what purpose do we process your data?

We process your contact data in order to consider your application in our recruitment process.

On what legal basis do we process your data?

The legal basis for processing your personal data is:

How long do we process your data?

Basic contact data obtained directly from you is processed only for the period necessary to conduct the recruitment process and for 3 months after the end of that process. If you consent to participate in future recruitment processes, your data will be processed for no longer than 12 months.

Who are the recipients of your personal data?

Recipients of your personal data, i.e. external entities participating in the processing of your data, are our subcontractors and IT service providers.

Nature of providing data

Providing data is voluntary. However, please note that if you do not provide your data, we will not be able to contact you for the purpose of conducting the recruitment process aimed at establishing cooperation.

What rights do you have?

Your rights are described in Part I of this Information on Data Processing.

 

Part VI. Processing of Data in Connection with Ordering Services and Making Reservations

Below we present the rules for processing personal data that apply when you purchase services offered by us or make reservations through our website.

For what purpose do we process your data?

We process your personal data in order to accept and handle your order and to confirm your reservation.

On what legal basis do we process your data?

The legal basis for processing your personal data is:

How long do we process your data?

We will process your personal data until you withdraw your consent, and with regard to activities related to the conclusion and performance of a contract, for the duration of the contract, the limitation period for claims, and the retention periods required by accounting and tax regulations.

Who are the recipients of your personal data?

Recipients of your personal data, i.e. external entities that may participate in the processing of your data, include our trusted subcontractors – IT service providers – as well as other entities supporting our business operations, including in particular banks and payment operators, accounting, legal, audit, and consulting service providers.

For the purpose of handling your orders and reservations, we use the Profitroom system provided by Profitroom S.A., with its registered office in Poznań, ul. Franklina Roosevelta 9 (60-829), entered into the Register of Entrepreneurs of the National Court Register maintained by the District Court Poznań – Nowe Miasto i Wilda in Poznań, 8th Commercial Division of the National Court Register under KRS number 0000793213.

Nature of providing data

Providing your data is voluntary; however, data marked as mandatory is required in order to accept and process your order and complete the reservation process. Failure to provide such data will make it impossible to conclude the contract. Providing other data is optional.

Other important information

Your data will not be processed outside the European Economic Area.

What rights do you have?

Your rights are described in Part I of this Privacy Policy.

Part VII. Processing of Data for Marketing Activities

Below we present the rules for processing personal data applicable when you use and communicate with us through our social media profiles on Facebook, Instagram, TripAdvisor, YouTube, and LinkedIn (hereinafter referred to as “fan pages”). On our fan pages, we regularly publish and share content, offers, and recommendations concerning our services.

For what purpose is your data processed?

We process your personal data solely in connection with operating our social media profiles, including informing you about our activities, promoting various events, services, and offers, and communicating with you via functionalities available on social media platforms.

Please note that administrators of social media platforms record your activity using cookies and similar technologies each time you interact with our fan pages and other websites of Facebook, Instagram, TripAdvisor, YouTube, and LinkedIn. Fan page administrators have access to general statistics concerning your interests and demographic data (such as age, gender, and region). When using social media platforms, the scope and purposes of data processing are determined by the administrators of those platforms.

On what legal basis do we process your data?

The legal basis for processing your personal data is:

How long do we process your data?

We process your personal data for as long as necessary to achieve the purposes described in this Privacy Policy, in particular to fulfill our contractual and legal obligations, unless you withdraw your consent earlier.

Facebook, TripAdvisor, YouTube, and LinkedIn process your data independently for their own purposes, which are not covered by this Privacy Policy. We have no influence over the processing activities carried out by these services. For more information, please refer to the privacy policies of the respective social media platforms:

Who are the recipients of your personal data?

Recipients of your personal data, i.e. external entities participating in the processing of your data, include our trusted subcontractors – IT service providers in the field of data hosting and corporate e-mail services – as well as:

Nature of providing data

Your personal data – including your IP address, other identifiers, and other information – is collected through cookies and similar technologies when you connect to our fan pages.

When using our fan pages, the scope and purposes of processing data within social media services are determined by the administrators of those platforms.

For more information, please refer to the privacy policies of the respective social media platforms:

Other important information

Your data may be processed outside the European Economic Area on the basis of standard contractual clauses ensuring an adequate level of protection for your personal data.

What rights do you have?

Your rights are described in Part I of this Privacy Policy.

In order to ensure the highest quality of our services, we have appointed a Data Protection Officer, who can be contacted by sending an e-mail to: iodo@nosalowy.pl

 

 

List of data processors

Manage cookie settings
Manage privacy settings
Essential cookies

Cookies necessary for the operation of services available on the website, enabling browsing offers or making reservations, supporting security mechanisms, including user authentication and abuse detection. These files are required for the proper functioning of the website. They do not require your consent.

Analytical cookies

Cookies allowing the collection of information about the user's use of the website in order to optimize its functioning and adapt it to user expectations. By consenting to these cookies, you agree to the processing of data regarding your activity on the site for analytical purposes.

Marketing cookies

Cookies enabling the display of marketing content tailored to the user's preferences and directing marketing offers to them corresponding to their interests, including information about user activity, products, and services of the site administrator and third parties. Consent to these cookies means that your data may be used for advertising personalization and analysis of the effectiveness of our advertising campaigns.

Your preferences have not yet been saved