Privacy

1. This Privacy Policy sets out the rules for the processing and protection of personal data provided by users in connection with their use of the services offered by the website Górska Legenda (hereinafter: the Website)
2. The administrator of the personal data contained on the Website is MAR & MONTANIA SPÓŁKA Z O. O. SPÓŁKA KOMANDYTOWA UL. GÓRSKA 62, 43-370 SZCZYRK, entered in the register of entrepreneurs under number NIP: 9372672717 (hereinafter: the Administrator).
3. In order to ensure the security of the entrusted personal data, the Administrator acts on the basis of internal procedures and recommendations compliant with the relevant legal acts concerning the protection of personal data, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC.
4. The Administrator exercises particular diligence to protect the interests of the data subjects and, in particular, ensures that personal data are:
   1. processed lawfully;
   2. collected for specified, explicit and legitimate purposes and not further processed in a manner incompatible with those purposes;
   3. factually accurate and adequate in relation to the purposes for which they are processed;
   4. stored in a form permitting identification of the data subjects for no longer than is necessary for the purpose of processing.
5. Personal data are processed on the basis of consent given by Website users and in cases where the provisions of applicable law authorise the Administrator to process personal data.
6. The Administrator processes personal data voluntarily provided by Website users solely for the purpose of:
   1. responding to users’ enquiries submitted via the contact form,
   2. accepting bookings via the online booking system,
   3. providing services rendered by the Administrator pursuant to Article 6(1)(b) of the GDPR,
   4. marketing, including sending commercial information to an email address, if the Client has consented to this by selecting the appropriate box during the booking process or when submitting an enquiry via the contact form. Consent to data processing for marketing purposes and to sending commercial information may be withdrawn by clicking the relevant link in the message received or by sending such a request to the Administrator’s email address,
   5. pursuing the legitimate interest of the personal data Administrator in specific cases pursuant to Article 6(1)(f) of the GDPR, e.g. debt collection or video monitoring of traffic on the premises.
7. Recipients of personal data may include authorities, institutions and entities authorised under the law, as well as entities providing services to the Administrator (e.g. legal, IT, marketing and accounting services, as well as other entities involved in providing the ordered service).
8. The Administrator may use automated decision-making, including profiling, for marketing purposes and to tailor the offer.
9. The Website user who provided the data has the right to access the data processed by the Administrator. The user also has the right to modify the data, request its deletion, and restrict or stop the processing of their personal data at any time. At any time, the user may also request that their personal data be deleted from the Website. The right to data portability does not apply because no standard for exchanging such data between hotel establishments has been established.
10. The Website user has the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
11. In order to exercise the rights referred to in point 8 above, the Website user should contact the Administrator using the same email address or telephone number provided to the Website, by contacting rodo@gorskalegenda.pl
12. Each Website user may lodge a complaint with the Personal Data Protection Office.
13. The Administrator collects information about users and their behaviour in the following ways:
    1. through the voluntary entry of information in forms,
    2. through the collection of “cookies”.
14. On their first visit to the Górska Legenda website, the user is informed about the use of cookies. By remaining on the website, the user accepts the use of cookies on the website. Failure by the user to change the browser settings is tantamount to consent to the use of “cookies”.
15. The installation of “cookies” is necessary for the proper provision of services on the Website. The “cookies" contain information necessary for the proper functioning of the website, in particular for services requiring authorisation. The user may change their browser settings concerning the handling and saving of cookies at any time.
16. The following types of “cookies” are used on the Website:
    1. session cookies - remain in the browser until it is closed or the user logs out of the website on which they were placed,
    2. persistent cookies - remain in the device’s web browser until deleted by the user or until the predetermined period specified in the cookie parameters expires.
17. In terms of functionality, each cookie may be divided into:
    1. conversion cookies, which allow the performance of various sales channels to be analysed
    2. tracking cookies, which, in conjunction with conversions, help analyse the performance of various sales channels
    3. marketing cookies, used to personalise advertising content and target it appropriately
    4. marketing cookies, used to personalise advertising content and target it appropriately
    5. analytical tools, which help improve the user experience by understanding how users use the website
    6. necessary files, which are fundamental to the basic functionality of the website. The cookies we use allow us to develop our website.
18. Some “cookies” may be placed by the website and online booking system provider solely for the purpose of:
    1. improving and supporting the booking process
    2. analysing and collecting statistical data concerning the use of the website and online booking system in order to improve them
19. The Website user may subscribe to the newsletter. If the Website user consents to receiving the newsletter, the Administrator will process their email address and, if necessary, their first and last name to send commercial information, in particular concerning products, promotions, competitions and new offers. The basis for processing personal data as part of the newsletter service is the necessity to perform a contract to which the Website user is a party, in accordance with Article 6(1)(b) of the GDPR. The Website user may withdraw consent to receive the newsletter at any time. To unsubscribe, the user should contact the Administrator or use the relevant link. Personal data will be stored for the duration of use of the newsletter service. Data may also be processed after the contract expires, solely if permitted or required by applicable law.
20. The Website may contain links to other websites that operate independently of the Website and are not supervised by the Website in any way. These websites may have their own privacy policies and terms and conditions, which we recommend reading carefully.
21. The Administrator reserves the right to amend the Website’s privacy policy, which may be caused by the development of internet technology, possible changes in data protection law and the development of the Website. Users will be informed of all changes in a visible and understandable manner.

List of entities processing data

• We use the following analytical tools: Google - Google’s Privacy & Terms site
• We use the following marketing tools: Google Ads - Google’s Privacy & Terms site