Privacy Notice

Legal Notice

As of May 25, 2018, Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, GDPR) became applicable.

In connection with this fact, we inform you that your personal data will be processed under the following conditions:

  1. This Privacy Policy defines the principles of processing and protection of personal data provided by users in connection with the use of services offered by the Lipowa32 Apartments website (hereinafter: the Service).

  2. The data controller of personal data contained in the Service is Gniecki s.c., registered under tax identification number (NIP): 9190002000 (hereinafter: the Controller).

  3. To ensure the security of entrusted personal data, the Controller operates in accordance with internal procedures and recommendations compliant with relevant legal acts on personal data protection, particularly Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 (GDPR).

  4. The Controller exercises due diligence to protect the interests of data subjects, ensuring that personal data is:
    a. processed lawfully;
    b. collected for specified, legitimate purposes and not further processed in a manner incompatible with those purposes;
    c. accurate and adequate relative to the purposes for which it is processed;
    d. stored in a form that allows identification of data subjects no longer than necessary to fulfill the processing purposes.

  5. Personal data is processed based on consent given by the Service users and/or in cases where applicable law authorizes the Controller to process personal data.

  6. The Controller processes voluntarily provided personal data only for the purposes of:
    a. responding to user inquiries via the contact form;
    b. handling reservations made through the online booking system;
    c. providing services based on Art. 6(1)(b) GDPR;
    d. marketing activities, including sending commercial information to the user’s email address, provided the user consents by ticking the relevant checkbox during the reservation or inquiry process. Consent for marketing purposes can be withdrawn at any time via a link in the received message or by contacting the Controller via email;
    e. pursuing legitimate interests of the Controller, e.g., debt collection or video surveillance of the premises, based on Art. 6(1)(f) GDPR.

  7. Recipients of personal data may include authorities, institutions, and entities authorized under law, as well as service providers supporting the Controller (legal, IT, marketing, accounting, and others involved in service delivery).

  8. The Controller may use automated decision-making, including profiling, for marketing and offer customization.

  9. Users have the right to access, modify, delete, restrict or stop the processing of their personal data at any time, as well as request deletion of their data from the Service. The right to data portability does not apply, as no standardized data exchange between accommodation providers is established.

  10. Users may withdraw their consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

  11. To exercise these rights, users should contact the Controller at the email address or phone number provided to the Service, or via biuro@gniecki.com.

  12. Users have the right to lodge a complaint with the Data Protection Authority.

  13. The Controller collects information about users and their behavior by:
    a. voluntary submission of information via forms;
    b. collecting cookies.

  14. Upon first visit, users are informed about cookie usage. Staying on the website implies consent to cookies. Not changing browser settings is also considered consent.

  15. Cookies are necessary for proper service functioning, especially for authorization. Users can change browser cookie settings anytime.

  16. The Service uses:
    a. session cookies — active until browser is closed or user logs out;
    b. persistent cookies — remain until deleted or expire.

  17. By function, cookies are categorized as:
    a. conversion cookies — analyze sales channel effectiveness;
    b. tracking cookies — analyze sales channels combined with conversion data;
    c. marketing cookies — personalize ads and targeting;
    d. analytics tools — improve user experience;
    e. essential cookies — fundamental for basic website functionality.

  18. Some cookies may be placed by the website provider and booking system only to:
    a. enhance and support the booking process;
    b. collect statistical data for website and booking system improvement.

  19. The Service may contain links to external websites operating independently with their own privacy policies and terms, which users are advised to review carefully.

  20. The Controller uses the following tracking technologies:

    • Facebook Pixel for ad management and remarketing;

    • Google Analytics for website traffic analysis;

    • Google AdWords Conversion Tracking for advertising and remarketing.

  21. The Controller reserves the right to change the Privacy Policy due to technological development, legal changes, or Service improvements. Users will be informed of changes clearly and visibly