Privacy Policy

I. GENERAL

KOŚCIELISKO RESORT Spółka z Ograniczoną Odpowiedzialnością, KRS: 0001065863; NIP: 6762654631; REGON: 526769816, with its registered office at 31-057 Kraków, ul. Kupa 3 / 13, processes your personal data as the controller of your personal data (Data Controller - ADO) within electronic means of remote communication.

Using the website www.giewonthill.pl is possible without the User providing personal data to the Data Controller, subject to the provisions of Section II. However, if the processing of personal data is necessary and there is no statutory basis for such processing, we will in each case request the User’s consent.

The processing of personal data is carried out in accordance with Regulation (EU) 2016/679 (GDPR) and the Personal Data Protection Act.

We have made every effort to ensure the highest possible protection of personal data processed via the indicated website.

Website covered by this Privacy Policy: https://www.giewonthill.pl (hereinafter: the Website).

Contact with the Data Controller: Plac Szczepański 8/208, 33-332 Kraków, or via the contact form on the Website. Additional information may be obtained via: biuro@giewonthill.pl

II. INFORMATION COLLECTED

The Website collects a range of general data when it is accessed. Such information is stored as server logs. Accessed resources are identified by URL addresses. The following data may also be recorded:

  1. time the request arrives;
  2. name of the station – identification performed by the HTTP protocol;
  3. information on errors occurring during the execution of the HTTP transaction;
  4. types and versions of Internet browsers;
  5. operating system used to access the Website;
  6. addresses of sites from which the User was redirected to the Website;
  7. subpages of the Website;
  8. date and time of opening the Website;
  9. IP address;
  10. Internet service provider data.

These data serve to administer the server hosting the Website. They may also be used by law enforcement authorities in case of unlawful activity. These data are also subject to anonymised statistical analysis. Anonymous server log data are stored separately from other personal data.

The Data Controller may also collect and process personal data voluntarily provided by Users for the purpose of handling requests, in particular when the User sends information, requests, complaints, inquiries, or applications via email or the online form.

III. ELECTRONIC AND TELEPHONE CONTACT

The Website contains functionalities enabling quick contact with the Data Controller, involving processing of data such as name, surname, email address, and telephone number. If the User contacts the Data Controller via email or the online contact form, the data is automatically processed.

Such voluntarily provided data is stored for processing or contacting the data subject.

The Website also provides Click-to-Call functionality. Call costs are borne by the User according to their telecommunications provider.

Personal data is not transferred to third parties except telecom/IT service providers supporting technical operation of the Website and newsletter (if separate consent is given).

For telephone marketing by the Data Controller, the User may provide prior consent under Article 172 of the Telecommunications Law. Consent may be withdrawn at any time by emailing biuro@giewonthill.pl or notifying the caller directly.

IV. COMMENTING ON THE WEBSITE

The Website does not provide Users with the ability to post individual comments that would be publicly accessible on the Website, nor does it allow Users to submit ratings of products or services through the Website

V. REQUIREMENT TO PROVIDE PERSONAL DATA

The Data Controller does not provide electronic services via the Website. The Website contains no sales functionalities.

Personal data is provided voluntarily. However, submitting personal data may be required to process complaints, objections, or inquiries via the online contact form.

Lack of personal data may prevent the Data Controller from handling the request.

VI. LEGAL BASIS FOR PROCESSING

Personal data may be processed only when at least one of the following conditions is met:

  1. the data subject has given consent (Art. 6 (1)(a) GDPR);
  2. processing is necessary for a contract or steps before entering into one (Art. 6(1) (b) GDPR);
  3. processing is necessary to comply with a legal obligation (Art. 6(1)(c) GDPR);
  4. processing is necessary to protect vital interests (Art. 6(1)(d) GDPR);
  5. processing is necessary for a task in the public interest (Art. 6(1)(e) GDPR);
  6. processing is necessary for legitimate interests pursued by the controller (Art. 6(1)(f) GDPR);
  7. personal data has been entrusted to the Data Controller for processing, by the Data Controller (ADO) for the purposes of establishing or maintaining a relationship with a business partner, promoting the property areas of Enklawa Polany or ADO’s own services, taking actions at the request of a User interested in entering into a contract with ADO, performing a concluded contract, and handling complaints. The processing of personal data is based on Article 6(1)(b) and (f) of the GDPR and applies to the website www.giewonthill.pl

Data may be transferred to service providers supporting the operation and promotion of Enklawa Polany, and IT providers supporting Website and newsletter operation (if consent is given).

VII. DATA RETENTION PERIOD

Retention periods are based on statutory requirements.
After this period, data is routinely deleted unless further processing is necessary to perform or settle a contract.

Data is stored only as long as necessary for its purpose and legal basis.
Data is deleted when the purpose or legal basis no longer applies.
Data is not stored longer than claims limitation periods.

VIII. RIGHTS OF THE USER WHOSE DATA IS CONCERNED

1. RIGHT TO INFORMATION ABOUT THE PROCESSING OF PERSONAL DATA

The User whose data is concerned has the right to obtain from the Data Controller (ADO) at any time confirmation of whether personal data concerning them is being processed, and to receive the following information:

  1. which personal data is being processed;
  2. the categories of personal data being processed;
  3. the purposes of processing;
  4. information about recipients or categories of recipients to whom the personal data has been or will be disclosed, in particular recipients in third countries or international organizations;
  5. the planned period of storage of personal data, where possible, or, if not possible, the criteria used to determine that period;
  6. information about the right to request from ADO the rectification, erasure, or restriction of processing of personal data concerning them, as well as the right to object to such processing;
  7. information about the right to lodge a complaint with a supervisory authority;
  8. if the personal data has not been collected from the User – any available information about its source;
  9. information about automated decision-making, including profiling, and—at least in those cases—meaningful information about the logic involved, as well as the significance and expected consequences of such processing for the User;
  10. whether personal data is transferred to a third country or an international organization and the appropriate safeguards related to such transfer.

If the User wishes to exercise this right, they may contact the ADO at biuro@giewonthill.pl at any time. In such a case, ADO will provide the User whose data is concerned with a copy of the personal data being processed.

2. RIGHT TO RECTIFICATION

The User whose data is concerned has the right to request from ADO the immediate rectification of any personal data concerning them that is inaccurate. Considering the purposes of processing, the User also has the right to request the completion of incomplete personal data, including by providing an additional statement.

If the User wishes to exercise this right, they may contact ADO at biuro@giewonthill.pl at any time.

3. RIGHT TO BE FORGOTTEN

The User whose data is concerned has the right to request from ADO the immediate deletion of personal data concerning them. ADO is obliged to delete the personal data without undue delay if one of the following circumstances applies:

1. the personal data are no longer necessary for the purposes for which they were collected or otherwise processed;

2. the User withdraws consent on which the processing is based, and there is no other legal basis for processing;

3. the User objects to the processing, or objects and there are no overriding legitimate grounds for processing;

4. the personal data has been unlawfully processed;

5. the personal data must be deleted to comply with a legal obligation under Union or Member State law to which ADO is subject;

6. the personal data has been collected in connection with the provision of information society services.

If the User wishes to exercise this right, they may contact ADO at biuro@giewonthill.pl at any time.

If ADO has made personal data public and is obliged to delete it on the above basis, ADO, taking into account available technology and implementation costs, will take reasonable steps, including technical measures, to inform other data controllers processing this personal data that the User requests the deletion of any links to, copies, or replications of this data, unless processing is necessary:

  1. a) to exercise the right to freedom of expression and information;
  2. b) to comply with a legal obligation under Union or Member State law, or to perform a task carried out in the public interest or in the exercise of official authority;
  3. c) for reasons of public interest in public health;
  4. d) for archiving purposes in the public interest, scientific or historical research, or statistical purposes, if the law likely prevents or seriously hinders the achievement of these purposes;
  5. e) to establish, exercise, or defend legal claims.

4. RIGHT TO RESTRICTION OF PROCESSING

The User whose data is concerned has the right to request that ADO restrict the processing of their personal data in the following cases:

  1. the accuracy of the personal data is contested by the User, for a period enabling ADO to verify the accuracy;
  2. processing is unlawful, and the User opposes the deletion of the personal data and requests restriction instead;
  3. ADO no longer needs the personal data for processing purposes, but the User requires them to establish, exercise, or defend legal claims;
  4. the User has objected, pending verification of whether ADO’s legitimate grounds override those of the User.

If the User wishes to exercise this right, they may contact ADO at biuro@giewonthill.pl at any time.

5. RIGHT TO DATA PORTABILITY

The User whose data is concerned has the right to receive from ADO, in a structured, commonly used, and machine-readable format, the personal data they provided, and the right to transmit this data to another controller without hindrance from ADO, where:

  1. processing is based on consent (Art. 6(1)(a) or 9(2)(a) GDPR) or on a contract (Art. 6(1)(b) GDPR); and
  2. processing is carried out by automated means, except for processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority.

If the User wishes to exercise this right, they may contact ADO at biuro@giewonthill.pl at any time. The User may also request that the data be transmitted directly to another controller, where technically feasible.

6. RIGHT TO OBJECT

The User whose data is concerned has the right at any time to object—on grounds relating to their particular situation—to the processing of personal data based on Article 6(1)(e) or (f) GDPR (i.e., where processing is necessary for the performance of a task in the public interest, the exercise of official authority, or for legitimate interests pursued by ADO), including profiling on that basis. ADO may no longer process the personal data unless it demonstrates compelling legitimate grounds for processing that override the interests, rights, and freedoms of the User, or for establishing, exercising, or defending legal claims.

If personal data is processed for direct marketing purposes, the User has the right to object at any time to the processing of their personal data for such marketing, including profiling, to the extent it is related to direct marketing. Upon objection, personal data must no longer be processed for such purposes.

If personal data is processed for scientific, historical, or statistical purposes, the User may object - on grounds relating to their particular situation - unless processing is necessary for the performance of a task carried out in the public interest.

If the User wishes to exercise this right, they may contact ADO at biuro@giewonthill.pl at any time. Independently of Directive 2002/58/EC, the User may exercise the right to object through automated means using technical specifications.

7. AUTOMATED DECISION-MAKING IN INDIVIDUAL CASES, INCLUDING PROFILING

ADO does not engage in automated decision-making or profiling on the website beyond what is stated in this Privacy Policy. The User has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects or similarly significantly affects them, unless the decision:

  1. a) is necessary for entering into or performing a contract between the User and ADO; or
  2. b) is permitted by Union or Member State law, providing appropriate safeguards for the User’s rights and legitimate interests; or
  3. c) is based on the User’s explicit consent.

The User also has the right to obtain human intervention, express their point of view, and contest the decision.

If the User wishes to exercise this right, they may contact ADO at biuro@giewonthill.pl at any time.

8. RIGHT TO WITHDRAW CONSENT TO PROCESSING

The User whose data is concerned has the right to withdraw their consent to the processing of their personal data at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

If the User wishes to exercise this right, they may contact ADO at biuro@giewonthill.pl at any time.

9. RIGHT TO LODGE A COMPLAINT WITH A SUPERVISORY AUTHORITY OR COURT

If ADO does not act on a User’s request, it will inform the User without undue delay, but no later than within one month of receipt of the request, of the reasons for inaction and the possibility of lodging a complaint with a supervisory authority or seeking legal remedies before a court.

Without prejudice to other administrative or judicial remedies, any User has the right to lodge a complaint with a supervisory authority, particularly in the Member State of their habitual residence, place of work, or place of the alleged infringement, if they believe that the processing of their personal data violates the GDPR.

The User also has the right to challenge the decision of the supervisory authority in court. In addition to administrative or extrajudicial remedies, every User has the right to an effective judicial remedy if they consider that their GDPR rights have been violated by processing of their personal data in breach of the GDPR. Proceedings against ADO are initiated before the court of the Member State in which ADO has its registered office, or alternatively in the Member State of the User’s habitual residence.

If the User wishes to exercise this right, they may contact ADO at biuro@giewonthill.pl at any time.

IX. COOKIE POLICY

The Website uses cookies - text files stored on User devices. Cookies contain identifiers enabling browser recognition and adaptation of content based on IP address, location, and language.

Cookies are used to tailor content, optimise the Website, and generate anonymised statistics.

Two types are used: session cookies and persistent cookies.

Cookie settings may be modified in the browser.
Restricting cookies may affect some Website functionalities.

X. FINAL PROVISIONS

This Privacy Policy is available at https://www.giewonthill.pl and at the registered office of the ADO (Data Controller)

 

Favorites ()
Privacy Policy
Design and implementation
System CRM dla deweloperów OneButton