Personal Data Protection Policy at APARTZAKOP Apartments and VIPAPARTAMENTY, hereinafter referred to as the Property

Who is the controller of your data?

1. The controller of your personal data is NIERUCHOMOŚCI IMPER S.C. SZAFIRSKA JOANNA, PEJKO AGNIESZKA, ul. Henryka Sienkiewicza 1C, 34-500 Zakopane, NIP 7361632185.
2. All inquiries, comments and concerns regarding our Personal Data Protection Policy should be sent to apartzakop@gmail.com or to the following address: Nieruchomości Imper S.C., ul. Henryka Sienkiewicza 1C, 34-500 Zakopane.

What data do we process? How do we obtain it?

1. We only process personal data that you voluntarily provide to us.
2. We receive your personal data in connection with the reservation process / conclusion of a contract / service request at the Property, or as a result of you leaving such data via the contact form on our website, on online platforms we cooperate with, or through other direct communication channels.

For what purpose and on what basis do we process your data?

1. Processing of your personal data is necessary for us to perform the contract concluded with you / handle your reservation / respond to your inquiries.
2. The law requires us to process your data for tax and accounting purposes.
3. We also process your personal data based on the legitimate interests of the Property, which include:
   1. ensuring the provision, security and settlement of services / reservations / transactions related to the services we provide to you, including enforcing the Property’s internal rules;
   2. handling your inquiries submitted to the Property, when they are not directly related to contract performance;
   3. conducting research and statistical analyses of the Property’s website regarding its functionality, service improvements, or assessing the main interests and needs of visitors;
   4. conducting research and analyses of online portals mediating in the conclusion of contracts with the Property / reservations for services booked by you, regarding functionality, service improvements, or assessing visitor needs;
   5. debt collection; conducting court, arbitration, and mediation proceedings;
   6. storing data for archival purposes and demonstrating compliance with legal obligations;
   7. processing your data for direct marketing of the Property’s products and services, including sending commercial information based on your consent.
4. The legal basis for processing your data is Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR).

What data may we ask you to provide?

1. Depending on the purpose and method of data collection, we may ask you to provide:
   1. First name, last name
   2. Address of residence
   3. ID card / passport number
   4. Vehicle registration number
   5. Telephone number, email address
   6. Company name, address, VAT number
   7. Payment card number, bank account number

Do you have to provide us with your data?

1. Providing personal data is voluntary but necessary for the services we provide, including handling your reservation or performing other contractual services.
2. Consent to receive information about special offers, promotions, discounts, and other marketing campaigns is also voluntary. This consent allows us to send you our newsletter. If you do not give consent, we will simply not send you such materials. You may change or withdraw your consent at any time.

How long do we store your personal data?

1. We store your data primarily until your reservation or other contracted service has been completed and the period for pursuing potential claims has expired.
2. Additionally, data may be stored for fraud prevention, statistical and archival purposes for up to 10 years from the end of the contract / stay.
3. For accountability purposes, we will retain data for as long as the Property is legally obliged to keep such data or documents to demonstrate compliance with legal requirements, including inspections by public authorities.

What rights do you have regarding your data?

1. You may:
   1. access and correct your data,
   2. in justified cases, request the deletion or restriction of processing, or object to certain uses of your data,
   3. in justified and properly documented cases, request that we transfer your personal data to third parties.

Who has access to your data? To whom will we never disclose it?

1. Your personal data is only shared with employees and associates who need access to ensure high-quality service, including handling your reservation / contract / request or inquiry.
2. If your data is processed by an external entity, it is only on our behalf and under a contract with that entity. We do not share your data with external entities for their own purposes – only to deliver our services. All entities processing your personal data ensure its security and fulfill all data protection obligations.
3. In addition to our authorized staff, access to data may also be given to event organizers included in our offer and contractors providing management, accounting, marketing, IT, and legal services.
4. If necessary, we may share your personal data with public authorities combating fraud and abuse.

Do we transfer your data outside the European Economic Area?

Your personal data will only be transferred outside the EEA if necessary for the performance of your contract / service.

Do we process your personal data automatically (including profiling) in a way that affects your rights?

1. Your personal data will be processed automatically (including profiling), however this will not produce any legal effects for you or otherwise significantly affect your situation.
2. Profiling by the Property involves processing your data (including automated processing) in particular to analyze or predict your personal preferences and interests.

Do we use cookies and plugins for other platforms?

Cookies

1. Through cookies (small text files saved by your browser on your device), the Property collects data on how you use our websites in order to improve our services for visitors and users. By adjusting your browser settings, you may block cookies at any time or allow them only when explicitly accepted by you.
2. Cookies do not enable us to identify you personally. Data stored in cookies includes information such as visited pages, date and time of visits, and other browsing activity.
3. For analysis purposes, aggregated and anonymous statistical data is collected. A shortened IP address of the visitor may also be processed.
4. The data is analyzed particularly for:
   1. calculating the number of site visitors,
   2. tracking areas of the site that are most attractive to users,
   3. analyzing visitor origins to optimize services,
   4. tailoring offers to specific target groups.

Plugins

1. Our website uses plugins from social networks and other service providers.
2. When you view our website containing such a plugin, your browser establishes a direct connection to the servers of Facebook, Instagram, Google, or TripAdvisor.
3. The content of the plugin is transmitted directly to your browser by the service provider and integrated into the site. Through this integration, providers receive information that your browser has displayed our site, even if you do not have an account or are not logged in.
4. Such information (including your IP address) is transmitted by your browser directly to the provider’s server and stored there.
5. The purpose and scope of data collection and further processing by providers, as well as your rights and privacy protection options, are described in the providers’ privacy policies.