Contact
pl
pl

Privacy and cookie policy

1. Data Administrator

The data controller of your personal data is Szklarska Apartments Sp. z o.o., a limited liability company based in Gdańsk at Al. Zwycięstwa 13A (80-219), NIP: 5842779311, correspondence address: Al. Zwycięstwa 13A, 80-219 Gdańsk.

You can contact the Data Administrator regarding personal data protection at the email address biuro@zlotyhoryzont.com.pl

The Administrator takes particular care to protect the interests of individuals whose data is processed, and in particular ensures that the data collected is processed in accordance with the law, collected for specified, lawful purposes and not subject to further processing incompatible with those purposes, accurate and relevant to the purposes for which it is processed, and kept in a form that allows identification of the data subjects, no longer than necessary to achieve the processing purpose. The Administrator also pays special attention to informing you about everything related to personal data provided by you in connection with contact with the Company, as well as fully ensuring the security of personal data, including guaranteeing influence over the scope of processed data and facilitating the exercise of all your rights.

2. Purposes and Legal Grounds for Processing Personal Data

The Administrator processes your personal data for various purposes, but always in accordance with the law. Below you will find detailed purposes for processing personal data along with their legal bases.

To handle inquiries submitted via the contact form or directly electronically, we process the provided personal data, such as: first name, last name, contact details. The legal basis for such data processing is Article 6(1)(b) of the GDPR. If you choose to provide additional data, we consider that you have consented to the processing of these additional data as well—the legal basis for such processing is Article 6(1)(a) of the GDPR, which allows processing personal data based on voluntarily given consent.

In the case of accepting an offer/placing an order— for the purpose of concluding and executing the contract, i.e., based on Article 6(1)(b) of the GDPR, we process personal data such as: first name and last name, address of residence (if provided), PESEL number or NIP number, identity document details, email address, order number (if provided) and business data (if provided) such as: business name, registered office address, NIP number, REGON number.

To determine, pursue, or defend against claims, we process personal data such as: first name and last name, address of residence (if provided), PESEL number or NIP number, identity document details, email address, order number (if provided) and business data (if provided) such as: business name, registered office address, NIP number, REGON number.

The legal basis for such data processing is Article 6(1)(f) of the GDPR, which allows processing personal data if the Data Administrator is pursuing their legitimate interests (in this case, the Company’s interest is to have personal data that allows establishing, pursuing, or defending against claims, including from clients and third parties).

For archival and evidentiary purposes, we process personal data such as: first name and last name (if provided), email address, order number—for the purpose of securing information that may be used to prove facts of legal significance. The legal basis for such data processing is Article 6(1)(f) of the GDPR, which allows processing personal data if the Data Administrator is pursuing their legitimate interests (in this case, the Company’s interest is to have personal data that can prove certain facts related to the provision of services, e.g., when a state authority requests it); for fulfilling obligations imposed on the Administrator by law (Article 6(1)(c) of the GDPR).

For analytical purposes, i.e., studying and analyzing activity on the Company’s website, we process personal data such as: date and time of site visits, type of operating system, approximate location, type of web browser used to view the site, time spent on the site, visited subpages, and the page where the contact form was filled out. The legal basis for such data processing is Article 6(1)(f) of the GDPR, which allows processing personal data if the Data Administrator is pursuing their legitimate interests (in this case, the Company’s interest is to understand client activity on the website).

For using cookies on the website, we process text information (cookies will be described in a separate section). The legal basis for such data processing is Article 6(1)(a) of the GDPR, which allows processing personal data based on voluntarily given consent (when first entering the website, a request for consent to use cookies appears).

For administering the website, we process personal data such as: IP address, server date and time, browser information, operating system information—this data is automatically logged in the so-called server logs whenever the Company’s website is used. Administering the website without using a server and without this automatic logging would not be possible. The legal basis for such data processing is Article 6(1)(f) of the GDPR, which allows processing personal data if the Data Administrator is pursuing their legitimate interests (in this case, the Company’s interest is administering the website).

3. Cookies

The Company, on its website, like other entities, uses so-called cookies, which are small text files stored on your computer, phone, tablet, or other device. They can be read by our system, as well as by systems belonging to other entities whose services we use (e.g., Google).

Cookies serve many functions on the website, most of which are useful, and we will try to describe them below (if the information is insufficient, please contact us):

  • Ensuring security — cookies are used to authenticate users and prevent unauthorized access to the client panel. They thus protect user personal data from unauthorized access;
  • Affecting processes and performance of using the website — cookies are used to ensure that the site operates smoothly and that the features available can be used, which is possible, among other things, by remembering settings between visits to the site. They enable smooth navigation on the website and its subpages;
  • Session state — cookies often store information about how visitors use the website, e.g., which subpages are viewed most frequently. They also help identify errors displayed on some subpages. Cookies used to store the so-called “session state” thus help improve services and increase browsing comfort;
  • Maintaining session state — if a client logs into their panel, cookies enable the session to be maintained. This means that when moving to another subpage, there is no need to re-enter the username and password each time, which enhances the comfort of using the website;
  • Creating statistics — cookies are used to analyze how users use the website (how many open the website, how long they stay, which content is of the most interest, etc.). This allows continuous improvement of the website and adjustment of its functionality to user preferences. For tracking activity and creating statistics, we use Google tools, such as Google Analytics; besides reporting website usage statistics, Google Analytics pixels can also, along with some of the cookies described above, help display more relevant content to users in Google services (e.g., in Google search) and across the web;
  • Displaying advertisements — this type of cookie allows for customizing ads, making website use free, to users’ preferences and habits. They enable delivering more tailored advertising content to users’ interests and needs and help assess the effectiveness of advertising efforts.

Importantly, many cookies are anonymized for us—without additional information, we cannot identify your identity based on them.

Your web browser by default allows cookies to be used on your device, so on your first visit, we ask for your consent to use cookies. However, if you do not wish to use cookies while browsing the website, you can change the settings in your web browser—either completely block automatic cookie handling or request notification of each cookie placed on your device. Settings can be changed at any time.

Respecting the autonomy of all individuals using the website, we feel obliged to warn you that disabling or limiting cookie handling may cause quite significant difficulties in using the website, e.g., requiring re-login on each subpage, longer page loading times, and limitations in using functionalities.

4. Right to Withdraw Consent

If the processing of personal data is based on consent, you may withdraw that consent at any time—at your discretion.

If you would like to withdraw your consent for the processing of personal data, you can do so by sending an email to the address indicated in section I of the Policy or by mail to the address of the Administrator specified in section I of the Policy.

If the processing of your personal data was based on consent, withdrawing it does not make the processing of data up to that point illegal. In other words, until consent is withdrawn, we have the right to process your personal data, and its withdrawal does not affect the legality of the data processing that occurred prior to the withdrawal. Providing your personal data is always voluntary.

5. Requirement to Provide Personal Data

Providing any personal data is voluntary and at your discretion. However, in some cases, providing certain personal data is necessary to, for example, contact you for handling an inquiry or to fulfill a contract or meet your expectations regarding the use of the platform.

6. Automated Decision-Making and Profiling

We would like to inform you that we do not engage in automated decision-making, including profiling.

7. Recipients of Personal Data

Like most businesses, we use the assistance of other entities in our operations, which often involves the need to transfer personal data. Therefore, if necessary, we may provide your personal data to the following recipients: Szklarska Apartments Sp. z o.o., IT service providers, hosting service providers, transport companies, postal/courier operators, legal service providers, banks, and entities collaborating on order fulfillment (to the extent necessary to achieve the processing purpose).

Additionally, it may occur that, based on applicable legal provisions or decisions by competent authorities, we will have to provide your personal data to other entities, whether public or private. Therefore, it is extremely difficult for us to predict who might request access to personal data. Nevertheless, we assure you that we analyze each request for data disclosure very carefully and thoroughly to ensure that we do not inadvertently disclose information to unauthorized persons.

8. Transfer of Personal Data to Third Countries

We would like to inform you that your personal data may be transferred to third countries, which is related to the processing of personal data in IT systems. In the case of data transfers to third countries, such transfers will be conducted using standard contractual clauses approved by the European Commission to ensure an adequate level of data protection required by law.

9. Data Processing Period

In accordance with applicable law, we do not process your personal data “forever,” but only for as long as necessary to achieve the designated purpose. After this period, your personal data will be irreversibly deleted or destroyed.

We strive to minimize the retention period of personal data that is no longer used. However, due to technological or operational reasons, the Administrator may need time to remove data from backup copies. Please add 30 days to the periods listed below for the removal of data from backup copies.

Regarding specific periods of personal data processing, we kindly inform you that your data processed for the purpose of handling an inquiry will be retained by us for:

  • the duration of correspondence regarding the inquiry and the time necessary to achieve the purpose resulting from the content of the inquiry, and then, depending on the results of the correspondence—either it will be added to our client database and further processed to fulfill the contract or the data will be deleted if cooperation cannot be established. In the case of a clear closure of discussions from your side, the data will be promptly deleted from operational system databases. In the case of concluding a contract, the data will be processed for the time necessary to fulfill and use the rights and obligations arising from it, including the time necessary to fulfill legal obligations imposed on the Administrator and to pursue claims and defend against claims.
  • until the withdrawal of consent or achievement of the processing purpose, but not longer than 10 years—for personal data processed based on consent;
  • until an effective objection is raised or the processing purpose is achieved, but not longer than 10 years—for personal data processed based on the legally justified interest of the Data Controller;
  • until the data becomes outdated or loses its usefulness, but not longer than 10 years—for personal data processed mainly for analytical purposes, use of cookies, and website administration.

10. Data Subject Rights

We would like to inform you that you have the right to:

  • access your personal data;
  • correct your personal data;
  • delete your personal data;
  • restrict the processing of your personal data;
  • object to the processing of your personal data;
  • data portability.

Please note that these rights are not absolute, and therefore, in some situations, we may lawfully refuse to fulfill your request. However, if we refuse to accommodate a request, it will only be after a thorough analysis and only in cases where refusal is necessary.

  • there are legally justified grounds for processing that override your interests, rights, and freedoms, or there are grounds for establishing, pursuing, or defending claims.

You can exercise your rights by sending an email to biuro@zlotyhoryzont.com.pl.

11. Right to Lodge a Complaint

If you believe that your personal data is being processed in violation of applicable law, you may lodge a complaint with the President of the Personal Data Protection Office.

12. Final Provisions

In matters not regulated by this Privacy Policy, the provisions of personal data protection law shall apply.

This Privacy Policy is effective as of September 29, 2023.