Privacy and Cookies Policy

Below you will find information regarding the processing of your personal data in connection with your use of the website available at: https://masurialakehouse.pl/ („Website”), as well as the processing of your personal data in other instances. In this Privacy Policy, you will also find information about the cookies used on the Website.

Data Controller and Contact Information

Your personal data is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (GDPR).

The Data Controller, meaning the entity that determines the purposes and means of processing your personal data, is JFK CAPITAL Jan Kwapiński, Biały Kamień 7/17, 02-593 Warszawa, NIP 5213910208, Regon 387315880

For matters related to the processing of personal data, you can contact us via email: info@masurialakehouse.pl

Processing of Personal Data of Individuals Contacting the Data Controller (via email, phone, contact form, social media messaging)

When you contact us via email, phone, contact form, or social media messaging—such as Messenger, WhatsApp, or direct messages on Instagram—your personal data is processed for the following purposes and on the following legal bases:

Responding to your inquiries, which constitutes the legitimate interest of the company under Art. 6(1)(f) GDPR;
Taking actions prior to entering into a contract at your request, such as sending offers at your request, based on Art. 6(1)(b) GDPR;
Establishing, pursuing, and defending claims, which constitutes our legitimate interest under Art. 6(1)(f) GDPR.
Providing personal data is voluntary, but necessary to fulfill the above purposes, especially to respond to your inquiry or send an offer..

Your personal data is processed for the period necessary to achieve the above purposes or until you submit an effective objection to the processing of personal data. If we enter into a contract with you, personal data collected during correspondence will be stored in accordance with the rules outlined in the section „Processing of Personal Data of Clients (natural persons).” If no contract is concluded between us, personal data will be deleted no later than 5 years after the initial contact.

You have the right to access and modify your personal data at any time, as well as the right to request immediate deletion by the Controller („right to be forgotten”).

Żądania z zakresu przetwarzania danych osobowych mogą Państwo zgłaszać mailowo na adres administratora: info@masurialakehouse.pl

Processing of Personal Data of Clients (natural persons)

When we enter into a contract for the provision of services on your behalf, when you create an account on our website, post a comment on the Website, or make a purchase via the reservation system on the website, we receive personal data directly from you and process it for the following purposes and on the following legal bases:

Entering into and performing a contract with you – based on Art. 6(1)(b) GDPR;
Providing services electronically via the Website, including: enabling the use of an online account, identifying the person registering or logging into the online account, posting comments under entries on the Website – based on Art. 6(1)(b) GDPR (data processing is necessary to perform the contract for the provision of electronic services);
Ongoing communication regarding the provision of services, handling potential complaints, preventing fraud, which constitutes our legitimate interest in accordance with Art. 6(1)(f) GDPR;
Fulfilling our legal obligations concerning taxes and accounting, including: issuing invoices or other accounting documents, bookkeeping, tax settlement, archiving data for accounting purposes – based on Art. 6(1)(c) GDPR in relation to tax law and the accounting act;
Establishing, pursuing, and defending claims, which constitutes our legitimate interest in accordance with Art. 6(1)(f) GDPR;
For marketing purposes, i.e., sending you commercial information electronically, including newsletters, or directing marketing communications to you via telephone if you have given your consent – based on Art. 6(1)(a) GDPR and in accordance with Art. 10 of the Act on Electronic Services or Art. 172 of the Telecommunications Law.
The Controller processes publicly available personal data of users, such as names or general information shared on profiles, marked as public, or provided to the Controller by the User. For the purpose of service provision, including room reservation, the necessary data to be processed includes name, contact number, address, and email address.

Providing personal data necessary for fulfilling our legal obligations is mandatory and results from tax regulations and the accounting act. Providing personal data for the purpose of entering into a contract is voluntary but necessary for the conclusion and performance of the contract. Providing personal data for other purposes is voluntary and is not a condition for entering into or performing the contract.

Personal data is stored for the duration of the contract and afterward until the statutory data retention obligation ceases (5 years after the end of the tax year) or until the expiration of the limitation period for claims. Personal data processed based on consent is stored until the consent is withdrawn.

In the case of an online account, the data processed in that account will be stored until the account is deleted (except for transactional data, which we are required to retain in accordance with statutory deadlines).

When adding content (posts, comments) on the Website, your personal data will be stored for the duration of the publication of that post or comment, and after it is removed, the data will no longer be stored by us.

Processing of Personal Data of Contractors (natural persons conducting business activity)

If we enter into a contract with you for the provision of services or another agreement, we receive personal data directly from you and process it for the following purposes and on the following legal bases:

Entering into and performing a contract with you – based on Art. 6(1)(b) GDPR;
Entering into and performing a contract with you – based on Art. 6(1)(b) GDPR;
Ongoing contact regarding service provision, handling potential complaints, preventing fraud, maintaining business relationships, which constitutes our legitimate interest in accordance with Art. 6(1)(f) GDPR;
Establishing, pursuing, and defending claims, which constitutes our legitimate interest in accordance with Art. 6(1)(f) GDPR;
For marketing purposes, i.e., sending you commercial information electronically, including newsletters, or directing marketing communications to you via telephone if you have given your consent – based on Art. 6(1)(a) GDPR and in accordance with Art. 10 of the Act on Electronic Services or Art. 172 of the Telecommunications Law.
Fulfilling our legal obligations concerning taxes and accounting, specifically: bookkeeping, tax settlement, archiving data for accounting purposes – based on Art. 6(1)(c) GDPR in relation to tax law and the accounting act;

Establishing, pursuing, and defending claims, which constitutes our legitimate interest in accordance with Art. 6(1)(f) GDPR;

For marketing purposes, i.e., sending you commercial information electronically, including newsletters, or directing marketing communications to you via telephone, if you have given your consent – based on Art. 6(1)(a) GDPR and in accordance with Art. 10 of the Act on Electronic Services or Art. 172 of the Telecommunications Law.

We process your identification data (e.g., first and last name, the name of the entity you represent or collaborate with, the name of your position or function, and the scope of your responsibilities), data regarding your authority (e.g., the date, type, and scope of the authorization), and your contact details (e.g., work phone number, email).

We process your personal data for the following purposes and on the following legal bases:

To enter into and perform a contract between the contractor or client and us, and particularly to verify your authority to enter into the contract on behalf of the contractor or client, and to contact you as a point of contact in connection with the performance of the contract—based on Art. 6(1)(f) GDPR, i.e., based on the legitimate interest pursued by both us and our contractor or client, which is to enable us to efficiently perform the contract and verify your authority to enter into the contract on behalf of the contractor or client;
To settle taxes and maintain accounting records—based on Art. 6(1)(c) GDPR, i.e., the processing is necessary to fulfill our legal obligations under applicable laws, including tax law and accounting regulations;
To establish, pursue, or defend claims between the contractor or client and us—based on Art. 6(1)(f) GDPR, i.e., the processing is necessary for the purposes of our legitimate interests, which involve the ability to establish, pursue, or defend claims;
To establish or maintain business relationships with the contractor or client through you, which constitutes our legitimate interest in accordance with Art. 6(1)(f) GDPR;
For marketing purposes, i.e., sending you commercial information electronically, including newsletters, or directing marketing communications to you via telephone, if you have given your consent—based on Art. 6(1)(a) GDPR and in accordance with Art. 10 of the Act on Electronic Services or Art. 172 of the Telecommunications Law.
If you provide us with your personal data directly, it is voluntary, but necessary for entering into and performing the contract and establishing business relationships. Failure to provide personal data will prevent us from entering into and performing the contract and maintaining business relationships. Providing personal data for marketing purposes is entirely voluntary.

Your personal data is processed for the period necessary to achieve the purposes mentioned above, particularly for the duration of the business relationship and the execution of the contract with our contractor or client. Afterward, the data will be stored until the expiration of the limitation period for claims or until the legal obligation to retain data (e.g., tax law) expires. Personal data processed based on consent will be stored until the consent is withdrawn.

Processing of Personal Data in Connection with Newsletter Subscription

After entering into an agreement with us for the provision of digital content in the form of a newsletter, by subscribing through the appropriate sign-up form on our Website, we receive your personal data directly from you and process it based on Article 6(1)(a) of GDPR and in accordance with Article 10 of the Act on Electronic Services or Article 172 of the Telecommunications Law.

Providing personal data is voluntary. Your personal data will be stored until you withdraw your consent, i.e., terminate the agreement for the provision of digital content in the form of the newsletter.

Processing of Personal Data on Social Media

We do not maintain profiles on social media platforms.

Processing of Data in Connection with Submitting Requests Regarding Rights Under GDPR

Since you are entitled to certain rights regarding the processing of your personal data, you may correspond with us to exercise those rights. In connection with this, we process your identification data, contact details, and other data provided in the correspondence with you or with another person who submits the request on your behalf under GDPR. If the request is not submitted directly by you but by an authorized representative or legal guardian, we also process data regarding that representative or guardian, including their identification data, contact details, and information about the type of authorization.

The personal data of applicants is processed by us for the following purposes and on the following legal bases:

For the purpose of handling correspondence related to the submitted request concerning the exercise of rights under GDPR, based on Article 6(1)(c) of GDPR, as the processing of personal data is necessary to fulfill the legal obligation imposed on us by Articles 12(1)–(3) of GDPR;
For the purpose of archiving correspondence related to the handling of the submitted request concerning the exercise of rights under GDPR, for evidence purposes, and to demonstrate that we responded to the request in a timely manner, which constitutes our legitimate interest in accordance with Article 6(1)(f) of GDPR.
Providing personal data is necessary to fulfill the request.

Personal data is processed for the duration of correspondence, after which it will be archived for evidence purposes until the expiration of the limitation period for claims.

Recipients of Personal Data

Your personal data may be disclosed to other entities, including:

Our subcontractors, contractors, particularly entities providing legal, training, accounting, marketing, or IT services (in most cases, these are data processors with whom we have entered into data processing agreements);
Banks or institutions intermediating payments in the online store;
Couriers, postal services;
Entities authorized under legal regulations;
In the case of content published by you on our Website, your personal data may also be visible to visitors to the Website.
Automated Decision-Making

If you consent to the use of advertising cookies on the Website (as outlined in the Privacy Policy) or if you are a subscriber to the Newsletter, we analyze data regarding your browsing history on the Website, your transaction history in the online store, your activity history on our social media profiles, as well as data from Newsletters we send you. This analysis is conducted automatically, taking into account your actions, clicks on the Website or in the Newsletter (if you subscribe to it). However, this information will not have any legal effect on you or similarly affect your situation. The purpose of this analysis is to select the advertisements displayed to you while browsing websites and to tailor the products offered to you. You may receive special offers through personalized email, postal, or online advertisements on our Website or external channels (e.g., on social media).

Transfer of Data Outside the EEA

In connection with our use of Google Analytics, email services, and potentially other service providers, your personal data may be transferred to third countries, but only based on appropriate safeguards as provided for under GDPR, particularly the EU Standard Contractual Clauses.

For Google Analytics, anonymous IP address tracking (so-called IP masking) has been implemented on the Website using the code „gat._anonymizelp();”. As a result, the user’s IP address is shortened by Google within the EU and EEA. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. More information on data processing as part of the Google Analytics service can be found here: https://policies.google.com/privacy.

Your Rights

In connection with the processing of your personal data, you have the following rights:

The right to access your personal data (Art. 15 GDPR), including obtaining a copy of the data (Art. 15(3) GDPR),
The right to rectify (correct) or complete incomplete personal data (Art. 16 GDPR),
The right to request the deletion of personal data in cases provided by law (Art. 17 GDPR),
The right to request the restriction of personal data processing (Art. 18 GDPR),
The right to receive your data in a structured, commonly used format and to have it transferred, where processing is based on your consent or a contract, and the processing is carried out by automated means (Art. 20 GDPR),
The right to object to the processing of your personal data when it is processed based on our legitimate interests, for reasons related to your particular situation (Art. 21 GDPR),
The right to withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
Powyższe prawa mogą Państwo zrealizować, pisząc do nas na adres e-mail: info@masurialakehouse.pl

Additionally, if you believe that the processing of your personal data violates GDPR regulations, you have the right to lodge a complaint with a supervisory authority.

Our Website uses cookies or similar technologies. Cookies are small text files that contain information about your activity on the Website and store it on the device you use to access the Website.

According to applicable laws, we may store cookies on your device if they are strictly necessary for the functioning of the Website (these cookies are described below as necessary). The use of all other types of cookies (especially analytical and advertising cookies) requires your consent.

On the Website, we use the following types of cookies:

Strictly necessary cookies: These cookies, which according to the law do not require your prior consent, are essential for the proper functioning of the Website, such as performing services requested by you via the Website, saving your preferences (e.g., cookie preferences), or keeping you logged into your account. These cookies are not deleted after you finish browsing the Website but have a specified expiration period. The installation of strictly necessary cookies does not require your prior consent: they are automatically installed on your device when you access the Website or make certain selections on the site.
Performance cookies: These cookies are used to verify the number of visits to the Website and the sources through which you accessed our Website, helping analyze the performance of the Website and identify areas for improvement. These cookies require your prior consent.
Functional cookies: These cookies are needed to perform certain functions on the Website, such as video or live chat features. For example, they may store technical data needed to play video or audio content you wish to view or listen to on the site. These cookies require your prior consent.
Advertising and audience-related cookies, including those of third parties. These cookies require your prior consent. These third parties have access to information collected through their cookies. They include:
Google Inc. (through services such as Google Analytics, Google DoubleClick, and, where applicable, the Google Plus plugin);
Advertising and audience-related cookies may include profiling cookies, which create user profiles to deliver advertisements tailored to user preferences shown while browsing the internet, and retargeting cookies, used to deliver ads related to products similar to those you showed interest in (e.g., displaying product pages you visited on the Website when browsing related sites) or to measure the effectiveness of marketing campaigns (ours or third parties’).

As mentioned above, your consent is required for the use of cookies other than the strictly necessary ones. Therefore, when you first visit our Website, a banner will appear with information about cookies. On future visits, this banner should not appear again, as necessary cookies will store your preferences.

You can change your cookie settings at any time, including withdrawing consent for specific types of cookies, by using the cookie settings panel available at the bottom of the website under the „Cookie Settings” button.

This Privacy Policy may be updated in the event of changes to legal regulations affecting the processing of your personal data or the use of cookies, as well as if there are changes in the way we process personal data or the types of cookies used.

This Privacy Policy was implemented on September 25, 2024.