Palace Zdunowo - Privacy Policy

General Information

  1. This Privacy Policy sets out the rules for the processing and protection of personal data provided by Users in connection with the use of the website www.PalacZdunowo.pl.
  2. The controller of the personal data contained in the service is:
    Pałac Zdunowo Sp. z o.o.
    KRS: 0001132805
    NIP: 5671933508
    REGON: 529920610

Personal Data

  1. The Controller collects information voluntarily provided by the user, including personal data, where such data are made available.
  2. Personal data are processed:
    1. For the purpose of providing the services offered by the Controller
    2. For the purpose of communicating with users
    3. For analytical and statistical purposes
    4. For marketing purposes, provided that the User has given consent
  3. The Controller processes the following personal data:
    1. First name and surname
    2. E-mail address
    3. Telephone number
    4. Other data voluntarily provided by the user

Users’ Rights

  1. The User has the right to:
    1. Access their personal data
    2. Rectify their data
    3. Erase their data (the “right to be forgotten”)
    4. Restrict the processing of their data
    5. Data portability
    6. Object to processing
    7. Withdraw consent to the processing of personal data

Cookies

  1. The service uses cookies, i.e. small text files stored on the User’s end device (computer, tablet or smartphone) when using the website. Cookies make it possible to recognise the User’s device and to display the website in a manner tailored to the User’s individual needs.
  2. The following types of cookies may be used on the website:
    1. Essential (technical) cookies — enable the website to function correctly, including maintaining the User’s session, remembering privacy settings and ensuring security.
    2. Functional cookies — allow the website to remember settings and preferences selected by the User (e.g. language).
    3. Analytical and statistical cookies — are used to collect information on how the website is used, the number of visits and the popularity of individual pages.
    4. Marketing cookies — are used only with the User’s consent, in order to tailor marketing messages or to carry out promotional activities.
  3. Depending on how long they are stored, cookies may be session cookies (stored until the User leaves the website or closes the browser) or persistent cookies (stored for a defined period or until deleted by the User).
  4. The website may use both first-party cookies set by the Controller and third-party cookies (e.g. from providers of analytical, hosting or marketing tools).
  5. Cookies are used in particular for the purpose of:
    1. Ensuring the correct operation and security of the website
    2. Maintaining the User’s session
    3. Adjusting the content of the website to the User’s preferences
    4. Optimising the use of the website
    5. Creating anonymous or aggregated website traffic statistics
    6. Carrying out marketing activities, provided that the User has given consent
  6. The use of essential cookies is based on the Controller’s legitimate interest. The use of other cookies (in particular analytical cookies, non-essential functional cookies and marketing cookies) is based on the User’s consent.
  7. The User may at any time give, change or withdraw consent to the use of non-essential cookies by adjusting their web browser settings or — where available — by using the consent management mechanism on the website.
  8. The User may manage cookies independently, including blocking, restricting or deleting them, by changing their web browser settings. Restricting or disabling cookies may affect certain functionalities of the website.

Data Security

  1. The Controller applies appropriate technical and organisational measures to ensure the security of the personal data being processed.
  2. Personal data are protected against:
    1. Access by unauthorised persons
    2. Processing in breach of applicable law
    3. Loss, damage or destruction

Disclosure of Data

  1. Users’ personal data may be disclosed to entities authorised to receive them under applicable law.
  2. The Controller may entrust the processing of personal data to third parties providing specific services, including:
    1. Hosting services
    2. IT services
    3. Marketing services
    4. Analytical services

Legal Basis

  1. The legal basis for the processing of personal data is:
    1. Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016
    2. The Personal Data Protection Act of 10 May 2018
    3. The Telecommunications Law of 16 July 2004

Contact

  1. In matters relating to the protection of personal data, the Controller may be contacted:
    1. Electronically at: recepcja@palaczdunowo.pl
    2. In writing at the Controller’s registered office address

Changes to the Privacy Policy

  1. The Controller reserves the right to make changes to the Privacy Policy.
  2. Users will be informed of any changes by means of an appropriate notice published on the website.
  3. The current version of the Privacy Policy is effective as of 1 January 2025.