Reservation

Privacy Policy

Personal data will be processed for the purpose of completing the reservation process, clarifying circumstances of any potential violation of the Terms and Conditions or applicable laws, and handling any possible complaints.

In accordance with Article 13(1) and (2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (GDPR), we inform you that:

The data controller of the personal data collected during the reservation process, within the meaning of applicable laws, is Welmeh Sp. z o.o., ul. Czackiego 5, Łódź 93-504.

The entity processing personal data is the online reservation system Hotres.pl, owned by LEMONPIXEL.pl Roman Korczyński, located in Jelenia Góra 58-570, ul. Młyńska 12A, hereinafter referred to as Hotres.pl.

Personal Data

  1. For the purpose of the reservation process / issuing a sales document, the guest’s personal data is collected. Providing personal data is voluntary but necessary to complete the reservation.

  2. The guest has the right to access their personal data, request corrections, deletion, and also the right to restrict processing.

  3. Optional consent from the guest for processing data for marketing purposes requires ticking the appropriate checkbox during the reservation process.

This consent can be withdrawn by sending a request to the following email address: recepcja-oth@tiffi.com.

4. The detailed purposes and scope of personal data processing in the Hotres system are specified in the annex..

 

Obligations of the Data Controller

  1. The Data Controller ensures that the Guest’s personal data is not disclosed to third parties and will take the necessary measures and use its knowledge and experience to fulfill this assurance.
  2. The Data Controller reserves the right to disclose personal data to authorized entities (Sub-processors) and in cases provided by applicable law. This particularly concerns entities such as online payment systems and reception software.
  3. The Data Controller is obliged to maintain secrecy and confidentiality of information obtained for the purpose of the reservation process. This obligation remains in effect indefinitely.

Obligations of Hotres.pl

  1. Hotres.pl, as the entity processing the Guest’s personal data, ensures the implementation of appropriate technical and organizational measures, as well as additional IT security safeguards, based on reliable servers and systems used for processing personal data in electronically provided services.
  2. Hotres.pl declares that the IT systems used for personal data processing comply with applicable legal requirements, in particular they are protected to a high degree as defined by the Regulation of the Minister of the Interior and Administration of 29 April 2004 regarding the documentation of personal data processing and the technical and organizational conditions to be met by devices and IT systems used for personal data processing.
  3. Subcontractors and employees of Hotres.pl will be duly authorized to process personal data in connection with the reservation process, to which both the Data Controller and the Guest consent.
  4. To ensure the highest level of security in storing personal data compliant with GDPR requirements, Hotres.pl undertakes to:
    • encrypt and anonymize the transmission of personal data
    • continuously ensure the confidentiality, integrity, availability, and resilience of data processing systems and services
    • be capable of quickly restoring availability and access to personal data in the event of a physical or technical incident
    • regularly test, measure, and evaluate the effectiveness of technical and organizational measures ensuring data processing security.

Final Provisions

The Data Controller is entitled to make changes to the provisions of the Terms and Conditions at any time and at its sole discretion. In particular, changes may be made in the event of:

  1. the need to adapt the Terms and Conditions to mandatory legal regulations or changes in laws affecting the content of the Terms and Conditions;
  2. the need to adapt the Terms and Conditions to recommendations, interpretations, rulings, decisions of public authorities, or court judgments affecting the content of the Terms and Conditions;
  3. the expansion or modification of Hotres.pl’s functionalities.

1. Access data and hosting

You can visit our websites without providing any personal data. For every website request, the server automatically records so-called server logs, such as the name of the requested file, your IP address, the date and time of the request, the amount of data transferred, and the internet service provider making the request (access data), and documents the website call.

These data are analyzed solely to ensure the proper functioning of the website and to improve our offer. This serves — within the scope of balancing interests — to protect our legitimate interest in correctly presenting our offer. All access data is deleted within seven days after the end of your visit to the website.

Hosting services provided by an external service provider
As part of the processing entrusted to an external service provider on our behalf, hosting and website presentation services are performed for us. All data collected through the use of our website or through hotel reservation forms, as described in this privacy policy, are stored on the servers of this service provider. Processing on other servers takes place only within the scope defined in this privacy policy.

This service provider is based in a country belonging to the European Union or the European Economic Area.

2. Collection and processing of data for the purpose of contract execution and creating a customer account

We collect personal data only when you voluntarily provide it by placing an order, contacting us (e.g., via the contact form or email), or making a reservation through our website. By submitting personal data related to other persons to us or our service providers in connection with the services (e.g., making a reservation for another person), the user declares that they are authorized to do so and authorizes us to use the information in accordance with this Privacy Policy. Required fields are marked as such because the data contained in them is necessary for us to perform the contract or handle the matter you contacted us about, or to create a customer account. Without providing this data, it is not possible to complete the order, create a customer account, or contact us.

When registering and making reservations, we collect the following data:

last name and first name,

permanent residence address,

correspondence address, if different from the permanent residence address,

email address,

phone number.

We use the data you provide to fulfill the contract and respond to your inquiries. After the contract is fulfilled or your customer account is deleted, the processing of your data will be limited, and after the retention periods specified in tax laws and accounting regulations expire, this data will be deleted unless you explicitly consent to further use of the data or, in accordance with applicable laws, we reserve the right to continue using the data, in which case we inform you in this statement. Your customer account can be deleted at any time. To do so, please send a message to our contact address indicated in the “Contact” section or use the Contact Form function.

This service provider is based in a country belonging to the European Union or the European Economic Area.

3. Data Transfer

For the purpose of fulfilling the contract, we transfer your data to the courier company responsible for delivery, if this is necessary to deliver the order. Depending on the payment service provider you choose during the ordering process, the payment data collected for this purpose will be transferred to the financial institution processing the payment and possibly to the payment service provider selected by us or by you. Some payment service providers collect data independently if you create an account with them. In such cases, you need to log in to the payment service provider during the order process using your access data. The privacy policy of the respective payment service provider also applies in such cases.

Data transfer to the courier company
If you give us your explicit consent during or after making a reservation, we will transfer your email address and phone number to the selected courier company so that they can contact you before delivering the order to arrange or notify you about the delivery.

This consent can be withdrawn at any time by sending an appropriate message to our contact address indicated in the “Contact” section or by sending a message directly to the courier company at the contact address provided below. Upon withdrawal of consent, we will delete the data provided for this purpose, unless you explicitly agree to further use of your data for other purposes or unless we reserve the right to continue using the data in legally permitted cases, about which we will inform you in this statement.

4. E-Mail-Newsletter

Email advertising after subscribing to the newsletter
If you subscribe to our newsletter, we will use the data necessary for this purpose or provided by you separately to regularly send you our newsletter electronically based on the consent you have given.

You may unsubscribe from receiving the newsletter at any time by sending us a message with this information or by using the appropriate link included in the newsletter. After unsubscribing, we will delete your email address unless you explicitly consent to further use of your data for other purposes or unless we reserve the right to continue using the data in legally permitted cases, about which we inform you in this statement.

The newsletter is sent as part of data processing entrusted to a service provider who receives your email address from us for this purpose.

This service provider is based in a country belonging to the European Union or the European Economic Area.

5. Cookies and Web Analytics

To enhance our website and enable the use of certain functions to display appropriate products or for market research purposes, we use so-called cookies on our pages. This serves to protect our legitimate interests, involving the optimal presentation of our offer, based on an analysis and assessment of interests. Cookies are small text files that are automatically stored on your end device. Some cookies we use are deleted after the end of the web browser session, i.e., when the browser is closed (so-called session cookies). Other cookies are stored on your device and allow us to recognize your browser during your next visit to the website (persistent cookies). The retention period is specified in the cookie settings of your web browser. You can configure your browser to inform you about the use of cookies and allow you to decide whether to accept or reject them in certain cases or entirely. Browsers handle cookie settings differently. You will find explanations on how to change cookie settings in your browser’s help menu. They are available at the following links:

Internet Explorer™: https://support.microsoft.com/pl-pl/help/17442/windows-internet-explorer-delete-manage-cookies

Safari™: http://safari.helpmax.net/pl/ochrona-i-prywatnosc/usuwanie-plikow-cookie/

Chrome™: https://support.google.com/chrome/answer/95647?hl=pl&hlrm=en

Firefox™: https://support.mozilla.org/pl/kb/usuwanie-ciasteczek

Opera™: http://help.opera.com/Windows/12.10/pl/cookies.html

If you do not consent to the use of cookies, the functionality of our website may be limited.

This website also uses, as part of Google Analytics (see below), so-called DoubleClick cookies, which allow the recognition of your browser when using other websites. Information automatically generated by cookies about your use of this website is transmitted to Google servers in the United States and stored there. Due to the IP anonymization activated on this website, your IP address is shortened before being forwarded within the member states of the European Union or other states party to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to the Google server in the United States and shortened there. The anonymized IP address transmitted by your browser within Google Analytics is not combined with other Google data.

Google uses this information to compile reports on website activity and to provide other services related to website usage. This serves to protect our legitimate interests, based on an analysis and assessment of interests, aimed at the optimal and efficient operation of our website on the market. Google will transfer this information to third parties if required by law or if third parties process the data on Google’s behalf.

Google DoubleClick is a service offered by Google LLC (www.google.com).
Google LLC is headquartered in the USA and holds the EU-US Privacy Shield certification. The current certificate is available at this link. Under the agreement between the USA and the European Commission, the latter has determined an adequate level of data protection for companies holding the Privacy Shield certificate.

You can deactivate DoubleClick cookies by clicking the link. Furthermore, you can find information about the use of cookies and appropriate settings on the Digital Advertising Alliance website. You can also configure your browser to inform you about cookie usage and give you the option to accept or reject them either partially or entirely. If you do not accept cookies, the functionality of our website may be limited.

Use of Google (Universal) Analytics for Web Analytics Purposes
Our website uses Google (Universal) Analytics and Google Tag Manager, web analytics tools provided by Google Inc. (www.google.com). This serves to protect our legitimate interests, based on an analysis and assessment of interests, aimed at the optimal presentation of our offer. Google (Universal) Analytics uses methods that allow analysis of your use of the website, such as cookies. Automatically collected information about your use of this website is generally transferred to Google servers in the United States and stored there. Due to IP anonymization activated on this website, your IP address is shortened before being forwarded within the member states of the European Union or other states party to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to the Google server in the United States and shortened there. The anonymized IP address transmitted by your browser within Google Analytics is generally not combined with other Google data.

Google LLC is headquartered in the USA and holds the EU-US Privacy Shield certification. The current certificate is available at this link. Under the agreement between the USA and the European Commission, the latter has determined an adequate level of data protection for companies holding the Privacy Shield certificate.

You can prevent the recording of data collected by cookies regarding your use of our website (including your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available at: https://tools.google.com/dlpage/gaoptout?hl=pl

Alternatively, instead of installing the browser plugin, you can click this link to disable data collection by Google Analytics on our website. An opt-out cookie will then be stored on your device. If you delete your cookies, you will need to click the link again.

6. Advertising using e-marketing tools

Google AdWords Remarketing and Retargeting
With the help of Google AdWords, we promote our website in search results and on third-party websites. For this purpose, when you visit our website, a so-called Google Remarketing cookie is automatically placed on your device. Using an anonymous identifier (ID) and based on the pages you visit, this cookie enables the display of interest-based advertisements. This serves to protect our legitimate interest, in the context of analysis and balancing interests, aimed at optimizing the operation of our website in the market.

Further data processing occurs only if you have given consent to Google to link your browsing history and app usage with your account and to use information from your Google account to personalize ads shown on websites. If, in such a case, you are logged into your Google account when visiting our website, Google will combine your data with Google Analytics data to create and define target audience lists for remarketing purposes across different devices. For this purpose, Google temporarily combines your personal data with Google Analytics data to form target groups.

The Google AdWords Remarketing service is offered by Google LLC (www.google.com). Google LLC is headquartered in the USA and holds the EU-US Privacy Shield certification. The current certificate is available at the provided link. Under the agreement between the USA and the European Commission, the latter has confirmed an adequate level of data protection for companies holding the Privacy Shield certification.

You can deactivate cookies used for remarketing by clicking this link. Furthermore, you can find information about cookie usage and settings at the Digital Advertising Alliance website.

Other cooperating entities that use retargeting technologies:

Adform Germany GmbH -> http://site.adform.com/privacy-policy/en/
Facebook Inc -> https://www.facebook.com/about/privacy

7. Social Media Plugins

Social Media Plugins”

YouTube Video Plugins
This website integrates content from other providers. YouTube video plugins are provided by Google Inc (“Service Provider”). The YouTube service is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).

For YouTube videos available on our website, extended data protection mode has been activated. This means that YouTube does not collect or store information about visitors to the site unless they play the video.
The purpose and scope of data collection and its further processing and use by the service providers, as well as your rights and settings options to protect your privacy, are described in Google’s privacy policy.

8. LiveChat Cookies

For the operation of the LiveChat application enabling online chat with a consultant, which uses cookies, information is collected solely for the purpose of personalizing the individual user experience. The information stored in the LiveChat application is not combined with the personal data of internet users and is automatically deleted after the user leaves the store website. The store reserves the right to send specific users an invitation to chat with a consultant in the form of a message with options to “start chat/close window.” Users who have deleted cookies or have not accepted them in their browser cannot access the products and services provided by LiveChat, Inc.

You may withdraw your consent at any time by sending an appropriate message to our contact address indicated in the section “Our contact details and your rights” or directly by submitting a statement to LiveChat Inc.

9. Our Contact Details and Your Rights

You have the right to receive free information about your personal data stored by us, as well as the right to correct, restrict processing, delete, or transfer that data.

If you have any questions regarding the collection, processing, and use of your personal data, correction, blocking, or deletion of data, or if you wish to withdraw consent or object to the use of specific data, please contact the data administrator:

Welmeh Sp. z o.o.
ul. Czackiego 5
Łódź 93-504

Email: recepcja-oth@tiffi.com

Furthermore, you have the right to lodge a complaint with the competent supervisory authority.

Right to Object
If, as described in this privacy policy, we process personal data based on the analysis and balancing of interests to protect our legitimate interests, you may object to such processing for this purpose – with effect for the future. If processing is carried out for direct marketing purposes, you may exercise the right to object at any time. If processing takes place for other purposes, you may object only on grounds relating to your particular situation.

After you exercise the right to object, we will no longer process your personal data unless we demonstrate compelling legitimate grounds for processing that override your interests, rights, and freedoms, or if the processing serves the establishment, exercise, or defense of legal claims.

The above does not apply when data processing is for direct marketing purposes. In such cases, we will cease processing your personal data for that purpose.

********************************************************************

10. This version of the Privacy Policy is effective as of May 14, 2018.