PRIVACY POLICY
INTRODUCTORY INFORMATION
Below you will find the Privacy Policy of Lędowo House, which applies to hotel and additional services provided within the Hotel and the processing of personal data on the hotel’s website (www.ledowohouse.com), including cookies.
DATA CONTROLLER
The administrator, i.e. the entity deciding on the purposes and means of processing personal data, is Lędowo House with its registered office in Lędowo (83-021) at ul. Nad Motławą 38 – the owner of Lędowo House. In matters related to the processing of your personal data, you can also contact us by e-mail at the following e-mail address: ledowohouse@gmail.com
ACQUISITION OF DATA AND THE PURPOSE OF THEIR PROCESSING
Lędowo House processes your data for the following purposes:
1. Email and traditional mail correspondence
| Purpose of processing and legal basis | Period of data storage | In the case of collecting data in a way other than from you – the source of their origin and categories of personal data. |
| In order to conduct correspondence and ensure the circulation and archiving of documents, which constitutes the legitimate interest of the administrator (Article 6 paragraph 1 letter f of the GDPR). Information on the purpose of processing data contained in the content of correspondence and related legal bases is provided in the remaining parts of the information clause (depending on what the correspondence concerns) | As a rule, data are processed for periods specified by law, and if they are not indicated for specific documents, for the time when their storage falls within the legally justified purpose of the administrator regulated by the time of possible claims. The period of storage of data constituting the content of correspondence, however, depends on the purpose of data processing to which the given correspondence relates (if there are other deadlines for deletion of data, information on this subject is provided in a separate information clause) | As a rule, we process data provided by you |
2. Newsletter subscribers and recipients of marketing activities
| Purpose of processing and legal basis | Period of data storage | In the case of collecting data in a manner other than from you – the source of their origin and categories of personal data |
| We process your data in order to implement the legitimate interest of the Administrator (Article 6 paragraph 1 letter f of the GDPR), consisting in marketing its own products and services using the following forms of communication: – newsletter (sending a newsletter), – sending commercial information (e-mail messages), – sending commercial information (sending text messages), – sending promotional materials by traditional mail in order to fulfill the obligations arising from the provisions of the law (Article 6 paragraph 1 letter f of the GDPR). c GDPR) Also in connection with the implementation of other legitimate interests of the administrator (art. 6 sec. 1 let. f GDPR): – in order to determine, pursue and defend claims – for statistical purposes related to improving work efficiency, quality of services provided and adapting them to recipients | Your personal data will be stored until you withdraw your consent or file a justified objection, i.e. show us in any way that you do not wish to remain in contact with us and receive information about the actions we take. After withdrawing your consent or expressing an objection, personal data may be stored for the purposes of demonstrating the correctness of fulfilling the legal obligations incumbent on the Administrator and claims related to them | If we did not obtain personal data directly from you, their source is the entity that had your consent to make them available to the Administrator, or another valid legal basis. In this case, the personal data obtained include data necessary to conduct a given type of marketing activities (typically these are name, surname, e-mail address, telephone number and/or correspondence address) |
3. Users of the Lędowo House website (www.ledowohouse.com)
| Purpose of processing and legal basis | Data storage period | In the case of data collection in a manner other than from you – their source and categories of personal data |
| In order to provide the basic functions of our website. If you have expressed appropriate (voluntary) consent, your data will also be processed to provide you with services, offers and messages tailored to your preferences and to analyze website traffic and provide social functions (depending on the preferences you have indicated) (Article 6 paragraph 1 letter f of the GDPR); details on the use of cookies can be found in CookiesWe also process personal data in connection with the implementation of other legitimate interests of the administrator, based on Article 6 paragraph 1 letter f of the GDPR. f GDPR: – to establish, pursue and defend claims – for statistical purposes related to improving work efficiency, quality of services provided and adapting them to recipients | Your personal data will be stored until you withdraw your consent or file a justified objection, i.e. show us in any way that you do not wish to remain in contact with us and receive information about the activities we undertake. After withdrawing your consent or expressing an objection, personal data may be stored for the purposes of demonstrating the correctness of fulfilling legal obligations incumbent on the Administrator or until the expiry of the limitation periods for claims, depending on which period is longer. In the event of concluding an agreement with the Administrator (e.g. in the scope of providing services electronically), personal data will be processed for the duration of the agreement, and after its termination until the expiry of the limitation periods for claims arising from it | As a rule, we process data provided by you. |
4. Reservation of rooms and additional services
| Purpose of processing and legal basis | Data storage period | In the case of data collection in a manner other than from you – the source of their origin and categories of personal data |
In order to execute contracts with Hotel guests by enabling the reservation of a room and additional services (Article 6 paragraph 1 letter b of the GDPR) If applicable – for the purpose of settlement, accounting and financial reporting (Article 6 paragraph 1 letter c of the GDPR) We also process personal data in connection with the implementation of other legitimate interests of the administrator, on the basis of Article 6 paragraph 1 letter b of the GDPR f GDPR: – to establish, pursue and defend claims – for statistical purposes related to improving work efficiency, quality of services provided and adapting them to recipients | Your personal data may be stored for the purposes of demonstrating the correctness of fulfilling legal obligations incumbent on the Administrator or until the expiry of the limitation periods for claims, depending on which period is longer in the case of concluding an agreement with the Administrator (e.g. in the scope of providing services electronically or using the reservation system), personal data will be processed for the duration of the agreement, and after its termination until the expiry of the limitation periods for claims resulting from it As a rule, data processed for the purposes of implementing the legitimate interests of the Administrator are processed until an effective objection is filed | In the case of making a reservation on a platform intermediating in reservations (e.g. Booking.com), we received your data from this platform. The scope of the data received is: first name, last name, number of accompanying persons, date of stay, preferences, additional services, reservation number, subject of the reservation, other data provided by you during the reservation |
5. Provision of hotel services
| Purpose of processing and legal basis | Data storage period | In the case of data collection in a manner other than from you – the source of their origin and categories of personal data |
| The data of Lędowo House guests are processed for the following purposes: – in order to conclude and implement a contract for hotel services, including for the purpose of handling complaints (art. 6 sec. 1 letter b of the GDPR); – in order to provide additional services at your request, such as: Spa & Wellness, treatments, massages, concierge services, luggage storage, passenger transport, catering services and the sale of goods and other services provided in accordance with the current offer of the Lędowo House Hotel (art. 6 sec. 1 letter b of the GDPR); – in order to fulfill legal obligations related to accounting, issuing invoices, taxes, fees, including climate fees, the implementation of the Tourist Voucher and the performance of statistical obligations towards the Central Statistical Office (art. 6 sec. 1 letter c of the GDPR) And also for purposes constituting our legitimate interest (Article 6, paragraph 1, letter f of the GDPR);, i.e.: – determining, pursuing and defending claims, in particular those related to the hotel service agreement and the Hotel’s liability for items brought by the guest; – ensuring the safety of guests and hotel staff through security and video monitoring; – direct marketing of Lędowo House goods and services after granting prior consent to a given communication channel; – handling inquiries from guests and people interested in staying on the basis of your possible consent (Article 6, paragraph 1, letter a of the GDPR) in order to: – adapt your experience at the Hotel to your individual needs, e.g. adapt the room to the circumstances of an engagement, anniversary, etc.; – take into account preferences related to the sport practiced or the way of spending free time | In the event of granting consent to the processing of personal data concerning health, your personal data may be stored for a period of 10 years from the date of the procedure. In addition, your personal data may be stored for the purposes of demonstrating the correctness of fulfilling the legal obligations incumbent on the Administrator or until the expiry of the limitation periods for claims, depending on which period is longer. In the event of concluding an agreement with the Administrator (e.g. in the scope of providing services electronically or using the reservation system), personal data will be processed for the duration of the agreement, and after its termination until the expiry of the limitation periods for claims arising from it. | As a rule, data processed for the purposes of implementing the legitimate interests of the Administrator are processed until an effective objection is filed, and data processed on the basis of consent until its withdrawal, which can be done at any time, provided that the withdrawal of consent does not affect the lawfulness of the processing carried out on its basis before its withdrawal. As a rule, we process the data provided by you. However, it may turn out that the reservation was made by a person acting on your behalf (e.g. employer, event organizer). In such a case, we receive the data necessary to make the reservation: first name, last name. In the case of making a reservation on a platform intermediating in reservations (e.g. Booking.com), we received your data from this platform. The scope of data received is: name, surname, number of accompanying persons, date of stay, preferences, additional services, reservation number, subject of the reservation, other data provided by you during the reservation. |
6. Contact forms
| Purpose of processing and legal basis | Data storage period | In the case of data collection in a manner other than from you – the source of their origin and categories of personal data |
| legitimate interest of the administrator (Article 6 paragraph 1 letter f of the GDPR). Lędowo House’s response may also be related to the implementation of legal obligations incumbent on Lędowo House (e.g. responses to requests from data subjects under the GDPR), in such a case the legal basis for processing is the legal obligation of Lędowo House (Article 6 paragraph 1 letter c of the GDPR). Data may also be processed in connection with the implementation of other legitimate interests of the administrator (Article 6 paragraph 1 letter f of the GDPR): – in order to determine, pursue and defend claims, – for statistical purposes related to improving work efficiency, quality of services provided and adapting them to recipients. | Data is processed for the time when its storage is within the legitimate purpose of the administrator regulated by the time of possible claims. The storage period of data constituting the content of correspondence may depend on the purpose of data processing to which the given correspondence relates (if there are other deadlines for deletion of data, information on this subject is provided in a separate information clause). | As a rule, we process data provided by you. |
DETAILED INFORMATION ON THE PROCESSING OF PERSONAL DATA ON THE WEBSITE WWW.LEDOWOHOUSE.COM
Social media
On our website you can find links to our profiles on social media sites. To the extent that we manage these profiles, we are administrators or – depending on the given service – co-administrators of personal data together with the given owner of the social media portal, in connection with which we process personal data of visitors to our profiles maintained in social media (Facebook, Instagram, Twitter). This data is processed solely for the purposes of:
a) maintaining our profile (placing information about promotions, offers, activities of Lędowo House);
b) obtaining anonymized analytical and statistical data obtained by a given service based on parameters previously established by us based on the nature of our clientele, as well as our goals in the field of promotion and marketing;
c) direct marketing,
d) communication with our clients through tools provided by a given service
And also:
a) to determine, pursue and defend claims,
b) for statistical purposes related to improving work efficiency, quality of services provided and adapting them to recipients
The legal basis for the processing of personal data by us for the above purposes is our legitimate interest (Article 6, paragraph 1, letter f of the GDPR).
In the case of Facebook, the administrator or joint administrator (e.g. in the scope of Facebook Page Insights) of your personal data is Meta Platforms Ireland Ltd. with its registered office in Dublin (address: 4 Grand Canal Square Grand Canal Harbour Dublin 2, Ireland). The joint controllership agreement can be found at the following address: https://www.facebook.com/legal/controller_addendum.
The Facebook service is subject to appropriate regulations and privacy policies. To familiarize yourself with Facebook’s privacy policy, we encourage you to visit this page: https://www.facebook.com/privacy/explanation.
Your personal data will be stored until the application is processed and the limitation periods for claims expire.
As a rule, we process the data provided by you. If you have not provided us with your data, their source is the person who indicated your data in the application. We obtain personal data to the extent necessary to process the application, most often including name and surname, e-mail address, telephone number, correspondence address, and circumstances subject to notification.
Facebook lead ads
As part of the Facebook portal, the Administrator uses lead ads, which allow you to provide contact details and transfer them to the Administrator. Until the User’s personal data provided in the form of a given contact ad is sent, the administrator of the User’s personal data is the owner of Facebook – Meta Platforms Inc. At the time of sending personal data via the contact ad form, the Administrator becomes the administrator of the User’s personal data in the specified scope. The User’s personal data, depending on the content of a given contact advertisement, may be processed for the purposes of:
a) responding to the User’s inquiry submitted via the contact advertisement form
b) in the case of granting consent to sending commercial information – promotion of the Administrator’s goods and services, including via telephone or e-mail contact
c) in the case of granting consent to sending commercial information – sending the Administrator’s Newsletter to the e-mail address provided by the User
– which constitutes the legitimate interest of the Administrator (Article 6, paragraph 1, letter f of the GDPR).
The Administrator receives the User’s personal data provided in the form (name, surname, e-mail and phone number) from Facebook (Meta Platforms Inc.).
The User’s personal data will be stored until the consent is withdrawn or an objection is filed. After the consent is withdrawn or an objection is expressed, personal data may be stored for the purposes of demonstrating the correctness of fulfilling the legal obligations incumbent on the Administrator and claims related to them.
As part of the contact initiated by the contact advertisement, the Administrator does not make decisions automatically, including through profiling.
For the remaining purposes, the information provided in this Policy applies.
Cookies
1. Introduction
We are glad that you are using the Hotel Lędowo House website. We want you to feel safe, which is why we have prepared this information about cookies (i.e. popular “cookies”) for you. Thanks to it, you will learn, among other things:
a) What are cookies?
b) What cookies do we use and why
c) How do they affect your privacy
d) What rights do you have under the GDPR and telecommunications law
2. What are cookies?
1. Simply put, cookies are small text files that are saved on your computer or smartphone when you display our website. There are different types of cookies. We have divided them into four groups:
a) Necessary to use our website;
b) Regarding your preferences;
c) Analytical;
d) Marketing.
2. Cookies that are necessary to use our website are used, among other things, for: to ensure its stable operation (they measure traffic, protecting us from overload), remember your privacy preferences, fill out online forms provided by us, save the contents of your basket and monitor your login status. We use these cookies by default, i.e. we save them on your computer or smartphone when you enter our website (in accordance with art. 173 sec. 3 of the Telecommunications Law).
3. We use other cookies only when you consent to this. You will read more about them in the next part of our Policy.
3. What cookies do we use?
Below you will find a list of cookies used on the Hotel Lędowo House website. You can also learn about the purpose and type of cookie at any time on our website via the cookie banner and selecting the “Show details” option. After selecting your preferences, you can return to the cookie banner at any time by clicking the black and white “paper clip” icon in the lower left corner of the website.
| Necessary cookies – ensure the proper functioning of our website and its basic functions. Without them, you will not be able to use our online services properly. These cookies are exempt from the obligation to obtain your consent (Article 173, paragraph 3 of the Telecommunications Act). |
| Name | Provider | Purpose | Expiration date | Type |
| _grecaptcha | www.gstatic.com | This cookie is used to distinguish between humans and bots. This is beneficial for the website, in order to generate correct reports on the use of its website. | Persistent | HTML Local Storage |
| _GRECAPTCHA | www.google.com | This cookie is used to distinguish between humans and bots. This is beneficial for the website, in order to generate correct reports on the use of its website. | 179 days | HTTP Cookie |
| api/err.gif | app2.salesmanago.pl | This cookie is used to detect errors on the website – this information is sent to the website support staff to optimize the visitor’s experience on the website. | Session | Pixel Tracker |
| CONSENT [x2] | play.google.com youtube.com | It is used to detect whether a visitor has accepted a marketing category on the cookie banner. This cookie is necessary for the website to be GDPR compliant. | 2 years | HTTP Cookie |
| CookieConsent | cookiebot.com | Stores the user’s cookie consent status for the current domain. | 1 year | HTTP Cookie |
| rc::a | google.com | This cookie is used to distinguish between humans and bots. This is beneficial for the website to produce correct reports on the use of its website. | Persistent | HTML Local Storage |
| rc::b | www.google.com | This cookie is used to distinguish between humans and bots. | Session | HTML Local Storage |
| rc::c | google.com | This cookie is used to distinguish between humans and bots. | Session | HTML Local Storage |
| SERVERID | app2.salesmanago.pl | This cookie is used to assign a visitor to a specific server – this function is necessary for the site to function. | Session | HTTP Cookie |
| Analytical cookies – our website uses cookies provided by Google. Analytical cookies allow us to track the number and sources of visits, so we can measure and improve the performance of our website. This type of cookie helps us understand which pages are most or least visited and how visitors move around our website. If you refuse to have analytical cookies saved on your computer or smartphone, your visit will not be included in our statistics, but at the same time, this will not limit any functionality on our website for you. |
| Name | Provider | Purpose | Expiration date | Type |
| _ga | www.googletagmanager.com | Registers a unique identifier that is used to generate statistical data on how the visitor uses the website. | 399 days | HTTP Cookie |
| _ga_# | www.googletagmanager.com | Used by Google Analytics to collect data on the number of times a user has visited the site and the dates of their first and last visit. | 399 days | HTTP Cookie |
| Marketing cookies – we use these cookies to personalize the content that is displayed to you. Marketing cookies may be used in our advertising campaigns that are run on third-party websites. If you consent to the use of marketing cookies, you may receive information about the websites of our trusted partners on which you have responded to our advertisements. opt out If you opt out of marketing cookies, you will be shown generic and non-personalized advertisements. As with analytical cookies, if you refuse to have marketing cookies saved on your computer or smartphone, this will not limit any of the functionality on our website for you. |
| Name | Provider | Purpose | Expiration date | Type |
| VISITOR_INFO1_LIVE | youtube.com | Tries to estimate users’ bandwidth on pages with integrated YouTube videos. | 179 days | HTTP Cookie |
| YSC | youtube.com | Registers an ID to keep statistics of what YouTube videos the user has seen. | Session | HTTP Cookie |
| ytidb::LAST_RESULT_ENTRY_KEY | youtube.com | Stores the user’s video player preferences via an embedded YouTube video. | Persistent | HTML Local Storage |
4. Consent to the installation of cookies
During your visit to our website, a banner will be displayed informing you that it uses cookies. If you select the option “Allow all”, it will mean that you accept all cookies that are placed on our website and confirm that you have read the information about cookies and the purposes of their use, as well as the cases in which data collected using cookies is transferred to our partners.
Please note that in the case of necessary cookies, consent is not required, because such cookies ensure the full and uninterrupted functioning of our website. These cookies are exempt from the obligation to obtain your consent in accordance with art. 173 sec. 3 of the Telecommunications Law.
5. No consent to the installation of cookies
If you do not want our cookies to be saved on your device, you can select the option “Refuse”. By selecting this option, you will reject all cookies, except technically necessary, that we use on our website.
6. Modifying cookie settings
You can manage your cookie preferences in detail by selecting the cookie category and the “Allow selection” field on the cookie banner displayed to you.
7. Personal data
Since some of the cookies we use constitute or collect personal data, we remind you:
a) The administrator of your personal data, i.e. the entity deciding on the purposes and methods of processing, is Lędowo House with its registered office in Lędowo (83-021) at ul. Nad Motławą 38 – the owner of Lędowo House,
b) Your personal data will be processed to provide basic functions of our website. If you have given appropriate (voluntary) consent, your data will also be processed to provide you with services, offers and messages tailored to your preferences and to analyze traffic on the website and provide social functions (depending on the preferences you have indicated).
c) More information on the principles of personal data processing and your rights can be found in this Privacy Policy.
8. Withdrawal of consent
You may change your consent at any time by clicking on the black and white icon representing a “paper clip” located in the lower left corner of our website. Withdrawal of consent does not affect the lawfulness of the processing carried out on its basis before its withdrawal.
9. Server logs
Using the Site involves sending queries to the server on which the Site is stored.
Each query directed to the server is saved in the server logs. The logs include, among others, the user’s IP address, the date and time of the server, information about the web browser and the operating system used by the User.
The logs are saved and stored on the server.
The data saved in the server logs are not associated with specific people using the Site and are not used by the Administrator to identify the User.
The server logs are only auxiliary material used to administer the Site, and their content is not disclosed to anyone other than persons authorized to administer the server.
DATA RECIPIENTS
As part of the operation of the Lędowo House Hotel and websites related to the Hotel, the Administrator will disclose your personal data to the following entities:
a) state authorities or other entities authorized under the provisions – if it is necessary to fulfill legal obligations,
b) entities supporting us in our business activities on our behalf, in particular: suppliers of external IT systems supporting our activities, subcontractors, entities auditing our activities or experts, whereby such entities will process data on the basis of an agreement with the Administrator and only in accordance with its instructions,
c) entities providing accounting, HR or legal services – to the extent necessary to ensure the fulfillment of legal obligations or to establish, pursue and defend claims,
d) companies disposing of or archiving documents and other media – to the extent that the data is stored in paper form or on such media,
e) companies providing courier and postal services,
f) companies conducting marketing activities,
g) Intermediary Platforms in accommodation reservations,
h) Suppliers of IT and analytical tools used on the Hotel Lędowo House website, in particular tools for collecting consents to cookies, cookie file providers.
RIGHTS IN THE SCOPE OF DATA PROCESSING
Every person whose data is processed by the Administrator has the right to:
a) access their personal data,
b) rectify their personal data,
c) delete their personal data,
d) limit the processing of their personal data,
e) object to the processing of their personal data (in accordance with art. 21 sec. 1 of the GDPR, when filing an objection, you should indicate its reasons related to your special situation),
f) transfer your personal data.
In addition, you have the right to lodge a complaint with the supervisory authority, i.e. the President of the Personal Data Protection Office, more information at: https://uodo.gov.pl/pl/p/skargi.
In the event that consent has been granted to the processing of personal data or the sending of commercial information to the indicated communication channel, we inform you that everyone has the right to withdraw consent at any time without affecting the lawfulness of the processing that was carried out on the basis of consent before its withdrawal.
In the case of the newsletter, withdrawal of consent is possible through the footer in our marketing correspondence or by contacting us at: ledowohouse@gmail.com.
VOLUNTARY DATA PROVISION
Providing data is necessary to conclude contracts and settle business activities and for the Administrator to comply with legal requirements. In the remaining scope (in particular for the purpose of processing data by the Administrator for marketing purposes), providing data is voluntary.
TRANSFERRING DATA TO THIRD COUNTRIES OR INTERNATIONAL ORGANIZATIONS
Your data will be transferred outside the European Economic Area. As part of our IT infrastructure and tools used on the Hotel’s website, your personal data will be sent in particular to the USA.
In the case of recipients in the territory of countries not covered by the decision of the European Commission, such as the USA, in order to ensure an adequate level of this protection, the Administrator concludes agreements with the recipients of your personal data, based on standard contractual clauses issued by the European Commission in accordance with art. 46 sec. 2 letter c of the GDPR.
A copy of the standard contractual clauses can be obtained from the Administrator by contacting the contact details provided above. The method of securing your data used by the Administrator is in line with the principles set out in Chapter V of the GDPR. You may request further information on the security measures applied in this regard, obtain a copy of these safeguards and information on where they are made available.
AUTOMATED PROCESSING OF PERSONAL DATA
Profiling occurs as part of the collection of statistical and analytical data and as part of contextual and behavioral advertising, but it does not have any significant effects, including legal effects.
Profiling occurs through the collection and processing of your data through automated analyses of your behavior when using social media and our Hotel’s website in order to continuously improve its functioning and the services we provide.
Protection of minors (Standards for the Protection of Minors)
| Purpose of processing and legal basis | Data storage period | In the case of data collection in a manner other than from you – the source of their origin and the categories of personal data. |
The personal data of adults and children are processed for the purpose of implementing the Standards of Protection of Minors and the obligations of the Act of 13 May 2016 on counteracting threats of sexual crime and the protection of minors (art. 6 sec. 1 letter c of the GDPR), i.e.: – identification of a minor staying at the Lędowo House Hotel or Lędowo House Studio and their relationship with the adult with whom they are staying at this facility; – in the event of a threat to the welfare of a minor – responding to the threat, securing evidence and submitting notifications to the competent authorities. In the event of any claims: – in order to establish, pursue, secure or defend claims, which constitutes a legitimate interest of the administrator (art. 6 sec. 1 letter f of the GDPR). | – For the duration of the stay of a hotel guest or studio guest; – If the welfare of a minor is at risk or claims arise in connection with the implementation of minor protection standards – for the duration of the proceedings or for the limitation period for claims. | – If you are a parent or legal guardian of a minor – we have received your data from a hotel guest with whom your child is staying in our Hotel or Studio. We have received personal data: first name, last name, telephone number, type of relationship or relationship; – If you are a minor – we have received your data from a hotel guest with whom you are staying in our Hotel. We have received personal data: first name, last name, PESEL, type of relationship or relationship. |