Please read the content of this document describing the basis and purpose for processing the personal data of users of the website https://letniskowo.eu/, when they are used, and what rights users have in connection with the processing of personal data by Letniskowo limited liability company with its seat in Białystok. The Company attaches importance to respecting the privacy of Users visiting our website, makes every effort to ensure that the website Users feel comfortable and secure, and that the personal data processing process is transparent and compliant with the applicable laws regarding personal data protection. Letniskowo limited liability company does not seek to identify users of the website https://letniskowo.eu/, using cookies to the necessary extent.
Table of Contents
- Definitions
- Information about the data administrator
- Purposes and legal bases for data processing
- Data processing periods
- Rights of data subjects
- Methods of exercising rights
- Data recipients
- Other cases of personal data processing by Letniskowo limited liability company
- Information regarding the Service
- Cookies Mechanism on the website https://letniskowo.eu/
- Personal data security measures
- Final provisions
- Definitions
**Policy** – this Privacy Policy, available at https://letniskowo.eu/polityka-prywatnosci.
**Service** – the website https://letniskowo.eu/.
**User** – a natural person visiting the Service or using one or more services or functionalities described in the Policy, whose personal data are processed for at least one purpose indicated in the Policy;
**Personal Data** – any information relating to an identified or identifiable natural person (,,data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;
**Processing** – an operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;
**Administrator** – the entity which, alone or jointly with others, determines the purposes and means of the processing of personal data;
**GDPR** – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, Official Journal of the EU.L 2016 No. 119, p. 1).
- Information about the data administrator
The administrator of Users’ personal data is Letniskowo limited liability company, NIP (Tax Identification Number) 5423465217, KRS (National Court Register number) 0001024501, running the website https://letniskowo.eu/. The Administrator’s seat is in Białystok, ul. Elewatorska 29, 15-620 Białystok. The Administrator can be contacted via email: rodo@new.letniskowo.eu and by post at the registered office address.
Depending on the form of contact with Letniskowo limited liability company, which runs the website https://letniskowo.eu/, you may be asked to provide a smaller or larger scope of information necessary for the implementation of services offered by Letniskowo limited liability company, i.e.: name and surname, User name, NIP, correspondence address, delivery address, e-mail address, telephone number, IP address, other data related to the service provision.
- Purposes and legal bases for data processing
Your personal data may be processed for the purpose of:
- providing services (including the provision of services by electronic means for placing orders, sending commercial and industry information, and making content collected in the Service available to Users),
- taking steps to conclude a contract, execute and settle the contract,
- handling customer contacts, inquiries, complaints, or suggestions,
- meeting requirements resulting from legal provisions (including accounting regulations),
- establishing and pursuing claims or defending against claims,
- administering the website for analytical and statistical purposes, improving the functionalities used and services provided.
Depending on the case and the purpose of processing, the legal basis for processing personal data may be:
- consent, in relation to establishing contacts, remaining in the customer base, sending commercial and industry information, administering the website (including consent expressed via the cookie banner), (Art. 6 section 1 letter a GDPR: the data subject has given consent to the processing of his or her personal data for one or more specific purposes), which can be withdrawn at any time, however, the withdrawal of consent does not affect the legality of personal data processing during the period when the consent was valid);
- a contract carried out by Letniskowo limited liability company for the benefit of clients (Art. 6 section 1 letter b GDPR: processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract);
- a legal obligation of the administrator (Art. 6 section 1 letter c GDPR: processing is necessary for compliance with a legal obligation to which the administrator is subject, including accounting and bookkeeping obligations);
- legitimate interest pursued by the administrator (Art. 6 section 1 letter f GDPR: processing is necessary for the purposes of the legitimate interests pursued by the administrator or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject). We rely on a legitimate interest when analyzing, developing, improving, and optimizing the website (primarily to ensure the security of the website, network, and systems), as well as in the aspect of defending against claims and monitoring at the Company’s seat.
- Data processing periods
Personal data will be stored for the period necessary to achieve the purpose for which they were collected and are processed (e.g., for the period of storing documentation related to contracts, accounting documentation, resulting from legal provisions), and personal data processed based on consent – until its withdrawal. The data processing period may be extended if the processing is necessary for establishing and pursuing any claims or defending against them, and after this time only if and to the extent required by law or by your consent. After the processing period expires, the data are irreversibly deleted or anonymized.
- Rights of data subjects
Provided that the prerequisites resulting from the GDPR provisions are met and specific provisions do not exclude them, you may have the following rights regarding the processing of personal data:
1) Art. 7 GDPR – right to withdraw consent
The data subject shall have the right to withdraw his or her consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. The data subject shall be informed of this before giving consent. Withdrawing consent must be as easy as giving it.
2) Art. 13 and 14 GDPR – right to information
The Administrator shall provide the data subject with all information listed in the content of Art. 13 and 14 GDPR when obtaining personal data. The Administrator shall take appropriate measures to provide any information referred to in Articles 13 and 14 to the data subject in a concise, transparent, intelligible and easily accessible form, using clear and plain language.
3) Art. 15 GDPR – right of access to personal data
The data subject shall have the right to obtain from the administrator confirmation as to whether or not personal data concerning him or her are being processed. The administrator shall provide a copy of the personal data undergoing processing to the data subject.
4) Art. 16 GDPR – right to rectification of personal data
The data subject shall have the right to obtain from the administrator without undue delay the rectification of inaccurate personal data concerning him or her.
5) Art. 17 GDPR – right to erasure of personal data
The data subject shall have the right to obtain from the administrator the immediate erasure of personal data concerning him or her only if the premises resulting from the content of this provision occur.
6) Art. 18 GDPR – right to restriction of processing of personal data
The data subject shall have the right to obtain from the administrator restriction of processing in cases specified by law. Where processing has been restricted, such personal data shall, with the exception of storage, only be processed with the data subject’s consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.
7) Art. 19 GDPR – right to notification regarding rectification or erasure of personal data or restriction of processing
The administrator shall communicate any rectification or erasure of personal data or restriction of processing carried out in accordance with Article 16, Article 17(1) and Article 18 GDPR to each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort. The administrator shall inform the data subject about those recipients if the data subject requests it.
8) Art. 20 GDPR – right to data portability
Where the processing is based on consent or on a contract and the processing is carried out by automated means, the data subject shall have the right to receive the personal data concerning him or her, which he or she has provided to an administrator, in a structured, commonly used and machine-readable format and have the right to transmit those data to another administrator without hindrance from the administrator to which the personal data have been provided.
9) Art. 21 GDPR – right to object to processing of data
The data subject shall have the right to object at any time on grounds relating to his or her particular situation, to processing of personal data concerning him or her which is based on point (e) or (f) of Article 6(1), including profiling based on those provisions.
Furthermore, you have the right to lodge a complaint with the supervisory authority dealing with personal data protection in Poland: Urząd Ochrony Danych Osobowych (Personal Data Protection Office) ul. Stawki 2, 00-193 Warszawa.
- Methods of exercising rights
Requests for the exercise of rights regarding personal data processing can be submitted by post to the address: ul. Elewatorska 29, 15-620 Białystok and by email to the address: rodo@new.letniskowo.eu.
Direct access to personal data processed by Letniskowo limited liability company is held only by authorized employees and contractors, and authorized and empowered persons handling the Service, authorized business partners, as well as entities to whom the Administrator entrusts the processing of personal data through concluded data processing agreements under Article 28 of the GDPR (e.g., entities providing IT services, software suppliers). Personal data may be disclosed, among others, to state authorities under the law, or other entities authorized under the law, for the purpose of fulfilling the obligations incumbent on the Administrator.
- Other cases of personal data processing by Letniskowo limited liability company
Telephone contact:
When contacting the Administrator by phone, in matters not related to the concluded contract or provided services, the Administrator may request personal data only if it is necessary to handle the matter to which the contact relates. The legal basis in such a case is the legitimate interest of the Administrator (Art. 6 section 1 letter f GDPR) consisting of the need to resolve the reported matter related to the business activity conducted by him. The Administrator, upon prior consent, may record telephone conversations to guarantee certainty and security regarding arrangements and provided services.
Video monitoring:
To ensure the safety of persons and property, the Administrator uses video monitoring at its registered office. The data collected in this way are not used for any other purposes. Personal data recorded in connection with the video monitoring are processed to ensure safety and order on the premises and possibly to defend against claims or pursue them. The basis for processing Personal Data is the legitimate interest of the Administrator (Art. 6 section 1 letter f GDPR) consisting of ensuring the safety of persons staying in the buildings and on the area managed by the Administrator, including ensuring the safety of employees and clients, and ensuring the safety of the Administrator’s and clients’ property, and the protection of its rights. Monitored areas are appropriately marked with pictograms, and information clauses regarding the processing of personal data in the scope of monitoring are also available.
- Information regarding the Service
In accordance with the accepted practice of most WWW services, we store HTTPS queries directed to our server. The resources viewed are identified by URL addresses. The exact list of information stored in the WWW server log files is as follows:
- public IP address of the computer from which the query came (it may be the user’s computer directly)
- client workstation name – identification performed by the HTTPS protocol if possible,
- username provided in the authorization process,
- time the query arrived,
- the first line of the HTTPS request,
- HTTPS response code,
- number of bytes sent by the server,
- URL address of the page previously visited by the user (referer link) – if the transition to the https://letniskowo.eu/ page occurred via a link,
- information about the user’s browser,
- information about errors that occurred during the HTTPS transaction.
These data are not associated with specific individuals browsing the Letniskowo limited liability company website. To ensure the highest quality of the service, we occasionally analyze log files to determine: which pages are visited most often, which web browsers are used, whether the page structure contains errors, etc.
- Cookies Mechanism on the website https://letniskowo.eu/
The Cookies Mechanism is not used to obtain any information about website users or track their navigation. Cookies used on the https://letniskowo.eu/ website do not store any personal data or other information collected from users.
Furthermore, we remind you that anyone can block or limit the installation of *cookie* files using their browser settings or using one of the many available (free) tools.
Necessary cookies
The Administrator uses so-called Necessary cookies primarily to provide the User with services provided electronically and to improve the quality of these services. Our use of necessary cookies is essential for the proper functioning of the Service. These files are installed in particular for the purpose of remembering login sessions or filling out forms, as well as for purposes related to setting privacy options.
Functional cookies
Functional cookies remember and adjust the page to your choices, e.g., language preferences. You can set your browser to block or warn about necessary and functional cookies, however, this may cause some parts of the site not to work properly.
Analytical cookies
Analytical cookies allow us to check the number of visits and traffic sources on our website. They help us determine which pages are more and which are less popular, and understand how users move around the site. This allows us to examine statistics and improve the performance of our website. The information collected by these cookies is aggregated, so they are not intended to establish your identity. If you do not allow the use of these cookies, we will not know when you visited our website.
- Personal data security measures
The Administrator applies technical and organizational measures ensuring the protection of processed data appropriate to the risks and categories of data covered by protection, and in particular secures personal data against unauthorized access by unauthorized persons, loss, or damage.
The Administrator applies organizational and technical solutions to ensure the registration of operations on personal data and the identifiability of persons performing these operations.
The Administrator takes all necessary actions to ensure that its contractors and other cooperating entities also guarantee the application of appropriate security measures in every case when they process personal data on behalf of the Administrator.
Access to documentation and the IT system containing personal data is held only by authorized persons, to the extent necessary to achieve the processing purposes.
The Policy comes into force on 05/06/2023. Changes to the content of the Policy may be made by the Administrator and are published on the website.
Any deviations from the Policy require a written form under pain of nullity.
In matters not regulated in the Policy, the relevant provisions of universally applicable law apply.
The Administrator carefully selects its business partners, but is not responsible for the standard and privacy protection policy applied by the owners, operators, or administrators of other websites, including social media. We recommend verifying them on your own.
