Lavender Noclegi i Sala Weselna Oborniki

609 299 007 RESERVATION – PHONE ONLY
logo Lavender

Privacy Policy

1. General Information

  1. This policy applies to the website operating at the following URL: lavenderoborniki.pl
  2. The Operator of the service and the Controller of personal data is: Grażyna Szewczak, ul. Akacjowa 7, 64-600 Kowanówko
  3. Operator’s email contact address: lavender.oborniki@gmail.com
  4. The Operator is the Controller of your personal data with respect to the data provided voluntarily in the Service.
  5. The Service uses personal data for the following purposes:
    • Execution of ordered services
    • Presentation of the offer or information
  6. The Service performs functions of obtaining information about users and their behavior in the following ways:
    1. Through voluntarily entered data in forms, which are entered into the Operator’s systems.
    2. By storing cookie files (so-called “cookies”) on end devices.

2. Selected data protection methods used by the Operator

  1. Areas where personal data are logged in or entered are protected at the transmission layer (SSL certificate). As a result, personal data and login data entered on the website are encrypted on the user’s device and can be read only on the target server.
  2. The Operator periodically changes its administrative passwords.
  3. In order to protect data, the Operator regularly performs backup copies.
  4. An important element of data protection is the regular updating of all software used by the Operator for the processing of personal data, which in particular means regular updates of software components.

3. Hosting

  1. The Service is hosted (technically maintained) on the servers of the operator: lh.pl
  2. The hosting company, in order to ensure technical reliability, keeps logs at the server level. The following may be recorded:
    • resources identified by a URL (addresses of requested resources – pages, files),
    • time of the request,
    • time of sending the response,
    • client station name – identification performed via the HTTP protocol,
    • information about errors that occurred during the execution of HTTP transactions,
    • URL address of the previously visited page by the user (referer link) – if the transition to the Service occurred via a link,
    • information about the user’s browser,
    • IP address information,
    • diagnostic information related to the process of independently ordering services via recorders on the website,
    • information related to the handling of email sent to the Operator and sent by the Operator.

4. Your rights and additional information on how data is used

  1. In certain situations, the Controller has the right to transfer your personal data to other recipients if it is necessary to perform a contract concluded with you or to fulfil obligations imposed on the Controller. This applies to the following groups of recipients:
    • hosting company on the basis of entrustment
    • law firms and debt collection agencies
    • authorized employees and associates who use the data for the purpose of achieving the website’s objectives
    • companies providing marketing services for the Controller
  2. Your personal data processed by the Controller shall not be stored longer than necessary for the performance of related activities defined by separate regulations (e.g. accounting regulations). With regard to marketing data, the data shall not be processed for longer than 3 years.
  3. You have the right to request from the Controller:
    • access to your personal data,
    • their rectification,
    • erasure,
    • restriction of processing,
    • and data portability.
  4. You have the right to object to the processing indicated in point 3.2 with regard to the processing of personal data for the purpose of pursuing the Controller’s legitimate interests, including profiling; however, the right to object may not be exercised where there are valid legally justified grounds for processing that override your interests, rights and freedoms, in particular for the establishment, exercise or defense of legal claims.
  5. You have the right to lodge a complaint regarding the Controller’s actions with the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw.
  6. Providing personal data is voluntary, but necessary for the operation of the Service.
  7. With regard to you, actions involving automated decision-making, including profiling, may be undertaken for the purpose of providing services under the concluded agreement and for the purpose of the Controller’s direct marketing.
  8. Personal data are not transferred to third countries within the meaning of data protection regulations. This means that we do not send them outside the European Union.

5. Information in forms

  1. The Service collects information provided voluntarily by the user, including personal data, if such data are provided.
  2. The Service may record information about connection parameters (time stamp, IP address).
  3. In some cases, the Service may store information that facilitates linking the data in the form with the email address of the user filling in the form. In such a case, the user’s email address appears within the URL of the page containing the form.
  4. Data provided in the form are processed for the purpose resulting from the function of a specific form, e.g. to process a service request or for commercial contact, service registration, etc. In each case, the context and description of the form clearly indicate its purpose.

6. Administrator logs

  1. Information about users’ behavior on the website may be logged. These data are used for the purpose of administering the website.

7. Important marketing techniques

  1. The Operator uses statistical analysis of website traffic via Google Analytics (Google Inc. based in the USA). The Operator does not transfer personal data to this service provider, but only anonymized information. The service is based on the use of cookies on the user’s end device. With regard to information about user preferences collected by the Google advertising network, the user may view and edit information resulting from cookies using the tool: https://www.google.com/ads/preferences/
  2. The Operator uses remarketing techniques allowing advertising messages to be tailored to the user’s behavior on the website, which may create the impression that the user’s personal data is used for tracking; however, in practice no personal data is transferred from the Operator to advertising operators. The technological condition for such actions is enabled cookie support.
  3. The Operator uses the Facebook pixel. This technology means that Facebook (Facebook Inc. based in the USA) knows that a person registered on it uses the Service. In this case, it is based on data for which it is itself the controller; the Operator does not transfer any additional personal data from its side to Facebook. The service is based on the use of cookies on the user’s end device.
  4. The Operator uses a solution that analyzes user behavior by creating heat maps and recording activity on the website. This information is anonymized before being sent to the service provider, so it does not know which natural person it relates to. In particular, passwords entered and other personal data are not recorded.
  5. The Operator uses a solution that automates the functioning of the Service in relation to users, e.g. it may send an email to the user after visiting a specific subpage, provided that the user has consented to receive commercial correspondence from the Operator.

8. Information about cookies

  1. The Service uses cookies.
  2. Cookies (so-called “cookies”) are IT data, in particular text files, which are stored on the Service User’s end device and are intended for use of the Service’s websites. Cookies usually contain the name of the website from which they originate, the time they are stored on the end device, and a unique number.
  3. The entity placing cookies on the Service User’s end device and accessing them is the Service Operator.
  4. Cookies are used for the following purposes:
    1. maintaining the Service User’s session (after logging in), thanks to which the User does not have to re-enter their login and password on each subpage of the Service;
    2. for the purposes specified above in the section “Important marketing techniques”;
  5. Within the Service, two main types of cookies are used: “session” cookies and “persistent” cookies. “Session” cookies are temporary files that are stored on the User’s end device until logging out, leaving the website, or closing the software (internet browser). “Persistent” cookies are stored on the User’s end device for the time specified in the cookie parameters or until they are deleted by the User.
  6. Web browsing software (internet browser) usually allows cookies to be stored on the User’s end device by default. Service users may change these settings. The web browser allows cookies to be deleted. It is also possible to automatically block cookies. Detailed information on this subject can be found in the help or documentation of the web browser.
  7. Limitations on the use of cookies may affect some functionalities available on the Service’s websites.
  8. Cookies placed on the Service User’s end device may also be used by entities cooperating with the Service Operator, in particular companies: Google (Google Inc. based in the USA), Facebook (Facebook Inc. based in the USA), Twitter (Twitter Inc. based in the USA).

9. Managing cookies – how to express and withdraw consent in practice?

  1. If the user does not wish to receive cookies, they may change their browser settings. Please note that disabling cookies necessary for authentication, security, and maintaining user preferences may hinder, and in extreme cases prevent, the use of websites.
  2. To manage cookie settings, select from the list below the internet browser you are using and follow the instructions: Mobile devices:
 
Menu
Menu
Menu
Menu