Privacy policy

General information

This document sets out the Privacy Policy of the Website (hereinafter the "Website"). The Administrator of the Website https://www.ambrozja-wesele.pl is DAREX Dariusz Pytelewski, Borkowo Kościelne, ul. Kolorowa 5, 09-200 Sierpc, NIP: 776-141-83-43, REGON: 911181893.

Words used with a capital letter have the meaning given to them in the terms and conditions of this Website.

Personal data collected by the Website Administrator is processed in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27.04.2016 on the protection of natural persons in relation to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) (Official Journal of the EU L 119, p. 1), hereinafter referred to as: RODO.

The Administrator of the Website makes a special effort to protect privacy and information provided to him/her and concerning Website Customers. The Administrator chooses and applies with due diligence appropriate technical measures, including those of a programming and organisational nature, to ensure the protection of the processed data, in particular to protect the data from being made available to unauthorised persons, from disclosure, loss and destruction, from unauthorised modification, as well as from being processed in breach of the applicable legislation.

The addressee of the possibility to use the Services and Services available on the website is not children under the age of 16. The Data Controller does not envisage the targeted collection of data relating to children under the age of 16.

Personal data

Personal data controller

The administrator of your personal data is:

DAREX Dariusz Pytelewski
Address: Borkowo Kościelne, Ul. Kolorowa 5, 09-200 Sierpc

You can contact the Data Controller regarding your personal data via:

e-mail: kontakt@ambrozja.pl;
traditional: DAREX Dariusz Pytelewski Borkowo Kościelne, Ul. Kolorowa 5, 09-200 Sierpc
Telephone: +48 605 548 851

The Data Controller has appointed a Representative to represent it in respect of its obligations under the RODO.

The representative of the data controller is:

DAREX Dariusz Pytelewski
Address: Borkowo Kościelne, Ul. Kolorowa 5, 09-200 Sierpc

For matters concerning your personal data, you can contact the Data Controller's Representative via:

e-mail: kontakt@ambrozja.pl;
traditional: DAREX Dariusz Pytelewski Borkowo Kościelne, Ul. Kolorowa 5, 09-200 Sierpc
Telephone: +48 605 548 851

Data Protection Officer (DPO)

The Data Controller has appointed a Data Protection Officer (DPO) whom you can contact regarding the protection of your personal data via:

e-mail: kontakt@ambrozja.pl;
traditional: DAREX Dariusz Pytelewski Borkowo Kościelne, Ul. Kolorowa 5, 09-200 Sierpc
Telephone: +48 605 548 851

Aims and legal bases for processing personal data

The data controller processes your personal data for the following purposes and scope:

a) The Website uses personal data in order to fulfil the contract

b) The online service, as an intermediary, transmits the order and the customer's information to the hotel booking partner.

c) the transfer of your personal data to a payment service provider:

Transfers 24

Where the processing of your personal data is based on consent, you have the right to withdraw such consent at any time. The withdrawal of consent does not affect the processing of data prior to the withdrawal of consent or the legal basis for such processing. Where your provision of personal data takes place for the purpose of entering into a contract with the Website, your provision of personal data is a condition for entering into that contract. The provision of personal data in this situation is voluntary, however, the consequence of failing to provide such data will be the impossibility to conclude an Agreement with the Website.

In the case of the provision of your personal data to the Bank in connection with the processing and settlement of payments made by you to the Website via the Internet using payment instruments, the provision of such data is required in order for the payment to be processed and for the Bank to provide confirmation of its execution to the Website. In the event that your personal data is provided to the Bank in order for the Bank to verify the proper performance of the agreements concluded with the Website, in particular to ensure the protection of the interests of the payers in connection with their complaints, the provision of such data is required in order to enable the performance of the agreement concluded between the Website and the Bank or the payment system.

In the event that you provide your personal data in order to conclude a contract with the Website, the provision of your personal data is a condition for concluding this Contract. The provision of personal data in this situation is voluntary, but the consequence of failing to provide such data will be the impossibility of concluding a contract with the Website.

And furthermore:

in order to provide Services that do not require you to create an Account, i.e. browsing the Website, room search engine, we process personal data relating to your activity on the Website, i.e. data relating to the rooms you have viewed, data relating to your device session, operating system, browser, location and unique ID, IP address;
to take action prior to concluding a contract at your request (e.g. to set up an account), i.e. the data provided in the registration form on the Website, i.e. your e-mail address and the password you have set up, Login, telephone number;
in order to provide statistics on the use of the various functionalities available on the Website, to facilitate the use of the Website and to ensure the IT security of the Website, we process personal data relating to your activity on the Website and the amount of time spent on each of the subpages on the Website, your search history, your location, your IP address, your device ID, data relating to your web browser and operating system;
for the purposes of establishing, investigating and enforcing claims and defending against claims in court proceedings and other enforcement bodies, we may process your personal data provided when you purchased the Services or set up an Account and other data necessary to prove the existence of a claim or which is the result of a legal requirement, court order or other legal procedure;
For the purpose of dealing with complaints, claims and requests and responding to customer enquiries, we process the personal data you provide in the contact form, complaints, claims and requests, or for the purpose of responding to your enquiries in another form and some of the personal data you provide in your Account, as well as the data relating to the Services giving rise to the complaint, claim or request and the data contained in the documents accompanying the complaint, claim or request;
for the marketing of our Services and Services and our customers and partners, including remarketing, for this purpose we process the personal data you provide when you create an Account and update your Account, data about your activity on the Website including your browsing history, which is recorded and stored via cookies, in particular your click history on the Website, your login and registration dates, your history and your activity in relation to our communication with you. In the case of remarketing, we use your activity data to reach you with our marketing communications outside of the Website and we use third-party providers for this purpose. These services involve displaying our communications on websites other than the Website. Please refer to the Cookie records for details;
in order to organise competitions and loyalty programmes, i.e. to notify you of any points you may have accumulated, to notify you if you have won, and to advertise our offer, we use your personal data provided in your Account and when registering for a competition or loyalty programme. Detailed information on this is provided each time in the terms and conditions of the respective competition or loyalty programme;
for market research and opinion polling purposes by us or our partners, i.e. order information, your data provided in your Account or when purchasing Services, your email address. The data collected for market and opinion research is not used by us for advertising purposes. Exact instructions are given in the information about the respective survey or where you enter your data.

Categories of personal data concerned

The controller processes the following categories of relevant personal data:

contact details;
activity data on the Website;
data on complaints and applications;
data relating to marketing services.

Voluntary provision of personal data

Your provision of the required personal data is voluntary and is a condition for the provision of services by the Data Controller through the Website.

Processing time

Personal data will be processed for the period necessary for the performance of the services, marketing activities and other services performed for the Customer. Personal data will be deleted in the following cases:

when the data subject requests their deletion or withdraws the consent given;
When the data subject has not taken action for more than 10 years (dormant contact);
upon becoming aware that stored data is out of date or inaccurate.

Some data in the following areas: e-mail address, name and surname, may be stored for a further period of 3 years for the purposes of evidence, processing of complaints, claims and claims related to the services provided by the Website - this data will not be used for marketing purposes. We store data relating to non-logged-in Customers for a period of time corresponding to the life cycle of the cookies stored on their devices or until they are deleted from the Customer's device by the Customer.

Your personal data about your preferences, behaviour and choice of marketing content may be used as the basis for automated decisions to determine the sales opportunities of the Website.

Recipients of personal data

We transfer your personal data to the following categories of recipients:

to state authorities, e.g. the public prosecutor's office, the police, UODO, the President of UOKiK, if they request us to do so.

Rights of the data subject

Under the RODO, you have the right to:

request access to their personal data;
request the rectification of their personal data;
request the deletion of their personal data;
request the restriction of the processing of personal data;
to object to the processing of personal data;
to request the portability of personal data.

The controller shall inform you without undue delay - and in any case within one month of receipt of the request - of the action taken in relation to your request. If necessary, the one-month period may be extended by a further two months due to the complexity of the request or the number of requests.

In any event, the Data Controller will inform you of such extension within one month of receipt of the request, stating the reasons for the delay.

Right of access to personal data (Article 15 RODO)

You have the right to obtain information from the Data Controller as to whether your personal data is being processed.

If the Administrator processes your personal data you have the right to:

access to personal data;
be informed about the purposes of the processing, the categories of personal data processed, the recipients or categories of recipients of that data, the intended period of storage of your data or the criteria for determining that period, your rights under the RODO and your right to lodge a complaint with a supervisory authority, the source of that data, automated decision-making, including profiling, and the safeguards applied in connection with the transfer of that data outside the European Union;
obtain a copy of their personal data.

If you wish to request access to your personal data, please submit your request to: kontakt@ambrozja.pl.

Right to rectification of personal data (Article 16 RODO)

If your personal data is inaccurate you have the right to request the Administrator to rectify your personal data immediately.

You also have the right to request the Administrator to complete your personal data.

If you wish to request the rectification of your personal data or their completion, please submit your request to: kontakt@ambrozja.pl.

If you have registered on the Website, you can correct and complete your personal data yourself after logging on to the Website.

The right to erasure of personal data, the so-called "right to be forgotten" (Article 17 RODO)

You have the right to request the Data Controller to delete your personal data when:

Your personal data is no longer necessary for the purposes for which it was collected or otherwise processed;
you have withdrawn specific consent, insofar as personal data was processed on the basis of your consent;
Your personal data was processed unlawfully;
you have objected to the processing of your personal data for direct marketing purposes, including profiling, to the extent that the processing of your personal data is related to direct marketing;
you have objected to the processing of your personal data in connection with processing necessary for the performance of a task carried out in the public interest or processing necessary for the purposes of the legitimate interests pursued by the Controller or a third party.

Despite your request for erasure, the Controller may continue to process your personal data for the purpose of establishing, asserting or defending claims of which you will be informed.

If you wish to request the deletion of your personal data, please submit your request to: kontakt@ambrozja.pl.

The right to request the restriction of the processing of personal data (Article 18 RODO)

You have the right to request the restriction of the processing of your personal data when:

you question the accuracy of your personal data - the Data Controller will restrict the processing of your personal data for a period of time to allow you to check the accuracy of the data;
when the processing of your data is unlawful and instead of erasure you request the restriction of the processing of your personal data;
Your personal data is no longer needed for the purposes of the processing, but it is needed to establish, assert or defend your claims;
when you have objected to the processing of your personal data - until it is determined whether the legitimate interests on the part of the Controller override the grounds for your objection.

If you wish to request a restriction of the processing of your personal data, please submit your request to: kontakt@ambrozja.pl

Right to object to the processing of personal data (Article 21 RODO)

You have the right to object at any time to the processing of your personal data, including profiling, in relation to:

processing necessary for the performance of a task carried out in the public interest or processing necessary for the purposes of the legitimate interests pursued by the Controller of the personal data or by a third party;
processing for direct marketing purposes.

If you wish to object to the processing of your personal data, please submit your request to: kontakt@ambrozja.pl

Right to request portability of personal data (Article 20 RODO)

You have the right to receive your personal data from the Controller in a structured, commonly used machine-readable format and send it to another controller.

You may also request that it is the Data Controller who directly transfers your personal data to another controller (if technically possible).

If you wish to request the transfer of your personal data, please submit your request to: kontakt@ambrozja.pl.

Right of withdrawal of consent

You may withdraw the consent you have given for the processing of your personal data at any time.

The withdrawal of your consent to process your personal data does not affect the lawfulness of the processing carried out on the basis of your consent before its withdrawal. If you wish to withdraw your consent to the processing of your personal data, please submit your request to: kontakt@ambrozja.pl or use the relevant functionalities in your Account.

Complaint to the supervisory authority

If you believe that the processing of your personal data is in breach of the RODO you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place where the alleged breach took place.

In Poland, the supervisory authority under the RODO is the Office for Personal Data Protection (UODO).

Privacy policy

Book a room