{"id":3157,"date":"2024-03-15T15:32:48","date_gmt":"2024-03-15T14:32:48","guid":{"rendered":"https:\/\/statek-krakow.pl\/privacy-policy\/"},"modified":"2024-05-21T17:38:44","modified_gmt":"2024-05-21T15:38:44","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/statek-krakow.pl\/en\/privacy-policy\/","title":{"rendered":"Privacy policy"},"content":{"rendered":"\t\t
\n\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Privacy policy and cookies policy<\/h1>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Using the blog and website https:\/\/statek-krakow.pl<\/a> and the online shop under the name https:\/\/bilety.statek-krakow.pl<\/a>\/ means acceptance of the following terms and conditions of the Privacy Policy and Cookies Policy.<\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

As a User, please familiarise yourself with its provisions. The following table of contents will be of help. I inform you how I take care of Users’ data, how do I process it, who I entrust it to and many other important issues related to personal data.<\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t

Table of contents:<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t
    \n
  1. GENERAL PROVISIONS<\/a><\/li>\n
  2. DEFINITIONS<\/a><\/li>\n
  3. PERSONAL DATA AND PROCESSING RULES<\/a>\n
      \n
    1. WHO IS THE CONTROLLER OF YOUR PERSONAL DATA?<\/a><\/li>\n
    2. IS THE PROVISION OF DATA VOLUNTARY? WHAT IS THE CONSEQUENCE OF NOT PROVIDING THEM?<\/a><\/li>\n
    3. FOR WHAT PURPOSES AND ON WHAT LEGAL BASIS DO WE PROCESS THE USER’S PERSONAL DATA PROVIDED AS PART OF THE USE OF THE WEBSITE?<\/a><\/li>\n
    4. HOW IS DATA COLLECTED?<\/a><\/li>\n
    5. WHAT ARE THE USER RIGHTS?<\/a><\/li>\n
    6. CAN A USER WITHDRAW THEIR CONSENT?<\/a><\/li>\n
    7. DO WE TRANSFER YOUR DATA TO THIRD COUNTRIES?<\/a><\/li>\n
    8. HOW LONG DO WE KEEP YOUR DATA?<\/a><\/li>\n
    9. LINKS TO OTHER SITES<\/a><\/li>\n
    10. SOCIAL MEDIA ACTIVITIES \u2013 FACEBOOK<\/a><\/li>\n
    11. SOCIAL MEDIA ACTIVITIES \u2013 INSTAGRAM<\/a><\/li>\n
    12. SOCIAL MEDIA ACTIVITIES \u2013 TRIP ADVISOR<\/a><\/li>\n
    13. DATA SECURITY<\/a><\/li>\n
    14. WHO MAY BE THE RECIPIENTS OF PERSONAL DATA?<\/a><\/li>\n
    15. HAVE WE APPOINTED A DATA PROTECTION OFFICER?<\/a><\/li>\n
    16. DO WE PROFILE YOUR DATA?<\/a><\/li>\n<\/ol>\n<\/li>\n
    17. FORMS<\/a><\/li>\n
    18. DISCLAIMER AND COPYRIGHT<\/a><\/li>\n
    19. TECHNOLOGIES<\/a><\/li>\n
    20. COOKIE POLICY<\/a><\/li>\n
    21. CONSENT TO COOKIES<\/a><\/li>\n
    22. SERVER LOGS<\/a><\/li>\n<\/ol>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
      \n\t\t\t\t
      \n\t\t\t\t\t

      \u00a71 GENERAL PROVISIONS<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
      \n\t\t\t\t
      \n\t\t\t\t\t\t\t\t\t

      This Privacy Policy and Cookies Policy defines the rules for the processing and protection of personal data provided by Users and Cookies, as well as other technologies appearing on the website https:\/\/statek-krakow.pl<\/a> and in the online shop under the name https:\/\/statek-krakow.pl\/bilety\/.<\/p>\n

      The Controller of the website and the personal data submitted as part of it is:<\/p>\n

      Krystian Kapusta running a business named ‘Aqua Fun Krystian Kapusta’, at Bulwar Czerwie\u0144ski plot no. 172\/7, 31-069 Krak\u00f3w, TAX ID: 6791224838 in accordance with the document generated from the Central Registration and Information on Economic Activity system.<\/p>\n

      I care about the security of personal data and the privacy of the Website User. I am delighted that you have visited my Website.<\/strong><\/p>\n

      In case of any doubts regarding the provisions of this Privacy Policy and Cookies Policy, please contact the Controller via e-mail: info@statek-krakow.pl<\/a><\/p>\n

      The Controller reserves the right to introduce changes to the privacy policy, and each User of the website is obliged to know the current privacy policy. Reasons for changes may include the development of online technologies used on the site, changes in applicable laws, or the development of the Website, e.g., through the introduction of new tools by the Controller. At the bottom of the page you will find the publication date of the current Privacy Policy.<\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

      \n\t\t\t\t
      \n\t\t\t\t\t

      \u00a72 DEFINITIONS<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
      \n\t\t\t\t
      \n\t\t\t\t\t\t\t\t\t

      Controller<\/strong> – Krystian Kapusta running a business named ‘Aqua Fun Krystian Kapusta’, at Bulwar Czerwie\u0144ski, plot no. 172\/7, 31-069 Krak\u00f3w, TAX ID: 6791224838 in accordance with the document generated from the Central Registration and Information on Economic Activity system.<\/p>\n

      User<\/strong> \u2013 any entity staying on and using the website.<\/p>\n

      Website and\/or Online Store<\/strong> – the website and online shop located athttps:\/\/statek-krakow.pl<\/a> and https:\/\/statek-krakow.pl\/bilety\/.<\/u><\/p>\n

      Form or Forms<\/strong> \u2013 places on the Website that allow the User to enter personal data for the purposes indicated therein, e.g., to place an order, to contact the User.<\/p>\n

      DGPR<\/strong> \u2013 means the Regulation of the European Parliament and of the Council EU 2016\/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95\/46\/EC (General Data Protection Regulation).<\/p>\n

      Data Protection Act<\/strong> \u2013 Act of May 10, 2018 on the protection of personal data (Journal of Laws of 2018, item 1000 as amended).<\/p>\n

      Act on provision of services by electronic means<\/strong> \u2013 Act of July 18, 2002 on the provision of electronic services (Journal of Laws No. 144, item 1204 as amended).<\/p>\n

      Telecommunications Law<\/strong> \u2013 Law of July 16, 2004, Telecommunications Law (Journal of Laws of 2021, item 576 as amended).<\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

      \n\t\t\t\t
      \n\t\t\t\t\t

      \u00a73 PERSONAL DATA AND PRINCIPLES OF THEIR PROCESSING<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
      \n\t\t\t\t
      \n\t\t\t\t\t

      WHO IS THE CONTROLLER OF YOUR PERSONAL DATA?<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
      \n\t\t\t\t
      \n\t\t\t\t\t\t\t\t\t

      The Controller of the User’s personal data is Krystian Kapusta, running a business named ‘Aqua Fun Krystian Kapusta’, at Bulwar Czerwie\u0144ski plot no. 172\/7, 31-069 Krak\u00f3w, TAX ID: 6791224838 in accordance with the document generated from the Central Registration and Information on Economic Activity system.<\/p>\n

      The Controller co-administers with social media platform providers, e.g., Facebook, Instagram, Trip Advisor, etc. indicated in this document regarding the data of people using social media and following the Controller’s profile on a given social media platform and interacting with the Controller. The principles of co-administration are set out below for each social media platform on which the Controller has a profile.<\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

      \n\t\t\t\t
      \n\t\t\t\t\t

      IS THE PROVISION OF DATA VOLUNTARY? WHAT IS THE CONSEQUENCE OF NOT PROVIDING THEM?<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
      \n\t\t\t\t
      \n\t\t\t\t\t\t\t\t\t

      Providing data is voluntary, however, failure to provide certain information, generally marked on the Controller’s website as mandatory, will result in the inability to provide a given service and achieve a specific goal or take specific actions.<\/p>\n

      The User’s provision of data that is not mandatory or excess data that the Controller does not need to process is based on the User’s own decision, and then the processing takes place on the basis of the premise set out in Art. 6 sec. (1)(a) of the GDPR (consent). The User consents to the processing of this data and to anonymize data that the Controller does not require and does not want to process but were provided by the User to the Controller nonetheless.<\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

      \n\t\t\t\t
      \n\t\t\t\t\t

      FOR WHAT PURPOSES AND ON WHAT LEGAL BASIS DO WE PROCESS THE USER'S PERSONAL DATA PROVIDED WHILE USING THE WEBSITE?<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
      \n\t\t\t\t
      \n\t\t\t\t\t\t\t\t\t

      The User’s personal data on the Controller’s Website may be processed for the following purposes and on the following legal bases:<\/p>\n

        \n
      1. providing a service or performance of a concluded contract, sending an offer (e.g., advertising) at the User’s request \u2013 pursuant to Art. 6 sec. 1(b) of the GDPR (necessity to conclude and\/or perform a contract or to take action on a request);<\/li>\n
      2. issuing an invoice, bill and fulfilling other obligations arising from tax law in the case of orders placed in the Online Store or other products and services – pursuant to Art. 6 sec. 1(c) of the GDPR (legal obligation);<\/li>\n
      3. granting a discount or informing about promotions and interesting offers of the Controller or entities recommended by him \u2013 pursuant to Art. 6 sec. 1(a) of the GDPR (consent);<\/li>\n
      4. storing unpaid orders \u2013 pursuant to Art. 6 sec. 1(f) of the GDPR (legitimate interest of the controller);<\/li>\n
      5. handling complaints or claims related to the contract \u2013 on the basis of Art. 6 sec. (1)(b) of the GDPR (necessity to conclude and\/or perform the contract) and pursuant to Art. 6 sec. 1(c) of the GDPR (legal obligation);<\/li>\n
      6. determining, investigating or defending against claims \u2013 pursuant to Art. 6 sec. 1(f) of the GDPR (legitimate interest of the controller);<\/li>\n
      7. telephone contact in matters related to the provision of the service \u2013 pursuant to Art. 6 sec. 1(b) of the GDPR (necessity to conclude and\/or perform the contract);<\/li>\n
      8. telephone contact for the purpose of making an offer and for direct marketing \u2013 pursuant to Art. 6 sec. (1)(a) of the GDPR (consent) and pursuant to Art. 6 sec. 1(f) of the RODO (legitimate interest of the controller) if you are already a customer;<\/li>\n
      9. the creation of records relating to the GDPR and other legislation \u2013 pursuant to Art. 6 sec. (1)(c) of the GDPR (legal obligations) and Art. 6 sec. 1(f) of the GDPR (legitimate interest of the controller);<\/li>\n
      10. archival and evidentiary purposes, for the purpose of securing information that may be used to prove facts \u2013 pursuant to Art. 6 sec. 1(f) of the GDPR (legitimate interest of the controller);<\/li>\n
      11. analytical purposes, consisting of, among others, the analysis of data collected automatically when using the website, including cookies, e.g., Google Analytics cookies, Meta Pixel (Facebook) \u2013 pursuant to Art. 6 sec. 1(f) of the GDPR (legitimate interest of the controller);<\/li>\n
      12. use of cookies on the Website and its subpages \u2013 pursuant to Art. 6 sec. 1(a) of the GDPR (consent);<\/li>\n
      13. managing the Website and the Controller’s pages on other platforms \u2013 pursuant to Art. 6 sec. 1(f) of the GDPR (legitimate interest of the controller);<\/li>\n
      14. for internal administrative purposes of the Controller related to managing contact with the User, which is the legally justified interest of the Data Controller pursuant to Art. 6 sec. 1(f) of the GDPR (legitimate interest of the controller);<\/li>\n
      15. in order to adjust the content displayed on the Controller’s websites to individual needs and to constantly improve the quality of the services offered – pursuant to Art. 6 sec. 1(f) of the GDPR (legitimate interest of the controller);<\/li>\n
      16. for the purpose of direct marketing to the User of own products or services or recommended products of third parties \u2013 pursuant to Art. 6 sec. 1(f) of the GDPR (legitimate interest of the controller);<\/li>\n
      17. for the creation of its own User databases \u2013 pursuant to Art. 6 sec. 1(f) of the GDPR (legitimate interest of the controller);<\/li>\n
      18. in order to operate a fanpage called “Statek Krak\u00f3w – rejsy po Wi\u015ble w Krakowie” on Facebook and interact with users \u2013 pursuant to Art. 6 sec. 1(f) of the GDPR (legitimate interest of the controller);<\/li>\n
      19. in order to operate the account on Instagram under the name Rejsy_po_Wi\u015ble_Krak\u00f3w and to interact with users \u2013 pursuant to Art. 6 sec. 1(f) of the GDPR (legitimate interest of the controller);<\/li>\n
      20. in order to target advertising in social media and on websites, such as Facebook\u00a0Leads\u00a0Ads or Facebook\u00a0Custom\u00a0Audience, You Tube, and to target remarketing\u00a0\u2013\u00a0pursuant to Art. 6 sec. 1(a) of the GDPR (consent) and pursuant to Art. 6 sec. 1(f) of the GDPR (legitimate interest of the Controller) consisting of the promotion and advertising of the Controller’s services through remarketing targeted at those subscribed to the mailing or visiting the website concerned).\n<\/li>\n<\/ol>\n

        The User’s provision of data that is not mandatory or excess data that the Controller does not need to process is based on the User’s own decision, and then the processing takes place pursuant to the premise set out in Art. 6 sec. (1)(a) of the GDPR (consent). The User consents to the processing of this data and to anonymize data that the Controller does not require and does not want to process but were provided by the User to the Controller nonetheless.<\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

        \n\t\t\t\t
        \n\t\t\t\t\t

        HOW IS DATA COLLECTED?<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
        \n\t\t\t\t
        \n\t\t\t\t\t\t\t\t\t

        Only the data that the user provides is collected and processed (except \u2013 in certain situations \u2013 data collected automatically using cookies and login data, as described below).<\/p>\n

        When visiting the website, data regarding the visit itself is automatically collected, e.g., the user’s IP address, domain name, browser type, operating system type, etc. (login data). Automatically collected data can be used to analyze user behavior on the website, collect demographic data about users, or to personalize the content of the website for improvement purposes. However, this data is processed only for the purposes of website administration and ensuring efficient hosting services, and is not associated with the data of individual Users. You can read more about cookies later in this policy.<\/p>\n

        Data may also be collected for the purpose of filling out forms available on the Website, which is discussed further in the privacy policy.<\/p>\n

        Information society services<\/strong><\/p>\n

        The Controller does not collect children’s data. The user should be at least 16 years of age to consent to the processing of personal data for the purpose of providing information society services, including for marketing purposes, or obtain the consent of a legal guardian (e.g., parent) for this purpose.<\/p>\n

        If the User is under 16 years of age, they should not use the Website and service https:\/\/statek-krakow.pl.<\/a><\/p>\n

        The Controller is entitled to make reasonable efforts to verify whether the User meets the age requirement referred to above, or whether the person exercising parental authority or guardianship over a User who is under 16 years of age has given consent or approved it.<\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

        \n\t\t\t\t
        \n\t\t\t\t\t

        WHAT ARE THE USER RIGHTS?<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
        \n\t\t\t\t
        \n\t\t\t\t\t\t\t\t\t

        The user shall at all times be entitled to the rights contained in Art. 15- 21 of the GDPR i.e.,:<\/p>\n