Privacy Policy

Dear Guests,

We have prepared this document with respect for your rights and in accordance with data protection laws. According to its provisions, we are committed to respecting your right to privacy online and to making every effort to properly secure any personal data you provide to us.

If you have any questions regarding the privacy policy, you can contact us at chrzanow@wcentrum.net at any time.

Definitions
1. Privacy Policy – this privacy policy;
2. Service – the website of the Service Provider, i.e. www.wcentrum.net;
3. GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (Official Journal of the European Union L 119 of April 5, 2016);
4. Service – means the service provided electronically by the Service Provider to the User, consisting of making a reservation for the selected Apartment and processing the payment for the reservation through the Website;
5. User – a person using the Website, including the person booking an Apartment via the Website;
6. Applicable Legal Provisions – (i) all legal provisions in force in the territory of the Republic of Poland and (ii) provisions of all rulings, decisions etc. of public authorities – applicable in the event of the implementation and provision of the Service;
7. Facility – the “Aartamenty w Centrum” facility located in Chrzanów (32-500), ul. Świętokrzyska 96, intended by the Service Provider for short-term rental.
Who is the administrator of your personal data?
1. We hereby inform you that the controller of your personal data is ILVEST Sp. z o.o. with its registered office in Ilkowice, ul. Rudno 130, 33-131 Ilkowice, entered into the Register of Entrepreneurs of the National Court Register by the District Court for Kraków Śródmieście in Kraków, 12th Commercial Division of the KRS under the KRS number: 0000196752, NIP: 6282070143. REGON: 356807126, share capital: PLN 900,000.
2. Please send any requests, questions and demands related to the processing of personal data to the following e-mail: address:chrzanow@wcentrum.net.
Purposes and basis of personal data processing
1. In order to provide the Service in accordance with our business profile, we process your personal data for the following purposes::
  1. In order to perform the Service, we process the following personal data: name and surname, telephone number; e-mail address, company data including the Tax Identification Number (in the case of issuing a VAT invoice to an enterprise), bank account details to confirm the transfer; payment card number and other card details, as well as authentication data and other data concerning settlements and accounts, related to settlements, Reservation number, apartment access code.bowych w tym celu jest dobrowolne, jednak niezbędne do zawarcia i realizacji umowy (podstawą prawną jest art. 6 ust. 1 lit. b RODO.
  2. In order to process a complaint, we process the following personal data: name and surname; address (street, house/apartment number, postal code and city); telephone number; e-mail address; reservation number; or bank account number – if a refund is made. The processing of personal data for this purpose is voluntary, but necessary for the conclusion and performance of the contract (the legal basis is art. 6 sec. 1 letter b GDPR).
  3. In order to issue an invoice and fulfill other obligations arising from tax law, we process the following personal data: Name and surname; company; Registered office address; Tax Identification Number. The legal basis for such data processing is Article 6 paragraph 1 letter c of the GDPR, which allows for the processing of personal data if such processing is necessary for the Controller to fulfill its obligations under the law;
  4. In order to measure satisfaction with the services offered, audits, improve and modify our services, we process the following personal data: e-mail address; reservation number; first and last name; guest comments or suggestions, telephone number. The legal basis for such data processing is Article 6 paragraph 1 letter f of the GDPR, which allows the processing of personal data if the Controller pursues its legitimate interest in this way..
  5. In order to ensure the safety of employees and guests of the Facility and prevent fraud, we process the following personal data: data from the key card system; facial image obtained from video monitoring; first and last name; e-mail address; telephone number; IP address, apartment access code. The legal basis for such data processing is Article 6 paragraph 1 letter f of the GDPR, which allows for the processing of personal data if the Controller pursues its legitimate interest in this way.
  6. In order to determine, pursue or defend against claims, we process the following personal data: First name and last name (if the last name was provided) or possibly the company name, Residential address (if provided); PESEL number or NIP number (if provided); e-mail address; IP address; reservation number.
  7. In order to use cookies on the website, we process these IT data in accordance with the principles described in detail below. The legal basis for such processing is Article 6, paragraph 1, letter a of the GDPR, which allows for the processing of personal data on the basis of voluntary consent.
  8. In order to operate the loyalty program, we process the following personal data: First name and last name; Address (street, house/apartment number, postal code and city); Telephone number; E-mail address. The legal basis for such data processing is Article 6 paragraph 1 letter a of the GDPR, which allows for the processing of personal data based on voluntary consent.
Cookies
1. The Service uses the so-called cookies mechanism. Cookies files (so-called “cookies”) are computer data, in particular text files, which are stored in the User’s end device and which can be read by the Service Provider’s IT system (own cookies) or third party IT devices (third party cookies).
2. Some cookies are deleted by the Service Provider after the end of the web browser session (“session” cookies). In turn, “persistent” cookies are stored on the User’s end device for the time specified in the cookie parameters or until they are deleted by the User.
3. During the first visit to the website, information about the use of cookies is displayed. The user may voluntarily consent to the use of cookies. The user may change cookie settings at any time or delete cookies altogether from the browser. Browsers manage cookie settings in different ways. Information on changing cookie settings can be found in the help menu of each browser. Disabling or limiting the use of cookies may cause difficulties in using the Service.
4. We use the following types of cookies:
  1. necessary (own) cookies, i.e. fundamental to the basic functionality of the Website – we use them to ensure the proper operation of the Website (in particular the booking process), in order to develop the Website and adapt it to the needs of Users;
  2. third party cookies – our Service uses functions provided by third parties, which involves the use of cookies from third parties. The use of this type of cookies is described below::
    1. Google Analytics. – we use the Google Analytics tool. This tool is provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. We carry out activities in this area based on our legitimate interest in creating statistics and analyzing them in order to optimize my website. How does Google Analytics work? Google Analytics automatically collects information about the use of the Service. The anonymized IP address transferred to the Google server in the USA by the User’s browser as part of Google Analytics is not generally combined with other Google data. Due to the fact that Google LLC is headquartered in the USA and uses technical infrastructure located in the USA, it has joined the EU-US-Privacy Shield program in order to ensure an adequate level of protection of personal data required by European regulations. As part of the agreement between the USA and the European Commission, the latter has determined an adequate level of data protection for companies with a Privacy Shield certificate. The User may register the data collected by cookies regarding the User’s use of the Service by Google, as well as the processing of this data by Google, by installing the browser plug-in located at the following address: https://tools.google.com/dlpage/gaoptout. Details regarding data processing by Google can be found on the website: https://support.google.com/analytics/answer/6004245. We carry out activities in this area based on our legitimate interest, consisting in the creation of statistics and their analysis in order to optimize my website.
    2. Facebook Pixel – We use marketing tools available within the Facebook service and provided by Facebook Inc., 1601 S. California Ave. Palo Alto, CA 94304, USA. How does Facebook Pixel work? As part of these tools, we direct personalized ads to the User on Facebook. Facebook Pixel automatically collects information about the use of the Service in terms of the pages viewed. The information collected in this way is most often transferred to a Facebook server in the United States and stored there. The information collected within Facebook Pixel is anonymous, i.e. it does not allow me to identify the User. Facebook may combine this information with other information about the User collected as part of the use of Facebook and use it for its own purposes, including marketing. You can read more about these activities in Facebook’s privacy policy: https://www.facebook.com/privacy/explanation. Facebook Inc. has joined the EU-US-Privacy Shield program in order to ensure an adequate level of protection of personal data required by European regulations. We carry out activities in this area based on our legitimate interest in the marketing of our own products or services.
    3. Video and audio – YouTube video
      How does it work? We place video materials from YouTube on the Service. For this purpose, cookies from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA regarding the YouTube service are used. Cookies loaded when playing a video or audio. If you do not agree to their loading, the User should refrain from playing the video or audio. By playing the video or audio, Google receives information about it. Such information (along with the IP address) is sent by the browser directly to the server of the given service provider (some servers are located in the USA) and stored there. After logging in to the Google service, this service provider will be able to directly assign the video playback on my site to the profile in Google. The purpose and scope of data collection and their further processing and use by. In order to prevent Google from assigning the data collected during video playback directly to the User’s profile on a given service, you should log out of that service before visiting the Service. You can read more about Google’s privacy policy in the Google privacy policy (https://policies.google.com/privacy).
    4. Social media tools – the Service uses plugins and other social media tools provided by social media sites such as Facebook.
      We use plugins and other social media tools provided by social media sites such as Facebook and Google. If you display pages of our Service on which such a plugin is embedded, the browser will establish a connection with the servers of the social media administrators. The content of the plugin is transferred by the given service provider directly to the User’s browser and integrated with the site. Integration means that the service provider will receive information that the browser has displayed the Administrator’s site, even if the User does not have a profile on a given social media site. Such information is sent directly by the browser to the server of the given service provider and stored there. If the User has logged in to one of the social media sites, the service provider will be able to assign the visit to my Service page to the User’s profile on the given social media site. In addition, by clicking the “Like” or “Share” button, the appropriate information will also be sent directly to the service provider’s server and stored there. Such information will also be published on a given social networking site and will be displayed to people added as User contacts. Details regarding the protection of the User’s privacy are described in the privacy policies of individual service providers.
      1. Facebook – https://www.facebook.com/legal/FB_Work_Privacy,
      2. Google – https://policies.google.com/privacy?hl=pl,
      In order to prevent social networking sites from assigning data collected during visits to the Service’s websites to a profile on a given site, log out of that site before entering the Service’s websites. Within your browser, the User can completely block the scripts of these social networking sites.
Who is the recipient of your personal data?
Your ordinary personal data may be made available by us to entities that provide us with services related to making and handling reservations (including external IT, accounting and legal companies, companies handling fast payments, insurance companies, taxi and transport companies, invoicing systems, entities providing services related to the technical support of the Service, the company on whose server personal data is stored and the mailbox is maintained). In addition, it may happen that, for example, on the basis of the relevant legal provision or the decision of the competent authority, we will have to transfer the User’s personal data to other authorities or entities.
For how long do we process personal data?
Your personal information will be retained for the period necessary to fulfill the purposes outlined in the Privacy Policy, unless a longer retention period is required or permitted by law. The criteria used to determine our retention periods include:
1. The duration of our relationship with the User and the provision of the Service to him;
2. Whether there is a legal obligation to which we are subject (e.g., laws require us to keep records of your transactions for a certain period of time);
3. Whether the retention of the data is advisable due to our legal position (e.g. in the case of legal proceedings or regulatory investigations).
What rights do you have in connection with our processing of personal data?
1. You have the right to:
  1. the right to access personal data,
  2. the right to rectify personal data,
  3. the right to delete personal data,
  4. the right to restrict the processing of personal data,
  5. the right to object to the processing of personal data,
  6. the right to transfer data,
  7. the right to lodge a complaint with the supervisory authority,
  8. the right to withdraw consent to the processing of personal data, if such consent has been given;
  9. the right to provide personal data.
  10. file a complaint with the supervisory authority – the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw – if it is found that personal data are being processed unlawfully
Final provisions
1. To the extent not regulated by this Privacy Policy, Applicable Law shall apply.
2. The Administrator reserves the right to change the Privacy Policy at any time, and undertakes to immediately publish the new privacy policy on the Website.
3. This Privacy Policy is effective from May 1, 2020.