Privacy Policy and Cookie Policy

1.   This Privacy Policy sets out the rules for the processing and protection of personal data provided by users in connection with their use of services offered by the website Zalesie Mazury Active Spa (hereinafter: the Service).

2.   The controller of personal data contained in the Service is ZALESIE MAZURY Mariusz Czeszejko-Sochacki Spółka Komandytowa, Barczewo 11-010, Zalesie 12 entered in the register of entrepreneurs under tax identification number NIP: 7393617378 (hereinafter: the Controller).

3.   To ensure the security of entrusted personal data, the Controller operates on the basis of internal procedures and recommendations compliant with applicable legal acts concerning personal data protection, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC.

4.   The Controller exercises particular care to protect the interests of data subjects and, in particular, ensures that personal data are:

a.  processed lawfully;

b.  collected for specified, lawful purposes and not further processed in a manner incompatible with those purposes;

c.   factually correct and adequate in relation to the purposes for which they are processed;

d.  stored in a form that permits identification of data subjects for no longer than is necessary to achieve the purpose of processing.

5.   Personal data are processed on the basis of consent given by Service users and in cases where applicable law authorizes the Controller to process personal data.

6.   The Controller processes personal data voluntarily provided by Service users only for the following purposes:

a.  responding to user enquiries submitted using the contact form,

b.  accepting reservations using the online booking system,

c.   performing services provided by the Controller pursuant to Article 6(1)(b) GDPR,

d.  marketing, including sending commercial information to an email address if the Client has consented to this by selecting the appropriate box in the reservation process or when submitting an enquiry via the contact form. Consent to the processing of data for marketing purposes and to receiving commercial information may be withdrawn by clicking the relevant link in the message received or by sending such a request to the Controller's email address,

e.  pursuing the Controller's legitimate interest in specific cases pursuant to Article 6(1)(f) GDPR, e.g. debt collection or video monitoring of traffic on the premises of the Facility.

7.   Recipients of personal data may include authorities, institutions and entities authorized under legal provisions, as well as entities providing services to the Controller (e.g. legal, IT, marketing and accounting services, and other entities participating in the performance of the ordered service).

8.   The Controller may use automated decision-making, including profiling, for marketing purposes and to tailor the offer.

9.   The Service user who provided the data has the right to access the data processed by the Controller. The user also has the right to modify such data, request its deletion, and restrict or stop the processing of their personal data at any time. At any time, the user may also request the deletion of their personal data from the Service. The right to data portability does not apply because no standard has been established for exchanging such data between hotel facilities.

10. The Service user has the right to withdraw consent at any time without affecting the lawfulness of processing carried out on the basis of consent before its withdrawal.

11. In order to exercise the rights indicated in point 8 above, the Service user should contact the Controller using the same email address or telephone number provided to the Service, or by contacting the following address: marketing@zalesiemazury.pl

12. Every Service user may lodge a complaint with the Personal Data Protection Office.

13. The Controller collects information about users and their behaviour in the following ways:

a.  through information voluntarily entered in forms,

b.  through the collection of cookie files.

14. During the first visit to the Zalesie Mazury Active Spa website, the user is informed about the use of cookies. By remaining on the website, the user accepts the use of cookies on the website. Failure by the user to change browser settings is equivalent to consent to the use of cookie files.

15. The installation of cookie files is necessary for the proper provision of services within the Service. Cookies contain information necessary for the proper functioning of the website, in particular those requiring authorization. The user may change browser settings concerning the handling and storage of cookies at any time.

16. The following types of cookie files are used within the Service:

a.  session cookies - remain in the browser until it is closed or the user logs out of the website on which they were placed,

b.  persistent cookies - remain in the web browser of the device until they are deleted by the user or until a predetermined time specified in the cookie parameters.

17. In terms of the functionality of each cookie file, they can be divided into:

a.  conversion cookies, which make it possible to analyze the performance of various sales channels

b.  tracking cookies, which, together with conversions, help analyze the performance of various sales channels

c.   marketing cookies, used to personalize advertising content and target it appropriately

d.  marketing cookies, used to personalize advertising content and target it appropriately

e.  analytical tools that help improve the comfort of using the website by understanding how users use it

f.   necessary cookies, i.e. cookies fundamental to the basic functionality of the website. The cookies we use allow us to develop our website.

18. Some cookie files may be placed by the provider of the website and online booking system solely for the purpose of:

a.  improving and supporting the booking process

b.  analyzing and collecting statistical data concerning the use of the website and online booking system in order to improve them

19. The Service may contain links to other websites that operate independently of the Service and are not supervised by the Service in any way. These websites may have their own privacy policies and regulations, which we recommend reading carefully.

20. The Controller reserves the right to amend the Service privacy policy, which may result from the development of internet technology, possible changes in personal data protection law, and development of the Service. We will inform users of any changes in a visible and understandable manner.