Privacy Policy

This Privacy Policy describes the rules for processing information about you, including personal data and cookies.

1. General information

1. This policy applies to the website operating at: https://apartcottage.pl/
2. The operator of the website and the Controller of personal data is: TENNISBUŁATSKI BARTOSZ BUŁAT; ul. św. Mikołaja 51/52 50-127 Wrocław; NIP: 8862442409
3. Contact email address of the operator: manager.apartcottage@gmail.com
4. The operator is the Controller of your personal data with regard to data provided voluntarily on the website.
5. The website uses personal data for the following purposes:
   • Handling enquiries via the contact form
   • Fulfilment of ordered services
   • Presentation of offers or information
6. The website collects information about users and their behaviour in the following ways:
   1. Through data voluntarily entered in forms, which is then recorded in the Operator’s systems.
   2. Through saving cookie files (so-called “cookies”) on end-user devices.

2. Selected data protection methods used by the Operator

1. Login areas and personal data entry points are protected at the transmission level (SSL certificate). As a result, personal data and login credentials entered on the website are encrypted on the user’s device and can only be read on the target server.
2. User passwords are stored in hashed form. The hashing function works in one direction only – it cannot be reversed, which is the current industry standard for storing user passwords.
3. An important element of data protection is the regular updating of all software used by the Operator to process personal data, which in particular means regular updates of software components.
4. To protect data, the Operator regularly performs backups.

3. Hosting

1. The website is hosted (technically maintained) on the operator’s server: lh.pl
2. The hosting company maintains server-level logs to ensure technical reliability. The following data may be recorded:
   • resources identified by URL (addresses of requested resources – pages, files),
   • the time of the incoming request,
   • the time of sending the response,
   • the client station name – identification carried out via the HTTP protocol,
   • information about errors that occurred during HTTP transactions,
   • the URL of the page previously visited by the user (referer link) – in cases where the user accessed the website via a link,
   • information about the user’s browser,
   • information about the IP address,
   • diagnostic information related to the process of self-ordering services through website forms,
   • information related to the handling of email correspondence sent to and by the Operator.

4. Your rights and additional information on how your data is used

1. In certain situations, the Controller has the right to transfer your personal data to other recipients, if this is necessary to perform the contract concluded with you or to fulfil the obligations of the Controller. This applies to the following categories of recipients:
   • the hosting company on the basis of data processing entrustment
   • postal operators
   • payment operators
   • authorised employees and associates who use the data for the purpose of operating the website
   • public authorities
2. Your personal data is processed by the Controller no longer than is necessary to perform the related activities specified by separate regulations (e.g. accounting regulations). With regard to marketing data, the data will not be processed for longer than 3 years.
3. You have the right to request from the Controller:
   • access to your personal data,
   • rectification of your data,
   • erasure of your data,
   • restriction of processing,
   • and data portability.
4. You have the right to object, in the scope of processing indicated in point 3.3 c), to the processing of personal data for the purpose of pursuing the legitimate interests of the Controller, including profiling, provided that the right to object may not be exercised where there are valid legitimate grounds for processing that override your interests, rights and freedoms, in particular the establishment, exercise or defence of legal claims.
5. You have the right to lodge a complaint regarding the Controller’s actions with the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw.
6. Providing personal data is voluntary, but necessary to use the website.
7. You may be subject to automated decision-making, including profiling, for the purpose of providing services under the concluded contract and for the purpose of direct marketing carried out by the Controller.
8. Personal data is transferred to third countries within the meaning of personal data protection regulations. This means that we transfer it outside the territory of the European Union.

5. Information in forms

1. The website collects information provided voluntarily by the user, including personal data, if such data is provided.
2. The website may record information about connection parameters (timestamp, IP address).
3. In some cases, the website may save information that makes it easier to link form data with the email address of the user filling in the form. In such cases, the user’s email address appears within the URL of the page containing the form.
4. Data provided in a form is processed for the purpose resulting from the function of the specific form, e.g. to handle a service request or commercial enquiry, register services, etc. The context and description of each form clearly indicate its purpose.

6. Administrator logs

1. Information about user behaviour on the website may be subject to logging. This data is used for the purpose of administering the website.

7. Key marketing techniques

8. Information about cookies

1. The website uses cookies.
2. Cookies are IT data, in particular text files, which are stored on the end-user device of the website user and are intended for use with the website. Cookies typically contain the name of the website they originate from, the duration of their storage on the end-user device and a unique number.
3. The entity placing cookies on the end-user device of the website user and accessing them is the operator of the website.
4. Cookies are used for the following purposes:
   1. maintaining the user session on the website (after logging in), thanks to which the user does not have to re-enter their login and password on each subpage of the website;
   2. achieving the purposes specified above in the section “Key marketing techniques”;
5. The website uses two main types of cookies: “session cookies” and “persistent cookies”. Session cookies are temporary files that are stored on the user’s end-user device until they log out, leave the website or close the software (web browser). Persistent cookies are stored on the user’s end-user device for the time specified in the cookie parameters or until they are deleted by the user.
6. Web browsing software (web browser) typically allows the storage of cookies on the user’s end-user device by default. Website users may change their settings in this regard. The web browser allows the deletion of cookies. It is also possible to automatically block cookies. Detailed information on this topic can be found in the help section or documentation of the web browser.
7. Restrictions on the use of cookies may affect some of the functionalities available on the website.
8. Cookies placed on the end-user device of the website user may also be used by entities cooperating with the website operator, in particular this applies to companies: Google (Google Inc. based in the USA), Facebook (Facebook Inc. based in the USA), Twitter (Twitter Inc. based in the USA).

9. Managing cookies – how to give and withdraw consent in practice?

1. 1. 1. If the user does not want to receive cookies, they can change their browser settings. Please note that disabling cookies that are essential for authentication, security and maintaining user preferences may make it difficult, and in extreme cases impossible, to use the website.
      2. To manage your cookie settings, select your web browser from the list below and follow the instructions:
         • Edge
         • Internet Explorer
         • Chrome
         • Safari
         • Firefox
         • Opera

         Mobile devices:

         • Android
         • Safari (iOS)
         • Windows Phone