Privacy

§1. GENERAL PROVISIONS

  1. Purpose and scope
    This Privacy Policy (hereinafter: "Policy") applies to persons using the Website located at the URL:
    http://ignasiakhotel.wa.profitroom.com
    and comes into effect from April 1, 2025
    The Policy also applies to all personal data processing activities within Aspiration Sp. z o.o. (hereinafter also: "Company").

  2. Data Controller
    The data controller (hereinafter: "We") is:
    Aspiration Sp. z o.o.
    ul. Słoneczna 2, 62-300 Września
    Tax ID: 7891733250

  3. Legal basis
    The document takes into account the applicable regulations, including:

    • Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR),
    • Directive 95/46/EC,
    • National personal data protection laws,
    • Internal procedures and guidelines resulting from the data protection audit dated 6.06.2023.

  4. Scope of application
    The Policy applies to:

    • All employees, collaborators, and entities entrusted with personal data,
    • All personal data processing activities within the Company,
    • Persons using hotel, restaurant, event, and sports services, as well as users of the Website.

§2. PERSONAL DATA

  1. Types of processed data
    Within our business operations and Website service, we process in particular:

    • First and last name,
    • Residential and correspondence address,
    • Phone number,
    • Email address,
    • Information regarding reservations and dates of stay/hotel and sports services,
    • Nationality,
    • Transactional data (including payment data, if necessary to provide the service or provided to a payment service provider),
    • Data submitted through the newsletter form (email address and/or phone number, if the User has consented to contact).
  2. Data sources
    • Contracts with clients and employees,
    • Reservation forms available online and by phone,
    • Electronic correspondence,
    • Payment system records,
    • Newsletter subscription form.

  3. Purposes of data processing
    We process personal data for the following purposes:

    • Contract implementation and service provision (Art. 6(1)(b) GDPR)
      • Execution of contracts for hotel, restaurant, event, and sports services,
      • Handling complaints and claims,
      • Reservation and inquiry management.
    • Inquiry handling (Art. 6(1)(f) GDPR)
    • Document storage and legal compliance (Art. 6(1)(c) GDPR)
      • Accounting and reporting,
      • Retention of documents for legally required periods.
    • Marketing and newsletter (Art. 6(1)(a) GDPR)
      • Sending commercial information and newsletters – only with explicit and voluntary consent,
      • Displaying personalized commercial information on social networks.
    • Monitoring and service quality improvement (Art. 6(1)(f) GDPR)
      • Conducting surveys and satisfaction studies,
      • Analyzing feedback to improve service standards.

  4. Providing data
    Providing personal data is voluntary but necessary to use our services (e.g., making a reservation) or to receive newsletters (if the user consents by clicking the appropriate checkbox).

  5. Processing period
    • If data is processed based on consent (Art. 6(1)(a) GDPR) – we process it until consent is withdrawn. However, we may retain archival information about given consents (who, when, and what consent was given) to prove correctness of the actions (e.g., defense against claims).
    • In other cases, personal data is processed for a period justified by the purpose, e.g.:
      • Duration of the contract and period necessary to assert or defend claims,
      • Period required by tax or accounting regulations (e.g., five years).

  6. Withdrawal of consent
    Consent to data processing can be withdrawn at any time by sending an email to:
    ksiegowosc@ignasiakhotel.pl
    or via a special link if provided by us.

  7. Rights of data subjects
    Every data subject has the right to:

    • Access their data and obtain copies,
    • Rectify incorrect or incomplete data,
    • Delete data ("right to be forgotten") in specified cases,
    • Restrict processing,
    • Data portability,
    • Object to processing (especially for direct marketing purposes),
    • File a complaint with a supervisory authority.

§3. DATA RECIPIENTS

  1. Data processors
    To ensure efficient operation and service delivery, we entrust data to cooperating entities such as:

    • Accounting firms (e.g., IGWO Sp. z o.o.),
    • IT service providers (Profitroom Sp. z o.o., All’Informatica, PC Company Sp. z o.o.),
    • Reservation platforms (Booking Sp. z o.o., HRS Sp. z o.o.),
    • Payment operators (Przelewy24 S.A., Polskie Epłatności Sp. z o.o., Expidia Sp. z o.o.).

  2. Data processing agreements
    We enter into data processing agreements with each data processor, which guarantee the application of security measures compliant with GDPR.

  3. Access scope
    Access to data is granted only to authorized persons employed under employment contracts, civil law contracts, or holding appropriate powers of attorney.

  4. Software and system maintenance companies
    We cooperate with companies providing technical and IT support (e.g., hosting, email, reservation systems), which may access data solely for the purpose of maintaining service continuity and correctness.

§4. COOKIES

  1. General principles
    • Cookies (so-called "cookies") are small text files sent by the server to the browser, which can then be stored in the memory of the user's device.
    • Cookie storage does not allow us access to the user’s private device or other data than those contained in cookies.
  2. Types and purposes of cookies

    • Technical cookies
      Ensure proper message transmission and allow saving user settings (e.g., language, preferences, etc.).

    • Analytical and statistical cookies
      Used to collect data about traffic on the Website, which helps us optimize its operation and tailor content to user needs.

    • Marketing cookies
      Allow displaying personalized commercial information on social networks.

  3. Cookie consent
    • The user may consent to specific types of cookies, refuse consent, withdraw it, and manage settings at any time.
    • This consent may be given through an appropriate tool provided on the Website.