Privacy

§1. GENERAL PROVISIONS

  1. Purpose and scope
    This Privacy Policy (hereinafter: "Policy") applies to persons using the Website located at the URL:
    http://ignasiakhotel.wa.profitroom.com
    and comes into force from April 1, 2025.
    The Policy also applies to all personal data processing processes within the activities of Aspiration Sp. z o.o. (also hereinafter: "Company").

  2. Data Controller
    The data controller (hereinafter: "We") is:
    Aspiration Sp. z o.o.
    ul. Słoneczna 2, 62-300 Września
    NIP: 7891733250

  3. Legal basis
    The document takes into account the applicable regulations, including:

    • Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR),
    • Directive 95/46/EC,
    • National personal data protection regulations,
    • Internal procedures and guidelines resulting from the data protection audit dated 6.06.2023.

  4. Scope of application
    The Policy applies to:

    • All employees, collaborators, and entities entrusted with personal data,
    • All personal data processing processes in the Company,
    • Persons using hotel, restaurant, event, and sports services, as well as Website users.

§2. PERSONAL DATA

  1. Types of processed data
    Within the scope of our activities and Website service, we process in particular:

    • First name, last name,
    • Residential and correspondence address,
    • Phone number,
    • Email address,
    • Information about reservations and dates of stay/hotel-sports services,
    • Nationality,
    • Transaction data (including payment data, if necessary for service execution or sent to payment service providers),
    • Data provided in the newsletter form (email address and/or phone number if the User has consented to contact).
  2. Sources of data acquisition
    • Contracts with clients and employees,
    • Reservation forms available online and by phone,
    • Electronic correspondence,
    • Records in payment systems,
    • Newsletter subscription form.

  3. Purposes of data processing
    We process personal data for the following purposes:

    • Performance of contract and provision of services (Art. 6(1)(b) GDPR)
      • Execution of contracts for hotel, restaurant, event, and sports services,
      • Handling complaints and claims,
      • Reservation and inquiry handling.
    • Handling inquiries (Art. 6(1)(f) GDPR)
    • Documentation storage and fulfillment of legal obligations (Art. 6(1)(c) GDPR)
      • Accounting and reporting,
      • Retention of documentation for legally required periods.
    • Marketing and newsletter (Art. 6(1)(a) GDPR)
      • Sending commercial information and newsletters – only with explicit and voluntary consent,
      • Displaying personalized commercial information on social networks.
    • Monitoring and improving service quality (Art. 6(1)(f) GDPR)
      • Conducting surveys and satisfaction studies,
      • Opinion analysis to improve service standards.

  4. Providing data
    Providing personal data is voluntary but necessary to use our services (e.g., making reservations) or receive newsletters (if the user consents by checking the appropriate checkbox).

  5. Processing period
    • If data is processed based on consent (Art. 6(1)(a) GDPR) – we process it until withdrawal of consent. However, we may keep archival information about given consents (who, when, and what consent was given) to demonstrate the correctness of actions (e.g., defense against claims).
    • In other cases, personal data are processed for a period justified by the purpose, e.g.:
      • Duration of the contract and the time necessary for claiming or defending claims,
      • The time required by tax or accounting regulations (e.g., five years).

  6. Withdrawal of consent
    Consent to data processing can be withdrawn at any time by sending a message to the email address:
    ksiegowosc@ignasiakhotel.pl
    or via a special link if made available by us.

  7. Rights of data subjects
    Every person whose data is processed has the right to:

    • Access their data and obtain a copy,
    • Rectify (correct) inaccurate or incomplete data,
    • Delete data ("right to be forgotten") in specified cases,
    • Restrict processing,
    • Data portability,
    • Object to processing (especially for direct marketing purposes),
    • Lodge a complaint with a supervisory authority.

§3. DATA RECIPIENTS

  1. Data processing entities
    To ensure smooth operation and service provision, we entrust data to cooperating entities such as:

    • Accounting firms (e.g., IGWO Sp. z o.o.),
    • IT service providers (Profitroom Sp. z o.o., All’Informatica, PC Company Sp. z o.o.),
    • Reservation platforms (Booking Sp. z o.o., HRS Sp. z o.o.),
    • Payment operators (Przelewy24 S.A., Polskie Epłatności Sp. z o.o., Expidia Sp. z o.o.).

  2. Data processing agreements
    We enter into data processing agreements with each data processing entity, in which they guarantee the use of security measures compliant with the GDPR.

  3. Access scope
    Access to data is granted only to authorized persons working under employment contracts, civil law agreements, or holding appropriate powers of attorney.

  4. Software and system maintenance companies
    We cooperate with companies providing technical and IT support (e.g., hosting, email service, reservation systems), which may have access to data only to maintain the continuity and correctness of service operation.

§4. COOKIES

  1. General principles
    • Cookies (so-called "cookies") are small text files that the server sends to the browser and may then be stored in the user's device memory.
    • The cookie record does not allow us access to the user's private device or to any data other than those contained in the cookies.
  2. Types and purposes of cookie usage

    • Technical cookies
      They ensure proper message transmission handling and allow remembering user settings (e.g., language, preferences, etc.).

    • Analytical and statistical cookies
      Used to collect data about traffic on the Website, which helps us optimize its operation and tailor content to users' needs.

    • Marketing cookies
      Allow displaying personalized commercial information on social networks.

  3. Cookie consent
    • The user can give consent to specific types of cookies, refuse consent or withdraw it, and manage settings at any time.
    • This consent may be given by means of an appropriate tool provided on the Website.