Online booking
Data controller and definitions
The controller of the personal data of the Guests/Users of the Website is: RYNEK30HOSTEL SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ, +48 695 30 30 13, 8971862984, 0000767055
The Data Controller can be contacted:
at the correspondence address: 30 Rynek, 50-102 Wrocław
at the email address: hostel@rynek30.pl
Service User – a natural person visiting the website(s) presenting the Offer and enabling the conclusion of a short-term accommodation rental agreement, or using the services or functionalities described in this Privacy and Cookies Policy;
Service provider – Ewa Jakóbczak, RYNEK30HOSTEL SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ, 8971862984, ul. Rynek 30, 50-102, Wrocław;
Listing – accommodation offered by the Service Provider for the purpose of concluding an accommodation lease agreement via the Website.
Guest – a natural person with full legal capacity, a legal person, or an organisational unit referred to in Article 331 of the Civil Code, concluding an accommodation rental agreement with the Service Provider;
Service – presentation of the Service Provider's Offer on the Internet, enabling the conclusion of an online accommodation rental agreement;
Newsletter – information, including commercial information within the meaning of the Act of 18 July 2002 on the Provision of Services by Electronic Means (Journal of Laws of 2020, item 344) originating from the Service Provider sent to the Guest/User by electronic means; receiving it is voluntary and requires the consent of the Guest/User.
Account – a set of data stored within the Website and in the ICT system of the Service Provider concerning a given Guest/User and the bookings made and agreements concluded by them, through which the Guest/User of the Website may place orders and conclude agreements.
GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).
For the purpose of executing the distance accommodation rental agreement, the Service Provider processes:
information regarding the User's device in order to ensure the correct operation of the services: the computer's IP address, information contained in cookies or other similar technologies, session data, web browser data, device data, data regarding activity on the Website, including on individual subpages;
geolocation information, if the Guest/User has consented to the service provider accessing their geolocation. Geolocation information is used for the purpose of providing more tailored product and service offers.
Users' personal data: first name, last name, registered office address, correspondence address, e-mail address, telephone number, Tax Identification Number (NIP), bank account number or other personal data whose provision is necessary to complete the purchase and whose provision in the reservation process is required by the Administrator.
This information does not contain the identity data of Guests/Users, but when combined with other information it may constitute personal data and therefore the Controller affords it full protection under the GDPR.
This data is processed in accordance with Article 6(1)(b) of the GDPR for the purpose of service provision, i.e. the contract for the provision of electronic services in accordance with the Terms and Conditions, and in accordance with Article 6(1)(a) of the GDPR, in connection with the consent given to the use of specific cookies or other similar technologies, expressed through appropriate web browser settings in accordance with the Telecommunications Law, or in connection with the consent given for geolocation. The data is processed until the Guest/User ceases to use the Website.
The Controller undertakes to take all measures required pursuant to Article 32 of the GDPR, i.e., taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of processing as well as the risk of varying likelihood and severity for the rights and freedoms of natural persons, the Controller shall implement appropriate technical and organisational measures to ensure a level of security appropriate to that risk.
Administrator's marketing activities
On the Website, the Data Controller may post marketing information about their products or services. The display of this content is carried out by the Data Controller in accordance with Article 6(1)(f) of the GDPR, i.e. in pursuit of the legitimate interest of the Data Controller consisting in the publication of content related to the services provided and promotional content of campaigns in which the Data Controller is involved. At the same time, this action does not violate the rights and freedoms of Guests/Users, as Guests/Users expect to receive content of a similar nature, or even anticipate it, or this is the direct purpose of their visit to the Website(s).
Recipients of Users' data
The Data Controller discloses Users' personal data exclusively to processors pursuant to concluded personal data processing entrustment agreements in order to provide services for the Data Controller, e.g., hosting and website maintenance, IT services, marketing and PR services.
Transfer of personal data to third countries
Personal data will not be processed in third countries.
Data subject rights
Every data subject has the right:
access (Article 15 GDPR) – obtaining confirmation from the Data Controller as to whether or not her personal data are being processed. If the data concerning the person are being processed, she is entitled to access them and to obtain the following information: on the purposes of processing, the categories of personal data, the recipients or categories of recipients to whom the data have been or will be disclosed, the period for which the data will be stored or the criteria used to determine that period, the right to request rectification, erasure or restriction of the processing of personal data belonging to the data subject, and to object to such processing;
to obtain a copy of the data (Article 15(3) of the GDPR) – to obtain a copy of the data undergoing processing, whereby the first copy is free of charge, and for subsequent copies the Data Controller may charge a reasonable fee based on administrative costs;
to rectification (Article 16 of the GDPR) – requests for the rectification of her personal data that are incorrect, or the completion of incomplete data;
for data erasure (Article 17 GDPR) – a request for the erasure of their personal data if the Data Controller no longer has a legal basis for processing them or the data are no longer necessary for the purposes of processing;
to restriction of processing (Article 18 GDPR) – the right to request the restriction of personal data processing when:
the data subject contests the accuracy of the personal data, for a period enabling the data controller to verify the accuracy of the personal data,
processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead,
The data controller no longer needs the data, but they are required by the data subject for the establishment, exercise or defence of legal claims,
the data subject has objected to processing pursuant to Article 21(1) pending the verification whether the legitimate grounds of the controller override those of the data subject;
to data portability (Article 20 GDPR) – to receive the personal data concerning her/him, which she/he has provided to the Data Controller, in a structured, commonly used and machine-readable format, and to request the transmission of those data to another Data Controller, if the data are processed on the basis of the data subject's consent or a contract concluded with her/him, and if the data are processed by automated means;
to object (Article 21 GDPR) – to lodge an objection to the processing of their personal data for the purposes of the controller's legitimate interests, on grounds relating to their particular situation, including profiling. In such a case, the Data Controller shall assess whether there are compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or grounds for the establishment, exercise or defence of legal claims. If, pursuant to the assessment, the interests of the data subject override those of the controller, the Data Controller shall be obliged to cease processing the data for those purposes;
to withdraw consent at any time and without giving a reason, but the processing of personal data carried out before the withdrawal of consent will remain lawful. The withdrawal of consent will result in the Controller ceasing to process personal data for the purpose for which that consent was given.
In order to exercise the aforementioned rights, the data subject should contact the Data Controller using the provided contact details and inform them which right and to what extent they wish to exercise.
President of the Personal Data Protection Office
The data subject has the right to lodge a complaint with a supervisory authority, which in Poland is the President of the Personal Data Protection Office, with its registered office in Warsaw, ul. Stawki 2, who can be contacted in the following manner:
by post: 2 Stawki Street, 00-193 Warsaw;
via the electronic inbox available at the website: https://www.uodo.gov.pl/pl/p/kontakt; ;
helpline: 606-950-0000.
Data Protection Officer
In any case, the data subject may also contact the Data Controller's Data Protection Officer directly by email or in writing at the Data Controller's address provided in Section I, point 2 of this Privacy and Cookies Policy.
Privacy Policy Changes
The privacy and cookies policy may be supplemented or updated in accordance with the current needs of the Administrator in order to provide Guests/Users with up-to-date and reliable information.
Biscuits
The Website performs the functions of collecting information about Guests, Website Users and their behaviour in the following ways:
through information voluntarily entered in the forms for purposes resulting from the function of the specific form;
by storing cookies on terminal equipment (so-called „cookies”);
through the collection of web server logs by the hosting provider of the online shop (necessary for the correct functioning of the service).
Cookies are IT data, in particular text files, which are stored on the terminal equipment of the Guest/User of the Website and are intended for the use of the Website's pages. Cookies typically contain the name of the website from which they originate, their storage time on the terminal equipment, and a unique number.
The Website uses cookies solely upon the prior consent of the Website Guest/User in this regard. Consent to the Website's use of all cookies is given by clicking the button: „I agree, I want to proceed to the site” when the message regarding the use of cookies by the Website is displayed, or by closing this message.
The consent referred to in the previous point may cover only selected cookies. In such a case, the Guest/Website User should use the „Cookie settings” option available in the notice regarding the use of cookies by the Online Store. At the same time, the Data Administrator reserves the right that disabling cookies necessary for authentication, security and maintaining the preferences of the Guest/Website User may hinder and, in extreme cases, prevent the use of the Website.
If the Guest/User of the Website does not consent to the Website's use of cookies, they may use the option: „I do not consent”, also available in the message regarding the use of cookies by the Online Store, or modify the settings of the web browser they are currently using (however, this may cause the Website to malfunction).
To manage cookie settings, select your web browser or operating system from the list below and follow the instructions:
Internet Explorer
Chrome
Safari
Firefox
Opera
Android
Safari (iOS)
Windows Phone
The legal basis for processing personal data originating from cookies is the Data Controller's legitimate interests, which consist in ensuring a high quality of services and ensuring the security of services.
Two main types of cookies are used within the Service: „session cookies” and „persistent cookies”. „Session cookies” are temporary files that are stored on the Service User's end device until logging out, leaving the Service, or shutting down the software (web browser). „Persistent cookies” are stored on the Service Visitor's/User's end device for the time specified in the cookie parameters or until they are deleted by the Visitor/User.
Cookies are used for the following purposes:
creating statistics that help to understand how the Guest/Users of the Website use the websites, which enables the improvement of their structure and content;
maintaining the session of the Site Guest/User (after logging in), thanks to which the Site Guest/User does not have to re-enter their login and password on every subpage of the Site;
profiling the Guest/Website User in order to display product recommendations and tailored materials to them on advertising networks, in particular the Google network.
Web browsing software (a web browser) usually allows cookies to be stored on the Guest's/User's terminal device by default. Guests/Users can change their settings in this regard. The web browser enables cookies to be deleted. It is also possible to block cookies automatically.
Restrictions on the use of cookies may affect some functionalities available on the Internet Shop's websites.
Cookies placed on the terminal equipment of the Guest/User of the Website may also be used by advertisers cooperating with the Website and partners of the Website.
Cookies may be used by advertising networks, in particular the Google network, to display advertisements tailored to the way the Guest/User uses the Website. To this end, they may save information about the Guest's/User's navigation path or the time spent on a given page.
We recommend that the Guest/User reads the privacy policies of these companies to familiarise themselves with the rules regarding the use of cookies used in statistics: Google Analytics Privacy Policy.
Cookies may be used by advertising networks, in particular the Google network, to display advertisements tailored to the way the Guest/User uses the Website. For this purpose, they may store information about the user's navigation path or the time spent on a given page.
Regarding information on Guest/User preferences collected by the Google advertising network, the Guest/User can view and edit information resulting from cookies using the following tool: https://www.google.com/ads/preferences/.
On the Website's page, plugins are placed which may transfer Guest/User data to Administrators such as, for example:
For the proper performance of the remote accommodation rental agreement, the Administrator may share the data of Guests/Users with online payment systems.
Newsletter
The Guest/User may at any time opt out of receiving the Newsletter independently, by unchecking the appropriate box on their Account page or by going to form, by clicking the appropriate link contained within the body of each Newsletter or via Customer Services.
Account