Private policy
§1
General Provisions
This privacy policy defines the principles of protection and processing of personal data of natural persons, legal entities, and organizational units without legal personality that have legal capacity under the law, using services provided via the website wielorybsopot.pl. The Data Controller is ELŻBIETA SARNA, operating a business under the name “WIELORYB ELŻBIETA SARNA,” located at ul. Podjazd 2, 81-805 Sopot, Poland, VAT ID (NIP) 5860169497, REGON number 191241356. Users of the services accept this Privacy Policy.
§2
Categories of Processed Data
The Data Controller, FOR THE PURPOSE OF PROVIDING THE SERVICE, processes the following personal data: first name, last name, email, phone number, and business name. No identifying data is shared with third parties unless required by law.
§3
Purpose of Processing Personal Data
The purpose of processing personal data is to enable the delivery of the service. Personal data may also be processed for legally compliant purposes (e.g., issuing accounting documents, statistical purposes, payment processing, complaint handling). The Data Controller processes data based on Article 6(1)(b) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR), i.e., processing is necessary to take steps at the request of the data subject prior to entering into a contract.
§4
Personal Data Protection
Data are stored on servers located in Poland, in one of the most modern and secure data centers. Access to personal data is granted exclusively to authorized personnel, and data is secured in accordance with Polish law requirements.
§5
Information on Intent to Transfer Data to Third Countries or International Organizations
The Data Controller does not intend to transfer personal data to third countries (i.e., countries outside the European Economic Area) or international organizations.
§6
Personal Data Retention
Personal data will be stored for the duration of the Agreement and for the period necessary for settlement purposes based on the legitimate interests of the Data Controller.
§7
Rights of Service Users
Users have the right to request access to their personal data from the Data Controller, including obtaining a copy of the processed data. The first copy is free. For subsequent copies, the Data Controller may charge a reasonable fee reflecting administrative costs. Users may request correction of inaccurate personal data, especially if collected incorrectly or changed after collection. This right also includes completing missing data. Users have the right to request deletion of their personal data, subject to the conditions specified in GDPR. The Data Controller may refuse a justified request for deletion if allowed by law, especially when further processing is necessary to comply with legal obligations or to establish, pursue, or defend legal claims. Users have the right to request restriction of data processing under GDPR conditions. Users have the right to file a complaint with a supervisory authority established by EU Member States to monitor GDPR compliance. The supervisory authority for Poland is the President of the Personal Data Protection Office. Requests should be sent electronically to restauracja@wielorybsopot.pl or in writing to the Data Controller’s address.
§8
Information on Automated Data Processing, Including Profiling
User data will not be processed in an automated manner, including profiling.
§9
Processing Data for Other Purposes
The Data Controller does not intend to process user data for purposes other than those for which data was collected.
§10
Voluntariness of Providing Data and Consequences of Not Providing Data
When data processing is necessary for concluding and performing a contract, providing data is a condition for concluding and performing the contract. Providing data is voluntary; however, failure to provide data will prevent contract conclusion or execution.
§11
Information Stored on End Devices (Cookies)
The website stores information on the user’s device using cookies for statistical purposes (Google Analytics) and to ensure full functionality. Cookies are data files stored on users’ devices that facilitate website usage. They recognize the user’s device and display the website adjusted to individual preferences. By default, browsers allow cookies to be stored. Users can change cookie settings in their browsers at any time, including blocking cookies or being notified of each cookie transmission. Detailed information on cookie management is available in browser settings. If users do not change cookie settings, cookies will be stored on their devices, enabling information storage and access. Disabling cookies will cause interruption of service delivery on the website.