Privacy Policy and cookies

Privacy Policy

1. General Information

1. The operator of the service and the administrator of personal data collected on the Service is a company operating under the name INTER-APARTMENTS sp. z o.o sp.k. with its registered office in Krakow, registered in the Entrepreneurs Register maintained by the District Court for Krakow – Śródmieście in Krakow, XI Economic Department of the National Court Register under KRS number 0000416421, NIP 9452168197 (hereinafter: Service Operator).
2. The Service Operator ensures compliance with the processing of personal data of Service users (hereinafter: User) with applicable regulations, including Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data.
3. The Service performs the function of obtaining information about Users and their behavior in the following ways:
   1. by voluntarily entered information in forms,
   2. by storing cookies files (so-called “cookies”) on end devices,
   3. by collecting server logs from the www server operating at the address www.aparthotelvanilla.pl
4. The Service website also contains links to social media platforms; to familiarize yourself with the privacy policies used by these platforms, we encourage you to visit the websites of entities operating these services.
5. The Service does not make automated decisions based on personal data, nor does it carry out profiling.

2. Information about Forms

• The Service collects information voluntarily provided by the User.
• Data provided in the form is processed for the purpose resulting from the specific form function, e.g., to process hotel service reservations, availability inquiries, business contact, payment processing.

3. Purpose of Data Processing

1. Providing personal data by the User is voluntary but necessary to make inquiries about service availability, make service reservations, and their execution, check-in at the aparthotel operated by the Service Operator (hereinafter: hotel), and respond to questions about services. Providing personal data is a contractual and statutory requirement (for documenting the service with a VAT invoice). Failure to provide personal data will prevent making a reservation, entering into a contract with the aparthotel, checking in at the aparthotel, and issuing an invoice.
2. User personal data is processed by the Service Operator for purposes related to the provision of hotel services or other similar services, including in particular:
   1. making inquiries about service availability,
   2. enabling responses to service inquiries and their execution,
   3. making service reservations,
   4. ensuring security,
   5. entering into or performing a contract in which the User is a party or taking action at the request of the User before entering into a contract, sending commercial information via electronic means of communication,
   6. documenting the provision of services for tax purposes,
   7. pursuing claims,
   8. fulfilling a legal obligation incumbent on the Service Operator,
   9. sending commercial and marketing offers if the User has consented to the processing of personal data for marketing purposes.
3. Personal data may also be processed by video surveillance used by the aparthotel to protect property and the safety of hotel guests and persons staying on the aparthotel premises. The legal basis for processing data by monitoring is the protection of the vital interests of hotel guests and other natural persons, as well as the legitimate interest of the Service Operator.

4. Disclosure, Storage, and Access to Data

1. User data is disclosed to external entities only within legally permitted limits.
2. User personal data may be disclosed, in particular, to the following categories of recipients:
   1. accounting firms, insurance companies, and law firms cooperating with the Service Operator,
   2. travel agencies cooperating with the Service Operator,
   3. hosting companies, IT companies, and companies providing support in the management of the Service Operator’s IT infrastructure,
   4. entities participating in support processes necessary for the provision of hotel services, including payment services, services provided electronically,
   5. Service Operator’s cooperating associates providing services, especially related to direct service and reservation processing,
   6. public authorities or entities performing public tasks authorized under the applicable law to receive personal data.
3. The Service Operator does not provide User data to third parties for marketing purposes, nor does it transfer data to entities from countries outside the European Union unless such countries guarantee an equivalent level of personal data protection.
4. The Service Operator cooperates with online accommodation booking portals (e.g., booking.com) and is responsible for the content of the website to enable making hotel service reservations directly through such portals, however, reservations are processed by booking portals. Thus, information provided by users on booking portals will be made available to these portals and their associated partners.
5. In case of User’s consent to data processing, the Service Operator stores this data until it is withdrawn. In other cases, the Service Operator stores data for the time necessary to achieve the purpose for which it was collected, in particular until the expiry of tax or civil law claims related to the services provided by the Service Operator.
6. The User has the right to:
   1. access their personal data, which means the ability to request from the Service Operator information about the type of User data processed and obtain information about the purpose, category of processed data, or recipients of User data,
   2. request correction of their data if it is incorrect or incomplete,
   3. withdraw consent to data processing at any time, which does not affect the legality of processing based on consent before its withdrawal,
   4. object to the processing of their data when the Service Operator intends to process it for marketing purposes or to transfer their data to another data controller,
   5. request deletion of their data when it is no longer necessary for the purposes for which it was collected, or the User has withdrawn consent on which the processing is based and there is no other legal basis for processing, or the data is processed unlawfully,
   6. request limitation of processing of their data within the scope specified by law and request transfer of their data to another data controller or to a country,
   7. file a complaint with the supervisory authority – the President of the Office for Personal Data Protection – for breaches of personal data protection regulations.
7. Regarding the processing of User personal data, you can contact us via email: odo@inter-bud.pl.