- This Privacy Policy defines the rules for processing and protecting personal data provided by users in connection with their use of the services offered by the Aroma Stone website (hereinafter: the Service)
- The administrator of the personal data contained in the Service is L.I. Invest Company Spółka z.o.o Syców 56-500, ul. Szosa Kępińska 1 entered in the business register under the number NIP: 9111904465 (hereinafter: the Administrator).
- For the security of entrusted personal data, the Administrator operates based on internal procedures and recommendations, in accordance with relevant legal acts regarding the protection of personal data, and in particular with the Regulation of the European Parliament and Council (EU) 2016/679 of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and the free movement of such data, and repealing Directive 95/46/EC.
- The Administrator is particularly diligent in protecting the interests of the persons whose data are processed, ensuring in particular that personal data are:
- Processed lawfully;
- Collected for specified, lawful purposes and not further processed in a manner incompatible with those purposes;
- Factually correct and adequate in relation to the purposes for which they are processed;
- Stored in a form that allows identification of the persons to whom they relate, no longer than necessary to achieve the processing purpose.
- The Administrator processes personal data voluntarily provided by users of the Service solely for the purpose of:
- Responding to user inquiries sent via the contact form – based on the legitimate interest of the Administrator – art. 6 par. 1 lit. f GDPR,
- Accepting reservations using the online booking system – based on art. 6 par. 1 lit. b GDPR,
- Maintaining statistical data regarding the operation of the Service (cookies) – based on the user's consent - art. 6 par. 1 lit. a.
- Recipients of personal data may be authorities, institutions, and entities authorized by law, as well as entities providing services to the data Administrator (e.g., legal, IT, marketing, accounting services and other entities involved in the delivery of the ordered service).
- The Administrator may use automated decision-making, including profiling, to adapt advertisements in the Service.
- Users who provide data to the Administrator have the right to access their processed personal data. Users also have the right to modify this data, request its deletion, and restrict or stop processing of their personal data at any time. Users may also request deletion of their personal data from the service at any time. The right to data portability does not apply, as no standard for exchange of such data between hotel facilities has been established.
- Users have the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
- To exercise the rights mentioned in point 8 above, users should contact the Administrator using the same email address or phone number provided to the Service, by contacting hotel@aromastone.pl
- Any user of the Service may file a complaint to the Personal Data Protection Office.
- The Administrator obtains information about users and their behaviors in the following ways:
- by voluntarily entering information in forms,
- by collecting cookies.
- On the first visit to the Aroma Stone website, the user is informed about the use of cookies. By staying on the site, the user accepts the use of cookies on the website. No change in the user's browser settings is equivalent to consenting to the use of cookies.
- The installation of cookies is necessary for the proper provision of services in the Service. Cookies contain information necessary for the proper functioning of the website, especially those requiring authorization. Users can change their browser settings regarding the handling and saving of cookies at any time.
- The following types of cookies are used in the Service:
- session cookies - remain in the browser until it is closed or until the user logs out of the website where they were placed,
- persistent cookies - remain in the browser until removed by the user or until a predefined time set in the cookie parameters.
- Based on their functionality, each cookie can be divided into:
- conversion cookies, which allow analyzing the performance of various sales channels,
- tracking cookies, which, combined with conversions, help analyze the performance of various sales channels,
- marketing cookies used for personalizing advertisement content and proper targeting,
- analytical tools that help improve the comfort of using the website by understanding how users use it,
- necessary cookies, fundamental for the basic functionality of the site. The cookies we use allow us to develop our website.
- Some cookies may be placed by the provider of the website and the online booking system solely for the purpose of:
- improving and supporting the booking process,
- analyzing and collecting statistical data concerning the use of the website and the online booking system, to improve them.
- The Service may contain links to other websites that operate independently and are not supervised by the Service in any way. These sites may have their own privacy policies and regulations, which we recommend reading carefully.
- The Administrator reserves the right to change the privacy policy of the service, which may be caused by the development of internet technology, possible changes in data protection law, and the development of the Service. Users will be informed of any changes in a visible and understandable manner.