This Privacy Policy sets out the rules for the processing and protection of personal data provided by users in connection with their use of the services offered by Camp Harenda.
The controller of your personal data is Camping Harenda Pokoje Gościnne Wiktoria Zelek, os. Harenda 51b, 34‑550 Zakopane, Poland, e‑mail: harenda51b@gmail.com, phone: +48 601 506 717, tax ID (NIP): 6311887379 (the “Controller”).
The Controller processes personal data in accordance with applicable data protection laws, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (“GDPR”).
The Controller takes particular care to protect the interests of data subjects and ensures in particular that personal data are:
- processed lawfully;
- collected for specified, lawful purposes and not further processed in a manner incompatible with those purposes;
- factually correct and adequate in relation to the purposes for which they are processed;
- kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the data are processed.
Purposes and legal bases of processing
We process your personal data for the following purposes:
- to make reservations and provide accommodation services
(legal basis: Article 6(1)(b) GDPR – performance of a contract); - to carry out settlements, process payments and handle potential complaints
(legal basis: Article 6(1)(c) GDPR – compliance with a legal obligation); - to contact you in matters related to your stay or reservation and to respond to enquiries submitted via the contact form or by e‑mail or phone
(legal basis: Article 6(1)(f) GDPR – our legitimate interest consisting in handling enquiries and ensuring proper customer service; where the contact leads to entering into a contract or making a reservation – Article 6(1)(b) GDPR – taking steps at the request of the data subject prior to entering into a contract); - to comply with legal obligations arising from applicable laws (e.g. tax or accounting regulations)
(legal basis: Article 6(1)(c) GDPR); - to establish, exercise or defend legal claims
(legal basis: Article 6(1)(f) GDPR – our legitimate interest in asserting or defending claims); - to measure guest satisfaction after the end of the stay, including sending a one‑off request for a review to the e‑mail address provided
(legal basis: Article 6(1)(f) GDPR – our legitimate interest in improving the quality of our services and building the reputation of our campsite); - for marketing purposes – where you have given your consent
(legal basis: Article 6(1)(a) GDPR – consent).
In the case of enquiries submitted via the contact form, the legal basis for processing is Article 6(1)(f) GDPR (the Controller’s legitimate interest consisting in responding to users’ enquiries), and where the contact leads to entering into a contract or making a reservation – Article 6(1)(b) GDPR (taking steps at the request of the data subject prior to entering into a contract).
Scope of processed data
We process in particular the following categories of personal data:
- first name and surname;
- address;
- vehicle registration number;
- contact details (phone number, e‑mail address);
- data relating to reservations (dates of stay, number of persons, accommodation preferences);
- payment data (e.g. information necessary to process payments and issue accounting documents);
- in the case of online reservations – IP address and technical data of the device used.
Recipients of data
Your data may be disclosed to:
- entities operating our online booking and payment systems;
- accounting and IT service providers cooperating with the Controller;
- transport companies and taxi services, where transport or courier delivery is ordered for guests;
- public authorities and bodies authorised under applicable laws (e.g. the police, tax authorities).
Entities processing data on behalf of the Controller (in particular providers of booking systems, payment, accounting and IT services) process personal data on the basis of data processing agreements concluded with the Controller and only in accordance with the Controller’s instructions.
Data retention periods
Personal data are stored for the period necessary to achieve the purposes for which they were collected, and thereafter for the period required by law (e.g. tax and accounting regulations) or until the expiry of potential claims.
In particular:
- For accounting and tax purposes, we process data for the period required under applicable law. Under current regulations this is 5 years from the end of the calendar year in which the tax obligation arose.
- Where you give us consent to process data (e.g. for marketing purposes or to use your image), we process the data until you withdraw your consent.
- Where personal data are processed for the purpose of establishing, pursuing or defending claims (including in court proceedings), we may process them for the period of limitation of claims under applicable civil law.
- After the original purpose for which your data were collected has been fulfilled (e.g. the contract has been performed), your data may be further processed for archiving purposes for the period resulting from our internal archiving rules and for the period necessary to defend against claims addressed to us, in accordance with generally applicable law, taking into account limitation periods.
Your rights
You have the following rights in relation to the processing of your personal data:
- the right of access to your data and to obtain a copy of the data;
- the right to rectification (correction) of your data;
- the right to request erasure of your data in cases provided for by law;
- the right to request restriction of processing;
- the right to object to the processing of your data – in cases where the legal basis for processing is our legitimate interest;
- the right to data portability – in cases provided for by law;
- the right to withdraw your consent at any time, where processing is based on consent – withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. Consent may be withdrawn in the same form in which it was given;
- the right to lodge a complaint with the President of the Personal Data Protection Office or another competent supervisory authority.
Voluntary provision of data
Providing personal data is voluntary, but necessary to make a reservation and provide accommodation services. Failure to provide data may prevent us from entering into a contract and providing the requested service.
Automated decision‑making and profiling
Your personal data may be processed in IT systems used by the Controller (e.g. booking system, accounting software, e‑mail system), which is necessary for proper handling of reservations and communication with you. However, your data are not used to make decisions based solely on automated processing, including profiling, which produce legal effects concerning you or similarly significantly affect you.
Cookies
The website www.campzakopane.pl uses cookies, i.e. small text files stored on the user’s end device (e.g. computer, phone).
Cookies are used solely to ensure the proper functioning of the website, in particular to maintain user sessions, display content correctly and ensure the security of the service. We do not use cookies for marketing or analytics purposes.
You can change your cookie settings in your web browser at any time, in particular to block the automatic handling of cookies or to be informed each time cookies are placed on your device. Restricting the use of cookies may affect some functionalities available on the website.
Transfer of data outside the EEA
Your personal data are not transferred to third countries outside the European Economic Area.
Contact
For all matters related to the processing of personal data, you can contact the Controller by e‑mail at: harenda51b@gmail.com, by phone at: +48 601 506 717, or in writing at the address of the Controller’s registered office indicated above.
This Privacy Policy may be updated. The current version is available at the reception and on the website www.campzakopane.pl.