Privacy Policy of the bosco.rest website
Last updated: December 9, 2024
§ 1. General Information
This Privacy Policy defines the rules for the processing of personal data of Users of the bosco.rest website (hereinafter: "the Website"), operated by bosco.rest sp. z o.o. with its registered office in Warsaw (00-436), at ul. Czerniakowska 201/13, entered into the Register of Entrepreneurs of the National Court Register under KRS number: 0001123533, NIP: 7011219740, REGON: 529467850 (hereinafter: "the Administrator").
The Administrator makes every effort to protect the privacy of Users and to process their personal data in accordance with applicable law, in particular with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) – "GDPR".
§ 2. Personal Data
The Administrator processes the following personal data of Users:
- Data collected automatically:
- IP address,
- information about the web browser, operating system,
- information about the User's activity on the Website (e.g., pages visited, time spent on the page).
- Data provided voluntarily:
- first and last name,
- email address,
- phone number,
- other data provided in the contact, booking, or registration form.
§ 3. Purposes and Legal Bases for Data Processing
Users' personal data are processed for the following purposes:
- Provision of services by electronic means – to enable the use of the Website, including making reservations (Art. 6(1)(b) of the GDPR);
- Direct marketing – to send commercial and marketing information, including the newsletter, with the User's consent (Art. 6(1)(a) of the GDPR);
- Analysis and improvement of the Website – to adapt the Website to the needs of Users and improve its functionality (Art. 6(1)(f) of the GDPR);
- Fulfillment of legal obligations incumbent on the Administrator (Art. 6(1)(c) of the GDPR).
§ 4. Data Recipients
The recipients of Users' personal data may be:
- Entities processing data on behalf of the Administrator:
- hosting service provider: Hostido.pl Gałązka Spółka Jawna,
- booking system provider: HOTRES Sp. z o.o.,
- newsletter service provider: MailerLite Limited, Ireland,
- analytics service provider: Google Cloud Poland Sp. z o.o (Google Analytics),
- marketing tool provider: Meta Platforms Ireland Limited (Meta Pixel).
- Other entities:
- public authorities, to the extent and on the basis of applicable law.
§ 6. Data Retention Period
Users' personal data will be stored for the period necessary to achieve the purposes for which they were collected, and thereafter for the period and to the extent required by law or for the protection of any claims.
In particular:
- Data collected automatically will be stored for a period not longer than 3 years.
- Data provided in the contact or booking form will be stored for the period necessary to provide the service.
- Data of Users subscribed to the newsletter will be stored until they unsubscribe.
§ 7. User Rights
The User has the following rights in connection with the processing of their personal data:
- Right of access to data – the right to obtain confirmation as to whether or not personal data concerning them are being processed, and, where that is the case, access to the personal data;
- Right to rectification – the right to request the correction of inaccurate data or the completion of incomplete data;
- Right to erasure ("right to be forgotten") – the right to request the erasure of personal data, in particular when the data are no longer necessary for the purposes for which they were collected;
- Right to restriction of processing – the right to request the restriction of data processing, e.g., while an objection is being considered;
- Right to data portability – the right to receive personal data in a structured, commonly used and machine-readable format and the right to transmit those data to another controller;
- Right to object – the right to object to the processing of personal data, in particular when the processing is based on the legitimate interest of the Administrator;
- Right to withdraw consent – if the data processing is based on the User's consent, the User has the right to withdraw this consent at any time; the withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
To exercise the above rights, the User may contact the Administrator by e-mail at: iod@bosco.rest.
§ 8. Right to Lodge a Complaint
The User has the right to lodge a complaint with the supervisory authority for the protection of personal data, i.e., the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych) in Poland.
§ 9. Cookies
The Website uses cookies. These are small text files sent by the web server and stored on the User's device. Cookies allow for:
- maintaining the User's session (after logging in),
- adapting the Website to the needs of Users,
- creating statistics on Website visits.
The User can block the saving of cookies in their web browser settings, but this may affect the functionality of the Website.
§ 10. Changes to the Privacy Policy
The Administrator reserves the right to change this Privacy Policy. The current version of the Privacy Policy is always available on the Website.
§ 11. Contact
If you have any questions regarding the Privacy Policy, please contact the Data Protection Officer:
Email address: iod@bosco.rest
Or by traditional mail: bosco.rest sp. z o.o.
ul. Czerniakowska 201/13
00-436 Warsaw, Poland