Privacy Policy

WEBSITE PRIVACY POLICY

WWW.JOYINN.PL

1. The Controller of Personal Data on the website at www.joyinn.pl, hereinafter the Website, is KB Invest spółka z ograniczoną odpowiedzialnością spółka komandytowa, with its registered office at ul. Osobowicka 89, 51-008 Wrocław, entered in the register of entrepreneurs kept by the District Court for Wrocław-Fabryczna in Wrocław, 6th Commercial Division of the National Court Register, under KRS No. 0000604430, NIP: 8952072666, REGON: 363811059.

2. Respecting your rights as data subjects and applicable laws, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on protecting individuals regarding the processing of personal data and the free movement of such data, repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter GDPR, the Act of 10 May 2018 on Personal Data Protection (Journal of Laws 2018, item 1000, hereinafter the Act), and other applicable data protection laws, we undertake to ensure the security and confidentiality of your personal data. All employees have been appropriately trained in personal data processing and, as Controller, we have implemented appropriate safeguards and technical and organisational measures to ensure the highest level of data protection. We have implemented GDPR-compliant data protection procedures and policies, ensuring lawful and fair data processing and the enforceability of all rights to which you are entitled as data subjects. Where necessary, we also cooperate with the supervisory authority in the Republic of Poland, i.e. the President of the Personal Data Protection Office (hereinafter PUODO).

3. On our Website, we collect the following personal data:

1. full name – may be processed when you, as users of our Website (including current or prospective customers), provide it via email, the booking form, the contact form available on our Website, post or telephone, to use our offer,
2. telephone number – may be processed when you contact us by telephone (including as current or prospective customers), or provide it via email, the booking form, the contact form available on our Website or post, so that we can contact you when necessary in connection with providing services to you and answer questions about our offer,
3. email address – may be processed when you, as users of our Website (including current or prospective customers), provide it when contacting us by email, via the booking form, the contact form available on our Website, post or telephone; we use your email address to send booking confirmations, contact you when necessary in connection with fulfilling the booking, and answer questions about our offer; if you have consented to marketing communications and subscribed to our newsletter, we will also send you commercial information several times a month,
4. NIP – we collect the Tax Identification Number from businesses and persons who request an invoice and have an NIP number,
5. device IP address – information arising from general Internet connection rules, such as the IP address (and other information in system logs), is used for technical and statistical purposes, especially to collect general demographic information (e.g. the region from which the connection is made),
6. other data may be collected as part of handling specific matters or provided by you as users of our Website (including current or prospective customers) via email, the contact form available on the Website, post or telephone.

4. Providing the data referred to above is necessary in the cases indicated above, in particular:

1. to use our offer available on the Website,
2. to process bookings made on our Website,
3. to answer your questions and enable contact by email, the contact form available on the Website, post or telephone,
4. to provide the newsletter service (subscription) – if you wish to receive information about interesting events and commercial offers, you may subscribe to our newsletter; subscription is voluntary and you may unsubscribe at any time.

5. Our Website uses Cookies to adapt its operation to your individual needs. You may therefore agree to have the data and information you enter remembered, allowing you to use them during subsequent visits without re-entering them. Owners of other websites will not have access to this data and information. If you do not agree to personalising the Website, we recommend disabling Cookies in your browser settings.

6. As a person using our Website, you may choose whether and to what extent you wish to use our services and share information and data about yourself, as specified in this Privacy Policy.

7. Under the data minimisation principle, we process only personal data categories needed for the purposes in points 3 and 4 above.

8. We process personal data for the period necessary to achieve the purposes listed in points 3 and 4 above. Personal data may be processed longer where this right or obligation imposed on us as Controller arises from specific legal provisions, from the Controller’s legitimate interest referred to in point 10(c) below (i.e. until claims become time-barred or relevant proceedings end, if initiated during the limitation period), or where the service we provide is continuous (e.g. newsletter subscription).

9. The source of personal data processed by the Controller is the data subjects.

10. The legal basis for processing your personal data is:

a) Art. 6(1)(b) GDPR, i.e. necessity for performing a contract to which you are party or taking steps at your request before entering into a contract, or

b) Art. 6(1)(c) GDPR, i.e. necessity for compliance with the Controller’s legal obligations, or

c) Art. 6(1)(f) GDPR, i.e. the Controller’s legitimate interest in establishing, pursuing or defending claims until they become time-barred or relevant proceedings end, if initiated during that period, or

d) Art. 6(1)(a) GDPR, i.e. your consent to processing personal data for specified purposes where no other legal basis applies – e.g. providing the newsletter service.

11. We do not transfer personal data to a third country or international organisation within the meaning of the GDPR. If personal data were transferred to a third country or international organisation, you would be informed beforehand, and the Controller would apply the safeguards referred to in Chapter V of the GDPR.

12. We do not disclose any personal data to third parties without the data subject’s express consent. Without consent, personal data may be disclosed only to public-law entities, i.e. government and administrative authorities (e.g. tax authorities, law enforcement authorities and other entities authorised under generally applicable law).

13. Personal data may be entrusted for processing to processors acting on our behalf as Controller. In such case, we conclude a data processing agreement with the processor. The processor processes the entrusted personal data solely for the needs, within the scope and for the purposes specified in that agreement. Without entrusting your personal data for processing, we could not conduct our business through the Website. As Controller, we entrust personal data for processing to:

1. providers of hosting services for the website on which our Website operates,
2. providers of other services necessary for the ongoing operation of the Website.

14. As Controller, we do not subject personal data to profiling within the meaning of the GDPR.

15. Under the GDPR, every person whose personal data we process as Controller has the right to:

1. be informed about processing of personal data, as referred to in Art. 12 GDPR,
2. access their personal data, as referred to in Art. 15 GDPR,
3. rectify, complete, update and correct personal data, as referred to in Art. 16 GDPR,
4. erasure of data (the right to be forgotten), as referred to in Art. 17 GDPR,
5. restriction of processing under Art. 18 GDPR,
6. data portability, as referred to in Art. 20 GDPR,
7. object to processing of personal data, as referred to in Art. 21 GDPR,
8. where the legal basis is that referred to in point 10(d) above – to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal,
9. not subject to profiling under Art. 22 in conjunction with Art. 4(4) GDPR,
10. complain to supervisory authority (i.e., President of Personal Data Protection Office) under Art. 77 GDPR,

subject to the rules for exercising and enforcing these rights under the GDPR.

16. If you wish to exercise your rights referred to in the preceding point, please send an email to the email address or a written letter to the correspondence address referred to in point 17 below.

17. All enquiries, requests and complaints concerning the Controller’s processing of personal data, hereinafter Reports, should be sent to: booking@joyinn.pl or in writing to: JOYINN Aparthotel 50-072 Wrocław, ul. Włodkowica 16

18. The Report must clearly specify:

a) details of person(s) to whom the Report relates,

b) the event giving rise to the Report,

c) your requests and their legal basis,

d) specify the desired way of resolving the

19. Each identified security breach is documented, and if one of the situations specified in the GDPR or the Act occurs, the data subjects and, where applicable, the PUODO are informed of the breach of personal data protection regulations.

20. All capitalized terms have the meaning given in the Booking Regulations available on our Website, unless this Privacy Policy provides otherwise.

21. These Privacy Policy provisions apply, where possible, accordingly to all persons with whom we have legal relations and for whom we are also the Controller of their personal data, in particular our customers, contractors and newsletter subscribers.

22. Matters not covered by this Privacy Policy are governed by applicable generally binding laws. If this Privacy Policy conflicts with those laws, the laws prevail.