Clause
Customer Information Notice
In this document, we explain what data we collect, why we collect it, how long we retain it, and what your rights are. This applies to the panorama-spa.pl website, reservations, and your stay at the facility.
1. Who is the controller of your data?
The data controller is Leszek Smoliński, owner of the business “ ,” operating under the trade name “ LESZEK SMOLIŃSKI, ZRB I UTH – PRZYBIERNÓWKO PRZYBIERNÓWKO 8B,” 72-300, NIP 8570202667. He operates the Panorama SPA facility at 25 Kamieńska St., 72-344 Trzęsacz.
For questions regarding personal data, please email recepcja@panorama-spa.pl or call: +48 515 128 363.
2. What data do we collect and where does it come from?
We collect the data that you provide to us:
- contact form (Contact page and package pages): first name, email, subject, message content;
- online reservation form and “Check Availability”: first name, last name, phone number, email address, comments, dates, and room type; and if you’d like an invoice, your billing information;
- Reservations by phone or email: details provided during the call or in the message;
- Deposit payment by bank transfer: transfer details (first name, last name, account number, amount, description);
We automatically collect technical data when you use the website: IP address, browser and device information, and server logs. With your consent, we also collect information about how you use the website (statistics).
3. Why do we process data, on what basis, and for how long?
| Purpose | What data | Legal basis (GDPR) |
|---|---|---|
| Response to a message or inquiry (including requests for proposals, e.g., a conference) | first name, email, subject, message body; company and contact person information | Article 6(1)(b) – actions taken at your request prior to entering into a contract; for inquiries from companies – (f) (our legitimate interest: responding to the inquiry) |
| Reservation for lodging or a package | first name, last name, phone number, email, dates, room, comments | Article 6(1)(b) – conclusion and performance of a contract |
| Processing of the stay, including settlement of the local tax | reservation details; check-in information | (b) – performance of the contract; (c) – legal obligations (local tax) |
| Payments | bank transfer or online payment details | Subparagraph b – performance of the contract |
| Invoices and Accounting | first and last name or company name, address, tax ID number, amounts | Subparagraph c – tax and accounting regulations |
| Complaints | contact information, description of the complaint, response | Subparagraph (c) – obligation to respond to a complaint; Subparagraph (f) – dispute resolution |
| Asserting and Defending Against Claims | Data from reservations, stays, correspondence, and payments | (f) – our legitimate interest: protection of rights |
| Website Statistics (Google Analytics) | cookie identifiers, approximate location, device data, and information about the pages visited | lit. a – Your consent (given via the cookie banner) |
| Saving your cookie preferences | your consent selection and its date (stored in your browser) | Subparagraph c – the obligation to demonstrate consent |
| Website Security and Protection Against Attacks | IP address, technical data, server logs | letter f – our legitimate interest: website and data security |
We do not send newsletters or marketing offers by email. If this changes, we will ask for your separate consent.
4. SOHIS Reservation System
We accept online reservations through the SOHIS system, provided by PPHU “A-M” Andrzej Domin, Grzegorz Domin (Jaworzno). The system is embedded on the “Reservations” page. Data from the reservation form and the “Check Availability” form is sent to this system and from there to our front desk.
5. Who We Share Data With
The following may receive the data:
- SOHIS – provider of the reservation system;
- payment operator and the bank maintaining our account (Bank Spółdzielczy w Gryficach) – for payments;
- Google – website statistics (only with consent) and fonts on the website through which Google receives the IP address;
- public authorities —when required by law (e.g., the tax office, the municipality regarding a local tax).
Vendors acting on our behalf may use the data only to the extent specified in their contract with us.
6. Transfer of Data Outside the European Economic Area
When you use Google services, your data may be transferred to Google LLC in the U.S. Google LLC participates in the EU–U.S. Data Privacy Framework, under which the European Commission has recognized an adequate level of data protection. We process all other data within the EEA.
7. Do you need to provide your information?
- Reservations: Providing your first name, last name, email address, and phone number is optional, but without this information, we will not be able to accept your reservation or contact you regarding your stay. Comments are optional.
- Invoice: Please provide the invoice information only if you need an invoice. We will not issue an invoice without it.
- Contact form: You cannot send a message without providing your first name, email address, and subject. We cannot reply without an email address.
- Statistics (analytical cookies): Consent is voluntary. Refusing to give consent does not affect your use of the website or your ability to make a reservation.
We do not need your consent to process your data in order to make a reservation or reply to a message. We process your data because it is necessary for these actions.
8. Your Rights
You have the right to:
- access your data and obtain a copy of it;
- correct inaccurate data;
- request the deletion of data—unless we are required to retain it, e.g., for accounting purposes or in connection with claims;
- request a restriction on processing, e.g., when you dispute the accuracy of the data;
- transfer data to another entity—this applies to data processed on the basis of a contract or consent, by automated means;
- object to processing based on our legitimate interest (subparagraph f) — due to your specific situation;
- You may withdraw your consent at any time, for example, in the “Cookie Settings” section in the footer of the page. Withdrawal does not affect the lawfulness of any processing that took place prior to the withdrawal.
The scope of your rights depends on the basis for processing. To exercise your rights, please write to recepcja@panorama-spa.pl.
You can also file a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl).
9. Automated Decisions
We do not make decisions about you based solely on automated data processing, including profiling, that would produce legal effects or similarly significantly affect you. We use Google Analytics statistics to evaluate website traffic, not to make decisions regarding specific individuals. We do not use advertising tools.
10. Cookies
This website uses essential cookies and—with your consent—analytical cookies. Some of these involve the processing of personal data, such as your device ID. You can manage your consent in the cookie banner and in “Cookie Settings” in the website footer. Details: Cookie Policy.
11. Policy Changes
We update this policy whenever there is a change in how we process data.