PRIVACY POLICY

Privacy Policy and Cookie Policy for the website www.nsm.brzeszcze.pl

§ 1

Information on the Collection of Personal Data

(1) We hereby inform you about the collection of your personal data through our website and as part of our other activities. Personal data means any information relating to you, such as your surname, first name, address, email addresses, and your activity on the website.

(2) The controller of your personal data, within the meaning of Article 4(7) of the General Data Protection Regulation (GDPR), is Nadwiślańska Spółka Mieszkaniowa Sp. z o.o., with its registered office at 2 Mickiewicza Street, 32-620 Brzeszcze, Poland, entered in the National Court Register maintained by the District Court for Kraków-Śródmieście in Kraków under KRS No. 0000051042, REGON: 272128545.

You can contact our Data Protection Officer at: iod@nsm.brzeszcze.pl.

We process your personal data on the following legal grounds:

1. Article 6(1)(a) GDPR, where you have given us your separate consent.

2. Article 6(1)(b) GDPR, where you enter into an agreement with us for the provision of a service, for example, accommodation. We may also call or email you if you provide your telephone number or email address in connection with the service.

3. Article 6(1)(c) GDPR, where processing is necessary to comply with a legal obligation. Recipients of the data may include the entities listed below, as well as entities authorised under applicable laws or regulations governing public-sector entities.

4. Article 6(1)(f) GDPR, where processing is necessary for our legitimate interests, for example, retaining data for a specified period after your visit for accounting purposes. We may also contact you on this basis to present our offer.

(3) If you contact us by email or through a contact form, we will store the information you provide (your email address, name and telephone number, where applicable) in order to respond to your enquiries. We delete data when the purpose for processing has ceased to exist, or restrict its processing where other statutory data-retention requirements apply.

§ 2

Your Rights

(1) You have the following rights in relation to your personal data:

– The right of access to your data.

– The right to rectification or erasure.

– The right to restriction of processing.

– The right to object to processing.

– The right to data portability.

(2) You also have the right to lodge a complaint with the competent data protection supervisory authority regarding our processing of your personal data.

§ 3

Collection of Personal Data When Visiting Our Website

(1) When you use our website without registering or providing information, we collect only the personal data transmitted by your browser to our server. To display our website, ensure its functionality, and maintain its stability and security, we collect the following data. The legal basis is Article 6(1)(f) GDPR:

– IP address.

– Date and time at the beginning of the session.

– Time-zone information.

– Information about the referring website.

– Access status / HTTP status code.

– Amount of data transferred.

– Address of the website from which you accessed ours.

– Browser type.

– Operating system and its interface.

– Browser language and software version.

(2) In addition to the data listed above, cookies are stored on your device when you use our website. Cookies are small text files stored on your hard drive and associated with the browser you use. They allow the entity placing the cookie (in this case, us) to obtain certain information. Cookies cannot run programs or transfer viruses to your computer. They make our website more user-friendly and effective.

(3) Use of cookies

a) This website uses the following types of cookies, described below:

– Temporary cookies (see section b).

– Persistent cookies (see section c).

b) Temporary cookies are automatically deleted when you close your browser. These include session cookies, which store a session ID allowing multiple browser requests to be associated with the same session. This enables your computer to be recognised when you return to our website. Session cookies are deleted when you log out or close your browser.

c) Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. You can delete cookies at any time through your browser’s security settings.

d) You can configure your browser settings according to your preferences to reject third-party cookies or all cookies. Please note that some website functions may then be unavailable.

e) If you have an account with us, we use cookies to identify you, for example, to retain login information. Otherwise, you may need to log in again each time you visit.

f) Flash cookies can be detected by a browser or a Flash plug-in. We also use HTML5 local storage objects stored on your device. These objects store required data independently of your browser and do not have an automatic expiry date. If you do not want Flash cookies to be processed, you must install an appropriate add-on, for example, the BetterPrivacy extension for Mozilla Firefox or a Flash-cookie removal extension for Google Chrome. You can prevent the use of HTML5 local storage objects by using your browser’s private-browsing mode. We also recommend periodically deleting cookies and your browsing history.

§ 4

Other Features of Our Website

(1) In addition to providing information through our website, we offer various services that you may use if interested. To use these services, you will generally need to provide additional personal data, which we use to provide the service. The data-processing principles described above also apply.

(2) We engage external service providers to process data on our behalf. They are carefully selected, must follow our instructions when performing the commissioned services, and are regularly monitored.

(3) We may also disclose your personal data to third parties if you participate in a campaign, competition, promotional activity, or similar service organised jointly with our partners. Further information can be found in the relevant notices or offer descriptions.

(4) If our service providers or partners are based in a country outside the European Economic Area (EEA), we will inform you of the implications in the description of the relevant service or offer.

§ 5

Objection to Processing or Request for Erasure

(1) Where we process your data on the basis of your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

(2) If you believe that processing infringes your rights, you may object to the processing. This may apply where processing is not necessary for the performance of a contract or is inconsistent with the stated purpose. In such cases, please explain why you believe we should no longer process your data. If your objection is justified, we will review the situation and either erase the data or explain and justify the reasons for continuing the processing.

(3) You may object at any time to the processing of your personal data for advertising or data-analysis purposes.

§ 6

Your Data on Our Services

1. Newsletter

(1) With your consent, which you may withdraw at any time, you can subscribe to our newsletter informing you about our offers. The types of products and services promoted are specified in the consent statement.

(2) We use a double opt-in procedure to register newsletter subscribers. After registration, we send an email to the address provided, asking you to confirm that you wish to receive the newsletter. If you do not confirm your registration within 24 hours, your data will be blocked and automatically deleted after one month. We also store the IP addresses used to connect to our website and the dates and times of registration and confirmation. This procedure helps us verify your registration and, where necessary, investigate possible misuse of your personal data.

(3) The only information required to send the newsletter is your email address. Providing additional information is voluntary and allows us to personalise our communications. Once you have confirmed your subscription, we store your email address for the purpose of sending the newsletter. The legal basis is Article 6(1)(a) GDPR.

(4) You may withdraw your consent and unsubscribe at any time by clicking the link provided in each newsletter, contacting us by email, or sending a message using the contact details in the website footer.

2. Use of Google Analytics

(1) Our website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses cookies, which are text files stored on your computer and enable analysis of how you use the website.

The information generated by these cookies is generally transmitted to and stored on a Google server in the United States. However, if IP anonymisation is enabled on this website, Google will shorten your IP address within the European Union Member States or other countries that are parties to the Agreement on the European Economic Area before transmission. Only in exceptional cases will the full IP address be transmitted to a Google server in the United States and shortened there.

On behalf of the website operator, Google uses this information to evaluate your use of the website, compile reports on website activity, and provide other services relating to website and internet use.

(2) The IP address transmitted by your browser through Google Analytics will not be combined with other data held by Google.

(3) You can prevent cookies from being stored by adjusting your browser settings. Please note that doing so may prevent you from using all the functions of this website. You can also prevent Google from collecting data generated by cookies and relating to your use of the website, including your IP address, and from processing that data by downloading and installing the browser plug-in available at:

http://tools.google.com/dlpage/gaoptout?hl=en

(4) This website uses Google Analytics with the “_anonymizeIp()” extension. As a result, IP addresses are processed in shortened form, preventing them from being directly associated with an individual. If the collected data can be linked to an individual, that link is immediately removed and the personal data are promptly deleted.

(5) We use Google Analytics to analyse and regularly improve the use of our website. The statistics help us improve our services and make them more useful to visitors. The legal basis is Article 6(1)(f) GDPR.

(6) Google contact information: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Fax: +353 (1) 436 1001.

Privacy information: http://www.google.com/intl/en/analytics/learn/privacy.html

(7) This website also uses Google Analytics to analyse visits across different devices using a User ID. You can disable cross-device analysis in your Google Account under “My Data” or “Personal Information”.

3. Social Media

(1) Our website contains links to social media platforms where information about our activities is published.

(2) Facebook plugin provider details:

Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA.

Further information about data collection:

– http://www.facebook.com/help/186325668085084

– http://www.facebook.com/about/privacy/your-info-on-other#applications

– http://www.facebook.com/about/privacy/your-info#everyoneinfo

4. Embedding YouTube Videos

(1) Our website contains videos hosted on http://www.youtube.com that can be played directly on our website. These videos are embedded using “enhanced privacy mode”. No user data are sent to YouTube unless you play a video. Data described in Section 3 are transmitted only when playback begins. We have no control over this data transfer.

(2) YouTube receives information about the page from which the video was accessed, as well as the data listed in Section 3. This occurs regardless of whether you have a YouTube account or are logged in. If you are logged in to Google, your data may be associated directly with your account. To prevent this association, log out before playing a video.

YouTube may store your data as usage profiles and use them for advertising, market research, or website design. This may also apply to users who are not logged in. You have the right to object to the creation of these user profiles; to exercise this right, you must contact YouTube.

(3) Further information about the purpose and scope of data collection and processing by YouTube can be found in its Privacy Policy:

https://www.google.com/intl/en/policies/privacy

5. Integration of Google Maps

(1) Our website may use Google Maps to display interactive maps directly on the website and make the map functions easy to use.

(2) When you visit a page containing Google Maps, Google receives information that you have accessed that page of our website. The data listed in Section 3 may also be transmitted. This occurs regardless of whether you have a Google account or are logged in. If you are logged in, Google may associate the data directly with your account. To prevent this, log out before activating the map.

Google may store this information as usage profiles and use it for advertising, market research, and website customisation. This may also apply to users who are not logged in. You have the right to object to the creation of such profiles by contacting Google.

(3) Further information about the purpose and scope of data collection and processing by Google and other plugin providers can be found in their privacy policies:

http://www.google.com/intl/en/policies/privacy