Data Confidentiality and Privacy Protection of our Customers is a Priority for us. Therefore, to ensure the security of your personal data at STAYZAKO, a policy has been established that defines the rules regarding the processing of personal data.
Your personal data is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter GDPR).
Personal Data Controller
STAYZAKO
In all matters related to the processing of personal data, you can contact the Controller via e-mail: stayzako@gmail.com or by phone at +48662199200
Source of Personal Data Collection
Personal data is collected directly from you or from third parties, e.g., an entity on whose behalf you act or our Partners, as well as from other publicly available registers. We also obtain information by completing the contact form or through cookies.
Scope of Processed Personal Data
When contacting the Controller via the website or contact details provided on the website, the Controller processes the data provided by you to establish contact (as well as, among others, to make a reservation, register a property owner), including your first name, last name, e-mail address or phone number, the content of the question or issue raised, and any other data you provided. In connection with the use of cookies for statistical purposes, the Controller may process the following data: IP address, 1 session duration, frequency of website visits.
Purpose and legal basis for processing personal data
Purpose of data processing Legal basisTo provide a response to a person or to contact back to a person who has made contact with the Controller.Legitimate interest of the Controller – Article 6(1)(f) RODO.Actions to conclude, as well as to conclude and perform a contract – where you are a party to the contract.Processing of data is necessary for the conclusion and performance of the contract – Article 6(1)(b) RODO.Actions to provide a booking service and to conclude a rental contract. The processing of the data is necessary for the conclusion and performance of the contract – Article 6(1)(b) of the RODO.Providing the contacts necessary for the service and performance of the contract concluded with the entity on whose behalf you are acting and maintaining business contacts.Legitimate interest of the Administrator – Article 6(1)(f) of the RODO.Carrying out activities consisting of the improvement and coordination of the Administrator’s work, including the recording of correspondence.Legitimate interest of the Administrator – Article 6(1)(f) of the RODO.
Dealing with possible complaints, as well as establishing, investigating and defending against claims.Legitimate interest of the Administrator – Article 6(1)(f) RODO.Fulfilment of legal obligations imposed on the Administrator concerning, inter alia, the keeping of accounts and accounting records, as well as the exercise of data subjects’ rights.Fulfilment of a legal obligation incumbent on the Administrator – Article 6(1)(c) RODO. Sending marketing content in the form of a newsletter (containing, in particular, information on the company, current offerings, etc.) by email.Voluntary consent – Article 6(1)(a) RODO.Conducting direct marketing activities. Legitimate interest of the Administrator – Article 6(1)(f) RODO.Carrying out the recruitment process and selecting a suitable person for employment.To the extent arising from Article 22(1) of the Labour Code, the legal basis is the Administrator’s legal obligation (Article 6(1)(c) RODO). This applies to data such as name(s), date of birth and contact details indicated by the job applicant. If this is necessary for a specific type of job or position, this also applies to information on education, professional qualifications and previous employment history. The legal obligation incumbent on the Administrator also covers those data the provision of which is necessary for the exercise of a right or the fulfilment of an obligation arising from a legal provision. In the event that a job candidate provides personal data in a broader scope than that specified in the employment legislation, the legal basis for their processing for the aforementioned purpose is the candidate’s consent (Article 6(1)(a) RODO). This applies to any data provided by the candidate for a job in a CV (curriculum vitae), cover letter or provided during interviews.Collection of information about traffic statistics on the website.Legally justified interest of the Administrator – Article 6(1)(f) RODORThe fulfilment of the requests of persons, the processing of a request concerning personal data.The fulfilment of the legal obligation to process your request (Article 6(1)(c) RODO). Creating and maintaining an account on the Administrator’s website: www.stayzako.plPodstawą legal processing of your personal data for the use of your account is the necessity of their processing for the performance of the contract, consisting of the provision by STAYZAKO electronically of the service in the form of an account on the website (art. 6(1)(b) RODO).Making purchases in the online shop.The processing of your data is necessary for the conclusion and performance of the contract – art. 6(1)(b) RODO.
Profiling of personal data
Your personal data will not be used to make automated decisions, including profiling.
Recipients of your personal data
The recipients of your personal data will be:
(a) authorised personnel of the Controller,
b) entities processing personal data on behalf of the Administrator for the fulfilment of the purposes for which the data are collected (in particular, entities providing IT solutions and IT and technical support services). These entities must have access to the data in order to perform their duties. These entities will only have access to the personal data to the extent necessary to perform the tasks incumbent upon them.
c) public authorities and entities performing public tasks or acting on behalf of public authorities, to the extent and for the purposes that result from the provisions of generally applicable law.
Can your personal data be transferred outside the European Economic Area? As the Administrator uses the Google Analytics tool, personal data may be transferred outside the European Economic Area. In connection with the transfer of data outside the EEA, the Administrator has taken care to use only suppliers that provide guarantees of a high level of personal data protection. The Administrator ensures that the transfer of data to entities operating outside the European Economic Area takes place with the application of appropriate safeguards, on the basis of an appropriate agreement between the Administrator and such entity containing standard contractual clauses adopted by the European Commission. The content of the agreement is available from the Administrator.
Storage period of personal data
The period of data processing shall be related to the purposes and grounds for processing, thus: a) data processed on the basis of statutory requirements shall be processed for the period in which the law prescribes the retention of data;
b) data processed for the purpose of entering into and performing a contract will be processed for the period necessary for the performance and settlement of the contract, which may be extended by the period of limitation of civil law claims, if applicable.
c) data processed on the basis of the legitimate interest of the Administrator shall be processed until an objection is lodged effectively or this interest ceases, e.g. data processed in order to assert or defend against claims shall be processed for a period equal to the period of limitation of these claims.
d) data processed on the basis of consent will be processed until consent is withdrawn. (e) personal data processed for recruitment purposes will be stored until the recruitment in which you are taking part has ended. In the case of an additional consent to use the data for future recruitment purposes, your data will be stored for a period of 9 months. (f) Personal data relating to your account will be processed until your account is deleted. Your wish to delete your account should be reported by e-mail to: stayzako@gmail.com or by phone at +48662199200. Furthermore, STAYZAKO has the possibility of deleting your account if you violate the provisions of the Terms and Conditions. Your account will also be deleted if it has been inactive for five years.
Is it your responsibility to provide your personal data?
Your provision of personal data is voluntary, but necessary for the purpose you wish to fulfil, including, for example, the use of the service, the conclusion of a contract, the response to your query or the issue you have raised.
The Administrator indicates that the provision of the personal data indicated in Article 22(1) of the Labour Code by the candidate is mandatory under the applicable labour legislation. Their failure to do so will result in the candidate’s inability to participate in the ongoing recruitment process. The provision by the candidate of personal data in a broader scope than that resulting from Article 22(1) of the Labour Code is voluntary. The administrator declares that the failure to provide such data cannot be the basis for unfavourable treatment of the person applying for employment, nor can it result in any negative consequences for the any negative consequences, in particular it cannot constitute a reason justifying the refusal of employment.
Your rights
You have the right to:
(a) request access to your personal data, rectification, erasure or restriction of processing, as well as the right to data portability,
b) where the processing of your personal data is based on the legitimate interests of the Controller, the right to object at any time to the processing of your personal data on grounds relating to your particular situation,
c) where the legitimate interest consists in carrying out direct marketing activities, the right to object at any time to the processing of personal data for the purposes of carrying out marketing activities, without having to justify its decision, d) to withdraw consent at any time without affecting the lawfulness of processing carried out on the basis of consent before its withdrawal,
e) to lodge a complaint to the supervisory authority, i.e. the President of the Office for Personal Data Protection. A request for the exercise of your rights can be made to the contact details provided in the introduction.
Cookies
The Website uses so-called cookies, which process your personal data for statistical purposes. The website uses cookies provided by Google Analytics, a service provided by Google.