The protection of Users' personal data is of the utmost importance to the Owner of this website. We make every effort to ensure that Users feel secure when entrusting their personal data while using the website.
A User is any natural person, legal person, or organizational unit without legal personality to which the law grants legal capacity, using the electronic services available on the website.
This privacy policy explains the principles and scope of processing the User's personal data, their rights, the obligations of the administrator, and provides information on the use of cookies.
The Administrator applies appropriate technical and organizational measures to ensure a high level of protection for the processed personal data and to safeguard it against unauthorized access.
The administrator of personal data is: ES Art Music, Adama Mickiewicza 56A, 05-462 Góraszka, Poland, NIP: 5322107746, KRS: 0001064596 e-mail address: biuro@willadrako.pl (hereinafter referred to as: the "Owner").
The Administrator processes Uers' personal data for the purpose of properly providing accommodation services, including in particular:
making reservations online or by phone,
conclusion and performance of the accommodation contract,
tax and accounting settlements,
fulfillment of the hotel check-in obligation,
handling complaints and consumer claims.
In order to ensure the safety of hotel employees and guests, and to prevent fraud, we process personal data such as:
Data from the key card system;
Facial image obtained from the CCTV monitoring system;
First and last name;
E-mail address;
Phone number;
IP address.
The User may consent to receive information about news and promotions. In this case, the data is processed for the purpose of sending commercial information (e.g., newsletter).
Data is also processed to fulfill legal obligations incumbent on the administrator (e.g., tax regulations, population registration).
Data may be used for the purpose of securing and pursuing claims, as well as for the marketing of own services.
The Administrator processes the following personal data:
first and last name,
e-mail address,
phone number,
residential or correspondence address,
data necessary to issue an invoice (NIP/Tax ID, company name – if applicable),
image captured by the CCTV monitoring system.
Data provided optionally:
PESEL number (or national ID/passport number if required for check-in under applicable regulations),
bank account number (in the case of refunds).
Personal data is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR).
Bases for processing:
necessity for the performance of a contract (Art. 6(1)(b) GDPR),
legal obligation incumbent on the administrator (Art. 6(1)(c) GDPR),
legitimate interest of the administrator (Art. 6(1)(f) GDPR),
User's consent – solely in the scope of marketing (Art. 6(1)(a) GDPR).
The User has the right to:
access their personal data,
rectify the data,
erase the data ("the right to be forgotten"),
restrict processing,
transfer data to another administrator,
object to the processing,
withdraw consent at any time (if processing is based on consent),
lodge a complaint with the President of the Personal Data Protection Office (UODO).
Data is stored as long as necessary for the performance of the contract and fulfillment of legal obligations.
Accounting documents – 5 years (in accordance with the Accounting Act).
Check-in data – 5 years (in accordance with the Population Registration Act).
Data processed on the basis of consent – until its withdrawal.
Data may be transferred to entities cooperating with the administrator, in particular: the accounting office, booking and IT system providers, and payment processors.
Data is not transferred outside the European Economic Area unless required by the use of an IT service provider – in such cases, appropriate safeguards in line with the GDPR are applied (e.g., standard contractual clauses).
The website uses cookies to ensure its proper operation, collect visit statistics, and customize content.
Cookies can be:
session cookies (deleted after closing the browser),
persistent cookies (stored for a specified period),
analytical cookies (e.g., Google Analytics),
marketing cookies (e.g., Facebook Pixel – with the user's consent).
The User can manage cookies through browser settings or express/withdraw consent in the cookie banner.
Blocking cookies may affect the functionality of the website.