Privacy Policy

Privacy Policy and GDPR

This Privacy Policy defines the principles of processing and protecting personal data provided by users in connection with their use of services offered by the ngapartments website (hereinafter referred to as the "Service").

The Administrator of personal data contained in the Service is “NG KWIATKOWSKIEGO” SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ, UL. Książęca 4, 00-498 Warsaw, Poland, registered under tax identification number NIP: 7010898006 (hereinafter: ADO).

In order to ensure the security of entrusted personal data, the ADO operates based on internal procedures and recommendations compliant with relevant legal acts regarding the protection of personal data, in particular with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC.

The ADO exercises special diligence to protect the interests of data subjects, ensuring in particular that personal data are:

processed lawfully,

collected for specified, legitimate purposes and not further processed in a way incompatible with those purposes,

factually correct and adequate in relation to the purposes for which they are processed,

stored in a form that allows identification of the persons concerned, for no longer than is necessary to achieve the purpose of processing.

The ADO collects information about users and their behavior through voluntarily provided information in forms, for the purpose of:

responding to user inquiries sent via the contact form, based on Art. 6(1)(f) of the GDPR,

accepting reservations using the online booking system, based on Art. 6(1)(b) of the GDPR,

providing services by the ADO, based on Art. 6(1)(b) of the GDPR,

marketing, including sending commercial information to the email address, if the Client has given consent by checking the appropriate box during the booking process, based on Art. 6(1)(a) of the GDPR. Consent to the processing of data for marketing purposes and for sending commercial information may be withdrawn by clicking the relevant link in the received message or by sending such a request to the ADO’s email address,

fulfilling the ADO’s legitimate interest in specific cases, based on Art. 6(1)(f) of the GDPR, e.g., debt collection.

Upon the first visit to the ngapartments website, the user is informed about the use of cookies. Remaining on the site means acceptance of cookies used on the website. Failure to change browser settings constitutes consent to the use of cookies.

Changes to cookie settings will take effect after restarting or refreshing the ADO website session.

The installation of “cookies necessary for the basic functionality of the Service” is essential for its proper operation, particularly for authentication purposes.

Cookies essential for the functioning of the website may be changed in the browser settings; however, such changes may cause improper operation of the website.

More information about cookies can be found in the “Help” section of the user’s web browser menu.

Users who, after reviewing the information available on the Service, do not wish for cookies to remain stored in their web browser should delete them after finishing their visit. The following types of cookies are used within the Service:

session cookies – remain in the browser until it is turned off or the user logs out of the Service,

persistent cookies – remain in the device’s web browser until deleted by the user or until a predetermined time set in the cookie parameters.

In terms of functionality, cookies can be divided into:

analytical cookies that help improve the user experience by understanding how users interact with and convert on the website,

marketing cookies used to personalize advertising content, properly target and analyze marketing and sales channel performance,

essential cookies, which are fundamental to the basic functionality of the Service.

The cookies we use allow us to improve our website.

Some cookies may be placed by the provider of the Online Booking System solely for the purpose of:

improving and supporting the booking process,

analyzing and collecting statistical data related to the use of the website and the online booking system for their improvement,

the Online Booking System provider informs about installed cookies in the system’s user interface.

The ADO may use automated decision-making, including profiling, for marketing purposes (including automated matching of advertisements to your interests and measuring their effectiveness) and to tailor offers based on Art. 6(1)(a) of the GDPR.

Recipients of personal data may include authorities, institutions, and entities authorized by law, as well as entities providing services to the ADO (e.g., legal, IT, marketing, accounting, and other entities involved in the execution of ordered services).

We use the following analytical tools: Google Analytics

We use the following marketing tools: Facebook Pixel

Users of the Service who have provided their data have the right to access their data processed by the ADO. They also have the right to modify, delete, or restrict the processing of their personal data at any time. At any time, users may also request deletion of their personal data from the Service. The right to data portability does not apply, as no standard for the exchange of such data between hospitality entities has been established.

To exercise the above rights, the user should contact the ADO using the same email address or phone number provided to the Service, by contacting: info@ngapartments.pl

The user has the right to withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal, by contacting the ADO directly or by changing cookie settings.

Each user of the Service has the right to file a complaint with the Personal Data Protection Office.

The Service may contain links to other websites that operate independently and are not supervised by the Service. These sites may have their own privacy policies and regulations, which we recommend reviewing carefully.

The ADO reserves the right to make changes to the Service’s privacy policy, which may result from the development of internet technologies, changes in data protection laws, or the development of the Service. Users will be informed of any changes in a clear and visible manner.

General Data Protection Regulation (GDPR)

PERSONAL DATA ADMINISTRATOR OF HOTEL GUESTS
The personal data administrator is “NG KWIATKOWSKIEGO” SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ, UL. Książęca 4, 00-498 Warsaw, Poland, registered under tax identification number NIP: 7010898006 (hereinafter: ADO).

REQUIREMENT TO PROVIDE PERSONAL DATA
Providing personal data such as full name, ID document number, residential address, email address (in the case of online reservations), contact phone number, child’s age (if staying with a child), and vehicle registration number (if parking on hotel grounds) is required to conclude a hotel service agreement. The hotel staff is obliged to verify the guest’s data with an identity document. Failure to provide personal data will prevent the Hotel from concluding a hotel service agreement.

PURPOSES OF PROCESSING HOTEL GUESTS’ PERSONAL DATA
Personal data are processed for the following purposes:

a. booking accommodation and providing hotel services;
b. ensuring the highest quality of services for hotel guests;
c. documenting services provided for tax purposes;
d. internal marketing purposes;
e. ensuring the security of property and individuals (monitoring);
f. pursuing or defending against possible claims.

LEGAL BASIS FOR PROCESSING PERSONAL DATA
According to the GDPR, the legal bases for processing guest data obtained by the Hotel are:

a. Art. 6(1)(b) GDPR: “processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract”;
b. Art. 6(1)(f) GDPR: “processing is necessary for the purposes of the legitimate interests pursued by the controller…”;
c. Art. 6(1)(c) GDPR: “processing is necessary for compliance with a legal obligation to which the controller is subject”;
d. Art. 6(1)(a) and (f) GDPR: “the data subject has given consent to the processing of his or her personal data for one or more specific purposes”;
e. Art. 6(1)(f) GDPR: “processing is necessary for the purposes of the legitimate interests pursued by the controller…”;
f. Art. 6(1)(f) GDPR: “processing is necessary for the purposes of the legitimate interests pursued by the controller…”

ENTITIES THAT MAY RECEIVE PERSONAL DATA
The hotel provides personal data to the following categories of entities:

- Companies providing IT support and software services for the hotel;
- Accounting firms providing bookkeeping services;
- Transport and taxi companies when transport or delivery is ordered by the Guest;
- Law firms providing legal advice and representation services;
- Companies providing marketing services for the hotel.

PERIOD OF PERSONAL DATA PROCESSING
Personal data:

collected in connection with the conclusion of a hotel service agreement will be processed for the duration of the statute of limitations for tax or civil claims of the Hotel or Guest, whichever occurs later;
collected based on consent for marketing purposes will be processed for as long as the marketing consent remains valid;
collected through monitoring will be processed for 14 days from the date of recording and then permanently deleted.

GUEST RIGHTS REGARDING PERSONAL DATA PROCESSING
Guests have the right to access their data, correct them, transfer them, and receive a copy of their personal data processed by the hotel. They also have the right to withdraw consent at any time, request restriction of processing, request deletion, and exercise the right to be forgotten when data are processed for marketing purposes.

RIGHT TO LODGE A COMPLAINT REGARDING PERSONAL DATA PROCESSING
Each Guest has the right to lodge a complaint regarding the processing of their personal data with the supervisory authority: the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw.

AUTOMATED DECISIONS BASED ON PERSONAL DATA, INCLUDING PROFILING
The hotel does not make automated decisions based on personal data, including profiling.

CONTACT WITH THE PERSONAL DATA ADMINISTRATOR
Contact with the Data Administrator or a person designated by them is possible via the hotel reception or by email at info@ngapartments.pl