Privacy
Privacy Policy
Personal data is processed in accordance with the principles set out in the applicable legal regulations:
- Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC,
- The Act of May 10, 2018, on the protection of personal data (Journal of Laws 2018, item 1000 as amended),
- The Act of July 18, 2002, on the provision of electronic services (Journal of Laws 2017, item 1219 as amended).
1. Information obligation
We inform you that the Data Administrator is Serwis Arka Medical SPA Sp. z o. o. with its registered office at ul. Złota 61 loc. 100, 00-819 Warsaw, with whom you may contact by post at the correspondence address: ul. Sułkowskiego 11, 78-100 Kołobrzeg, by phone: +48 94 353 21 00, and by email at: arka-recepcja@arka-mega.pl. The Data Administrator has appointed a Data Protection Officer, whom you can contact by email at: iod@arka-mega.pl. Your personal data is processed for the purposes of:
- booking stay services and performing the contract based on Art. 6(1)(b) GDPR;
- ensuring safety and order and protecting hotel guests and other persons present on the Hotel premises through hotel monitoring based on Art. 6(1)(f) GDPR;
- direct marketing based on Art. 6(1)(f) GDPR;
- possible determination, pursuit, or defense against claims based on Art. 6(1)(f) GDPR;
- sending a newsletter based on the consent you have given under Art. 6(1)(a) GDPR. The Data Administrator may disclose your personal data if it is related to the exercise of a right or obligation arising from the law. The Data Administrator also entrusts personal data processing to a specified group of subcontractors with whom data processing agreements have been signed. These may include IT companies, legal firms, payment operators. You have the right to:
- access your data and receive copies of them;
- rectify (correct) your data if they are incorrect or outdated, as well as the right to delete them if the data processing is not for fulfilling a legal obligation,
- restrict or object to the processing of data;
- file a complaint with the President of the Personal Data Protection Office at ul. Stawki 2, 00-193 Warsaw,
- withdraw consent. The period of personal data processing depends directly on the purpose of processing.
- If the legal basis is consent, processing continues until its withdrawal or objection to the processing of data related to direct marketing purposes,
- in the case of service provision based on a contract, the processing period will depend on the service fulfilment, the limitation period of civil claims, or fulfillment of legal and tax obligations, but no longer than 5 years from the end of the current accounting year,
- personal data recorded by monitoring are processed until the automatic overwriting of material on the recorder, but no longer than 30 days. Your data will not be subject to automated decision-making or profiling and are not transferred to third countries.
2. Data processing in connection with the use of the website.
Cookies are small text files stored on the User's device. Data from cookies may contain their identifier, the website name from which they originate, and storage duration on the device. Cookies are used to maintain the user's session, optimize the website, create statistics, and improve the structure and content to tailor it to the User. The following types of cookies are used on the site:
- necessary – allow using services, authenticate, and provide security;
- analytical – collect information on how the site is used;
- functional – remember options and preferences set by the User;
- advertising – adjust advertising content.
3. Information obligation regarding the recording of phone calls.
DATA ADMINISTRATOR We inform you that the Data Administrator is Serwis Arka Medical SPA Sp. z o. o., with its registered office at ul. Złota 61 loc. 100, 00-819 Warsaw (ADO), with whom you may contact in writing at the correspondence address: ul. Sułkowskiego 11, 78-100 Kołobrzeg, by phone: +48 94 353 21 00, and by email at: arka-recepcja@arka-mega.pl
DATA PROTECTION OFFICER
The Data Administrator has appointed a Data Protection Officer, whom you can contact by email at: iod@arka-mega.pl.
PURPOSES AND BASIS OF PROCESSING
Your personal data is processed in connection with making a phone contact with the ADO, which to ensure the highest service standards and security reasons records phone calls. Your personal data in the form of phone call recordings is processed based on the consent of the data subject under Art. 6(1)(a) GDPR. The ADO may also process this data under Art. 6(1)(f) GDPR for purposes resulting from the legitimate interests pursued by the ADO in connection with potential determinations, investigations, proceedings concerning defense against complaints and claims regarding service quality.
DISCLOSURE
Your personal data may be disclosed to entities authorized by law, including authorities conducting proceedings to consider possible complaints and claims.
PROCESSING PERIOD
Your personal data is processed for a period not exceeding 3 months from the date of recording or until you withdraw your consent to the processing of personal data. If the recordings constitute evidence in proceedings conducted under the law, the processing period is extended until the final conclusion of the proceedings.
RIGHTS OF THE DATA SUBJECT
You have the right to withdraw consent to personal data processing, rectify or request access to your personal data, as well as restrict or object to processing or delete data if no overriding legal grounds exist for their processing. You also have the right to lodge a complaint to the President of the Personal Data Protection Office at ul. Stawki 2, 00-193 Warsaw. Your personal data is not processed in an automated manner including profiling. Personal data is also not transferred to third countries or international organizations. Consent to recording is voluntary but necessary to handle matters via phone. In the absence of consent, please contact by email or through the Administrator's website application.
4. Newsletter list
Serwis Arka Medical SPA Sp. z o. o. (hereinafter: Arka), runs a newsletter list. By voluntarily subscribing to the newsletter list, you consent to receiving marketing information. We do not sell or share email addresses with third parties. The provided email addresses are used exclusively for Arka's purposes. The user's email address is protected to the same extent as other personal data. The user may unsubscribe from the newsletter at any time. The legal basis for processing such data is Art. 6(1)(a) and (f). The Administrator has a legitimate interest in direct marketing of its own products.
5. Security rules
Arka ensures the security of personal data through appropriate technical and organizational measures aimed at preventing unlawful data processing and accidental loss, destruction, or damage. Additionally, special care is taken to ensure data are:
- accurate and processed lawfully,
- obtained only for specified purposes and not further processed inconsistently with those purposes,
- adequate, relevant, and not excessive,
- precise and up to date,
- not stored longer than necessary.
6. Disclaimer.
Arka disclaims responsibility for errors arising from unforeseen system errors of the website, its application, or other tools.
7. Copyrights
All contents and information on our website, including in particular graphic marks, data, texts, photos, graphics, films, or other materials, are the property of Arka and protected under the Act of February 4, 1994, on copyright and related rights (Journal of Laws 2000, No. 80, item 904, as amended) regarding their use, display, copying, transmission, distribution, modification, or deletion. Therefore, any actions in the indicated scope taken without Arka's prior written consent are unlawful and constitute infringement of the company's intellectual property.
8. Final provisions
Due to continuous development and technological progress, the principles set out in this document may change.