Privacy Policy

Privacy Policy and Use of Cookies on the Hotel Herbal Website

This document concerns the processing and protection of personal data relating to Users in connection with their use of the website: www.herbalhotel.pl (hereinafter referred to as the “Service”).

Hotel Herbal and the entity managing it, Przedsiębiorstwo Budowlano - Konserwatorskie Castellum Sp. z o.o. Castellum Klasztor Sp.k., respect the right to privacy of the users of the herbalhotel.pl website
In particular, they ensure the protection of their personal data and apply appropriate organizational and technical solutions preventing interference with the privacy of Users by third parties. Our activities are aimed at guaranteeing the User a sense of full security at a level appropriate to the applicable law, including:

Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation);
the Act of 18 July 2002 on the provision of electronic services;
the Act of 16 July 2004 – Telecommunications Law.

The use of the Hotel Herbal Service is carried out by means of a secure SSL protocol, which significantly increases the protection of data transmission on the Internet.

We inform that external links enabling Users to directly access other websites may be placed within the Service, or that while using the Service, Cookies originating from other entities may additionally be placed on your device, in particular from providers such as: Facebook, Twitter, Google+, in order to enable you to use the Service functionalities integrated with these services.
Each provider defines the rules for the use of Cookies in its own privacy policy; therefore, we have no influence on the privacy policy and the use of Cookies applied by those providers.
For security reasons, we recommend that before using the resources offered by other websites or services, each User familiarizes themselves with the document concerning the privacy policy and the use of Cookies, if such documents have been made available, and in the absence thereof, contacts the administrator of the given website or service in order to obtain relevant information.

Glossary of terms:

cookie – a small piece of information saved by the server on the User’s computer, which the server can read upon reconnecting from that computer,
system log – information sent to the server by the User’s computer with each connection; it may contain various data (e.g. IP number) from which it is possible to determine, more or less precisely, where the connection originated,
IP address – an individual number that usually each computer connected to the Internet has; the IP number may be permanently assigned to a given computer (static) or assigned to it for a given connection (dynamic),
SSL protocol – a special standard for data transmission on the Internet, in which the transmission is encrypted, as opposed to ordinary transmission where the data is sent in plain text.

I. Data Controller and Data Protection Officer

The controller of the data concerning Users collected through the Service is:
Przedsiębiorstwo Budowlano - Konserwatorskie Castellum Sp. z o.o. Castellum Klasztor Sp.k.
ul. Świdnicka 31
50 - 066 Wrocław

II. Data collection

Within the scope of the User’s use of the Service, we store HTTP queries directed to the server. The viewed resources are identified by URL addresses and concern:

the public IP address of the end device from which the query was sent;
the name of the User’s station – identification carried out by the HTTP protocol, if possible;
the User name provided in the authorization process;
the time the query was received;
the first line of the HTTP request;
the HTTP response code;
the number of data bytes sent by the server;
the URL address of the page previously visited by the User (the so-called referer link) – if the transition to the Service occurred via an external link;
information about the User’s browser;
information about errors that occurred during the execution of the HTTP transaction.

The data indicated above are not associated with specific persons browsing the pages of the Service.
The Service does not automatically collect any information except for information contained in Cookies. Information collected in this way is used, among others, to:

manage the Service;
identify potential security threats;
examine aggregated User traffic within the Service and for statistical purposes, including the use of Google Analytics and GetResponse tools, only if mailing campaigns are additionally conducted;

However, when using the Service functionalities, the User may be asked to provide the following personal data:

first and last name;
email address;
telephone number;
company address and name;
content of the contact message.

Providing the above data is voluntary; however, without providing them it may not be possible to use the Service in the scope of functionalities that require such data (e.g. handling a publication order)

III. Processing of personal data

The data concerning the User collected via the Service may be used in order to determine how to adapt the content of the Service to the User’s needs and in order to provide a response to an inquiry submitted by the User via the contact form.

The personal data of Users collected are not transferred to international organizations or to third countries. Personal data may be processed by other entities in accordance with European Union law or national law.

Personal data collected via forms to which the User has given consent are processed for the purpose and for the period necessary to properly perform the task. Details are specified in the relevant clauses located under specific forms.

User rights

Within the scope of the processing of their data, the User has the following rights:

the right of access to data;
the right to rectify data;
the right to erase or restrict processing;
the right to lodge a complaint with the supervisory authority for personal data protection – the President of the Personal Data Protection Office;

IV. Use of Cookies

The Service, in accordance with Article 173 of the Act of 16 July 2004 – Telecommunications Law, uses Cookies constituting IT data, in particular text files, which are stored on the User’s end device. Cookies usually contain the name of the website from which they originate, the time they are stored on the end device, and a unique number.

Cookies are used for the purpose of:

facilitating the User’s use of the Service while browsing it;
subsequently associating the User in the event of reconnecting the Service with the device on which they were saved;
creating statistics that help understand how Users of the Service use websites, which enables improving their structure and content;
adapting the content of the Service’s websites to specific User preferences and optimizing the use of websites tailored to the individual needs of the User;

Within the Service, we use the following types of Cookies:

“session” – stored on the User’s end device until logging out, leaving the website, or switching off the web browser;
“persistent” – stored on the User’s end device for the time specified in the parameters of Cookies or until they are deleted by the User;
“performance” – enabling the collection of information on how the Service’s websites are used;
“necessary” – enabling the use of services available within the Service;
“functional” – enabling the remembering of settings selected by the User and personalization of the User interface;
“own” – placed by the Service;
“external” – originating from a website other than the Service;

The information is in no way combined with the personal data of the Service User and is not used to determine the User’s identity. The scope of information collected automatically depends on the settings of the User’s web browser.
The User should check their browser settings to learn what information is automatically made available by the browser or in order to change these settings. For this purpose, we recommend reading the content of the “Help” section of the web browser used.

Changing the conditions for storing or receiving Cookies is possible by configuring the settings in web browsers, for example:

Software for browsing websites, i.e. a web browser, usually by default allows Cookies to be stored on the User’s end device. Users of the Service may change the settings in this regard. The web browser allows Cookies to be deleted.
Automatic blocking of Cookies is also possible. Detailed information on this subject is contained in the help or documentation of the web browser used by the User.
If the User does not wish to receive Cookies, they may change their browser settings. However, disabling the handling of Cookies necessary for authentication processes, security, or maintaining User preferences may hinder, and in extreme cases may also prevent, the use of the Service.