Privacy policy

Dear Sir/Madam

This Privacy Policy will help you make informed and conscious decisions regarding the processing of your personal data within the activities conducted by Your Holidays Julia Szychulska with registered office in Świętoszewo 12, 72-121 Czarnogłowy. Please carefully read its contents.

Introduction

This document contains Our Privacy Policy, i.e., the principles we follow in the processes of personal data processing. This document also includes the contents of the information obligations, which according to the law, must be presented to individuals whose data are processed, namely to you. Before we delve into the details, we would like to emphasize some of the key principles of personal data protection. They are important to us, and we believe they are important to you as well.

Privacy Policy achieves four main objectives, namely:

1. Explanation of how the organization processes the information you provide to better tailor its products and services to your expectations
2. Ensuring that all information about the data processing process has been presented clearly and transparently
3. Assurance that the personal data processed by the organization are secure against threats that may arise in the processing processes
4. Ensuring transparency in communication with representatives of the organization, so that the realization of your right to privacy is always guaranteed

Wszystkie informacje, które są od Państwa pobierane są związane pośrednio lub bezpośrednio z prowadzoną działalnością organizacji tj. najem apartamentów własnych oraz pośrednictwo w najmie apartamentów należących do ich właścicieli. Your Holidays Julia Szychulska  jest administratorem Państwa danych osobowych, co oznacza, że decyduję o celach i środkach ich przetwarzania. W praktyce należy pamiętać, że jako administrator danych organizacja jest podmiotem odpowiedzialnym za Państwa dane osobowe. W zakresie realizacji jakichkolwiek pytań lub wątpliwości związanych z Państwa danymi osobowymi należy kontaktować się z Inspektorem Ochrony Danych pod adresem: info@yourholidays.pl

Generally, all personal data in the organization is divided into processes in which they are processed based on the main purpose guiding this processing and the category of individuals whose data are concerned. These are, in turn

1. Recruitment

Personal data of job candidates are processed for the purpose of selecting the most suitable candidates for specific positions, for current and future recruitment needs. Your personal data in this process are processed based on your consent (in the case of sensitive data that may be included in application documents) or for the purpose of concluding an employment contract or other civil law contract, as well as based on labor law regulations. Additionally, the legal basis for processing personal data in this process is also the legitimate interest of processing, i.e., statistical activities, reporting, and quality control. Providing personal data in this process based on your consent is voluntary, but not providing them will make it difficult for us to conduct the recruitment process efficiently. In the scope resulting from labor law regulations regarding recruitment, providing some personal data is obligatory, and some is optional. In the recruitment process, if you are not selected but you consent to the processing of personal data for the purposes of future recruitment processes, your personal data will be stored for 2 years from your last response to the proposal of the next recruitment. After this period, your data will be completely deleted from the company's resources. Your personal data in this process may be entrusted to external entities participating in the recruitment process (e.g., job search portals), however, we emphasize that these entities remain under constant supervision of the company and provide at least the same level of data security.

2. Employment

Personal data of employees and collaborators are processed for the purpose of managing the personnel recruitment process and providing support in the implementation of civil law agreements handled in other processes of personal data processing, as well as for the security of persons and property. Your personal data in this process are processed based on legal provisions regarding sensitive data when processing is necessary for the purposes of health prevention or occupational medicine, for assessing the employee's ability to work, providing healthcare, or social security, when processing is necessary to fulfill the company's obligations and exercise specific rights in the field of labor law, social security, and social protection, and when processing is necessary to establish, investigate, or defend claims. Additionally, your personal data may also be processed to fulfill an employment contract or other civil law agreement. Ultimately, your personal data are processed based on the company's legitimate interest in protecting persons and property, statistics, reporting, and quality control. Providing personal data in this process is mandatory, and the consequence of not providing data may be the inability to establish cooperation. In the employment process based on an employment contract, your personal data will be stored for 10 years from the last action on personal data related to employment (except for employees hired before January 1, 2019 – then this period is 50 years). In the employment process based on civil law agreements, your personal data will be processed for 6 years from the last action on data. After this period, your data will be completely deleted from the company's resources. Your personal data in this process may be entrusted to external entities participating in the employment process; however, we emphasize that these entities remain under constant supervision of the company and provide at least the same level of data security. Additionally, your data may be disclosed to data recipients (e.g., entities providing social package services), about which you will be informed by them.

3. Apartment rental process

Personal data of customers and customer representatives (in the case of servicing institutional clients) are processed for the purpose of providing apartment rental services. Your personal data in this process are processed based on the purpose of fulfilling the contract that has been concluded, based on legal provisions regarding settlement of provided services, and in the so-called legitimate interest of the data controller, i.e., analysis of the quality data of provided services. Providing personal data in this process is mandatory, and the consequence of not providing data may be the inability to provide services. In the process of providing services by the company, data will be stored for a period of 6 years from the performance of the last action with data related to the provided service. After this period, your data will be completely deleted from the company's resources. Your personal data in this process may be entrusted to external entities participating in the process (e.g., entities providing property rental services or IT software providers); however, we emphasize that these entities remain under constant supervision of the company and provide at least the same level of data security. 

4. Apartment rental intermediation process

Personal data of property owners and representatives of property owners (in the case of servicing institutional clients) are processed for the purpose of providing apartment rental intermediation services and property management. Your personal data in this process are processed based on the purpose of fulfilling the contract that has been concluded, based on legal provisions regarding settlement of provided services, and in the so-called legitimate interest of the data controller, i.e., analysis of the quality data of provided services. Providing personal data in this process is mandatory, and the consequence of not providing data may be the inability to establish cooperation and provide services. In the process of providing services by the company, data will be stored for a period of 6 years from the performance of the last action with data related to the provided service. After this period, your data will be completely deleted from the company's resources. Your personal data in this process may be entrusted to external entities participating in the process (e.g., entities providing property rental services or IT software providers); however, we emphasize that these entities remain under constant supervision of the company and provide at least the same level of data security. 

5. Marketing process

Personal data of customers and potential customers (prospects) are processed for the purpose of presenting offers of our own products and services, responding to inquiries, and conducting active marketing activities through selected communication channels. Your personal data in this process are processed based on your consent (marketing through selected communication channels) or for the purpose of concluding a contract in the case of inquiries directed to the company, as well as for its implementation within the framework of subscribing to the newsletter. Additionally, your data is processed based on the so-called legitimate interest of the data controller at the moment when we recommend the company's services in personal contacts or create marketing statistics and reports. Providing personal data in this process is voluntary, but not providing them will prevent us from responding to inquiries or presenting our offer in a way tailored to your individual needs. In this process, your personal data are stored for 3 years from the withdrawal of your consent, if you have given it. In other cases, also for 3 years from the end of the provision of the newsletter service, i.e., from the last active action on personal data or submission of an inquiry by you. After this period, your data (if we do not establish cooperation) will be completely deleted from the company's resources. Your personal data in this process may be entrusted to external entities participating in the marketing process (e.g., mailing service providers); however, we emphasize that these entities remain under constant supervision of the company and provide at least the same level of data security.

6. Accounting process

Personal data of clients and client representatives (in the case of servicing institutional clients) are processed for the purpose of conducting all settlements with clients, suppliers, as well as ensuring compliance of the company's activities with tax law regulations. Your personal data in this process are processed based on legal provisions, including regulations arising from the Accounting Act of September 29, 1994, and the Value Added Tax Act of March 11, 2004. Additionally, the legal basis for processing your personal data is the fulfillment of the contract that has been concluded and the so-called legitimate interest of the data controller, such as statistical data analysis and preparation of accounting balance sheets. Providing personal data in this process is mandatory, and the consequence of not providing data may be the inability to properly settle services. In the accounting process, data will be processed for a period of 6 years from the performance of the last action with data related to the settlement of accounting documents. After this period, your data will be completely deleted from the company's resources. Your personal data in this process may be entrusted to external entities participating in the accounting process (e.g., external accounting offices); however, we emphasize that these entities remain under constant supervision of the company and provide at least the same level of data security. Additionally, your data may be disclosed to data recipients (e.g., tax authorities or expert auditors), about which you will be informed if contacted.

7. Data processing process

Personal data of suppliers and suppliers' representatives (in the case of using institutional suppliers) are processed for the purpose of implementing a supply contract or providing services. Your personal data in this process are processed on the basis of the purpose of implementing the contract concluded and in the so-called legally justified purpose of the data controller, i.e. complaints and warranty for defects. Providing personal data in this process is obligatory, and failure to provide data may result in the inability to use the services of suppliers. In the process of processing suppliers' data by the company, the data will be stored for a period of 6 years from the last operation with the data in connection with the delivery or service. After this period, your data will be completely deleted from the company's resources. In this process, your personal data may be entrusted to external entities participating in the process (e.g. entities cooperating with the company), however, we would like to point out that these entities remain under constant supervision of the company and ensure at least the same level of personal data security.

Your rights

We would like to emphasize that we guarantee each person whose data we process the ability to exercise the following rights:

• the right to access the content of the data - you can ask for a description of the processing of your personal data specifically and for access to all personal data collected about you. However, we would like to point out that excessive use of this right will make work in the organization more difficult, so we ask you to exercise caution when using this right,
• the right to rectify data - we make every effort to always process the most up-to-date data about you, but if it turns out that the data we process has become incorrect, you can always ask for its correction,
• the right to delete data - if it turns out that you no longer want the organization to continue processing your personal data, you can always request their deletion. We would like to point out, however, that this right will not be possible in every case, as the organization must retain some of the data due to binding legal provisions,
• the right to limit processing - if you find that the data processed by the organization for some reason should not be deleted after the above-mentioned periods of time (data retention), you can request their further storage,
• the right to transfer data - if it turns out that your personal data will be processed in IT systems, you may request their transfer to another service provider or directly to you. However, I would like to point out that this right only applies to data that you have provided yourself,
• the right to object – you can always object to the processing of specific personal data for a specific purpose. In each such case, the objection will be considered and your comments taken into account in the processing of your data for the future,
• the right to withdraw consent - you can withdraw your consent to the processing of personal data at any time, but any actions that were performed on your data before its withdrawal will remain valid,
• the right to lodge a complaint - if you believe that the organization is violating your right to privacy, you can always submit a complaint to the President of the Office for Personal Data Protection, but we encourage you to resolve your doubts together before you make such a decision.

Summary

To sum up, the organization and all its staff take special care to ensure that the processing of your personal data interferes with your privacy as little as possible, however, if at any stage of the processing of your personal data there are any doubts as to the compliance of these activities with the law, please contact us: info@yourholidays.pl