Privacy policy

Dear Sir or Madam,

this Privacy Policy will help you make well-thought-out and informed decisions regarding the processing of your personal data as part of the activities conducted by Your Holidays Julia Szychulska with registered office in Świętoszewo 12, 72-121 Czarnogłowy, please read it carefully.

Introduction

This document contains our Privacy Policy, i.e. principles that guide us in the processing of personal data. This document also contains the content of the information obligations that, in accordance with the law, must be presented to the data subjects, i.e. you. Before we get into the details, we’d like to highlight some of the key data protection principles. They are important to us and we believe that they are also important to you.

The Privacy Policy pursues four most important goals, such as:

1. an explanation of how the organization processes the information you provide to it, in order to better match its products and services to your expectations;
2. ensuring that all information about the processing of your data is presented in a clear and transparent manner;
3. assuring you that the personal data processed by the organization is safe in relation to the threats that appear in the processes of their processing;
4. ensuring transparency in contacts with representatives of organizations so that the implementation of your right to privacy is always guaranteed.

All information that is collected from you is related directly or indirectly to the activities of the organization, such as: rental of own apartments and mediation in the rental of apartments belonging to their owners. Your Holidays Julia Szychulska is the administrator of your personal data, which means that I decide on the purposes and means of their processing. In practice, it should be remembered that as the data administrator, the organization is the subject responsible for your personal data. In terms of the implementation of any questions or doubts related to your personal data, please contact the Data Protection Officer at: info@yourholidays.pl

In general, all personal data in an organization are split into the processes in which they are processed, based on the main purpose of this processing and the category of data subjects. Those will be:

1. Recruitment

Personal data of job candidates are processed in order to select the most suitable candidates for specific positions, for the needs of current and future recruitments. Your personal data in this process is processed on the basis of your consent (in the scope of sensitive data that may be included in the application documents) or for the purpose of concluding an employment contract or other civil law contract, as well as on the basis of labor law provisions. In addition, the basis for the processing of personal data in this process is also the legitimate purpose of processing, such as statistical, reporting and quality control activities. Providing personal data in this process based on your consent is voluntary, but failure to do so will make it difficult for us to carry out the recruitment process efficiently. In the scope resulting from the provisions of labor law regarding recruitment, providing some personal data is obligatory, and parts optional. In the recruitment process, if you are not selected and you consent to the processing of personal data for the purposes of future recruitment processes, your personal data will be stored for 2 years from your last response to the next recruitment proposal. After this period of time, your data will be completely removed from the company’s resources. Your personal data in this process may be entrusted to external subjects involved in the recruitment process (e.g. job search portals), however, we would like to point out that these subjects are under the constant supervision of the company and ensure at least the same level of personal data security.

2. Employment

Personal data of employees and associates are processed in order to handle the personnel employment process and provide support in the implementation of civil law contracts supported in other personal data processing processes, as well as the safety of persons and property. Your personal data in this process is processed on the basis of a legal law provision in terms of sensitive data, when processing is necessary for the purposes of preventive health care or occupational medicine, to assess the employee’s ability to work, provide health care or social security, when processing is necessary for the fulfillment of obligations and the exercise of specific rights by the company or by you in the field of labor law, social security and social protection and when processing is necessary to establish, assert or defend claims. In addition, your personal data may also be processed in order to perform an employment contract or other civil law contract. Ultimately, your personal data is processed on the basis of the so called legally justified purpose of the company in terms of protection of people and property, statistics, reporting and quality control. Providing personal data in this process is mandatory, and failure to provide data may result in the inability to establish cooperation. In the process of employment under an employment contract, your personal data will be stored for 10 years from the last activity on personal data in connection with employment (except for people employed before January 1, 2019 – then this period is 50 years). In the process of employment on the basis of civil law contracts, your personal data will be processed for 6 years from the last activity on the data. After this period of time, your data will be completely removed from the company’s resources. Your personal data in this process may be entrusted to external subjects participating in the employment process, however, we would like to point out that these subjects are under the constant supervision of the company and ensure at least the same level of personal data security. In addition, your data may be made available to data recipients (e.g. subjects providing social package services), about which you will be informed.

3. Apartment rental process

Personal data of customers and customer representatives (in the case of institutional customer service) are processed for the purpose of providing apartment rental services. Your personal data in this process are processed on the basis of the purpose of the contract, which was concluded, on the basis of legal provisions in terms of the scope of settlement of services rendered and in the so called the legitimate purpose of the data administrator, such as analysis of the quality data of the services provided. Providing personal data in this process is mandatory, and failure to provide data may result in the inability to provide services. In the process of providing services by the company, the data will be stored for a period of 6 years from the last activity with data in connection with the service provided. After this period, your data will be completely removed from the company’s resources. Your personal data in this process may be entrusted to external subjects participating in the process (e.g. subjects providing services for rented properties or IT software suppliers), however, we would like to point out that these subjects are under the constant supervision of the company and ensure at least the same level of personal data security.

4. Apartment rental mediation process

Personal data of property owners and representatives of property owners (in the case of corporate clients) are processed for the purpose of providing apartment rental mediation services and property management. Your personal data in this process are processed on the basis of the purpose of the contract, which was concluded, on the basis of legal provisions in terms of the scope of settlement of services rendered and in the so called the legitimate purpose of the data administrator, such as analysis of the quality data of the services provided. Providing personal data in this process is obligatory, and failure to provide data may result in the inability to establish cooperation and provide services. In the process of providing services by the company, the data will be stored for a period of 6 years from the last activity with data in connection with the service provided. After this period of time, your data will be completely removed from the company’s resources. Your personal data in this process may be entrusted to external subjects participating in the process (e.g. subjects providing services for rented properties or IT software suppliers), however, we would like to point out that these subjects are under the constant supervision of the company and ensure at least the same level of personal data security.

5. Marketing process

Personal data of clients and potential clients (prospects) are processed in order to provide the possibility of presenting the offer of own products and services, answering inquiries and in order to conduct active marketing activities through selected communication channels. Your personal data in this process is processed on the basis of your consent (marketing through selected communication channels) or for the purpose of concluding a contract in the case of inquiries addressed to the company, as well as for its implementation as part of subscribing to the Newsletter. In addition, your data is processed on the basis of the so called the legitimate purpose of the personal data administrator when we recommend the company’s services in personal contacts or create statistics and marketing reports. Providing personal data in this process is voluntary, but failure to do so will prevent us from responding to an inquiry or presenting our offer in a manner matched to your individual needs. In the process, your personal data is used for 3 years from your cancellation of your consent, if you gave one. In the remaining scope, also 3 years from the end of the provision of the newsletter service, i.e. from the last active action on personal data or submission of your inquiry. After this period, your data (if we will not cooperate) will be completely removed from the company’s resources. Your personal data in this process may be entrusted to external subjects involved in the marketing process (e.g. mailing service providers), however, we would like to point out that these subjects remain under the constant supervision of the company and ensure at least the same level of personal data security.

6. Accounting process

Personal data of clients and representatives of clients (in the case of serving institutional clients) are processed in order to carry out all settlements with clients and suppliers, as well as to ensure compliance of the company’s activities with the provisions of tax law. In this process, your personal data is processed on the basis of a legal provision in terms of regulations resulting, among others from the Act of September 29, 1994. on accounting and the Act of March 11, 2004 on tax on goods and services. In addition, the legal basis for the processing of your personal data is the processing of the contract, which was concluded and the so called the legitimate purpose of the data administrator, such as analysis of statistical data and preparation of accounting balance sheets. Providing personal data in this process is obligatory, and failure to provide data may result in the inability to properly settle services. In the accounting process, the data will be processed for a period of 6 years from the last action with the data in connection with the settlement of accounting documents. After this period of time, your data will be completely removed from the company’s resources. Your personal data in this process may be entrusted to external subjects involved in the accounting process (e.g. external accounting offices), however, we would like to point out that these subjects remain under the constant supervision of the company and ensure at least the same level of personal data security. In addition, your data may be made available to data recipients (e.g. tax authorities or statutory auditors), about which you will be informed by them in the event of contact.

7. Supplier data processing

The personal data of suppliers and representatives of suppliers (when using institutional suppliers) are processed for the purpose of implementing a delivery or service contract. Your personal data in this process is processed on the basis of the purpose of the contract, which was concluded and in the so called legitimate purpose of the data administrator, such as complaints and warranty for defects. Providing personal data in this process is obligatory, and failure to provide data may result in the inability to use the services of suppliers. In the process of processing suppliers’ data by the company, the data will be stored for a period of 6 years from the last action with the data in connection with the delivery or service. After this period of time, your data will be completely removed from the company’s resources. Your personal data in this process may be entrusted to external subjects participating in the process (e.g. subjects cooperating with the company), however, we would like to point out that these subjects remain under the constant supervision of the company and ensure at least the same level of personal data security.

Your permissions

We would like to emphasize that we guarantee each person whose data we process the possibility of using the following rights:

• the right to access the content of the data – you can request a specific description of the processing of your personal data and for disclosure of all personal data collected about you. However, we would like to point out that excessive use of this right will make it difficult to work in the organization, so please be careful when using this right,
• the right to rectify data – we make every effort to always process the most current data about you, but if it turns out that the data we process has become incorrect, you can always ask for their rectification,
• the right to delete data – if it turns out that you no longer want the organization to continue processing your personal data, you can always ask for their deletion. However, we would like to point out, that this right may not be implemented in every case, as the organization must retain some of the data due to binding legal provisions,
• the right to limit the processing – if you find that the data that is processed by the organization for some reasons should not be deleted after the above-mentioned periods of time (data retention), you can request their further storage,
• the right to transfer data – if it turns out that your personal data will be processed in IT systems, you can request their transfer to another service provider or directly to you. However, we would like to point out that this right applies only to the data that you provided yourself,
• the right to object – you can always object to the processing of specific personal data for a specific purpose. In this case, the objection will be considered and your comments will be taken into account in the processing of your data for the future,
• the right to withdraw consent – you can withdraw your consent of the processing of personal data at any time, but all actions that were performed on your data before its withdrawal will remain valid,
• the right to lodge a complaint – if you believe that the organization violates your right to privacy, you can always contact the President of the Personal Data Protection Office with a complaint, however, we encourage you to resolve your doubts together with us before making such a decision.

Summary

In summary, the organization and all its staff take special care to ensure that the processes of processing your personal data enter your privacy as little as possible, however, if at any stage of processing your personal data are there any doubts as to the compliance of these activities with the law, please contact:info@yourholidays.pl