Privacy Policy

Definitions

1.1 Administrator - Kamila Kudlak Polish Wonderland , NIP: 9462737099, REGON: 527741033.

1.2 Personal Data - information about a natural person identified or identifiable by one or more factors specific to physical, physiological, genetic, mental, economic, cultural or social identity, including device IP, Internet ID and information collected through cookies and other similar technology.

1.3 Policy - this Privacy Policy.

1.4. GDPR - Regulation (EU) 2016/679 of the European Parliament and of the European Council of 27.04.2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC.

1.5. Service - the website operated by the Administrator at www.polish-wonderland.com.

1.6. User - any natural person visiting the Service or using one or more of the services or functionalities described in the Policy.
Processing of Personal Data in connection with the use of the Website

2.1 In connection with the User's use of the Website, the Administrator collects Data to the extent necessary to provide the various services offered. Detailed rules and purposes of processing of Personal Data collected during the User's use of the Website are described below.
Purposes and legal bases for processing Personal Data on the Website

A) Use of the Website

3.1 Personal Data of all persons using the Service is processed by the Administrator:

3.1.1. for the purpose of providing services electronically in terms of providing Users with access to content collected on the Website - in which case the legal basis for processing is the necessity of processing for the performance of the contract (Article 6.1.b GDPR);

3.1.2. for the purpose of establishing and asserting claims or defending against claims - the legal basis for processing is the legitimate interest of the Administrator (Article 6(1)(f) GDPR), consisting in the protection of its rights.

B) Contact form

3.2 The Administrator provides an opportunity to contact him/her using an electronic contact form. Using the form requires providing Personal Data necessary to contact the User and respond to the inquiry. The User may also provide other data to facilitate contact or handling of the inquiry. Provision of data marked as mandatory is required in order to accept and service the inquiry, and failure to provide such data will result in the impossibility of service. Provision of other data is voluntary.

3.3 Personal data is processed for the purpose of identifying the sender and handling his/her inquiry sent through the form provided - the legal basis for processing is the necessity of processing for the performance of the service contract (Article 6(1)(b) of the GDPR); with regard to data provided optionally, the legal basis for processing is consent (Article 6(1)(a) of the GDPR).

C) Marketing

3.4 The User's Personal Data may also be used by the Administrator to target the User with marketing content through various channels, i.e.

email, via MMS/SMS. Such activities are undertaken by the Administrator only if the User has given his/her consent, which can be withdrawn at any time.

3.5 Personal data might be processed:

3.5.1. for the purpose of sending the requested commercial information - the legal basis for the processing, including with the use of profiling, is the legitimate interest of the Administrator (Article 6(1)(f) GDPR) in connection with the consent given;

3.5.2. for analytical and statistical purposes - the legal basis for processing is the Administrator's legitimate interest (Article 6(1)(f) GDPR) in conducting analysis of Users' activity on the Site in order to improve the functionalities used.
Cookies

4.1 The Administrator uses cookies on the Website. The purposes and rules regarding the use of cookies can be found in the Cookie Policy.
Period of processing of Personal Data

5.1 The period of data processing by the Administrator depends on the type of service provided and the purpose of processing. As a general rule, data are processed for the duration of the service, until the withdrawal of the consent given or the filing of an effective objection to data processing in cases where the legal basis for data processing is the legitimate interest of the Administrator.

5.2 The period of data processing may be extended in cases where the processing is necessary for the establishment and assertion of possible claims or defense against claims, and thereafter only if and to the extent required by law. After the expiration of the processing period, the data shall be irreversibly deleted or anonymized.
Rights of the User

6.1 The User has the right to access the content of the data and to request rectification, erasure, restriction of processing, the right to data portability, and the right to lodge a complaint to the supervisory authority dealing with the protection of Personal Data.

6.2 The User shall also have the right to object to data processing that takes place on the basis of the legitimate interests of the Administrator.

6.3 To the extent that the User's data is processed on the basis of consent, this consent may be withdrawn at any time by contacting the Administrator via email: contact@polish-wonderland.com
Recipients of Personal Data

7.1 In connection with the performance of services, Personal Data will be disclosed to external entities, including, in particular, IT service providers allowing for the proper use of the Website.

7.2 If the User's consent is obtained, his/her data may also be disclosed to other entities for their own purposes, including marketing purposes.

7.3 The Administrator reserves the right to disclose selected information concerning the User to competent authorities or third parties who will submit a request for such information, based on the relevant legal basis and in accordance with the provisions of the applicable law.
Transfer of Personal Data outside the EEA

8.1 The level of protection of Personal Data outside the European Economic Area (EEA) differs from that provided by European law. For this reason, the Administrator transfers Personal Data outside the EEA only when necessary, and with an adequate level of protection, by cooperating with processors of Personal Data in countries for which a relevant decision of the European Commission has been issued regarding the determination of an adequate level of protection for Personal Data;

8.1.2. application of standard contractual clauses issued by the European Commission;

8.1.3. application of binding corporate rules approved by the competent supervisory authority.

8.2 The Administrator shall always inform of its intention to transfer Personal Data outside the EEA at the stage of collection.
Security of Personal Data

9.1 The Administrator shall conduct a risk analysis on an ongoing basis to ensure that the Personal Data is processed by the Administrator in a secure manner - ensuring, first and foremost, that only authorized persons have access to the data and only to the extent necessary due to the tasks they perform. The Administrator shall ensure that all operations on Personal Data are recorded and performed only by authorized employees and associates.

9.2 The Administrator shall take all necessary measures to ensure that also its subcontractors and other cooperating entities provide a guarantee of the application of appropriate security measures whenever they process Personal Data on behalf of the Administrator.
Limited liability of the Administrator in the processing of personal data.

10.1 The Administrator maintains websites on the following Internet portals:

Facebook: https://www.facebook.com/profile.php?id=61556635473135

Instagram: https://www.instagram.com/polish.wonderland?igsh=ZTR6aDFjeXE1M2o%3D&utm_source=qr

10.2 The Administrator has limited influence over the processing of personal data by the web portals listed in Section 10.1 of the Privacy Policy. As a registered user of these portals, you maintain a separate relationship with them related to your user profile data, and therefore, Facebook and Instagram are fully responsible for the processing of your personal data to the extent to which the Administrator does not have access. Accordingly, your personal data may be processed on servers located outside the European Economic Area.
ontact information

11.1 Contact with the Administrator is possible through: e-mail address: contact@polish-wonderland.com; tel: + 48 530 250 258
Changes to the Privacy Policy

12.1 The Policy is reviewed on an ongoing basis and updated as necessary.

12.2 The current version of the Policy has been adopted and is effective as of 07.03.2024