Privacy

Privacy PolicyThis Privacy Policy defines the principles of processing and protecting personal data provided by users in connection with their use of the services offered by the Forest Park Resort & Spa website (hereinafter: the "Service").The administrator of the personal data contained in the Service is OPERATOR FOREST PARK SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ SPÓŁKA KOMANDYTOWA, Warsaw 00-023, ul. Widok 8, registered in the business register under NIP number: PL5252926024 (hereinafter: "Data Controller").In order to ensure the security of the entrusted personal data, the Data Controller operates based on internal procedures and recommendations, in accordance with relevant legal acts concerning the protection of personal data, in particular with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC ("GDPR").The Data Controller takes special care to protect the interests of data subjects, ensuring in particular that personal data are:

• processed lawfully,
• collected for specified, legitimate purposes and not further processed in a manner incompatible with those purposes,
• substantively correct and adequate in relation to the purposes for which they are processed,
• stored in a form that allows the identification of the data subjects for no longer than necessary to achieve the processing purpose.

The Data Controller obtains information about users and their behaviors through voluntary data entry in forms, for the purpose of:

• responding to user inquiries submitted via the contact form based on Article 6(1)(f) of the GDPR,
• processing reservations using the online booking system based on Article 6(1)(b) of the GDPR,
• providing services offered by the Data Controller based on Article 6(1)(b) of the GDPR,
• marketing, including sending commercial information to an email address, if the Client has given their consent by checking the appropriate box in the booking process, based on Article 6(1)(a) of the GDPR. Consent for data processing for marketing purposes and sending commercial information can be withdrawn by clicking the appropriate link in the received message or by sending such a request to the Data Controller's email address,
• pursuing the Data Controller's legitimate interest in special cases based on Article 6(1)(f) of the GDPR, e.g., debt collection.

Upon the first visit to the Forest Park Resort & Spa website, the user is informed about the use of cookies. By remaining on the site, the user accepts the use of cookies on the website. If the user does not change the browser settings, it is considered as consent to the use of cookies.Changes to cookie settings will take effect upon restarting or refreshing the session on the Data Controller’s website.The installation of "necessary cookies for basic service functionality" is required for proper operation, particularly for authentication.Cookies essential for website functionality can be modified by changing browser settings; however, such changes may result in improper functioning of the website.More information about cookies is available in the "Help" section of the user's web browser menu.Users who do not want cookies to remain in their web browser after visiting the Service should delete them from their browser. The Service uses the following types of cookies:

• Session cookies – remain in the browser until it is closed or the user logs out of the Service,
• Persistent cookies – remain in the browser until deleted by the user or for a predefined period set in the cookie parameters.

In terms of functionality, cookies can be divided into:

• Analytical cookies, which help improve user experience by understanding how users interact with the website,
• Marketing cookies, used to personalize advertising content, properly target ads, and analyze the effectiveness of marketing and sales channels,
• Essential cookies, which are fundamental to the basic functionality of the Service.

The cookies we use allow us to improve our website.Some cookies may be placed by the Online Booking System provider solely for the purpose of:

• improving and supporting the booking process,
• analyzing and collecting statistical data related to website and booking system usage to enhance functionality.

The Online Booking System provider informs users about the cookies installed within the system interface.The Data Controller may use automated decision-making, including profiling, for marketing purposes (e.g., automated ad targeting based on user interests and measuring ad effectiveness) and offer personalization based on Article 6(1)(a) of the GDPR.Recipients of personal data may include authorities, institutions, and entities authorized by law, as well as entities providing services to the Data Controller (e.g., legal, IT, marketing, accounting services, and other entities involved in the execution of the ordered service).We use the following analytical tools:

• Google Analytics

We use the following marketing tools:

• Website – the core of modern e-marketing activities,
• Leaflets – traditional marketing materials,
• Press advertising,
• Email marketing,
• Events,
• Social Media,
• SEO.

Users who provided their data to the Service have the right to access, modify, request deletion, or restrict the processing of their personal data at any time. Users may also request the deletion of their personal data from the Service. The right to data portability does not apply, as there is no established standard for exchanging such data between hotel facilities.To exercise the above rights, the user should contact the Data Controller using the same email address or phone number provided to the Service, or by reaching out to: rezerwacje@forest-park.pl.The user has the right to withdraw consent at any time without affecting the legality of processing carried out before withdrawal, either by direct contact with the Data Controller or by adjusting cookie settings.Every Service user has the right to lodge a complaint with the Data Protection Authority.The Service may contain links to other websites operating independently from the Service and not supervised in any way. These sites may have their own privacy policies and regulations, which we recommend reviewing carefully.The Data Controller reserves the right to amend the Service’s privacy policy due to technological advancements, changes in data protection laws, or the development of the Service. Users will be informed of any changes in a clear and visible manner.