All personal data collected from the hotel guests is administered by the PRO-SAN M. Jagiełka and M. Wiszniewski Sp.j. with the registered office address in Kołobrzeg 78-100 ul. Kasprowicza 24; entered into the Register of Entrepreneurs of the National Court Register by the District Court in Koszalin, 9th Commercial Department of the National Court Register under KRS No. 0000274706; being the owner of the AQUARIUS SPA ***** Hotel in Kołobrzeg ul. Kasprowicza 24 hereinafter referred to as the Administrator.

The Administrator has designated a Personal Data Protection Officer (DPO); Marek Piekarz – DPO contact details: 78-100 Kołobrzeg, ul. Kasprowicza 24, e-mail: iod@aquariusspa.pl

The processing of personal data is used exclusively for booking accommodation and providing hotel services. Additionally, the purpose of data processing is to document the performance of those services in accordance with the provisions of tax law, as well as to provide the Parties with the right to make any claims that may arise directly or indirectly out of the use of such services during hotel stay. Subject to the hotel guest prior consent to the processing of personal data, the Administrator is authorized to process the data for marketing the Administrator’s products and services. Furthermore, the Administrator processes personal data obtained from the hotel video surveillance footage (recorded without audio) to ensure the safety of hotel guests and other persons on the hotel premises.

The lawful basis for the processing of guest’s personal data is the contact for providing hotel services by the AQUARIUS SPA ***** Hotel. The lawful processing of guest’s personal data for direct marketing and commercial purposes is conditional on the guest’s consent which we seek by asking to complete a consent form on the back of hotel registration card. The processing of personal data by means of video surveillance  is necessary for the purposes of the legitimate interests pursued by the Administrator. Furthermore we ask for permission (on the back of hotel registration card) to process personal data such as phone number and e-mail address for the purpose of direct communication with the guests during their stay at the hotel or after its completion.

The Administrator discloses the guest’s personal data to third parties belonging to the following categories of entities: companies providing IT support services (Information Technology) to the hotel, transport and taxi companies for the transport of guest to and from the hotel; and in certain situations with public authorities in response to lawful requests or law enforcement requirements.

Personal data obtained for the performance of a contract for hotel services shall be retained until the tax claims or civil claims of the Administrator or the Guest have expired, whichever comes later. Personal data obtained on the lawful basis of consent for marketing and commercial purposes will be processed until such consent is revoked. Personal data obtained on the lawful basis of video surveillance will be processed for 30 days from the date of recording, and then will be permanently deleted.

Cookie Policy

To the extent permissible under applicable law, we may collect personal data automatically via cookies on our website. Cookie is a small text file which is saved to your computer or mobile device by the website you are browsing.  Cookies act as a memory for the website, allowing that website to remember your device on your return visits.

Some of the cookies on our website are essential for the proper running of the www.aquariusspa.pl website; and to enable you to move around the website and use its features. They are used to ensure proper maintaining of your sessions, saving session status and monitoring the availability of services.

Another cookie category – functional cookies are not necessary to use the website, but they improve your browsing experience, remember your preferences including language settings, restore your sessions and check whether the cookie file is functioning correctly.

The Administrator also uses the services of third parties which use cookies for the following purposes: website traffic monitoring and collecting anonymous aggregate statistics that allow us to understand how you use our website and to improve our services; control how often you choose a specific service or view a selected content or use a communication tool, and for online payments.

You can manage cookie files used by the PRO-SAN M. Jagiełka and M. Wiszniewski Sp. J. or by any other external providers by changing the settings of your web browser.

Access logs

We collect data about how our users use our website and their IP addresses by analysing access logs. We use this information to diagnose server-related problems, prevent possible security breaches, and to manage our website.

The visitors’ IP addresses are also used for statistical purposes:  collecting and analysing demographics data of people visiting the website (e.g. user’s location) and other information related to website browsing.

However, we would like to emphasize that we do not receive any information that would allow us to personally identify a visitor of the www.aquariusspa.pl website.

Please be advised that we may be required to disclose the IP address of the www.aquariusspa.pl website user, if we are required by law or in response to law enforcement/ government entities requests.

Guest has the right of access to a copy of information comprised in their personal data; a right to have personal data rectified or blocked; a right to object to processing; a right to prevent processing for direct marketing; a right to export their data or delete it. The right to be forgotten may be limited for legitimate reasons; personal data may be stored for longer periods insofar as the data will be processed solely to meet the Administrator’s legal obligation under specific national law (e.g. tax law). Access to personal data is available at the Administrator’s office. In addition, the Administrator provides e-mail address for the Data Protection Officer: iod@aquariusspa.pl. Each guest has the right to lodge a complaint with a supervisory authority. The Administrator does not intend to transfer personal data outside the EEA. The administrator does not make decision based solely on automated processing, including profiling as referred to in Article 22 (1, 4) of the GDPR.