PRIVACY POLICY – AURA RESORT
1. General Information
This Privacy Policy defines the rules for processing and protecting the personal data of users using the AURA RESORT website and services.
The data controller is:
F.H.U. “PILECKI” Władysław Pilecki
Dąbrowica 224
39-450 Dąbrowica
Poland
VAT ID (NIP): 8671011822
E-mail: [email protected]
The Controller takes special care to protect users’ privacy and the security of the personal data provided.
2. Scope of Collected Data
Depending on the way users interact with the website and AURA RESORT services, the Controller may process the following personal data:
- full name,
- e-mail address,
- phone number,
- invoice details,
- vehicle registration number,
- IP address,
- data contained in correspondence,
- reservation-related information,
- payment-related information necessary to process transactions.
Providing data is voluntary; however, in some cases it may be necessary to complete a reservation or contact the user.
3. Purposes and Legal Basis for Data Processing
Personal data is processed for the following purposes:
Reservation and Stay Management
Data is processed in order to:
- complete reservations,
- communicate before arrival and during the stay,
- provide access codes,
- provide customer service,
- process payments,
- issue VAT invoices,
- arrange exemption from the entry fee to Lake Tarnobrzeskie.
The legal basis for processing is Article 6(1)(b) of the GDPR — performance of a contract or taking steps prior to entering into a contract.
Legal Obligations
Data may also be processed to comply with legal obligations, particularly accounting and tax regulations.
The legal basis for processing is Article 6(1)(c) of the GDPR.
Contact and Customer Support
When users contact AURA RESORT via contact form, e-mail, or phone, personal data is processed in order to respond and handle correspondence.
The legal basis for processing is Article 6(1)(f) of the GDPR — the legitimate interest of the Controller.
Marketing and Analytics
Data may be processed for:
- statistical analysis,
- website traffic analysis,
- marketing activities,
- remarketing,
- improving service quality.
The legal basis for processing is user consent or the legitimate interest of the Controller.
4. Cookies
The AURA RESORT website uses cookies in order to:
- ensure proper website functionality,
- customize content to users,
- analyze website traffic,
- conduct marketing activities,
- operate analytical and advertising tools.
Cookies may be stored by the Controller as well as third parties such as:
- Google Analytics,
- Google Ads,
- Meta (Facebook/Instagram),
- booking systems,
- payment operators.
Users may change cookie settings in their browser at any time.
Restricting cookies may affect the proper functioning of certain website features.
5. Google Analytics and Marketing Tools
The website may use analytical and marketing tools provided by Google and Meta.
These tools may collect information regarding:
- the way users interact with the website,
- time spent on the website,
- clicks,
- approximate location,
- device and browser information.
This data is used exclusively for statistical and marketing purposes.
More information:
6. Data Recipients
Personal data may be shared with entities cooperating with the Controller only to the extent necessary to provide services, including:
- payment operators,
- IT service providers,
- hosting providers,
- booking systems,
- accounting services,
- marketing service providers,
- public authorities authorized under applicable law.
The Controller does not sell users’ personal data.
7. Data Retention Period
Personal data is stored:
- for the period necessary to complete the reservation and stay,
- for the period required by law,
- until claims become time-barred,
- until consent is withdrawn — in the case of data processed based on consent.
8. CCTV Monitoring
The AURA RESORT property is monitored by CCTV for the purpose of:
- ensuring guest safety,
- protecting property,
- improving overall security.
Recordings are stored for the period necessary to fulfill the purpose of monitoring unless they constitute evidence in legal proceedings.
The legal basis for processing monitoring data is the legitimate interest of the Controller.
9. User Rights
Users have the right to:
- access their personal data,
- rectify data,
- erase data,
- restrict processing,
- transfer data,
- object to processing,
- withdraw consent,
- lodge a complaint with the President of the Personal Data Protection Office.
For matters related to personal data protection, users may contact: