Document version: 3.0.0
Effective from: 08/01/2024
General provisions
- To preserve the privacy rights of Users of the animalhotels.com Website and Application and to comply with the provisions of the law, animalhotels.com provides its Users with the present Privacy Policy which includes information on the manner in which Users' personal data are processed and secured.
- Animalhotels.com processes personal data in accordance with applicable laws, including the GDPR and the Act of 18 July 2002 on the provision of electronic services.
- Animalhotels.com has implemented the following rules:
- data shall be collected for specified, explicit and legitimate purposes and not further processed by animalhotels.com in a way incompatible with those purposes ("purpose limitation");
- before collecting data, the data subject shall always be informed in a clear and transparent manner of the purposes for which the data are processed ("lawfulness, fairness and transparency");
- only data which are adequate and limited to what is necessary to fulfil the purposes for which they are processed shall be collected ("data minimisation");
- data shall be accurate and updated if necessary ("accuracy");
- data shall be kept in a form which permits identification of the data subject for no longer than is necessary for the purposes for which they are processed ("restriction of storage");
- data are processed in a way that ensures security, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage by means of appropriate technical or organisational measures ("integrity and confidentiality").
- Before using the animalhotels.com Website and/or Application and creating an account, the User should read the Privacy Policy.
Definitions
Policy – the present Privacy Policy.
Animalhotels.com – animalhotels sp. z o.o. (limited liability company) with its registered office in Łódź, H. Sienkiewicza 72, 90-318 Łódź, entered into the Register of Entrepreneurs kept by the District Court for Łódź-Śródmieście in Łódź, XX Commercial Division of the National Court Register under KRS number 0000934860, REGON (National Business Registry Number) 520527265, NIP (Tax Identification Number) 7252314345, share capital PLN 116,200.00.
Application – the animalhotels.com mobile application for Android and IOS systems.
User – a natural person whose personal data is processed by animalhotels.com in connection with the use of the animalhotels.com Website and/or Application.
Personal data – any information about an identified or identifiable natural person ("data subject").
GDPR (RODO) – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC.
Website – the animalhotels.com website accessible to Users at www.animalhotels.com.
I. Data collection and processing
- The controller of Users' personal data provided while using the Website and/or Application is animalhotels.com.
- As a result of using the Website and/or Application, animalhotels.com may process the following personal data: name and surname, address, phone numbers, email addresses, tax identification number, date of birth, likeness, message content or review content.
- Animalhotels.com ensures that its Users can use the Website and/or Application anonymously, however, to obtain full access to the services offered through the Website and/or Application, it is advisable to register by completing a registration form. The provision of data by the User is voluntary, although the provision of certain data is necessary to set up an account or use certain features of the Website and/or Application, e.g. to receive a newsletter. If the data are collected to comply with an obligation stipulated by law, the provision of data is mandatory.
- After registration and logging into one's account, the User may provide additional personal data which facilitates the use of Services.
II. Purpose and legal basis for data processing
Provision of services
Animalhotels.com processes personal data to provide content and services to Users, including informing them of available content and services on the Website and/or Application.
The legal basis for the processing is Article 6(1)(b) of the GDPR (acceptance of Terms and Conditions of the Website and/or Application).
Marketing communication
Animalhotels.com initiates marketing communication with the User if they have agreed to receive marketing correspondence, including by requesting it explicitly or providing their details for this purpose.
The legal basis for the processing is Article 6(1)(a) of the GDPR (the User's consent to communication for marketing purposes).
Performance of legal obligations by
Animalhotels.com processes data when it is necessary for the performance of legal obligations.
The legal basis for the processing is Article 6(1)(c) of the GDPR (fulfilment of legal obligations of animalhotels.com).
Ensuring the security and operation of the Website and/or Application
Animalhotels.com processes personal data if it is necessary to ensure the security of data processing on animalhotels.com and management of the ICT systems.
The legal basis for the processing is Article 6(1)(f) of the GDPR (fulfilment of the legitimate interest of animalhotels.com - ensuring the operation of the Website and/or Application and high quality of services).
Communication between Users of the Website and/or Application
Animalhotels.com collects the content of messages and information that the User provides using this feature.
The legal basis for data collection and processing is Article 6(1)(b)(d) and (f) of the GDPR (fulfilment of the legitimate interest of animalhotels.com - ensuring Users' protection and the operation of the Website and/or Application and clarifying any incidents that occur between Users).
User reviews and ratings
Animalhotels.com processes data derived from reviews and ratings provided by Users in accordance with the Terms and Conditions to verify Users' satisfaction with services provided by other Users, ensure a high level of communication between Users, verify undesirable behaviour and ensure that appropriate action is taken in this regard.
The legal basis for the processing is Article 6(1)(b) and (f) of the GDPR (fulfilment of animalhotels.com legitimate interest - ensuring the operation of the Website and/or Application and a high quality of services as well as improving the quality of services).
Handling inquiries from Website and/or Application Users
Animalhotels.com processes personal data to handle complaints from Users related to the operation of the Website and/or Application, contact the User or a third party using the Website and/or Application and take appropriate explanatory or corrective actions as well as clarify possible incidents related to the services and improve their quality.
Data that is not necessary to contact the User are always marked as optional in the contact form. Animalhotels.com erases the data when their storage is no longer required or restricts their processing if there are statutory requirements for retention of such data.
The legal basis for the processing is Article 6(1)(c)(b)(f) of the GDPR (fulfilment of the legitimate interest of animalhotels.com - ensuring the operation of the Website and/or Application and a high quality of services as well as improving the quality of services and clarifying any incidents that occur between Users).
Investigation or protection against possible claims
In the event of possible claims against Users or the need to protect against claims, animalhotels.com may process Users' data obtained through the Website and/or Application.
The legal basis for the processing is Article 6(1)(f) of the GDPR (fulfilment of animalhotels.com legitimate interest - protection against claims or pursuing claims).
Newsletter
Animalhotels.com processes Users' personal data for the purpose of sending the Newsletter. The data processing and sending the newsletter require the User's consent.
The legal basis for the processing is Article 6(1)(a) of the GDPR.
III. Data retention period
- Animalhotels.com stores Users' personal data for the period necessary to fulfil the purposes for which they were collected. After this period, the data is erased or made anonymous in such a way that it is not possible to determine the User's identity.
- Personal data may be stored for a longer period if such obligation results from the provisions of the law or if it is necessary for animalhotels.com to protect against claims or pursue claims against Users.
- Data processed on the basis of consent are processed until the consent is withdrawn.
IV. User rights
- Right to access personal data upon request by the animalhotels.com User that allows them to learn which of their personal data is processed and provides the User with a copy of such data. Notwithstanding the above, the registered User has access to the personal data they have provided to animalhotels.com through the User account on the Website and/or Application.
- Right to rectify personal data - if the User's personal data are incorrect or incomplete, the User may request animalhotels.com to rectify or complete their data. Notwithstanding the above, the registered User has the right to correct their personal data through the User account on the Website and/or Application.
- Right to limit personal data processing - the User may request a temporary suspension of the processing of their data in certain situations.
- Right to erase personal data - in certain situations, the User may request the erasure of personal data processed by animalhotels.com.
- Right to receive one's personal data in a structured commonly used format and to have them transferred when the processing is based on consent and carried out by automated means.
- Right to withdraw consent to the extent that processing of personal data is based on consent. The User has the right to withdraw their consent at any time.
- Right to object to the processing of personal data the User may object to the processing of their personal data on the basis of a legitimate interest or for statistical purposes (due to their particular situation) or to the processing of data for direct marketing purposes.
- If the processing of personal data violates the provisions of the GDPR, the User has the right to lodge a complaint with the supervisory authority, i.e. the President of Personal Data Protection Office based in Warsaw; details on how to lodge a complaint can be found at https://uodo.gov.pl/pl/83/155.
V. Profiling
The User's personal data processed for marketing purposes is subject to automated decision-making processes, including profiling. Therefore, based on the personal data stored by animalhotels.com and information regarding the services purchased by the User or cookies stored on the User’s device, animalhotels.com will make inferences concerning User's preferences and interests, which may be used to build the User's marketing profile.
VI. Cookies
- Animalhotels.com uses cookies.
- Cookies are IT data, in particular text files, which are stored on the User's device and are intended for the use of animalhotels.com websites. Cookies usually contain the name of the website they come from, the time they are stored on the device and a unique number.
- The Service Operator is the entity placing cookies on the User's device and accessing them.
- Cookies are used for the following purposes:
- maintaining the User's session (after logging in), thanks to which the User does not have to re-enter their login or password on each sub-page of the Website;
- for statistical purposes, which are carried out by means of the Google Analytics Pixel (Google Inc. based in the USA; animalhotels.com does not transmit personal data to the operator of this service, only anonymised data are transmitted. The service is based on the use of cookies on the User's device. With regard to information on User preferences collected by the Google advertising network, the User can view and edit the information derived from cookies using the following tool: https://www.google.com/ads/preferences/), Hotjar (it does not transmit personal data to the operator of this service, only anonymised data are transmitted; https://www.hotjar.com/privacy/);
- for marketing purposes, which are carried out by means of Pixel Facebook Ads (Meta Platforms, Inc., Meta based in the USA; it does not transmit personal data to the operator of this service, only anonymised data are transmitted; https://www.facebook.com/privacy/policy.
- Animalhotels.com uses two main types of cookies: "session cookies" and "permanent cookies". "Session cookies" are temporary files that are stored on the User's device until the User logs out, leaves the website or switches off the software (web browser). "Persistent cookies" are stored on the User's device for the time specified in the parameters of the cookies or until they are deleted by the User.
- Animalhotels.com also uses Local Storge objects in the HTML5 standard, which are stored on the User's device. It stores the necessary data regardless of the browser used by the User and does not have an automatically set expiry date. To prevent the use of HTML5 storage objects, the browser must be used in incognito mode.
- Web browsing software (Internet browser) usually allows cookies to be stored on the User's device by default. Website Users can change their settings. The web browser makes it possible to delete cookies. It is also possible to automatically block cookies. For details, the Users may refer to the help section of a given Internet browser.
- Restrictions on the use of cookies may affect some of the features available on the animalhotels.com websites.
- If the User does not wish to receive cookies, they can change their browser settings. Animalhotels.com stipulates that disabling cookies necessary for the authentication processes, security or maintaining user preferences may hinder and, in extreme cases, make it impossible to use the websites.
- The cookie storage periods vary and can be accessed through the browser.
VII. Data transfer
- Animalhotels.com may disclose the Users' personal data at the request of public authorities or other entities entitled to such access by law, in particular when it is necessary to ensure the security of the systems or the rights of other Users as well as at the request of Users or when it is necessary for the performance of Services offered by animalhotels.com.
- Data may be disclosed only to trusted recipients, including business partners that process data on the basis of personal data entrustment agreements. All entities to whom the data is disclosed are obliged, on the basis of entrustment agreements or directly by data protection legislation, to provide appropriate technical and organisational measures to ensure an adequate level of data security. Personal data shall be processed for a period necessary for the purposes for which they were collected and processed or for the period resulting directly from the law.
- Some animalhotels.com service providers may store Users' data outside the European Economic Area. In such cases, Users' data may be stored in countries that provide an adequate level of personal data security or in countries that do not provide such a level. Animalhotels.com secures Users' data by entering into agreements with animalhotels.com service providers containing the so-called Standard Contractual Clauses accepted by the European Commission, which guarantee security of Users' data in third countries.
- Animalhotels.com transfers data (including phone numbers) to the SMS service provider Apifonica to provide verification codes and notifications.
VIII. External links
If the services offered by animalhotels.com redirect to other websites or applications, the newly opened links do not operate in accordance with the present Privacy Policy. The User should review the privacy policies published on these websites or applications to understand their procedures for collecting, using and disclosing personal data.
IX. Use of social media plug-ins
This website uses social media plug-ins from various providers. Without the User's interference, these buttons do not send any data to the respective social networks when visiting the Website and/or Application. Only when the given button is selected, a direct connection is established with the server of the respective social network after which it can collect data and use cookies.
X. Data safety
Animalhotels.com uses comprehensive security measures of a technical and operational nature to ensure that User data is protected against accidental or intentional manipulation, loss, destruction or access by unauthorised persons. As technology advances, the security measures used by animalhotels.com are regularly reviewed and updated.
XI. Chosen methods of personal data protection
- The login and personal data entry areas are protected in the transmission layer (SSL certificate). This ensures that the personal and login data entered on the website are encrypted on the User's device and can only be read on the target server.
- User passwords are stored in hashed form. The hash function works in a one-way manner - it is not possible to reverse it.
- Animalhotels.com periodically changes its administrative passwords.
- Animalhotels.com makes regular backups to protect Users' data.
- Animalhotels.com updates all software and programming components that are used to process personal data.
XII. Changes to the Privacy Policy
Animalhotels.com strives to ensure that its Privacy Policy and the GDPR are regularly updated. In the event of a change in legislation, judicial law, guidelines of the authorities responsible for supervising the processing of Personal Data, changes in technology, methods, purposes or legal basis for the processing of Personal Data, animalhotels.com will introduce the changes to this Privacy Policy and the GDPR accordingly and notify its Users via email to the address provided by the User or by a text message to the User's phone number as well as by a message displayed on the Website and/or Application.