Book your date

Wojciech and Milosz Początek, doing business under the name: Traktor.com.pl S.C., based in Rzeszow, attach significant importance to activities related to protecting the confidentiality and privacy of information entrusted to them. One of the primary responsibilities of Wojciech and Miłosz Początek is to ensure adequate protection and proper use of personal data. It also aims to duly inform you about matters related to the processing of personal data, especially in view of the content of data protection regulations, including Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and the repeal of Directive 95/46/EC (OJ EU.L.2018.127.2 t. j.) hereinafter referred to as (“RODO”). Therefore, in this document, it informs about the legal basis for processing personal data, the ways of collecting and using them, as well as the rights of subjects related to this. It draws your attention to read this Privacy Policy (“Privacy Policy”) to learn how it collects, uses and protects the personal data provided.

Privacy Policy and Personal Data Administrator

This Privacy Policy sets out the rules for processing and protecting personal data obtained by Wojciech and Miłosz Początek conducting business under the name: Traktor.com.pl S.C. with its registered office in Rzeszów – through the internet service (booking system) and the website: https://forrestspace.com/ from Users in connection with their use of the services offered by the internet service (browsing the website, making reservations for stays at Forrest Space) hereinafter referred to as the Service. The aforementioned Users are further referred to as Users, and each of these Users individually is further referred to as a User. The administrator of personal data obtained through the Service is Wojciech Początek conducting business under the name: Traktor.com.pl S.C. with its registered office in Rzeszów, ul. Leszka Czarnego 8, 35 – 615 Rzeszów, NIP: 8133840648, e-mail: Info@forrestspace.com (hereinafter referred to as the Administrator). The data administrator is the owner of the internet domain and the Forrest Space leisure complex located in Wola Rafałowska.

Purposes and legal basis for processing personal data

The Administrator, respecting the Users’ right to privacy and concerned about ensuring the security of personal data obtained from them, ensures that this data is:

  1. processed in accordance with the law,
  2. collected for designated purposes and not subjected to further processing incompatible with those purposes,
  3. adequate in relation to the purposes for which they are processed,
  4. kept in a form that makes it possible to identify the persons to whom they relate for no longer than necessary to achieve the purpose of processing.

The Administrator’s goal is to be transparent about the means and legal basis for processing personal data, as well as the purposes for which the Administrator processes personal data. The Administrator shall ensure that it always provides the necessary information in this regard to each User whose personal data it processes. The legal bases for processing and categories of operations performed in the field of data processing are presented below, along with their description.

Personal data obtained from Users (Customers), potential Customers, co-workers or other entities, including individuals who are authorized to represent these entities or individuals, as well as those cooperating with the Administrator on their behalf, are processed for the purposes of: pre-booking processes, the booking process, as well as the provision of services by the Administrator related to the User’s stay in the holiday complex.

Personal data is processed for:

  • booking a stay at Forrest Space on the basis of Article 6 (1) letters a – b RODO,,
  • to receive an inquiry addressed to the Administrator via e-mail address – published on the website info@forrestspace.com and for the purpose of responding to that inquiry on the basis of Article 6(1)(a – b) RODO,
  • concluding a contract for a stay at the facility and performing the contract on the basis of art.6(1)(b) RODO,
  • direct marketing on the basis of art.6(1)(f) RODO,
  • data analysis for the purpose of customizing promotional activities for its own products and services on the basis of Article 6(1)(a), (b) and (f) RODO,
  • as well as for other purposes if the provisions of applicable law entitle the Administrator to process personal data, e.g. in order to fulfill the Administrator’s legal obligations under accounting or tax law – Article 6(1)(c) RODO, and in order to realize the Administrator’s legitimate interests such as marketing, assessing and determining the personal characteristics or individual needs of Users (personalization of services), and asserting or defending against claims – Article 6(1)(f) RODO.

Regardless of the purposes of personal data processing indicated above – the Administrator processes the following types of personal data:

  1. Name and Surname
  2. Adress
  3. Phone number
  4. E-mail adress
  5. Bank account
  6. in the case of entrepreneurs – company name and NIP(REGON, KRS) number

The administrator does not process sensitive personal data (biometric data, health data, race, religion, etc.).

Personal data of Users, except in cases indicated in this Privacy Policy, will not be shared with third parties or other entities. In view of this, the User will not receive any promotional content other than the Service and the Administrator related to the services provided. The Administrator does not provide promotional services to third parties. Users’ personal data are not sold either.

The Administrator may share personal data with subcontractors who support the Administrator to ensure the operation of the Service, in particular:

  • entities operating the reservation system launched on the Website,
  • entities that operate the Administrator’s database of contacts with Users and the mailing of the Administrator’s newsletters to Users who have subscribed to the newsletter.

External Services/Data Recipients

The entrustment of personal data processing applies to the following groups of recipients:

  1. authorized employees who use the data in order to fulfill the purpose of the reservation system and the Website Service of the resort facility,
  2. persons cooperating with the Administrator on the basis of civil law contracts, supporting the current activities of the Administrator,
  3. suppliers of software needed to run the reservation system and the website service of the resort facility,
  4. online payment operators,
  5. providers of software to facilitate business operations (e.g. accounting software),
  6. entities providing technical support to the Administrator,
  7. entities providing a mailing system,
  8. entities providing marketing services,
  9. hosting service providers,
  10. entities that implement marketing or sales campaigns,
  11. entities providing statistical services.
  12. In the case of an authorized request, recipients of Users’ personal data may also be inspection authorities, law enforcement agencies, enforcement agencies and other public authorities acting on the basis of statutory authorization.

Voluntariness of providing personal data

A page view of the website on which information about the Forrest Space resort complex is posted does not make it necessary to provide personal data, however, the Administrator may require the submission of certain data if the User wishes to obtain additional information about the services or activities provided. The expression of consent and the choice of the preferred form of contact are completely voluntary. However, in order to send an inquiry – to the indicated e-mail address available on the website, to book a stay at the Forrest Space resort complex (to conclude an agreement)- it is necessary to provide the data required by the Administrator in order to carry out the activity (service).

Automatic information collection and cookies

In some cases, the Administrator uses or plans to use automatic information collection tools such as cookies, beacons and other technologies to automatically collect information of a certain type during Users’ visits to the website. The indicated activities allow the Administrator to improve its offerings through the functionality of the website and to improve the efficiency of its marketing efforts. As of the date of the last update of this Privacy Policy, the Administrator uses solutions that are the subject of the description indicated below. If a new solution is applied, the Privacy Policy will be updated.

It should be noted that the information collected in this way does not always constitute personal data, i.e. it allows you to identify a specific User, but this may happen, for example, if it is possible to associate an IP address or location information with a specific User’s e-mail address.

Cookies are IT data (small text files) sent by the server, which are stored on the User’s final device (e.g. computer, smartphone, tablet).

The use of cookie technology is necessary to ensure proper operation of the reservation system and the website. The website also uses technologies that store data on the end device (cookies) for analytical and marketing purposes. The Website uses two main types of cookies: “session” and “permanent”.

Session cookies are temporary files that identify the User during an ongoing visit to the website. Session cookies are handled in ephemeral memory and are not stored in permanent memory (such as a hard drive). When you close your web browser, session cookies are automatically deleted. “Permanent” cookies are files that have a specific expiration time. They are stored in the User’s terminal device for the time specified in the parameters of cookies or until they are deleted by the User. They make the use of frequently visited sites more user-friendly. Web browsing software (Internet browser) usually allows the storage of cookies on the User’s end device by default. Users can change their settings in this regard. The web browser allows the removal of cookies. It is also possible to automatically block cookies Detailed information on this subject is contained in the help or documentation of the Internet browser used by the User. Restrictions on the use of cookies may affect some of the functionality available on the website. By using the website, the User accepts that cookies will be installed on the end device to enable the Administrator to provide services. Failure to agree to cookies means that certain website functionalities may not be available.

Web browser processing

An IP address is an individual number assigned to a User’s computer when connecting to the Internet, which allows communication between a given computer and a server. IP addresses of Users visiting the site may be recorded, among other things, to ensure the security of the IT system and for diagnostic purposes. This information may also be used in aggregate form to analyze Internet trends and evaluate the performance of the website.

The website and the reservation system, in some cases, may record information to facilitate linking the data in the form with the e-mail address of the User filling out the form. In this case, the User’s e-mail address appears inside the URL of the page containing the form. The data provided in the form is processed for the purpose resulting from the function of the specific form, e.g. to answer the question asked, to provide reservation services, etc. Each time the context and description of the form clearly informs what it is used for.

Localization tools

The Administrator may collect and use data regarding the geographic location of a User’s computer or mobile device. Location data is collected to provide Users with information about services that we believe may be of interest to them based on their location. They are also collected to improve our products and services based on geolocation solutions.

Widgets and social applications

The Administrator’s website may include features that allow content to be shared via third-party social media applications (Facebook, Instagram, Twitter). Any personal data provided by Users through such social applications may be collected and used by other Users of the above social applications, and interactions conducted through them are subject to the provisions of the Privacy Policy of the companies that are providers of the applications. The Administrator has no influence on and assumes no responsibility for the above companies and their use of Users’ data.

Profiling

Automated decision-making, including profiling for the purpose of providing services under the concluded agreement and for the purpose of direct marketing by the Administrator, may be undertaken in relation to Users.

Data protection

The login and personal data entry sites are protected in the transmission layer (SSL certificate). This ensures that the personal and login data entered on the site are encrypted on the User’s computer and can only be read on the target server. The Administrator periodically changes his administrative passwords.

An important element of data protection is the regular updating of all software used by the Administrator to process personal data, which in particular means regular updates of software components.

Data processing time

Users’ personal data are processed by the Administrator for no longer than necessary. The Administrator processes personal data only for the period in which it will have a legal basis for doing so, which is until:

  1. there will cease to be a legal obligation on the Administrator, obliging it to process the User’s data,
  2. the possibility of establishing, asserting or defending possible claims related to the contract concluded by the Administrator will cease,
  3. the User will withdraw consent to data processing (if it was the basis of processing),
  4. the User’s objection to the processing of his/her personal data will be accepted – in case the basis of data processing was the legitimate interest of the Administrator.

Transfer of personal data of non-EU/EEA countries

Personal data is processed only in the territory of the European Union or the European Economic Area.

User Privileges

In connection with the processing of personal data, Users have the right to:

  1. request deletion of the data without stating a reason,
  2. to object to the processing of data in whole or in part as well as for the indicated purpose,
  3. to restrict the processing of personal data for a specified period of time or in a specified scope,
  4. to correct or rectify personal data,
  5. revoke consent to receive newsletters,
  6. provide information about the scope of personal data processing,
  7. lodge a complaint to the supervisory authority for personal data.

The Administrator retains data on transactions made for a period of time resulting from the provisions of tax law or to safeguard the interests of the Administrator by collecting evidence related to the booking. The deletion of data by the User does not result in the cessation of its processing to the extent indicated.

For all questions and requests regarding the scope and exercise of rights, as well as to contact the Administrator in order to exercise a specific data protection right, all issues should be addressed to the email address: info@forrestspace.com. The Administrator reserves the right to exercise the following rights upon positive verification of the identity of the person requesting the activity.

Access to personal data

Users have the right to access the data that is stored by the Administrator. The right can be exercised by sending an e-mail to: info@forrestspace.com.

Change of personal data

Changes, including updating your personal data that the Administrator processes can be made by sending an e -mail to: info@forrestspace.com.

Withdrawal of consent

In the case of processing personal data on the basis of consent, Users have the right to withdraw this consent at any time. The Administrator informs about this right at any time of consent collection and allows withdrawal of consent as easily as it was given. In the absence of information to the contrary, that is, if no other address or contact number has been provided for withdrawal of consent, the interested User should address the request to: info@forrestspace.com.

Right to restrict processing or object to the processing of personal data

You have the right to restrict processing or object to the processing of your personal data at any time, based on your particular situation, unless the processing is required by law.

Users may object to the processing of their personal data when:

  1. the processing of personal data is carried out on the basis of a legitimate interest or for statistical purposes, and the objection is justified by the particular situation in which it finds itself,
  2. personal data is processed for direct marketing purposes, including profiling for this purpose.

With regard to the request for restriction of data processing, the Administrator informs that it is entitled, for example, when the User notices that his/her data is incorrect. In that case, he can request a restriction of the processing of his data for a period of time allowing him to check the correctness of the data.

Right to request erasure of data and right to data portability

If you wish to exercise your right to delete your personal data, please send an e – mail to: info@forrestspace.com.

The User may exercise the right to erasure of personal data, e.g. when the data are no longer necessary for the purposes for which they were collected by the Administrator The User withdraws his/her consent to the processing of data by the Administrator. In addition, if the User objects to the processing of his/her data or if his/her data is processed unlawfully. The data should also be deleted in order to comply with a legal obligation.

The right to data portability applies when the processing of the User’s data is carried out on the basis of the User’s consent or a contract concluded with the User, and when the processing is carried out by automatic means.

All other questions, concerns and complaints

Any questions, objections or concerns regarding the content of this Privacy Policy or the manner in which the Administrator processes personal data, as well as complaints regarding these issues, should be submitted via email with details of the complaint to: info@forrestspace.com. Any complaints received will be investigated without reasonable delay. Users whose personal data is processed by the Administrator also have the right to file a complaint with the supervisory authority, which is the Inspector General for Personal Data Protection (address: General Inspector of Personal Data Protection, 2 Stawki Street, 00-193 Warsaw) (Article 77 of the RODO).

Changes to Privacy Policy

The Administrator undertakes to review this Privacy Policy on a regular basis and to amend it when it becomes necessary or desirable due to changes in mandatory laws, guidelines of supervisory authorities or own actions taken in connection with improvement of personal data protection and organizational changes concerning the Administrator. Updated (amended) versions of the document will be made available at https://forrestspace.com/

Last update: 1.11.2023 r.