Dear Sir or Madam,
In connection with the entry into force of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to processing personal data and on the free movement of such data (Journal of Laws EU L 119 of 04.05.2016 – hereinafter referred to as “GDPR”) we would like to inform you about the rules of processing your personal data by the Administrator and your rights in relation to this. We want you to have complete knowledge, and thus full comfort in using our services. Therefore, acting on the basis of art. 13 GDPR, we would kindly ask you to get familiar with the following information:
Information on the protection of personal data
The administrator of personal data is Jachttravel.pl with its registered office in Poznań, at Rycerska 26/5 (60-347 Poznań), delivery address: Adama Branickiego 18/7, 02-972 Warsaw, NIP: 7821690067. The Administrator can be contacted via the e-mail address email@example.com.
The Lessee’s personal data will be processed on the basis of Art. 6 clause 1 lit. b) GDPR for the conclusion and implementation of the yacht rental contract.
In addition, the Lessee’s personal data will be processed on the basis of the legitimate interest of Jachttravel.pl within the meaning of Art. 6 clause 1 lit. f) GDPR, which involves direct marketing to the Lessee consisting in sending materials and information related to the activities of Jachttravel.pl including sending commercial information to the e-mail address provided by the Lessee within the meaning of the Act on the provision of electronic services of July 18, 2002 (i.e. Journal of Laws of 2017, item 1219), provided that the Lessee expresses voluntary consent to receive the Newsletter (consent is given by clicking the appropriate field in the order form).
Providing personal data referred to in the composition of the lease agreement is mandatory, therefore, failure to provide it constitutes the basis for refusing to conclude the lease agreement.
If the consent referred to in point 3 above is given, the Lessee has the right to withdraw it at any time without affecting the lawfulness of the processing which was made on the basis of consent before its withdrawal. Information on withdrawal of consent should be sent to the following address: firstname.lastname@example.org, however, the option to withdraw consent to the Newsletter will be possible each time you receive the Newsletter by clicking on the “Unsubscribe from Newsletter” button.
The Administrator will not disclose the Lessee’s data to third parties, unless it is necessary for the performance of the lease agreement or is obliged to do so on the basis of applicable law or it will be necessary for the Administrator’s legitimate interest, in particular for the purpose of pursuing claims and defense against claims.
The Administrator provides for entrusting the Lessee’s personal data to the following categories of processors within the meaning of art. 28 GDPR:
1) providing IT services (performing orders related to the functioning of the Website, repairing Website failures, etc.),
2) providing hosting (servers on which files and data related to the functioning of the Website will be collected),
3) providing marketing and advertising services, including sending a Newsletter on behalf of Jachttravel.pl.
The Lessee’s personal data will be stored for the period necessary to implement the provisions of the lease agreement and after that period for the period resulting from applicable law (i.e. until the expiry of the limitation period for any claims and the obligation to keep accounting records in accordance with the Act on accounting).
The Lessee has the right to file a complaint with the competent supervisory authority (i.e. to the President of the Office for Personal Data Protection).
In addition, the Lessee has the right – within the limits provided for in the GDPR – to request access to personal data, rectify their personal data, request the deletion of their personal data (“the right to be forgotten”), request to limit the processing of his personal data, request data transfer personal information.