Excerpt from the Personal Data Protection Policy of NEPTUN APARTAMENTY sp.z o.o.

Data administrator, NEPTUN APARTAMENTY sp.z o.o. St. Ogińskiego 15, 71-431 in Szczecin, ensures that in obtaining your personal data, it makes the highest technical, organizational and legal efforts to ensure their protection.

Your data may be processed for purposes related to the organization of work, including recruitment and business activity by the Administrator, including the provision of services offered in the accommodation industry, short-term accommodation, catering and catering services, property management, rental, lease, exchange, purchase or sale as well as the provision of other services related to the real estate market or the performance of construction and finishing works.

The legal basis for data processing, in accordance with art. 13 section 1 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46 / EC (general regulation on data protection) are:

• Consent to the processing of your personal data for the purposes of establishing, implementing or continuing in the future cooperation with the Administrator or using the services provided by the Administrator. If consent is given, it may be withdrawn at any time. Withdrawal of consent does not affect the lawfulness of the processing that was carried out before its withdrawal (letter a).
• Actions taken at the request of the data subject in order to conclude a contract (letter b).
• Performance of a contract to which the natural person is a party (letter b).
• Fulfilling the legal obligation incumbent on the Administrator, including tax and on social security (letter c).
• Protection of the vital interests of the data subject or of another natural person (letter d).
• Performance of a task carried out in the public interest (point e).
• Implementation of the legitimate interests of the Administrator or a third party, subject to a situation where these interests are overridden by the interests or fundamental rights and freedoms of the data subject, requiring the protection of personal data, in particular when the data subject is a child (letter f). The legitimate interests of the Administrator include in particular the following cases;
  • When the data subject is the Administrator's client or acts for the Administrator,
  • Fraud prevention,
  • Pursuing claims,
  • Conducting direct marketing of the services offered,
  • Cooperation with entities cooperating with the Administrator in the provision of services to clients,
  • Testing the quality of services and settling complaints,
  • Improving the quality of the services provided.

Your personal data may be disclosed to other recipients only in compliance with applicable law, in particular those regulating the protection of data of natural persons. The main categories of data recipients are entities supporting the Administrator's activities in the organization of activities and the implementation of the services offered. Data may also be transferred to institutions as part of legal proceedings conducted by authorized bodies and offices. In other cases, the data may be entrusted for processing only to entities related to the Administrator with a legally binding instrument that guarantees the security of this data.

Personal data is stored only for the period necessary to achieve the purpose for which they were obtained, the period covered by the consent granted or the period resulting from legal provisions, including the period of limitation of possible claims, storage of accounting and employee documents or the archiving period.

Every data subject has the right, where appropriate:

• Transparent and free of charge information and further communication on the processing of its data;
• Access to this data, rectification and supplementation; demand their removal or restriction of processing;
• Raise, for reasons related to its special situation, an objection to their processing carried out in the public interest or necessary for purposes arising from legitimate interests pursued by the Administrator or by a third party;
• Object at any time to their processing for direct marketing purposes;
• Not to be subject to a decision based solely on automated processing, including profiling;
• Obtain information about possible recipients of data;
• The right to transfer data processed in an automated manner, which a given person provided to the Administrator in connection with the consent granted or the concluded contract;
• The right to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal or further processed on the basis of another legal basis indicated above.

The obligation to provide data may only result from a provision of generally applicable law. Unless the Administrator relies on the statutory requirement to provide data to the Administrator, it is generally voluntary and contractual, however, failure to provide appropriate data may result in the inability or refusal to achieve the goal or improper or otherwise implementation of the purpose for which they are obtained, e.g.; the inability to conclude the contract due to the lack of relevant customer data or the refusal to conclude the contract due to the lack of data necessary for its proper performance.

The data is not profiled by the Administrator or otherwise automated decision-making.

As a rule, data is not transferred outside the European Economic Area

In order to ensure the safety of employees and clients, keep secret information, the disclosure of which could expose the Administrator or employees to damage, protect property and control the services provided, the Administrator uses monitoring in marked facilities, rooms and areas. The monitoring recordings that may constitute evidence in the proceedings conducted pursuant to the provisions of law are stored until the final conclusion of the proceedings, in other cases the Administrator stores the monitoring recordings for a period not exceeding 3 months from the date of recording.

The authority competent for complaints regarding the protection of personal data in Poland is the President of the Office for Personal Data Protection, address: St. Stawki 2, 00-193 Warsaw, www.uiodo.gov.pl