Bieszczadzka Przygoda – bieszczadzkaprzygoda.pl
Privacy Policy

1. General Information
This Privacy Policy sets out the rules for processing and protecting the personal data of users of the website bieszczadzkaprzygoda.pl (hereinafter: the “Website”), operated by Bieszczadzka Przygoda (hereinafter: the “Administrator”). The Administrator makes every effort to protect the privacy of Users in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR) and national data protection regulations.

2. Data Controller
The personal data controller is:
Bieszczadzka Przygoda
business address: (insert registered office address)
e-mail address: kontakt@bieszczadzkaprzygoda.pl
(hereinafter: the “Administrator”).

3. Scope of Data Processing
The Administrator does not independently collect or process Users’ personal data via the Website. Personal data necessary to make accommodation reservations are processed exclusively by the external reservation system Smoobu, with which the Administrator cooperates to handle hotel reservations.

4. Data Processor
The Smoobu GmbH reservation system, based in Berlin (address: Pappelallee 78/79, 10437 Berlin, Germany), is a separate data controller within the meaning of the GDPR. All personal data entered by Users in the reservation forms available on the Website are processed in accordance with Smoobu’s privacy policy, available at: https://www.smoobu.com/privacy-policy/

5. Purpose of Data Processing
Users’ personal data are processed solely for the purpose of:
- providing hospitality services (reservations, customer contact, stay confirmation),
- fulfilling legal obligations (e.g. tax or registration requirements),
- ensuring the proper functioning of the reservation process via the Smoobu system.

6. Legal Basis for Processing
Personal data are processed on the basis of Article 6(1)(b), (c) and (f) of the GDPR, namely:
- processing necessary for the performance of a contract for hospitality services,
- legal obligations incumbent on the Administrator,
- the Administrator’s legitimate interest in maintaining contact with customers and handling enquiries.

7. Data Sharing
Personal data may be shared only with entities authorised by law and with entities cooperating with the Administrator in providing hospitality services (e.g. Smoobu, accounting or IT service providers). The Administrator does not transfer personal data to third countries outside the European Economic Area, unless the processor ensures an appropriate level of protection compliant with the GDPR.

8. Rights of Data Subjects
Every User has the right to:
- access their data,
- rectify their data,
- erase their data (“right to be forgotten”),
- restrict processing,
- data portability,
- object to data processing.
Users also have the right to lodge a complaint with the President of the Polish Personal Data Protection Office (UODO) if they believe that the processing of their personal data infringes the GDPR.

9. Cookies
The Website may use cookies for technical, statistical or functional purposes. Users can change their browser settings regarding cookies at any time. Limiting the use of cookies may affect some functionalities of the Website.

10. Data Security
The Administrator applies technical and organisational measures to protect processed personal data, appropriate to the risks and categories of data, in particular to prevent unauthorised access.

11. Changes to the Privacy Policy
The Administrator reserves the right to amend this Privacy Policy in the event of changes in legal regulations or in the functioning of the Website. The current version of the Privacy Policy is always available at bieszczadzkaprzygoda.pl.