Szanowni Państwo,
Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46 / EC (“GDPR”). Bearing in mind your safety, which is our priority, we ensure that we apply all measures provided for by law to protect personal data, and we apply the principle of special care. Below, we would like to present to you the rules by which we collect and store your data, the rights you are entitled to, and the persons responsible for the security of your personal data processed by us. We kindly ask you to read the information below and to accept the terms of use of our website. All processing of personal data will be based on the provisions of generally applicable law, in particular the above-mentioned GDPR regulation, as well as the provisions of the Polish Act of May 10, 2018 on the protection of personal data.
“GDPR” in art. 4 point 1 defines personal data as any information on the basis of which a natural person can be directly or indirectly identified. These are, among others, name and surname, identification number (PESEL), telephone number, e-mail address, IP address, physical or physiological characteristics. In addition, such data also includes information about your location sent by smartphones, tablets and other electronic devices.
In addition, we would like to inform you that, in accordance with the “GDPR”, the protection of personal data applies only to the data of natural persons, and therefore does not extend to legal persons.
The processing of personal data is basically any activity on personal data, regardless of whether it is carried out in an automated manner or not, e.g. collecting, storing, recording, ordering, modifying, browsing, using, sharing, limiting, deleting or destroying.
The administrator is the entity responsible for collecting personal data. The administrator is also the addressee to whom you can direct any related requests
with the collection and processing of your personal data by us. In our case, the Administrator is STB GROUP SP. Z O.O., based in Kraków, address: ul. Kupa 3/13, 31-057 Kraków, NIP: 676-246-23-05 The administrator of personal data can be contacted by letter or e-mail at Restauracja@folgakrakow.pl or by phone at 515392674
As a rule, we process personal data only when it is actually necessary for the provision of a given service or performance of a contract. In this case, we process the personal data of STB GROUP customers, persons contacting STB GROUP in order to obtain information about the offer, share comments regarding services or products, start cooperation or conclude a contract, i.e. in particular the following personal data: name and surname, position , company address, home address, dietary information, e-mail address and telephone number.
In addition, if you give your consent for the proper performance of our services, we will not process sensitive data. At the same time, we would like to point out that each time you provide personally, via websites, e-mail or during a telephone conversation information from a specific category of personal data, which is sensitive data, will mean your express consent to the collection and use of such information by us in the manner specified in hereof or as specified in the place where the information was disclosed.
We process personal data in accordance with the law and in a reliable manner
and transparent. We process your personal data on the basis of:
a) your voluntary consent (e.g. by sending us an e-mail or consenting to receive a newsletter or other form of marketing),
b) performance of the concluded contract, as well as commencement of cooperation or signing the contract,
c) the legally justified interest of STB GROUP as a data administrator (e.g. in the field of creating a database, analytical and profiling activities, including activities regarding the analysis of product use, direct marketing of own products, securing documentation for the purpose of defending against possible claims or for the purposes of pursuing claims),
d) obligations arising from the law (e.g. tax law or accounting regulations).
The purposes for which we process your personal data are as follows:
a) ensuring the highest quality of services provided by us, i.e. in a situation in which you are or will become a party to the contract that binds us, we will only process personal data necessary for its implementation, for example your name and surname, telephone number or home address or delivery.
b) legitimate interests pursued by the Administrator, which are: performance of contracts and execution of orders, proper provision of services to you, keeping statistical data related to visits to our website, improvement of our services and matching them to your personalized needs, as well as marketing and self-promotion on the service market.
If you give your consent, your data will be transferred only to trusted entities cooperating with us, i.e. in particular, your data may be transferred to companies that cooperate with us, running restaurants in which catering services are provided, and cooperating with us companies that run hotels providing hotel services. , our subcontractors, associates or service providers who will help us in the performance of the service (e.g. entities providing postal, courier, accounting services related to the implementation of orders). The transfer of personal data to another entity does not entitle it to any use of it, but only to processing for the purposes specified in the data processing entrustment agreement, ensuring the security of processing and to the extent necessary for the proper provision of services to you and the implementation of contracts that bind us. The transfer of personal data does not release us (as the transferor) from responsibility for their processing. We would like to point out that your data may also be transferred to a public authority, but only if such authorization results from generally applicable legal provisions and provided that the authority submits an appropriate request in this regard.
Your personal data will be processed as long as it is appropriate, from the point of view of the legal relations between us, i.e. until there is a basis for the processing of your personal data. For example, if consent is given until its withdrawal, restriction or other actions on your part limiting this consent; in the case of the necessity of data for the performance of the contract – for the duration of its performance and after its performance until the expiry of the limitation periods for claims arising therefrom; and in the event that the basis for data processing is the legitimate interest of the Administrator – until this legitimate interest exists. In addition, your personal data will be processed by us for as long as it is necessary
due to the applicable law, the periods of data processing for this purpose are determined by these provisions.
The “GDPR” provides a number of rights for persons whose personal data is collected and processed. According to the GDPR, you have:
a) the right to access your personal data,
b) the right to request the rectification of your personal data,
c) the right to demand their removal or limitation of their processing,
d) in the event of consent to the processing of personal data – the right to withdraw it,
e) the right to transfer data,
f) the right to object to the processing of your personal data.
If you have any questions, concerns or doubts regarding the content of this information or the way in which we process personal data, as well as complaints regarding these matters (although we hope that there will be no need to file such complaints), please send an e-mail with with detailed information about the complaint to the address Restauracja@folgakrakow.pl. Any complaints we receive will be investigated and we will respond to them.
In addition, you also have the right to lodge a complaint with the supervisory body, i.e. the President of the Office for Personal Data Protection (address: ul. Stawki 2, 00-193 Warsaw), if, in your opinion, the processing of personal data by us violates the provisions of the EU GDPR Regulation.
You can contact the Administrator at any time to take advantage of it
from any of your rights, for this purpose we provide precise contact details:
STB GROUP SP. Z O.O.
ul. Kupa 3/13
31-057 Krakow