Join

Privacy Policy

SaunaPark Platinium Privacy Policy

Personal data controller

The administrator of the personal data collected via the website https://saunaparkplatinium.pl/ (Website) is Well Fitness sp. z o.o. with its registered office in Wrocław, ul. Jana Długosza 74, 51-162 Wrocław, entered into the register of entrepreneurs kept by the District Court for Wrocław-Fabryczna in Wrocław, VI Commercial Division of the National Court Register under KRS number: 0000388795, owner of SaunaPark Platinium (hereinafter: „Administrator”).  

 

Scope of information collected and used by the Administrator

Users of the Website (User) remain anonymous until they themselves decide otherwise. 

Users provide their personal data voluntarily, but the Administrator informs that the use of certain functionalities of the Website and the provision of certain services is linked to the
with the need for the User to provide certain personal data. Detailed information
about the type and scope of personal data processed is set out in the information clause available on the Website under „Personal Data”.

As part of activities outside the Website, the Administrator may also process other personal data concerning you. The following links provide detailed information on the processing of your data by Well Fitness Ltd. 

Purpose of personal data processing  

Whenever we ask you to provide any personal data, we will inform you in detail of the conditions for processing it. 

We may collect personal information about you via forms or in connection with
with the operation of your account on the Website. We may also obtain personal information if you write to us or call us using the contact details provided on the Website or in this Privacy Policy.

The personal data provided by Users, depending on the basis for their processing as well as the type of functionalities and services in connection with which they are collected and processed, will be processed by the Administrator for the purposes respectively:

  1. the performance of the concluded contract for the provision of electronic services or SaunaPark Platinium services;
  2. to carry out activities in accordance with the content of the consent given;
  3. to comply with a legal obligation (e.g. pursuant to tax law, consumer rights law, accounting and archiving law, or the statute of limitations on claims);
  4. the exercise of the Users' rights under Articles 15-22 of the General Data Protection Regulation, or RODO;
  5. the exercise of the legitimate interests of the Administrator, which are understood to include:
  6. responding to a customer enquiry;
  7. marketing of our own or others' goods or services, whereby, in accordance with the provisions of Article 10 of the Act on the Provision of Electronic Services and Article 172 of the Telecommunications Act, we require additional consent for the use of the specified communication channels for marketing activities;
  8. the creation of statistics and summaries to improve the effectiveness of our marketing activities and build our business strategy;
  9. the assertion or defence of claims or rights of the Administrator;
  10. prevention of customer abuse;
  11. ensuring safety.

The information contained in the system logs (e.g. IP address, domain name, browser type, operating system type) resulting from the general principles of connections made via the Internet is used by the Administrator for technical purposes, for the proper functioning of the
and display of the Site. In addition, IP addresses are collected in general for statistical information purposes, e.g. about the region.

Subscription to services offered by the Administrator  

Users can subscribe to the Administrator's newsletter. To do so, they provide their name and email address. The data will be used solely for the purpose of sending the Users, by or on behalf of the Administrator, a newsletter containing information on, among other things, current offers and promotions. The information provided in the newsletter subscription form is used for the purpose of marketing the goods or services of the Administrator's own or other entities.

The provision of electronic services consisting in making purchases online or registering an account in the Administrator's system, as well as its management, requires filling in a form, in which certain personal data must be provided, among others, in order to contact the User (e.g. e-mail address). The data indicated in the form may also be processed in connection with the performance of the contract for the provision of Saunarium services.

The information provided in the aforementioned form is used for the necessary contact with our customers and to better adapt the services and offers provided by the Administrator to the needs of the customers, and, if the user has given the appropriate consents, also for marketing activities.

Demographic data may also be collated with selected usage data (e.g. storing in cookies) and used in order to research User preferences and improve the quality of the services provided by the Administrator. In such a case, the collated data is de-identified (anonymised) and stored by the Administrator for no longer than 1 month.

Data protection

We are committed to protecting your personal data in accordance with current legislation,
in particular not to disclose them to third parties and to process them exclusively for the purposes set out in this Policy. Personal data shall be protected against unauthorised disclosure to unauthorised persons, taking by unauthorised persons, destruction, loss, damage or alteration, and processing in violation of generally applicable laws. We use appropriate security measures to protect your data. These include internal procedures for data storage and processing, as well as physical and IT security measures to protect against unauthorised access to the systems in which we store personal data. The form filled in by the User during the enrolment process, as well as the process of authorisation (logging in) to the User's account and the Administrator's resources is carried out using the secure SSL protocol, which significantly increases the protection of data transmission over the Internet. All data, including personal data, is stored and processed by the Administrator with the observance of appropriate security measures that meet the requirements set out in generally applicable laws, including in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons in relation to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation).

Sharing and transfer of personal data

Recipients of personal data may be entities cooperating with the Administrator within the scope of services provided to the Administrator (e.g. subcontractors) or supporting the Administrator's current business processes such as entities providing accounting, legal, debt recovery, marketing, operational and IT services, including those providing the Administrator with IT solutions for User support. Recipients of the data may be based in a country outside the European Economic Area (EEA). In this case, the transfer will take place on the basis of an appropriate agreement between the Administrator and this entity, containing standard data protection clauses adopted by the European Commission, or on the basis of a relevant decision of the European Commission.

User data may also be made available to entities authorised to access them in accordance with generally applicable laws (e.g. the police). In addition, if the user consents or so requests, the Administrator may also share the Participant's personal data with other entities authorised by the Participant.

Basis for processing personal data

The basis for the Administrator's processing of personal data is, depending on the type of functionality and services provided, respectively:

  1. the data subject's consent referred to in Article 6(1)(a) of the general regulation
    on data protection;
  2. the necessity to process personal data for the performance of a contract for the provision of electronic services or Saunarium services, where the data subject is party thereto, or where it is necessary to take steps prior to entering into such contracts at the request of the data subject (Article 6(1)(b) of the General Data Protection Regulation);
  3. the necessity of the processing in order to comply with a legal obligation incumbent on the Controller (Article 6(1)(c) of the General Data Protection Regulation);
  4. the necessity of the processing of personal data for the fulfilment of the legitimate purposes pursued by the Controller or by the recipients of the data, including in particular for the purposes of answering, considering possible complaints, requests, establishing, investigating and protecting against claims, as well as for the purposes of direct marketing of the goods or services of its own or other entities, and the processing does not violate the rights and freedoms of the data subject (Article 6(1)(f) of the General Data Protection Regulation).

Data subjects' rights  

Any person whose data is processed by the Controller has the right to:

  1. object to the processing - in cases where we process the participant's personal data on the basis of our legitimate interest,
  2. to withdraw consent - in cases where data is processed on the basis of consent,
  3. access to their personal data,
  4. request the rectification of their personal data,
  5. request the deletion of your personal data (where we are not obliged by law to process it and it is not necessary for the defence against possible claims),
  6. request the restriction of the processing of your personal data,
  7. portability of your personal data;
  8. lodge a complaint with the supervisory authority for the protection of personal data, i.e. the President of the Office for the Protection of Personal Data.

With regard to data processed on the basis of consent, you have the right to withdraw your consent at any time, without affecting the lawfulness of the processing carried out on the basis of your consent prior to its withdrawal. The withdrawal of consent shall be done by, at the choice of the person to whom the aforementioned rights apply, a message addressed to the address: rodo@saunaparkplatinium.pl  or bok@saunaparkplatinium.pl or by letter to the address of the Administrator.

Period of retention of personal data

The Users' personal data will be stored for the duration of the concluded contract and after its termination, in order for the Administrator to exercise its rights and obligations under the applicable legislation, including in particular tax legislation, legislation on the limitation of claims, and, in the case of processing personal data on the basis of consent, until its withdrawal,
and, in the case of the processing of personal data on the basis of Article 6(1)(f) of the General Data Protection Regulation, until an effective objection has been lodged.

Cookies.

Cookies are IT data, in particular text files stored on the Users„ terminal equipment for the use of the Website. These files allow for the recognition of the User's device and the appropriate display of the Website adapted to the User's individual preferences. ”Cookies„ usually contain the name of the Website from which they originate, the time they are stored on the User's terminal device and a unique number. 

When you visit the Website, data on your visit is automatically collected
and activity, in particular IP address, domain name, browser type, operating system type. For more information, see the section on cookies (Cookies policy).

Contact

 In order to exercise the rights set out in the Privacy Policy, contact can be made at any time via e-mail: rodo@saunaparkplatinium.pl or with the Administrator via:

1) by post to the following address: ul. Jana Długosza 74, 51-162 Wrocław; 2) electronic mail at: bok@saunaparkplatinium.pl.

The Administrator reserves the right to amend the content of the Privacy Policy for justified reasons, including, among others, in the event of changes in Polish law or implementation of new technological and IT solutions.

Privacy policy - downloadable HERE

Content of the information clause relating to the processing of personal data for persons using the services of SaunaPark Platinium - to download HERE