{"id":3673,"date":"2026-06-15T06:22:24","date_gmt":"2026-06-15T06:22:24","guid":{"rendered":"https:\/\/bufetkrk.com\/?page_id=3673"},"modified":"2026-06-15T07:42:05","modified_gmt":"2026-06-15T07:42:05","slug":"polityka-prywatnosci","status":"publish","type":"page","link":"https:\/\/bufetkrk.com\/en\/polityka-prywatnosci\/","title":{"rendered":"Privacy policy"},"content":{"rendered":"
\n\t\t\t\t
\n\t\t\t\t\t
\n\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Privacy policy<\/h1>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Administrator (Controller) <\/b>\u2013 the controller of personal data, B1881 PRZEMEK KLIMA sp\u00f3\u0142ka komandytowa, with its registered office in Krak\u00f3w, KRS: 0001202120, NIP: 6762591244, REGON: 387974989, address: ul. Plac Wolnica 9\/2, 31-060 Krak\u00f3w, e-mail: biuro@bufetkrk.com, tel.: 530 200 924.<\/p>\n

1.2. Personal data <\/b>\u2013 any information relating to an identified or identifiable natural person, in particular first and last name, e-mail address, telephone number, identification number, location data, an online identifier, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.<\/p>\n

1.3. Cookies <\/b>\u2013 IT data, in particular text files, stored in the directories of web browsers and kept on the User's end device used to access the Website (e.g. laptop, computer, telephone or tablet); the stored information may be necessary for the proper functioning of the Website or helpful in collecting statistical data about the Website, e.g. which pages were visited, which elements were downloaded, as well as data on the domain name of the internet service provider or the User's country of origin; the information on Cookies set out in this Policy also applies to other similar technologies used within the Website.<\/p>\n

1.4. Policy or Privacy Policy<\/b> \u2013 this privacy policy.<\/p>\n

1.5. GDPR<\/b> \u2013 Regulation (EU) 2016\/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95\/46\/EC (General Data Protection Regulation). The GDPR sets out the rules for the processing of personal data of natural persons applied by the Controller.<\/p>\n

1.6. EEA<\/b> \u2013 the European Economic Area, a free trade zone and common market comprising the member states of the European Union and the European Free Trade Association, with the exception of Switzerland.<\/p>\n

1.7. Website (Serwis)<\/b> \u2013 the website operated by the Controller at www.bufetkrk.com, as well as any other websites and web pages connected with the business conducted by the Controller.<\/p>\n

1.8. User<\/b> \u2013 any natural person visiting the Website or using one or more of the Services described in the Policy.<\/p>\n

1.9. Privacy Policy<\/b> \u2013 the document available on the Website containing information on the processing of personal data and the use of cookies and similar technologies within the Store and the Website.<\/p>\n

1.10. Website (Strona)<\/b> \u2013 the website at www.bufetkrk.com, through which the Controller conducts online and telephone reservations. The Website is available both for computers and for mobile devices such as smartphones and tablets.<\/p>\n

2. Personal data<\/b><\/p>\n

2.1.<\/b> The Controller operates the Website, within which the personal data of Users is processed. The Privacy Policy is available on the Website.<\/p>\n

2.2.<\/b> This Privacy Policy describes how the Controller collects, uses and discloses Users' personal data when using the Website. <\/p>\n

2.3.<\/b> By using the Website, the User confirms that they have read the Privacy Policy and understand the rules concerning the collection, use and disclosure of personal data described below.<\/p>\n

2.4.<\/b> The Controller processes Personal data lawfully, fairly and in a transparent manner with respect to the data subjects, and in a manner ensuring its appropriate security, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, by means of appropriate technical and organisational measures.<\/p>\n

2.5.<\/b> The Controller collects and processes data solely for the purposes indicated in the Policy and to the extent and for a period no longer than necessary for those purposes.<\/p>\n

2.6.<\/b> The Controller collects and processes, in particular, the following personal data: first name, last name, address, billing address, telephone number, e-mail address.<\/p>\n

2.7.<\/b> Within its business activity, including with respect to the Website, the Controller does not process special categories of Personal data, i.e. Personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic and biometric data, or data concerning health, sexuality or sexual orientation of the data subject.<\/p>\n

2.8.<\/b> In any matter concerning the processing of Personal data, including the reporting of incidents affecting the security of Personal data, please contact the Controller directly by telephone: +48 530 200 924, by e-mail: biuro@bufetkrk.com, or by post to: ul. Plac Wolnica 9\/2, 31-060 Krak\u00f3w.<\/p>\n

 <\/b><\/p>\n

3. Purposes and legal bases for processing Personal data<\/b><\/p>\n

3.1.<\/b> Users' personal data, such as first and last name, e-mail address or telephone number, and other Personal data provided by the User or obtained by the Controller in connection with the User's use of the Website, are processed by the Controller for the following purposes:<\/p>\n

a) provision of services by electronic means by the Controller via the Website, including accepting a reservation, modifying it and making other arrangements via the Website \u2013 in which case the legal basis for processing Personal data is the necessity to perform a contract (Article 6(1)(b) GDPR);<\/p>\n

b) fulfilment of legal obligations imposed on the Controller in connection with concluded contracts, e.g. the need to demonstrate the Controller's fulfilment of information obligations towards a User who is a consumer, or the handling of complaints related to the operation of the Website \u2013 the legal basis for processing Personal data is compliance with a legal obligation to which the Controller is subject (Article 6(1)(c) GDPR);<\/p>\n

c) responding to questions, requests and suggestions concerning the Website, sent by e-mail or reported by telephone \u2013 the legal basis for processing Personal data is the legitimate interest of the Controller (Article 6(1)(f) GDPR), consisting in the appropriate and timely handling of Users' questions, requests and suggestions, including adapting the Website or Store to Users' needs;<\/p>\n

d) the efficient operation, functioning and improvement of the Website and ensuring the security of using the Website, including for analytical and statistical purposes, as well as creating anonymised reports and analyses of Users' preferences and activity \u2013 in which case the legal basis for processing Personal data is the legitimate interest of the Controller (Article 6(1)(f) GDPR), consisting in analysing Users' activity, including their preferences, in order to improve the quality of the functionalities used and services provided and to ensure the proper functioning of the Website;<\/p>\n

e) potential establishment and pursuit of claims or defence against claims \u2013 the legal basis for processing is the legitimate interest of the Controller (Article 6(1)(f) GDPR).<\/p>\n

3.2.<\/b> Depending on how the Website is used, the Controller processes Personal data for the following purposes:<\/p>\n

3.2.1.<\/b> providing, personalising and improving the provision of services within the Controller's Website;<\/p>\n

3.2.2.<\/b> communication and customer service.<\/p>\n

4. Sources of personal data<\/b><\/p>\n

4.1.<\/b> The Controller obtains Personal data from the following sources:<\/p>\n

4.1.1.<\/b> directly from the User, in connection with the use of the Website, in particular by making an online reservation;<\/p>\n

4.1.2.<\/b> automatically \u2013 while using the services, e.g. through cookies, device data or system logs;<\/p>\n

4.1.3.<\/b> from service providers \u2013 e.g. payment operators, logistics companies, IT and marketing partners, who process data on behalf of the Controller;<\/p>\n

4.1.4.<\/b> from business partners or third parties \u2013 e.g. advertising and analytics platforms, and reservation system providers, such as Dinner Booking APS, where a reservation is made via the provided platform.<\/p>\n

 <\/b><\/p>\n

5.<\/b> 5. Disclosure of personal data<\/b><\/p>\n

5.1.<\/b> Personal data may be disclosed by the Controller to the following entities, in the following cases:<\/p>\n

5.1.1.<\/b> technical providers and partners \u2013 including the reservation system provider Dinner Booking APS \u2013 for the purposes of data storage, analytics, security and customer support;<\/p>\n

5.1.2.<\/b> business and marketing partners \u2013 e.g. Google, Meta \u2013 for the purposes of advertising and analytics;<\/p>\n

5.1.3.<\/b> entities affiliated with the Controller \u2013 within the capital group;<\/p>\n

5.1.4.<\/b> for purposes justified by law, in particular at the request of a competent authority or court.<\/p>\n

6. Relationship with the Dinner Booking APS platform <\/b><\/p>\n

6.1.<\/b> The Controller uses the reservation system provided by Dinner Booking APS, with its registered office in Denmark (hereinafter: \u201cDinner Booking\u201d).<\/p>\n

6.2.<\/b> Where the User uses the reservation form, the User's personal data is transferred to Dinner Booking to the extent necessary to provide the reservation service, in particular: first and last name, e-mail address, telephone number.<\/p>\n

6.3. <\/b>Dinner Booking processes personal data for the purposes of handling the reservation, ensuring the proper operation of the system, and contacting the User in matters related to the reservation.<\/p>\n

6.4.<\/b> In connection with the use of the reservation system, Dinner Booking may also process technical data, including device data and IP address, for the purposes of security, analytics and the proper functioning of the services.<\/p>\n

6.5.<\/b> Dinner Booking acts as a separate controller of personal data or \u2013 depending on the nature of the processing \u2013 as a processor acting on behalf of the Controller.<\/p>\n

6.6.<\/b> The detailed rules for the processing of personal data by Dinner Booking are set out in that entity's privacy policy, available on its website at https:\/\/biz.dinnerbooking.com\/en-gb\/privacy-policy\/<\/span><\/a>.<\/p>\n

7. External websites and links<\/b><\/p>\n

7.1.<\/b> The Controller is not responsible for links available via the Website to websites or platforms belonging to third parties, nor for the files and data located on those websites. The Controller recommends reviewing the data protection rules of each external website visited.<\/p>\n

8. Data retention period<\/b><\/p>\n

8.1.<\/b> Personal data will be processed and stored until the respective legitimate interests of the Controller have been fulfilled, i.e. until the purpose for which the data was collected has been achieved, but no shorter than until the service has been performed; this period may in each case be extended by the limitation period for claims, where the processing of Personal data is necessary to pursue potential claims or to defend against such claims by the Controller; <\/p>\n

8.2.<\/b> where the basis for processing is the legitimate interest of the Controller, Personal data will be processed for the period during which that interest exists, unless the data subject objects to the processing of data for those purposes;<\/p>\n

8.3.<\/b> where the basis for processing is a legal obligation incumbent on the Controller, Personal data will be processed until the expiry of the obligation to retain the Personal data arising from the applicable provisions. <\/b><\/p>\n

9. Users' rights<\/b><\/p>\n

9.1.<\/b> A data subject whose Personal data is processed by the Controller has the following rights:<\/p>\n

a) the right of access to Personal data, i.e. the right to information about the processing of Personal data, including its purposes, scope, manner and legal basis, and to obtain a copy of that Personal data;<\/p>\n

b) the right to withdraw consent to the processing of Personal data, where the processing is based on consent given;<\/p>\n

c) the right to object to the processing of Personal data to the extent that the basis for processing is the premise of the Controller's legitimate interest;<\/p>\n

d) the right to request rectification, erasure or restriction of the processing of Personal data; <\/p>\n

e) the right to data portability, i.e. to receive from the Controller the Personal data in a structured, commonly used, machine-readable format;<\/p>\n

f) the right to lodge a complaint with the supervisory authority, i.e. the President of the Personal Data Protection Office (Prezes Urz\u0119du Ochrony Danych Osobowych), where the data subject considers that the processing of Personal data infringes the GDPR or other data protection provisions.<\/p>\n

9.2.<\/b> In order to exercise the rights referred to above, please contact the Controller directly in writing or electronically, by e-mail, using the details indicated in point 1.1 of the Policy.<\/p>\n

9.3.<\/b> In the event of withdrawal of consent, the data will be deleted within 30 days of the request being submitted. A declaration of withdrawal of consent to the processing of personal data may be made in writing, by sending it to the Controller's registered address marked \u201cpersonal data\u201d, or electronically to the e-mail address: biuro@bufetkrk.com. To exercise the rights to which you are entitled, please contact us at: biuro@bufetkrk.com.<\/p>\n

9.4.<\/b> If your data is also processed by Dinner Booking APS, you may exercise the relevant rights via the portal: https:\/\/biz.dinnerbooking.com\/en-gb\/privacy-policy\/.<\/p>\n

10. Complaints<\/b><\/p>\n

10.1.<\/b>  <\/span>In the event of doubts concerning the manner of processing personal data, the User has the right to:<\/p>\n

10.1.1.<\/b> contact the Controller at: biuro@bufetkrk.com;<\/p>\n

10.1.2.<\/b> lodge a complaint with the local data protection supervisory authority \u2013 the President of the Personal Data Protection Office (Prezes Urz\u0119du Ochrony Danych Osobowych).<\/p>\n

11. Data transfers outside the EEA<\/b><\/p>\n

11.1.<\/b> Personal data may be transmitted, stored and processed outside the User's country of residence, including outside the European Economic Area (EEA) or the United Kingdom. In such cases, Standard Contractual Clauses (SCC) approved by the European Commission or other appropriate mechanisms ensuring an adequate level of data protection are applied.<\/p>\n

Changes to the Privacy Policy<\/b><\/p>\n

12.1.<\/b> The Privacy Policy may be updated periodically in connection with changes in legislation or our operational activities. Each new version of the privacy policy will be published on the website as a PDF file with an updated \u201clast modified\u201d date.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

\n\t\t\t\t\t
\n\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Cookie policy<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

1. Cookies and tracking technologies<\/b><\/b><\/p>

The Website may use cookies and similar technologies in order to ensure the proper functioning of the site, personalise content, analyse traffic, and conduct advertising and remarketing activities. Cookies may also be used by the Controller's partners, e.g. analytics and advertising tools (Google, Meta). The User may manage cookie settings via their web browser. Restricting the use of cookies may cause difficulties in using the Website.<\/p>

\u00a0<\/b><\/p>

2. Cookies and server logs<\/b><\/p>

2.1.<\/b> On the first visit to the website, the User may consent to the use of cookies or independently change the settings using the displayed cookie banner. Failure to give consent may limit certain functionalities of the Website.<\/p>

2.2.<\/b> The website uses cookies in order to ensure the proper functioning of the Website, adapt content to users' preferences, analyse traffic, and carry out marketing activities. Cookies do not affect the configuration of the user's device and are safe. These include, among others:<\/p>

2.2.1.<\/b> session cookies \u2013 operating until the browser is closed;<\/p>

2.2.2.<\/b> persistent cookies \u2013 stored on the device for a period specified in the settings or until they are deleted.<\/p>

2.3.<\/b> The Website may also store technical data and system logs, such as IP address, time of visit, type of browser and operating system \u2013 solely for security and administrative purposes.<\/p>

2.4.<\/b> The User may independently manage cookies in their browser settings, including blocking or deleting cookies.<\/p>

2.5.<\/b> Data provided in contact forms is processed solely for the purpose of handling the given enquiry or order.<\/p>

2.6.<\/b> Technical data and system logs are stored for a period resulting from the configuration of analytics tools and security requirements, no longer than is necessary for those purposes.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>","protected":false},"excerpt":{"rendered":"

Polityka prywatno\u015bci 1.1. Administrator \u2013 Administrator danych osobowych, B1881 PRZEMEK KLIMA sp\u00f3\u0142ka komandytowa z siedzib\u0105 w Krakowie, KRS: 0001202120, NIP: 6762591244, REGON: 387974989, adres: ul. Plac Wolnica 9\/2, 31-060 Krak\u00f3w, adres e-mail: biuro@bufetkrk.com, nr tel: 530 200 924. 1.2. Dane osobowe – wszelkie informacje o zidentyfikowanej lub mo\u017cliwej do zidentyfikowania osobie fizycznej, w szczeg\u00f3lno\u015bci imi\u0119 i nazwisko, adres […]<\/p>\n","protected":false},"author":2,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"inline_featured_image":false,"footnotes":""},"class_list":["post-3673","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/bufetkrk.com\/en\/wp-json\/wp\/v2\/pages\/3673","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/bufetkrk.com\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/bufetkrk.com\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/bufetkrk.com\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/bufetkrk.com\/en\/wp-json\/wp\/v2\/comments?post=3673"}],"version-history":[{"count":16,"href":"https:\/\/bufetkrk.com\/en\/wp-json\/wp\/v2\/pages\/3673\/revisions"}],"predecessor-version":[{"id":3690,"href":"https:\/\/bufetkrk.com\/en\/wp-json\/wp\/v2\/pages\/3673\/revisions\/3690"}],"wp:attachment":[{"href":"https:\/\/bufetkrk.com\/en\/wp-json\/wp\/v2\/media?parent=3673"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}