Valid from the 25th of May 2018.
Slowhop.com makes every effort to protect the privacy of it's services users. This document defines how do we take care of your rights and your personal data.
Slowhop - the company Slowhop sp. z o.o. with its registered office in Krzywe (19-411), ul. Krzywe 3
Website - a website belonging to Slowhop. The website is located at: www.slowhop.com
User - an adult, physical person who has account and uses the services offered on the Services.
User not logged in - an adult, physical person who uses the services offered on the Services that do not require the Account.
Account - a set of information and settings created by the User on our Website.
Profile - Account functionality, allowing the User to show and collect selected information, including description, photos, favorite places.
Service Provider - the owner of the venue or the organizer of the activity who offers its services through the Website (a natural person running a business, legal person or organizational unit without legal personality, which the law grants legal capacity).
Regulations - Regulations for the provision of electronic services within websites belonging to Slowhop.
RODO- Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regards to the processing of personal data and on the free migration of such data and repealing Directive 95/46 / EC (general regulation on data protection).
Settings (Privacy) - functionality of the Account, allowing the User to use defined and selected services to properly manage these services, including independent modification of their scope and selection of preferences regarding the protection of their privacy.
- WHO IS THE ADMINISTRATOR OF YOUR DATA AND HOW CAN YOU GET IN TOUCH?
The administrator of your personal data in connection with the use of the Website is Slowhop. If you have any questions regarding the processing of your personal data and your rights, please feel free to email us: email@example.com
- WHAT WE ARE PROCESSING YOUR DATA?
Allowing the reservation of services at the Service Provider, e.g. a stay at a guest house or a trip through the Website
That`s the main purpose for which we process your basic personal data: name and surname, description of your profile, telephone number and e-mail address. The name, surname and description of the profile are shared with the Service Provider at the time of booking request. Telephone number and e-mail address when you confirm your reservation and make the prepayment.
Allowing you to add information about your services and accept reservations from Website Users (only for Service Providers)
This service applies only to approved Service Providers and their data. That`s the reason why we process the data provided in the Profile: name, surname, address, telephone number, e-mail address. The data provided in the Service Provider Profile (first name, last name, address) are generally available to Website Users. The e-mail address and telephone number are given when the reservation is confirmed by the User and the prepayment is made.
Allowing you to sign up for the Slowhop newsletter
For this purpose, we process the data provided in the Profile: first name, last name, e-mail address. Subscribing to the newsletter is voluntary and it is not a requirement to use other services of the Website.
Transfer of prepayments and invoicing the marketing service (only for Service Providers)
TThis service applies only to approved Service Providers and their data. For this purpose, we process such data as: address data of the company or individual, tax identification number, bank account number. This data is not available to other Website Users.
Statistics on the use of particular Website functionalities, facilitating the use of the Website and ensuring the IT security of the Website
For these purposes, we process personal data regarding your activity on the Website, such as: visited pages and subpages of the Website and the amount of time spent on each of them, as well as data about your search history, your IP address, location, device ID and browser data, and operating system.
Survey of your satisfaction
For this purpose, we process your personal data including: email address and answers to questions we have prepared, included in surveys and forms used for satisfaction surveys.
- HOW DO WE MATCH THE SERVICES TO YOUR INTEREST?
Marketing of our products and services of our Service Providers
To this end, we process personal data provided by you during the creation of the Profile and data about your activity on the Website, recorded and stored via cookies. Activity data relate in particular to such data as: search history, clicks on the Website, visits to the main pages of the Website and its subpages, login and registration dates, data on the use of certain services on the Website, history and your activity related to our e-mail communication with you.
Profiling. We use the above data to create your profile representing your interests and place preferences as well as geography. Then, to the professional profile thus created, we adjust marketing information about our products and the services of our Service Providers that may be of interest to you.
Remarketing. In order to reach you with our marketing messages outside the Website, we use external suppliers. These services consist in displaying our marketing messages on websites other than the Website. For this purpose, external providers install, for example, the appropriate code or pixel to download information about your activity on the Website.
Combining ours and your interests, rights and will, we believe that marketing combined with profiling will not interfere with your privacy and will not be too burdensome for you. As part of the marketing of products and services of our Service Providers, we do not pass your personal data to these Service Providers; that`s the way we limit the number of people who have access to your personal data. We only hold data regarding your activity on the Website. What we are interested in is what offers of places and trips you are looking for and which offers can be of interest to you, and NOT whatever it is you do on other websites.
We respect Your will and facilitate You to carry out Your rights. For this purpose, we provide the ability to easily withdraw consents to receive marketing messages by e-mail from the level of received e-mails. At the same time, we treat withdrawal of consent to receive such messages as a protest against profiling for marketing purposes.
- WHO DO WE SHARE YOUR PERSONAL DATA WITH?
We pass your data to the following categories of recipients:
Service providers and Users
We make the data available to Service Providers only if you make a reservation through the Website. Service providers or Users to whom we share your personal data independently determine the purposes and methods of processing these data, without being subject to our orders in this regard. Therefore, we are not responsible for their actions and omissions.
We provide your personal data to service providers that we use when operating the Website. Service providers to whom we pass your personal data, depending on contractual arrangements and circumstances, or are subject to our instructions as to the purposes and methods of processing these data (processors, eg hosting in the cloud, online marketing systems, systems for displaying notifications web push, systems for sending e-mails, systems for analyzing traffic on websites, systems for analyzing the effectiveness of marketing campaigns) or independently defining the goals and methods of their processing (administrators, eg remarketing campaign services). The list of suppliers we use are listed here. The list is constantly being updated.
Location. Our suppliers are based mainly in Poland and other countries of the European Economic Area (EEA), eg in Ireland. Some of our suppliers are based outside the EEA. In connection with the transfer of your data outside the EEA, we have made sure that our suppliers guarantee a high level of personal data protection. These guarantees result in particular from the obligation to use standard contractual clauses adopted by the Commission (EU) or participation in the Privacy Shield program established by Commission Implementing Decision (EU) 2016/1250 of 12 July 2016 on the adequacy of protection provided by by the EU-US Privacy Shield.
We provide your personal data if we are approached by authorized state authorities, in particular organizational units of the prosecutor's office, the Police, Inspector General for Personal Data Protection (future President of the Office of Personal Data Protection), the President of the Office of Competition and Consumer Protection or the President of the Office of Electronic Communications.
- HOW LONG DO WE STORE YOUR PERSONAL DATA?
We store your personal data for the period of having an Account on the Website. After deleting your Account, your details will be anonymised, except for the following details: first name, last name, e-mail address, booking history and information about consents (we will store this data for a period of 3 years from deletion of the Account for the purpose of handling complaints and claims related to using our services).
We store personal data of non-logged users for a period of time corresponding to the life cycle of cookies stored on their devices.
- WHAT ARE YOUR RIGHTS RELATED TO PROCESSING OF PERSONAL DATA?
The right to consent withdrawal
You have the right to withdraw any consent you gave at the time of registration to the Website, as well as when using individual services and functionalities offered on the Website. Withdrawal of consent has effect since the withdrawal of consent. Withdrawal of consent does not affect the processing we make in accordance with the law before its withdrawal.
Withdrawal of consent does not entail any negative consequences for you. However, it may prevent you from continuing to use the services or functionality that we can legally provide only with your permission (e.g., sending a newsletter).
Legal basis: art. 7 sec. 3 RODO
The right to objection to the use of data
You have the right to object at any time to the use of your personal data, including profiling, if we process your data based on our legitimate interest, for example in connection with the marketing of our products and services of our Service Providers, statistics for the use of individual Website functionalities and facilitating the use of the Services, as well as satisfaction testing.
Resignation from receiving marketing messages regarding our products or the services of our Service Providers will mean to us your opposition to the processing of your personal data, including profiling for these purposes.
If your objection turns out to be well founded and we have no other legal basis to process your personal data, we will delete your information for which you objected.
Legal basis: art. 21 RODO
The right to delete data ("the right to be forgotten")
You have the right to request the removal of all or some personal data. We will treat the request to remove all personal data as a request to delete the Account.
Despite the request to delete personal data, in connection with opposition or withdrawal of consent, we may retain certain personal data to the extent necessary to establish, assert or defend claims. This applies in particular to personal data including: name, surname, e-mail address and history of the application, which we retain for purposes of handling complaints and claims related to the use of our services.
Legal basis: art. 17 of RODO
The right to limit data processing
You have the right to request a restriction on the processing of your personal data. If you submit such a request, we will prevent you from using certain functionalities or services that will result in the processing of the requested data until we process your request. We will also not send any messages to you, including marketing ones.
You have the right to request restrictions on the use of your personal data in the following cases:
a) a) when you question the correctness of your personal data - then we will limit their use for the time needed to verify the accuracy of your data, but no longer than for 7 days;
b) if the processing of your data is against the law, and instead of removing the data, you will demand restriction of their use;
c) where your personal information has ceased to be necessary for the purposes for which we have collected or used it, but it is necessary for you to determine, assert or defend claims;
d) if you object to the use of your data - then the restriction occurs for the time needed to consider whether, due to your special situation, protection of your interests, rights and freedoms outweighs the interests that we process when processing your personal data.
Legal basis: art. 18 RODO
The right to access data
You have the right to obtain confirmation from us whether we process your personal data, and if this is the case, you have the right to:
b) obtain information about the purposes of processing, categories of personal data being processed, the recipients or categories of recipients of this data, the planned period of storage of your data or criteria for determining this period, about your rights under the GDPR and the right to lodge a complaint to the supervisory authority, the source of these data, on automated decision-making, including profiling and safeguards applied in connection with the transfer of these data outside the European Union;
c) obtain a copy of your personal data.
Legal basis: art. 15 of RODO
The right to rectify data
You have the right to rectify and supplement your personal data. You can do it yourself in the Settings tab. With regards to other personal data, you have the right to request us to correct the data (if it is incorrect) and to amend it (if it is incomplete).
Legal basis: art. 16 of RODO
The right to transfer the data
You have the right to receive your personal information that you provided to us and then send it to another personal data administrator of your choice, e.g. to another operator of similar websites. You also have the right to request that personal data be sent by us directly to such other administrator, if it is technically possible.
Legal basis: art. 20 of RODO
When do we meet your request?
If, by exercising the rights mentioned above, you request us, we comply with this request or refuse to comply with it without delay, but no later than one month after receipt. However, if - due to the complexity of the request or the number of requests - we will not be able to meet your request within a month, we will meet them within the next two months, informing you in advance about the intended extension.
For technical reasons, we always need 24 hours to update the settings you have selected in our systems. Therefore, it may occur that you will receive an e-mail from us during the system update, from which you have given up.
Reporting complaints, inquiries and applications
You can complain to us about complaints, requests and requests regarding the processing of your personal data and the exercise of your rights.
If you believe that your right to the protection of personal data or other rights granted to you by virtue of the RODO have been violated, you have the right to lodge a complaint with the Inspector General for Personal Data Protection (future President of the Office for Personal Data Protection).
- HOW DO WE CARE ABOUT THE SAFETY OF YOUR PERSONAL DATA?
We strive to ensure the security of your personal data. The services use encrypted data transmission (SSL) during registration and logging in, which protects the data identifying you and significantly hinders the interception of access to your account by unauthorized systems or persons.