Privacy policy

Data controller and contact details

The data controller is the entity that determines the purposes and means of processing personal data. The controller is Mirosław Grabowski, running a business under the name Szkoła Narciarstwa i Snowboardu „Karpacz” Mirosław Grabowski, ul. Turystyczna 6, 58-540 Karpacz, Poland, tax ID (NIP): 6111167893, ski@karpacz.net.pl.

Purposes and legal bases of processing

Your personal data will be processed for the purpose of:

concluding and performing a contract (Art. 6(1)(b), where processing is necessary for the performance of a contract),
handling complaints (Art. 6(1)(c), where processing is necessary for compliance with a legal obligation of the controller),
archiving documents (Art. 6(1)(c), where processing is necessary for compliance with a legal obligation of the controller),
pursuing claims related to the contract (Art. 6(1)(f) GDPR, where processing is necessary for the purposes of the legitimate interests pursued by the controller),
handling enquiries sent via the contact form (Art. 6(1)(a), where the data subject has given consent to the processing of personal data).

Recipients and categories of personal data

The recipients of personal data will be: Mirosław Grabowski, postal and courier service providers, payment service providers, providers of legal, accounting and IT services, public authorities and other entities authorised under applicable law.

Transfer of personal data to third countries

Personal data will not be transferred to third countries, i.e. outside the European Economic Area.

Data retention period

Personal data will be processed and stored until the contract has been performed. After that, personal data will be processed for accounting and tax purposes and for as long as required for tax and civil-law claims and obligations to expire.

Your rights regarding personal data

You have the right to access, rectify and erase your data, to restrict its processing, the right to data portability, the right not to be subject to automated decision-making, including profiling, and the right to object to the processing of your personal data.

If personal data is processed on the basis of consent, you have the right to withdraw it at any time without affecting the lawfulness of processing carried out on the basis of consent before its withdrawal. Consent can be withdrawn even if the personal data has been processed correctly. You can use the following wording: “I withdraw my consent to the processing of personal data by Mirosław Grabowski, given on X for the purpose of X”. The withdrawal should be signed by the person concerned. You can send the statement of withdrawal to the controller's contact details.

Right to lodge a complaint with a supervisory authority

If you believe that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with the supervisory authority, i.e. the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, Poland).

Conditions for providing personal data

Providing personal data is voluntary, but it is a condition for performing the contract. You are therefore required to provide your personal data. If you do not provide it, the contract cannot be performed.

Automated decision-making, including profiling

Your personal data will not be processed in an automated manner, including in the form of profiling.