GDPR privacy notice

Pursuant to Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR), we inform you that:

1. The controller of your personal data is Małgorzata Lubowska, ul. Wojska Polskiego 3, 05-126 Nieporęt, Poland, tax ID (NIP) 9512250354 (the Owner — party to the charter agreement). Contact: [email protected], tel. +48 694 491 125.
2. Personal data (first and last name, telephone number, series and number of the identity card or passport — the controller does not copy or scan the identity document — optionally an e-mail address and the details of an additional helmsperson) are processed for the purpose of:
   1. concluding and performing the charter agreement, including contact between the marina staff and the Charterer during the charter (telephone number — e.g. a call to return for safety reasons, arranging an extension or the return of the boat) — Article 6(1)(b) GDPR;
   2. fulfilling the legal obligations of the controller, in particular tax and accounting obligations — Article 6(1)(c) GDPR;
   3. establishing and pursuing claims or defending against claims (including settlement of the deposit and any damage) — Article 6(1)(f) GDPR (legitimate interest of the controller).
3. Recipients of the data may include: the operator of the marina's website and IT systems, who handles all online payments on behalf of the controller, including the online deposit hold (IdAM.eu Jan Macherzyński, NIP 5211138815), the payment operator Stripe (for online payments and a deposit placed as a card hold), the insurer (in the event of a claim), the accounting office and IT service providers.
4. The data will be stored for the duration of the agreement and thereafter until the expiry of the limitation periods for claims arising from the agreement and of the record-retention periods required by law (in particular tax law).
5. In the cases and to the extent set out in Articles 15–21 GDPR, you have the right to: access your data, rectify it, erase it, restrict its processing, data portability, object to processing based on Article 6(1)(f) GDPR, and to lodge a complaint with the President of the Polish Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw). To exercise these rights, contact the controller at [email protected].
6. Providing your first and last name, telephone number and the series and number of your identity card or passport is a condition of concluding the agreement — without these data the charter agreement cannot be concluded. Providing an e-mail address is voluntary and its absence does not prevent conclusion of the agreement.
7. The controller does not make decisions concerning you based solely on automated processing that would produce legal effects or similarly significantly affect you (the payment operator and the card issuer may apply their own automated authorisation and anti-fraud mechanisms under the terms described in their privacy policies). In the case of an online payment or a deposit placed by card, transaction data may be transferred by Stripe outside the European Economic Area, in particular to the USA, on the basis of a European Commission adequacy decision (Data Privacy Framework) or standard contractual clauses; information on safeguards: https://stripe.com/privacy.
8. The marina area and the adjacent water are covered by webcam streams („Widok na slip", „Widok na plażę") published at miedzyzaglami.pl/en/camera. The cameras show a general view of the marina and the water; they do not serve to identify persons and are not used for video surveillance within the meaning of employee-monitoring regulations.
9. This notice is a translation provided for information. In the event of any discrepancy, the Polish version (Klauzula informacyjna RODO) prevails.