Privacy Policy of Barka Arkadia
1. General Information
This Privacy Policy sets out the principles for processing personal data of users of the website https://www.barkaarkadia.pl/ operated by Krystian Kapusta conducting business under the name Aqua Fun Krystian Kapusta (hereinafter: “Data Controller”).
The Data Controller takes particular care to protect the privacy of users and ensure the security of processed personal data in accordance with applicable law, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR).
2. Personal Data Controller
The personal data controller is:
Krystian Kapusta conducting business under the name Aqua Fun Krystian Kapusta
Address: Bulwar Czerwieński plot no. 172/7, 31-069 Krakow
Tax ID: 6791224838
in accordance with the document generated from the Central Register and Information on Economic Activity system.
For matters related to the processing of personal data, you may contact us using the contact details provided on the website https://www.barkaarkadia.pl/.
3. Scope of Processed Data
The Data Controller may process the following personal data:
- first and last name,
- email address,
- telephone number,
- data contained in the contact form or reservation inquiry,
- technical data, such as IP address, browser and device information.
Providing personal data is voluntary, but necessary to achieve specific purposes, such as contact, reservation, or preparation of an offer.
4. Purposes of Data Processing
Personal data is processed for the purpose of:
- handling inquiries submitted through the contact form or email,
- handling restaurant reservations and organizing special events,
- preparing and executing commercial offers,
- performing contracts and business cooperation,
- fulfilling legal obligations incumbent upon the Data Controller,
- ensuring proper functioning of the website.
5. Legal Basis for Processing
Personal data is processed on the basis of:
- Article 6(1)(a) GDPR – consent of the data subject,
- Article 6(1)(b) GDPR – performance of a contract or taking steps prior to entering into a contract,
- Article 6(1)(c) GDPR – legal obligation of the Data Controller,
- Article 6(1)(f) GDPR – legitimate interest of the Data Controller.
6. Data Recipients
Personal data may be transferred to entities cooperating with the Data Controller only to the extent necessary to achieve the purposes of processing, in particular:
- IT and hosting service providers,
- accounting and consulting firms,
- entities providing legal services.
Data is not transferred outside the European Economic Area.
7. Data Retention Period
Personal data is retained for the period:
- necessary to achieve the purpose for which it was collected,
- required by law,
- until consent is withdrawn – in the case of processing based on consent.
8. Rights of Data Subjects
Every person whose data is processed has the right to:
- access to data,
- rectification,
- erasure (“right to be forgotten”),
- restriction of processing,
- data portability,
- object to processing,
- withdraw consent at any time.
9. Right to Lodge a Complaint
The data subject has the right to lodge a complaint with the President of the Personal Data Protection Office if they believe that the processing of personal data violates the provisions of the GDPR.
10. Changes to the Privacy Policy
The Data Controller reserves the right to make changes to this Privacy Policy. The current version of the document is always available on the website https://www.barkaarkadia.pl/.
