Privacy Policy of Barka Arkadia website
1. General Information
This Privacy Policy defines the rules for processing personal data of users of the website https://www.barkaarkadia.pl/ operated by Krystian Kapusta, conducting business activity under the name Aqua Fun Krystian Kapusta (hereinafter: “Administrator”).
The Administrator takes special care to protect users’ privacy and ensure the security of processed personal data in accordance with applicable legal provisions, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR).
2. Personal Data Controller
The personal data controller is:
Krystian Kapusta, conducting business activity under the name Aqua Fun Krystian Kapusta
Address: Bulwar Czerwieński dz. nr 172/7, 31-069 Kraków
Tax ID (NIP): 6791224838
in accordance with the document generated from the Central Register and Information on Economic Activity system.
For matters related to the processing of personal data, you can contact us using the contact details provided on the website https://www.barkaarkadia.pl/.
3. Scope of Processed Data
The Administrator may process the following personal data:
- first and last name,
- email address,
- phone number,
- data contained in the contact form or reservation inquiry,
- technical data, such as IP address, browser and device data.
Providing personal data is voluntary, but necessary for the realization of specific purposes, such as contact, reservation, or preparing an offer.
4. Purposes of Data Processing
Personal data is processed for the purpose of:
- handling inquiries submitted via the contact form or email,
- handling restaurant table reservations and organizing special events,
- preparing and implementing commercial offers,
- performing contracts and business cooperation,
- fulfilling legal obligations incumbent on the Administrator,
- ensuring the proper functioning of the website.
5. Legal Basis for Processing
Personal data is processed based on:
- Art. 6(1)(a) GDPR – consent of the data subject,
- Art. 6(1)(b) GDPR – performance of a contract or taking steps prior to entering into a contract,
- Art. 6(1)(c) GDPR – legal obligation of the Administrator,
- Art. 6(1)(f) GDPR – legitimate interest of the Administrator.
6. Data Recipients
Personal data may be transferred to entities cooperating with the Administrator solely to the extent necessary for the realization of processing purposes, in particular:
- IT and hosting service providers,
- accounting and advisory firms,
- entities providing legal services.
Data is not transferred outside the European Economic Area.
7. Data Retention Period
Personal data is stored for the period:
- necessary to achieve the purpose for which it was collected,
- required by law,
- until consent is withdrawn – in the case of processing based on consent.
8. Rights of Data Subjects
Every data subject has the right to:
- access their data,
- rectify it,
- erasure (“right to be forgotten”),
- restriction of processing,
- data portability,
- object to processing,
- withdraw consent at any time.
9. Right to Lodge a Complaint
The data subject has the right to lodge a complaint with the President of the Personal Data Protection Office if they believe that the processing of personal data violates the provisions of the GDPR.
10. Changes to the Privacy Policy
The Administrator reserves the right to make changes to this Privacy Policy. The current version of the document is always available on the website https://www.barkaarkadia.pl/.
