privacy policy

Policy on the Processing of Personal Data of Hossa Capital Group with Information on the cookies policy

Processing of personal data

In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) (Official Journal of the European Union L. of 2016. No. 119, p. 1 as amended) (“GDPR”), we inform you that:

1. The Controller of your personal data provided by means of electronic communication, in particular via contact forms on websites and portals, as well as provided in person at offices and branches and by post, including in particular:
   1. first and last name,
   2. correspondence address,
   3. email address,
   4. telephone number,
   5. date of birth (if required)
   6. credit card number (if required)

is Hossa.biz Sp. z o.o. in Gdańsk, ul. Cypriana Kamila Norwida 1, 80-280 Gdańsk, registered in the National Court Register under number 0000295112 (hereinafter referred to as the “Controller”), which is part of the Hossa S.A. Capital Group with its registered office in Gdynia. The entities of this Group are:

1. Grupa Inwestycyjna Hossa S.A. in Gdańsk (registered in the National Court Register under KRS number: 0000006925),
2. Hossa.biz Spółka z o.o. in Gdańsk (entered into the National Court Register under KRS number: 0000295112),
3. Garnizon Sp. z o.o. in Gdańsk (entered into the National Court Register under KRS number: 0000243263),
4. Gdynia 8 sp. z o.o. in Gdańsk (entered into the National Court Register under KRS number: 0000240578),
5. OCTO Hotels Sp. z o.o. in Gdańsk (entered into the National Court Register under KRS number: 0000643859).

2. Contact details of the Data Protection Officer of the Controller: IOD@hossabiz.pl.
3. The Controller processes your personal data for the following purposes:

1. to contact and handle requests made using the electronic contact form service and to handle requests (based on Article 6(1)(b) and (f) of the GDPR);
2. to carry out services provided to you based on agreements, contracts, reservations and orders (based on Article 6(1)(b) of the GDPR);
3. to fulfil the Controller’s legal obligation imposed on it by the applicable legislation (based on Article 6(1)(c) of the GDPR);
4. to develop analyses, compilations, statistics, reports for the internal needs of each of the Hossa Capital Group Entities (insofar as they may receive your personal data), which constitutes a legitimate interest of the Controller, as well as to assert or defend against claims made against the Controller (based on Article 6(1)(f) of the GDPR);
5. for marketing purposes, in order for the Controller and the Hossa Capital Group Entities to present and send you advertising offers, commercial information, newsletters and other information, promotional and marketing materials regarding the activities of the Controller, the Hossa Capital Group Entities and entities cooperating with the Controller and the Hossa Capital Group Entities (hereinafter: “Business Partners of the Controller and the Hossa Capital Group Entities”) via e-mail to the e-mail address you have provided, using means of direct remote communication via telephone calls, text messages and with the use of other telecommunication terminal equipment to the telephone number you have indicated (based on Article 6(1)(a) of the GDPR).

4. The provision of your personal data is voluntary, but without it we will not be able to provide services to you.
5. Notwithstanding the above, we would like to inform you that, for the purposes and to the extent referred to in this Policy for the Processing of Personal Data, your data may be transferred by the Controller to other Hossa Capital Group Entities so that the Hossa Capital Group Entity to which the data has been provided becomes the controller of such data (that is, it processes them on the basis of its own grounds for processing) or receives them for processing on behalf of the Controller.
6. In the event that the Hossa Capital Group Entity to which your personal data have been made available by the Controller becomes the controller of that data, the provisions of this Personal Data Processing Policy relating to the Controller shall apply mutatis mutandis to that Entity.
7. In particular, we would like to point out that the personal data you provide may – on the basis of separate consents given by you and to the extent covered by such consents – be used by Hossa Capital Group Entities for marketing purposes, i.e. for the purpose of presenting and transmitting to you by the Controller and/or the Hossa Capital Group Entities advertising offers, commercial information, newsletters and other information, promotional and marketing materials regarding the activities of the Controller, the Hossa Capital Group Entities and the Business Partners of the Controller and/or the Hossa Capital Group Entities via e-mail to the e-mail address provided by you, with the use of means of direct remote communication via telephone calls, text messages and with the use of other telecommunication terminal devices to the telephone number indicated by you.
8. Your consent to the processing of your personal data may be withdrawn at any time (however, this will not affect the lawfulness of the processing of your personal data on the basis of such consent that has taken place up to the time of withdrawal).
9. Where personal data is processed on the basis of freely given consent, the Controller will process it for a maximum period of 5 years from the last contact for the purposes indicated in point 3(e) above, or until the consent given is withdrawn, or for any other period prescribed by law. Otherwise, your data will be retained for the period allowed by law to enable you to assert your rights, as well as, where applicable, to ensure that the history of financial settlements between you and the Controller can be demonstrated.
10. The personal data provided may be recorded by the Controller in an automated manner in IT systems and/or in a non-automated manner, as well as structured, organised, stored, downloaded, viewed, used, disclosed through sending and shared. The personal data may also be limited, erased and destroyed. Any personal data provided may be subject to profiling, i.e. automated analysis and forecast of your preferences or future behaviours so as to enable the Controller to decide which offer may be the most interesting for you.
11. The recipients of your personal data may be the Controller’s suppliers, including companies providing IT services or IT solutions to the Controller and companies carrying out marketing activities, including participating in and/or performing activities related to the presentation and transmission of advertising offers, commercial information, newsletters and other information, promotional and marketing materials relating to the activities of the Controller and/or Hossa Capital Group Entities and the Business Partners of the Controller and Hossa Capital Group Entities (provided that they have a legal basis for the processing of your personal data).
12. As a general rule, your personal data is not transferred outside the European Economic Area (EEA). However, such processing, where applicable, may occur in connection with marketing and commercial purposes carried out with business partners or suppliers outside the EEA. In any case, this transfer will take place in compliance with the standards under the GDPR. You may contact the Controller to obtain a copy of the protection measures applied.
13. You have the right to request from the Controller, under the terms of the GDPR:

1. access to personal data;
2. information concerning the purpose, scope, way and forms of the processing; 
3. rectification of their personal data;
4. erasure of their data or limitation of data processing;
5. transfer of their data a different data controller.

14. You may exercise the aforementioned rights by submitting an appropriate request to the Controller, at any time, to the following email address: info@hossabiz.pl
15. If you believe that the Controller’s processing of your personal data violates the law, you have the right to lodge a complaint with the competent supervisory authority (the President of the Personal Data Protection Office).

Cookies Policy:

Furthermore, we kindly inform you that the Controller:

1. Operates this Website (hereinafter referred to as the “Website”).
2. Acts so as to protect the privacy of Users and data acquired through the Website and ensures the security of their personal data at the highest level while respecting the User’s right to access their personal data, the right to request that data be rectified, completed or erased and that their processing be restricted.
3. Does not automatically collect any user data on the Website, except for information contained in cookies that constitute IT data, in particular text files, which are stored on the Website User’s end device and are intended to be used for browsing the Website’s pages. In general, cookies include the name of the website from which they originate, the time for which they are stored on the end device and a unique number. The Controller places cookies on the Website Users’ end devices and has access to them.
4. Please note that restrictions on the use of cookies may affect some of the functionalities available on the Website.
5. The Website uses cookies to:

• optimise the provision of electronic services through the Website;
• adapt the content of displayed websites to individual preferences of the Users and optimise their use of the Website;
• test traffic on the Website’s pages;
• prepare reports and support the publication of advertising and information;
• create statistics on the use of the Website by the Users;
• maintain a User session after logging in, so that the User does not have to re-enter their login and password on each sub-page;
• use the functions of social networks to promote the Website or, with the consent of the User whom the data concern, use them for commercial and marketing purposes, including the delivery of newsletters.

6. Indicates that the following cookies are used on the Website:

• session – temporary; used when the User is creating a session, stored in the User’s terminal device until the User logs out, leaves the website or switches off the software (web browser);
• concerning the privacy policy (cookies) – to confirm that the User has been informed of the use of cookies by the Website;
• necessary – enabling the use of the Website;
• statistical – for the collection of statistical data through Google Analytics analytical tools [cookies controller: Google Inc with its registered office in the USA]
• advertising – for the presentation of advertisements tailored to the User’s needs, using an application that allows effective management of the marketing strategy: Google Marketing Platform [cookies controller: Google Inc with its registered office in the USA], 
• presenting multimedia content – downloaded from external websites: www.youtube.com [cookies controller: Google Inc with its registered office in the USA]
• using social networking sites to promote the Website: twitter.com [cookies controller: Twitter Inc. with its registered office in the USA] and Facebook.com [cookies controller: Facebook Inc with its registered office in the USA or Facebook Ireland with its registered office in Ireland], Instagram.com [cookies controller: Instagram Inc. with its registered office in the USA].

We recommend reading the privacy policies of these companies in order to learn about the use of cookies for statistical purposes.

7. Informs the Users that they may change the cookie settings in their browsers at any time. These settings may be changed in such a way as to block the automatic handling of cookies in the web browser settings or inform the User each time that cookies are stored on the User’s device. Detailed information on the possibility and ways of handling cookies is available in the browser settings or help.