Privacy policy

This policy explains what personal data we collect through the website, why we process it, who we share it with and what rights you have.

1. Data controller

The controller of your personal data is Morning&Breakfast By the Sea Apartments, registered at ul. Partyzantów 46, 81-423 Gdynia, Poland, VAT ID 958-175-29-46 (“we” or “the property”).

For any matter concerning personal data, write to a.maizner@aparthotelpark.com or call +48 58 333 41 40.

2. What data we collect

• Booking form data: your name, e-mail address, phone number, the dates and details of your stay and any notes you send us.
• Contact form and conference room enquiry data: your name, e-mail address, phone, company name, subject and message.
• Technical data: IP address and the date and time the form was submitted - recorded to protect the site against abuse.
• Analytics data - only if you consent in the cookie banner. Details are in the cookie policy.

3. Purposes and legal bases

4. Is providing data mandatory

Providing your data is voluntary but necessary for us to handle your enquiry. Without an e-mail address and a phone number we cannot confirm a booking.

5. Recipients of the data

Your data may be shared with trusted parties that support our operations:

• the hosting and e-mail provider whose servers run this website,
• our accounting office, to the extent necessary for settlements,
• the analytics provider (Google Ireland Limited) - only with your consent,
• the catering company preparing ordered breakfasts - first name and order details only,
• entities authorised under applicable law.

We do not sell personal data and do not pass it to third parties for marketing purposes.

6. Transfers outside the European Economic Area

If you use the website with analytics cookies enabled, data may be transferred to the United States as part of Google services. Such transfers rely on the European Commission adequacy decision (Data Privacy Framework) and standard contractual clauses.

7. Your rights

You have the right to:

• access your data and receive a copy of it,
• rectify data that is inaccurate or incomplete,
• erasure (“the right to be forgotten”),
• restriction of processing,
• data portability,
• object to processing based on our legitimate interest,
• withdraw consent at any time, without affecting the lawfulness of processing before withdrawal,
• lodge a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, Poland).

To exercise any of these rights, write to a.maizner@aparthotelpark.com. We respond within one month.

8. Automated decision-making

We do not make decisions about you solely by automated means and we do not carry out profiling that produces legal effects.

9. Security

The site runs over an encrypted HTTPS connection. Access to the management panel is protected by a password and a failed-login limit. The database is stored outside the public server directory, and the forms are protected by tokens that prevent abuse.

10. Changes to this policy

If the scope of our processing changes, we will update this document and change the date shown at the bottom of the page.