PRIVACY POLICY AND PERSONAL DATA PROTECTION

1. This Privacy Policy sets out the rules for the processing and protection of personal data provided by Users in connection with their use of the services of the website belonging to: Rest Group Sp. z o. o. based in Warsaw at ul. Sytej 112E/2, entered into the register of entrepreneurs kept by the District Court for the capital city of Warsaw in Warsaw, 13th Commercial Division of the National Court Register under the number 0000860059, with the NIP number 9512507385 and the REGON number: 38704353500000.

2. Definitions:
a) User: A person using the Website

b) Website: The website used by the User

3. Personal data administrator and website operator: Rest Group Sp. z o. o. based in Warsaw at ul. Sytej 112E/2, entered into the register of entrepreneurs kept by the District Court for the capital city of Warsaw in Warsaw, 13th Commercial Division of the National Court Register under the number 0000860059, with the NIP number 9512507385 and the REGON number: 38704353500000.

4. To ensure the security of the data entrusted to us, we have established internal procedures and guidelines in this document to prevent data from being made available to unauthorized persons.

5. Your Personal Data are processed on the basis of the consent expressed by the User as well as when the law authorizes the Administrator to process personal data in order to implement the contract concluded between the parties.

6. The website performs the function of obtaining information about users and their behavior by collecting “cookies”. The website collects information voluntarily provided by the User.

7. Personal data left on the Website will not be sold or made available to third parties, in accordance with the provisions of the Personal Data Protection Act.

8. The natural person who posted the data has the right to view it, as well as the right to modify and stop processing his or her data at any time.

9. The Administrator reserves the right to change the privacy policy of the Website, in particular in the event of changes in the law. The Administrator will inform about each change in a visible and understandable way.

COOKIES

1. The website does not automatically collect any information, except for information contained in cookies.

2. Cookies (so-called “cookies”) are IT data, in particular text files, which are stored on the User’s end device and are intended for using the Website’s websites. Cookies usually contain the name of the website they come from, their storage time on the end device and a unique number.

3. The entity that places cookies on the User’s end device and obtains access to them is Rest Group Sp. z o. o. based in Warsaw at ul. Sytej 112E/2, entered into the register of entrepreneurs kept by the District Court for the capital city of Warsaw in Warsaw, 13th Commercial Division of the National Court Register under the number 0000860059, with the NIP number 9512507385 and the REGON number: 38704353500000.

4. Cookies are used to adjust the content and optimize the use of the Website according to the User’s preferences, in particular these files allow to recognize the Website User’s device and properly display the website, tailored to his/her individual needs; creating statistics that help understand how Website Users use websites, which allows improving their structure and content.

5. The website uses the following types of cookies: “session cookies” and “persistent cookies”. “Session” cookies are temporary files that are stored on the User’s end device until logging out, leaving the website or turning off the software (web browser). “Permanent” cookies are stored on the User’s end device for the time specified in the cookie parameters or until they are deleted by the User.

6. In many cases, software used to browse websites allows cookies to be stored on the User’s end device by default. Users of the Website may change cookie settings at any time. These settings can be changed in particular in such a way as to block the automatic handling of cookies in the web browser settings or to inform each time they are placed on the Website User’s device. Detailed information about the possibilities and methods of handling cookies is available in the software (web browser) settings.

7. We would like to inform you that restrictions on the use of cookies may affect some of the functionalities available on the Website.

8. More information about cookies is available in the “Help” section in the web browser menu.

GDPR

1. The administrator of personal data is Rest Group Sp. z o. o. based in Warsaw at ul. Sytej 112E/2, entered into the register of entrepreneurs kept by the District Court for the Capital City of Warsaw in Warsaw, 13th Commercial Division of the National Court Register under the number 0000860059, with the NIP number 9512507385 and the REGON number: 38704353500000.

2. If you have any questions regarding personal data, please contact the Administrator by registered letter to the address of the Administrator’s office or by e-mail to kontakt@patathai.pl

3. Your personal data will be processed in accordance with the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/ EC (hereinafter referred to as “GDPR”) to the following extent, for one or more of the following purposes and on one or more of the following legal bases:

  • in order to prepare, conclude or perform a contract, i.e. pursuant to Art. 6 section 1 letter b) GDPR (in the scope of contractors who are natural persons and persons representing contractors),
  • in order to fulfill the Administrator’s legal obligation to archive documentation regarding, among others: concluded contracts, deliveries, settlements, complaints, accounting documentation, i.e. pursuant to Art. 6 section 1 letter c) GDPR (in connection with, among others, the provisions of the Act on
    accounting and Tax Ordinance),
  • in order to pursue legally justified interests pursued by the Administrator or by a third party consisting in conducting cooperation on the basis of the concluded contract, including in order to maintain communication with the contractor who indicated you as the contact person, i.e. pursuant to Art. 6 section 1 letter f GDPR,
  • in order to pursue legally justified interests pursued by the Administrator or a third party, consisting in initiating contact and maintaining business relationships, including building a network of contacts and improving the Administrator’s services, i.e. pursuant to Art. 6 section 1 letter f GDPR,
  • in order to pursue legally justified interests pursued by the Administrator or a third party, consisting in conducting correspondence addressed to the Administrator in connection with the conducted business, i.e. pursuant to Art. 6 section 1 letter f GDPR,
  • in order to pursue legally justified interests pursued by the Administrator or by a third party consisting in determining, pursuing or defending against claims pursuant to Art. 6 section 1 letter f GDPR,
  • in order to pursue legally justified interests pursued by the Administrator or by a third party consisting in conducting direct marketing of the Administrator or third parties, i.e. pursuant to Art. 6 section 1 letter f) GDPR.

5. The recipients of your personal data may be persons authorized by the Administrator, in particular employees and associates of the Administrator who need access to your personal data to perform obligations arising from concluded contracts or service providers providing services on behalf of the Administrator or on his behalf.

6. The recipients of your personal data may also be law enforcement agencies, courts, bailiffs or tax offices, if the obligation to provide your personal data results from legal provisions.

7. Personal data will be processed for the duration of the contract concluded with you. After the end of the contract, this data will be processed for the time required by law.

8. The person whose data is processed has the right to request access to personal data, the right to rectify them, the right to delete them, the right to limit their processing, the right to object to the processing of their personal data, and the right to transfer data. You also have the right to lodge a complaint with the President of the Personal Data Protection Office. The right to object applies when the processing of personal data is based on a legitimate interest or for statistical purposes, and the objection is justified by the special situation of the data subject or the personal data are processed for direct marketing purposes, including profiling, to the extent that the processing is related to such direct marketing.

9. The Administrator does not plan to transfer your personal data to third countries, i.e. to recipients based outside the European Economic Area or Switzerland.

10. The Administrator does not make automated decisions, including those based on profiling.

11. Providing your personal data in order to perform the contract with the Administrator is a condition for concluding the contract. Failure to provide this data will prevent the achievement of the processing purpose for which it was collected.