With a view to respecting the privacy of users visiting the https://kasinaski.pl/ website (here in after referred to as the “Website”), the Website Administrator introduces this privacy policy (here in after referred to as the “Privacy Policy”).
I. PERSONAL DATA CONTROLLER:
1. The administrator of the personal data of the users visiting the Service is Kasina sp. z o.o., Kasina Wielka 672, 34-741 Mszana Dolna, (here in after ,,Administrator of the Service”).
2. Contact with the Administrator of the Service is possible via:
a) mailing address: Kasina sp. z o.o., Kasina Wielka 672, 34-741 Mszana Dolna.
b) e-mail address: marketing@kasinaski.pl
3. The Administrator of the Website shall make every effort to ensure that the processing and protection of the personal data of the Website users is carried out in accordance with applicable laws, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons in relation to the processing of personal data and on the free flow of such data and repealing Directive 95/46 EC (here in after “RODO”), and in a manner that prevents access to such data by unauthorized persons, as well as against unauthorized use of the aforementioned data.
II. PURPOSES, LEGAL BASIS AND DURATION OF PERSONAL DATA PROCESSING
1. Processing of personal data for contact purposes
The Administrator of the Website processes personal data of users who contact via the data provided on the Website (e-mail addresses, telephone numbers) for the purpose of answering the question asked. The legal basis for processing personal data for this purpose is the legitimate interest of the Service Administrator. Personal data will be processed for the time necessary to respond and resolve the matter.
2. Processing of personal data for the purchase of Penguin PASS/viewing Tower admission passes/purchase of lessons (e.g., skiing/snowboarding)/admission ticket for other attractions referred to in the Service.
If, through the Service, it is possible to purchase a Penguin Pass, an entrance pass to the Lookout Tower, purchase of lessons (e.g., skiing, snowboarding) or an entrance ticket to other attractions referred to in the Service, the personal data of the Service user is processed in accordance with the principles described in the regulations made available and also in the information on the processing of personal data. In connection with a purchase, the administrator of personal data may be both the Administrator of the Website and the
and the entity conducting sales within the framework of the online store, in particular E-SKIPASS Spółka z ograniczoną odpowiedzialnością, as well as PayPro S.A..
In the event that, when purchasing a pass or an entrance ticket (hereinafter collectively “Pass”) for the attractions referred to on the Website, no regulations containing information on the processing of personal data have been made available, the controller of personal data is the company that provides the opportunity to purchase a Pass on this Website (hereinafter “Company”). The Company then processes the personal data of the person making the purchase or the person for whom the Pass was purchased in order to enable the purchase and the performance of the service for which the Pass was purchased – on the basis of the Company’s legitimate interest. The above personal data may also be processed for the purpose of investigating or defending against claims related to the provision of services covered by the purchased Pass – based on the Company’s legitimate interest, as well as for the purpose of fulfilling the Company’s legal obligations, including accounting and reporting.
The period of processing personal data for the above purposes, depends on the type of service for which the Pass was purchased. In justified cases related to related to the investigation or defense against claims, this period may be extended until the statute of limitations for claims. Where processing is necessary to comply with legal obligations, personal data will be processed for the period required by the aforementioned laws.
Full information on the processing of personal data, including about your rights, as well as the contact details of the personal data administrator, can be found in the privacy policy provided on the site where the Pass can be purchased.
3. Processing of personal data for the purpose of subscribing to the newsletter
If the Service provides this option, the User may subscribe to the newsletter by providing an email address. The full content of the information regarding the processing of personal data in connection with signing up for the newsletter is available below:
INFORMATION CLAUSE ON PROCESSING OF PERSONAL DATA OF NEWSLETTER SUBSCRIBERS
1 . Personal data is processed by the following Joint Administrators, which are entities that are part of the Penguin Group:
a) Czarny Groń sp. z o.o. with its registered office in Rzyki, axis Praciaki 91, 34-125 Sułkowice, entered in the Register of Entrepreneurs of the National Court Register by the District Court for Krakow – Śródmieście in Krakow, XII Economic Department of the National Court Register under KRS: 0001165207, NIP: 5512615606, REGON: 122661030; address for traditional correspondence: as above, address for e-mail correspondence: recepcja@czarnygron.pl.
b) ,,Kasina” sp. z o.o. with its registered seat in Kasina Wielka, 672, 34-741 Mszana Dolna, entered in the Register of Entrepreneurs of the National Court Register by the District Court for Krakow – Śródmieście in Krakow, XII Economic Division of the National Court Register under KRS: 0000137632, NIP: 7342937067, REGON: 492833701; traditional correspondence address: as above, e-mail correspondence address: biuro@kasinaski.pl.
c) Słotwiny Arena sp. z o.o. with its registered seat in Krynica Zdrój, ul. Słotwińska 51A, 33-380 Krynica Zdrój, entered in the Register of Entrepreneurs of the National Court Register by the District Court for Krakow – Śródmieście, XII Economic Division of the National Court Register under KRS number: 0000107928, NIP: 8732315859 REGON: 850491706; traditional correspondence address: as above, e-mail correspondence address: recepcja@slotwinyarena.pl.
d) Kurza Góra Sp. z o.o. with its registered office in Kurzętnik at 1 Kurza St., postal code 13-306, entered in the Register of Entrepreneurs of the National Court Register by the District Court in Olsztyn, VIII Commercial Division of the National Court Register under KRS number: 0000513566, REGON: 281599890, NIP: 7412127392; traditional correspondence address: as above, e-mail correspondence address: kontakt@kurzagora.pl.
e) Skolnity sp. z o.o. with its registered office in Wisła, ul. 1-go Maja 61, postal code 43-460, registered in the Register of Entrepreneurs of the National Court Register by the District Court in Bielsko-Biała VIII Economic Department of the National Court Register under KRS number 0000389434, REGON 241920320, NIP 5482645961; traditional correspondence address: as above, e-mail correspondence address: info@skolnity.pl.
2. the Joint Administrators have established the following point of contact through which the data subject may obtain information on the protection of his/her personal data: iod@czarnygron.pl
3. Personal data will be processed in order to carry out the Newsletter subscription and its transmission to the provided email address. The legal basis for the processing of personal data for the above purpose is the legitimate interest of the Joint Administrators, consisting of the possibility of sending to interested persons information on the activities of the Penguin Group, including its constituent entities (Joint Administrators). Your interest was expressed by signing up for the Newsletter.
4. Provision of personal data by you is voluntary, however, failure to do so will prevent you from receiving the Newsletter.
5. personal data will be processed for the period necessary for the above-mentioned purpose or until you raise an effective objection, as referred to in sec. 8 subsection b below.
6. The following recipients may have access to the personal data provided: entities that provide services to the Joint Administrators, including entities that provide IT services, marketing services, legal advice, as well as entities authorized to receive personal data on the basis of generally applicable laws.
7. Personal data shall not be subject to automated decision making, including profiling
8. the User is entitled to:
a) Access to the content of your personal data, the right to rectify, delete, limit processing;
b) in cases where the processing of personal data is carried out in order to realize the legitimate interest of the Joint Administrators, the data subject may object at any time – for reasons related to his/her particular situation – to the processing of personal data concerning him/her.
9. In order to exercise the above-mentioned rights, you may contact at the address of the joint contact point of the Joint Administrators, i.e.: iod@czarnygron.pl, as well as with each of the Joint Administrators – contact details are provided in paragraph 1 above.
10. The User has the right to lodge a complaint regarding the processing of personal data to the supervisory authority, which in Poland is the President of the Office for Personal Data Protection.
4. Processing of personal data for marketing and promotional purposes (social media)
Processing of personal data for marketing and promotional purposes is also carried out through public profiles within social media sites, including Facebook, TikTok, Instagram, Pinterest, Youtube, which are administered by the Service Administrator. The personal data processed in these profiles is primarily the data of profile visitors, which the Service Administrator has access to, among other things, as part of comments, likes, web IDs or as part of any interaction between the profile visitor and the Service Administrator or an entity contracted by the Service Administrator to handle the aforementioned profiles.
The purposes of processing personal data are to enable visitors to be active on profiles, to run profiles effectively by presenting visitors with information about initiatives, activities, events, services or products, as well as statistical and analytical activities using the capabilities provided by the providers of the aforementioned social networks.
The legal basis for processing personal data for this purpose is the legitimate interest of the Administrator of the Website, which is to promote its activities and services offered. Personal data will be processed for the time of realization of the aforementioned purposes by the Service Administrator or until you object to the processing of your personal data for these purposes.
The rules for the processing of personal data in connection with the use of the indicated social networks are set forth in the rules and regulations provided by them and privacy policies.
5. Processing of personal data for the purpose of making a hotel reservation
The processing of personal data is carried out in connection with contacting by phone or sending an email to the telephone numbers/email addresses indicated on the
on the Website in order to make a hotel reservation. The legal basis for processing is to take action to enter into a contract and conclude a hotel reservation agreement. Personal data will be processed for the period of execution of the hotel place reservation agreement.
6. Processing of personal data to defend claims
Only in justified cases, the Website Administrator may process personal data for the purpose of defending or asserting claims related to the use of the Website, as well as functionalities available on the Website, or in connection with the processing of personal data for other purposes referred to in this Privacy Policy. The legal basis for the processing of personal data for this purpose is the legitimate interest of the Administrator of the Website, which is to defend its business interests. Personal data will be processed for the period of limitation of possible claims.
III. RECIPIENTS OF PERSONAL DATA
The personal data of Service users may be transferred by the Service Administrator to the following entities:
a) to other companies belonging to the Penguin Group,
b) those providing maintenance services for the Service and IT solutions,
c) providing hosting of the servers on which the Service operates,
d) those providing marketing and advertising services regarding the maintenance of mailing databases and newsletters,
e) state authorities;
f) companies providing online sales and payment services,
g) entities responsible for hotel reservations available through the Service,
h) social media providers
i) entities providing consulting, legal, accounting services.
The Administrator of the Website transfers personal data to the above entities only to the limited extent necessary for the realization of the respective purpose of processing referred to in points 1-5 above.
Personal data of Service users will not be transferred outside the European Economic Area. However, the Administrator of the Website informs that in connection with the implementation of marketing and promotional activities through social media, referred to in item 4. above, personal data will be processed by the owners of these social networks and may also be transferred outside the European Economic Area on the terms indicated in their regulations and privacy policies.
IV. RIGHTS OF DATA SUBJECTS
The Data Subject (user of the Service) has the right:
a) request access to personal data,
b) rectification of personal data,
c) erasure of personal data,
d) to restrict the processing of personal data,
e) request transfer of his/her personal data.
In the case of granting consent to send newsletters: at any time the data subject has the right to revoke the consent granted. The withdrawal of consent does not affect the consents, nor does it affect the lawfulness of processing carried out on the basis of consent before its withdrawal. Withdrawal of consent can be done by sending an email to: iod@czarnygron.pl.
At any time, the data subject has the right to object to the processing of personal data for marketing purposes.
In case the processing of personal data is based on the legitimate interests of the Service Administrator, the data subject has the right to object to the processing of personal data for this purpose, for reasons related to his/her particular situation.
The aforementioned rights may only be exercised in accordance with the corresponding provisions of the RODO.
In order to exercise the aforementioned rights, please contact via email to the Data Protection Officer at the address indicated in point I. above.
The Data Subject has the right to lodge a complaint with the supervisory authority, i.e. the President of the Office for Personal Data Protection.
V. COOKIES
On the first visit to the Website, the Website Administrator informs the user of the use of cookies. Cookies are small pieces of text that are sent to the user’s browser and which the browser sends back the next time the user visits the Website. The storage of cookies in the user’s browser takes place when the user makes the appropriate settings when using the Website.
This Privacy Policy also governs the processing of personal data related to the use of cookies.
The storage of cookies on the user’s terminal device takes place when the user expressly consents to it. The expression of consent does not apply to “required cookies,” to which the user does not have to give consent, as they are necessary for the proper functioning of the Website. Consent to other cookies, the user can give consent by proceeding to use the Service without changing the cookie settings and clicking the “I accept” button. If the user does not consent to the installation of any cookies other than those required, he/she should select the “I reject” option. If the user wants to change their settings, they should select the “Settings” option. Using this option allows the user to make choices
and consent to the cookies selected.
In addition, from the level of the Internet browser the user uses, it is possible to manage cookies independently, among other things, to block or delete them. Comprehensive information is available in the browser settings. In addition, the user has the ability to change the settings made using a tool available at all times of use on the Website in the form of a “cookie” icon. Restricting or disabling the use of cookies and other similar technologies may affect some of the functionalities available on the Website.
Detailed information on the cookies used, as well as their storage period, is available in the cookie management tool.
Types of cookies:
REQUIRED COOKIES
The Administrator of the Website uses required cookies primarily to provide the user with the services and functionalities of the Website that the user wants to use. For required cookies, the user does not have to give consent. The legal basis for processing data in connection with the use of required cookies is that the processing is necessary for the performance of the contract in connection with the user’s use of the Service.
ANALYTICAL COOKIES
The Website Administrator uses analytical cookies to obtain information such as the number of visits and sources of traffic to the Website. They are used to determine how users navigate the Website by conducting statistics on traffic on the Website. The legal basis for processing personal data in connection with the use of analytical cookies is the consent given by the user when he/she first enters the Website through the tool provided to the user.
As part of the use of analytical cookies, the Website Administrator uses the Google Analytics tool provided by Google, it is a tool used to analyze the statistics of websites. The purpose and scope, as well as the rules of processing personal data by the provider of this tool, are available in the terms and conditions and privacy policy, among others, at the link: Privacy Policy – Privacy and Terms and Conditions – Google.
MARKETING COOKIES
Marketing cookies allow us to tailor the advertising content displayed to the interests of users within the Service and outside the Service. Based on the information from these cookies and the user’s activity on other services, a profile of the user’s interests is built.
The legal basis for the processing of personal data in connection with the use of marketing cookies is the consent given by the user when he/she first enters the Service through the tool made available to the user.
As part of the use of marketing cookies, the Administrator of the Website uses the Pixel Meta tool provided by Meta, it is a tool used to analyze the effectiveness of advertisements and actions taken by users on the Website. The purpose of
and the scope and rules of processing personal data by the provider of this tool, are available in the regulations and privacy policy, among others, at the link: Meta’s Privacy Policy – Collection and Use of User Data on Meta | Privacy Center | Manage Your Privacy on Facebook, Instagram and Messenger | Privacy on Facebook.
In addition, cookies of a marketing or analytical nature may be placed on the user’s terminal device by business partners with whom the Service Administrator cooperates (third-party cookies). Information about business partners that place cookies on the user’s end device is available in the cookie management tool.
Recipients of personal data processed in connection with the use of cookies may be the following: entities providing services, including maintenance services and technical support for applications, computer programs, IT systems and the Service, business partners of the Service Administrator, as well as marketing agencies, advertising agencies, entities providing IT solutions used in the process of collecting and handling cookies, and in justified cases, also entities supporting the Service Administrator in the investigation or defense against claims.
Additional information on the principles of processing users’ personal data in connection with the use of cookies, including, in particular, information about the rights and , can be found in Section IV. RIGHTS OF THE DATA SUBJECT and in Section I. PERSONAL DATA CONTROLLER.
VI. Additional Information:
The Service Administrator reserves the right to review and make any changes to the content of the Service’s Privacy Policy on an ongoing basis.
Opening hours 
+48 18 506 51 00 
Cameras