PRIVACY POLICY Website: 360vrhotels.com Information on the purposes and principles of personal data processing The controller of your personal data is BONUS TRAVEL s.c., Anna Szerer, Michał Szerer, with its registered office in Sieradz (98-200), Żwirki i Wigury 1, Poland, e-mail: biuro@bonustravel.com.pl , phone number: +48 43 820 80 02, VAT ID (NIP): 8272304333, REGON: 101509263. The Data Protection Officer can be contacted at: rodo@bonustravel.com.pl . You have the right to access your personal data, rectify your data, request erasure of your data, request restriction of processing, object to the processing of your data, and data portability. You also have the right to lodge a complaint with the supervisory authority if your personal data are processed unlawfully. In Poland, the supervisory authority is the President of the Personal Data Protection Office (UODO). Your personal data will be processed for the purposes of concluding and performing a contract concluded with the Controller, making necessary settlements related to the contract, fulfilling legal obligations imposed on the Controller, conducting satisfaction surveys, and marketing activities consisting of promoting the Controller and its services. Providing personal data is voluntary; however, failure to provide them will result in the inability to conclude a contract. The legal basis for processing your personal data is Article 6(1)(b) GDPR for the performance of a contract, Article 6(1)(c) GDPR for compliance with legal obligations, and Article 6(1)(f) GDPR based on the Controller’s legitimate interest consisting in ensuring necessary settlements related to the concluded contract, conducting satisfaction surveys, and marketing activities aimed at promoting the Controller and its services. Where personal data are processed on the basis of your separate consent, you have the right to withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to its withdrawal. Recipients of personal data may include airlines and coach transport companies, hotels, insurance companies including TU Europa with its registered office in Wrocław, banks, payment operators, cooperating agents under agency and franchising agreements, domestic and foreign contractors for the purpose of performing the concluded contract, entities supporting accounting and legal processes, and IT service providers including hosting providers. Due to the global scope of our services, your personal data, depending on the selected destination, may be transferred outside the European Economic Area (EEA) to the extent necessary to perform the contract, including to countries that have not been recognized by the European Commission as providing an adequate level of personal data protection. More information on countries ensuring an adequate level of protection can be found at: https://giodo.gov.pl/163/id_art/1519/j/pl Personal data will be processed for the duration of the service and for the time necessary to demonstrate its proper performance, handle complaints, and for periods resulting from other regulations, including tax regulations. You have the right to object to the processing of your personal data if the Controller processes the data for direct marketing purposes (no justification required) or on the basis of other legitimate interests of the Controller (justification required due to your particular situation).