Privacy policy

  1. INTRODUCTION
    1. The Data Controller of the personal data collected in particular through the Website available at booking.resabee.com (hereinafter: Website), i.e. the entity that decides how your personal data will be used, is Axabee Sp. z o.o. with its registered office in Opole, ul. Reymonta 39, registered in the District Court in Opole, VIII Commercial Division of the National Court Register under KRS number 0000445964, NIP [Tax ID]: 7543069399, REGON [National Business Registry Number]: 161505318 (hereinafter: Data Controller or Axabee). Contact with the Data Controller is possible via e-mail address: info@axabee.com.

      The Controller is responsible for the security of the personal data transferred and for processing them in accordance with the law.
    2. The Controller has appointed a Data Protection Officer (hereinafter: DPO), who can be contacted on matters related to the processing of personal data and the exercise of your rights under data protection legislation. Contact with the DPO is possible via the e-mail address: info@axabee.com.
    3. Your personal data is processed in accordance with the Regulation of the European Parliament and Council (EU) 2016/679 of 27 April 2016 on the protection of natural persons in relation to the relation to the processing of personal data and on the free movement of such data and repealing the Directive 95/46/EC (hereinafter: GDPR) and other currently applicable data protection laws.
    4. "Cookie Policy"
    5. During your visit to the Website, there is a collection of:
      1. personal data provided by the user of the Website,
      2. data received and recorded automatically.
    6. The purpose and scope of the personal data used by the Data Controller are indicated in detail further in the "Privacy Policy".
  2. DATA COLLECTED - BACKGROUND INFORMATION
    1. The following information applies to all uses by the Data Controller of the personal data provided by you as indicated in sections III and IV herein.
    2. Personal data will not be used by the Data Controller to make decisions based solely on automated processing of personal data, including profiling within the meaning of Article 22 of the GDPR.
    3. Subject to all data security guarantees, personal data processed through the Website may be transferred to other entities, including:
      1. to entities entitled to receive them in accordance with the law,
      2. entities processing them on behalf of the Data Controller, e.g. technical service providers, hosting providers, analytics providers, marketing agencies and consultancy service providers,
      3. other data controllers to the extent necessary for the performance of the contract, performance of services and legal requirements, e.g. notary or legal offices, companies providing postal and courier services, other contractors performing services for the Data Controller on the basis of concluded contracts.
    4. The Data Controller, will not transfer your personal data to countries outside the European Economic Area (countries other than those of the European Union and Iceland, Norway and Liechtenstein).
    5. The Data Controller informs that, in relation to the processing of personal data obtained through the Website, each data subject has the right to make a request concerning:
      1. access to the data (including obtaining information on what data is processed by the Data Controller and to what extent, as well as obtaining a copy of the data - details: Article 15 GDPR),
      2. rectifying the data (i.e. correcting it if the data processed by the Data Controller is incorrect or incomplete - details: Article 16 of the GDPR),
      3. erasure of the data (if, for example, the data are no longer necessary for the purposes for which they were collected or the Data Controller no longer has a legal basis for processing the data - details: Article 17 GDPR),
      4. limitation of data processing (if, for example, you question the accuracy of the personal data used by the Data Controller, if the data is no longer needed by the Data Controller but needs to be processed because you are pursuing a claim - details: Article 18 GDPR),
      5. objection to the processing of personal data, including profiling (if the personal data is processed on the basis of the legitimate interest of the Data Controller or is used for direct marketing purposes - details: Article 21 GDPR).
      6. transfer of the data to another data controller (if the processing of the data provided to the Data Controller is carried out by automated means, on the basis of consent or on the basis of a contract - details: Article 20 GDPR).
      7. if the processing is based on consent (e.g. consent for the use of data for marketing purposes), you have the right to withdraw your consent at any time by any means (whereby withdrawal of consent does not affect data processing that has taken place prior to your declaration of withdrawal of consent).
    6. Any person whose data is processed has the right to lodge a complaint with the President of the Office for the Protection of Personal Data (supervisory authority) if you believe that the processing of your personal data violates the law (for more information: https://uodo.gov.pl/pl/83/155).
    7. The data was obtained by the Data Controller directly from you. The Data Controller may also process:
      1. personal data of other persons, provided by the user of the Website when using the services described in this "Privacy Policy",
      2. personal data obtained from entities with whom the Data Controller cooperates on the basis of concluded contracts (e.g. business data of employees designated for contact for the purpose of contract execution, data of persons who are participants in events organised by the Data Controller),
      3. personal data obtained from third parties cooperating with the Data Controller, whereby the data has been made available to the Data Controller on the basis of your consent,
      4. data obtained from publicly available sources, e.g. the National Court Register, the Central Register and Information on Business Activity, websites.
  3. PERSONAL DATA PROVIDED BY THE USER
    1. A. E-MAIL OR TELEPHONE CONTACT
      1. The Data Controller processes your personal data, in particular your name, e-mail address and other information provided by you, to the extent necessary to handle your requests and carry out your enquiry, including conducting communication and answering questions asked via the contact telephone number and e-mail address provided on the Website (legal basis: Article 6(1)(f) GDPR - legitimate interest).

        By providing us (as part of your communication) with information that constitutes special categories of data (e.g. health information), you consent to its use for the proper handling of your request and the processing of your enquiry, including the provision of a response (legal basis - Article 9(2)(a) GDPR - consent).
      2. The provision of data is voluntary, but necessary in order to answer the submitted question or to properly handle the request and carry out the enquiry. Failure to provide personal data may result in the impossibility of replying to or processing the enquiry.
      3. The Data Controller is entitled to process personal data for the period necessary for the purposes indicated above. Depending on the legal basis, this will be respectively:
        1. the time required to process the request and deal with the enquiry, including answering the question sent or dealing with the matter in relation to which the correspondence or telephone call is made,
        2. the time until you withdraw your consent (including the withdrawal of consent for the use of special categories of data).
      4. Withdrawal of consent can be done in particular by contacting the Data Controller or the DPO (via the contact details indicated above). The withdrawal of consent does not affect the legality of the use of data during the period when the consent was in effect.
    2. B. CONTACT FORM
      1. The Data Controller may collect your personal data through the form available on the Website, in particular:
        1. first name and surname,
        2. e-mail address
        3. IP address,
        4. other information provided by you via the form (e.g. telephone number, company name).
      2. The controller processes personal data only to the extent necessary:
        1. to receive and handle your request, including communicating and responding to requests and questions submitted via the form (legal basis: Article 6(1)(f) GDPR - legitimate interest),
        2. to establish contact (via the chosen communication channel) and to prepare and present an offer in response to a request made by the user of the Website via a form (legal basis: Article 6(1)(b) GDPR - taking action at the request of the data subject before entering into a contract),
        3. to receive and process the complaint (legal basis: Article 6(1)(f) GDPR - legitimate interest).
      3. The Data Controller is entitled to process personal data for the period necessary for the purposes indicated above. Depending on the legal basis, this will be respectively:
        1. the time required to process the request and respond to the enquiry sent by the user via the contact form,
        2. the time required to prepare and communicate a dedicated offer,
        3. the time necessary to receive and process the complaint.
      4. Provision of the personal data indicated in the contact form is voluntary, but necessary in order to properly handle the request, respond to the sent enquiry, prepare and present a dedicated offer or accept and handle the complaint. The consequence of failing to provide personal data may be impossibility of answering, completing the enquiry or presenting an offer.
    3. C. MARKETING COMMUNICATION
      1. The Data Controller processes your personal data in order to:
        1. carry out marketing communications by means of electronic communication ( in particular email, telephone calls, text messages) on the basis of a separate consent to process data for this purpose (legal basis: Article 6(1)(a) GDPR - consent),
        2. carry out direct marketing, including sending information on Axabee's offer and information on the products and services of third parties cooperating with the with the Data Controller (e.g. business partners), including personalisation of marketing content, i.e. preparation and presentation of an offer tailored to your preferences (legal basis: Article 6(1)(f) GDPR - legitimate interest),
        3. Personalise marketing content, i.e. preparation and presentation of an offer tailored to your preferences (legal basis: Article 6(1)(f) GDPR - legitimate interest),
        - taking into account the provisions of the Act on Provision of Electronic Services and the Telecommunications Act.
      2. The provision of data in order to receive marketing communications via the chosen communication channel (i.e. e-mail address, telephone number) is voluntary, but necessary in order to receive commercial information. The consequence of failing to provide personal data will be the impossibility of receiving marketing content.
      3. The Data Controller is entitled to process personal data for the period necessary for the purposes indicated above. Depending on the legal basis, this will be respectively:
        1. the time until your consent to communication via the chosen communication channel (e-mail address, telephone number) is withdrawn,
        2. the time until the objection is submitted
      4. The recipient of marketing communications may opt out of receiving them at any time, in particular by contacting the Data Controller or the DPO (via the contact details indicated above). The withdrawal of consent shall not affect the lawfulness of the use of data during the period in which such consent was in force.
    4. D. LINKEDIN
      1. Axabee is the Data Controller of the personal data of users using the services and products offered by LinkedIn Ireland Unlimited Company with registered office at: Wilton Place, Dublin 2, Ireland (hereinafter: LinkedIn) who visit the Data Controller's Page available at: https://www.linkedin.com/company/axabee (hereinafter: Company Page).
        As the Data Controller, it is responsible for the security of the personal data provided and its processing in accordance with the legal regulations.
      2. The Data Controller processes personal data of users who, using LinkedIn products and services, visit the Company Page. This data is processed:
        1. in connection with the operation of the Company Page, including for the purpose of promoting its own brand (legal basis: Article 6(1)(f) GDPR - legitimate interest);
        2. for the purpose of responding to questions raised via the services offered by LinkedIn (legal basis: Article 6(1)(f) GDPR - legitimate interest); if you provide specific categories of data (e.g. health information), you declare that you consent to their use for the proper handling of the request and the fulfilment of the enquiry, including communication and response (legal basis: Article 9(2)(a) GDPR - consent).
      3. The Data Controller has the right to process:
        1. publicly available personal data (such as username, profile picture, activity status on LinkedIn), the content of comments and other information made publicly available by the user using LinkedIn products and services,
        2. personal information provided by the user of the Company Page, including the collection of information provided in the user profile and other content, comments, messages and communications (e.g., photos, contact information, place of work, place of residence, information about education, interests or beliefs),
        3. other personal data provided by the user in their LinkedIn message (including contact and health data) for the purpose of responding to the user’s enquiry or request to be contacted.
      4. The scope of the processing of personal data, the specific purposes and the rights and obligations of the user using LinkedIn's products and services arise directly from:
        1. LinkedIn's rules and regulations (the document is available on the LinkedIn website at: https://pl.linkedin.com/legal/user-agreement) and
        2. "Privacy Policy" (the document is available on LinkedIn at: https://pl.linkedin.com/legal/privacy-policy) or
        3. laws
        - and are further clarified as a result of the user's actions on the LinkedIn social network.
      5. The Data Controller is entitled to process personal data for the period necessary for the purposes indicated above. Depending on the legal basis, this will be respectively:
        1. the time until the objection is submitted (or the deletion of LinkedIn user account),
        2. the time until the withdrawal of consent (or the deletion of LinkedIn user account). The withdrawal of consent does not affect the lawfulness of data processing during the period in which consent was in force;
        3. the period of time necessary to handle the request sent by the user through the LinkedIn services.
      6. The catalogue of recipients of the personal data processed by the Data Controller derives primarily from the range of products and services used by the LinkedIn user, but also from the user's consent or by law. Subject to all data security guarantees, the Data Controller may provide the personal data of the user visiting the Company Page - in addition to the Data Controller's authorised employees and associates - to other entities that process the data on behalf of the Data Controller, e.g. technical service providers and consultancy service providers (including law firms) and contractors that provide services to the Data Controller on a contractual basis.
      7. The Data Controller will not transfer the personal data of the user using LinkedIn's products and services to countries outside the European Economic Area (countries other than the countries of the European Union and Iceland, Norway and Liechtenstein).
      8. The Data Controller may process personal data of users of LinkedIn products and services who visit the Company Page in order to analyse users' use of the Data Controller's page and related content (keeping statistics) - in the event that users' use of the Company Page and related content triggers the creation of an event for the statistics of the page, with which the processing of personal data is associated (legal basis: Article 6(1)(f) GDPR - legitimate interest).
      9. In the case of personal data processed for the purpose of keeping statistics on user’s actions taken on the Company Page (including watching or stopping watching the Company Page, recommending the Company Page in a post or comment), Axabee and LinkedIn are joint controllers of users' personal data. The types of data and the scope of their processing, as well as the principles of privacy protection and the rights of users, are indicated in detail:
        1. in this document,
        2. in the document "Privacy Policy", published on LinkedIn at: https://pl.linkedin.com/legal/privacy-policy,
        3. in the document "Page Insights Joint Controller Addendum", published on LinkedIn at: https://legal.linkedin.com/pages-joint-controller-addendum.
      10. It is LinkedIn's responsibility to notify users who use LinkedIn's products and services of the processing of data for the purposes of site statistics and to enable them to enforce their rights under the GDPR(information about the data used to create site statistics has been made available on LinkedIn's website at: https://pl.linkedin.com/legal/privacy-policy).
      11. The LinkedIn Data Protection Officer can be contacted via the form provided at: https://www.linkedin.com/help/linkedin/ask/TSO-DPO.
    5. E. FACEBOOK
      1. Axabee is the Data Controller of the personal data of users using the products and services offered by Meta Platforms Ireland Limited with registered office: 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (hereinafter: Meta) who visit the Data Controller's Company Page available at: https://www.facebook.com/axabeecom (hereinafter: Fanpage).
        As the Data Controller, it is responsible for the security of the personal data provided and its processing in accordance with the legal regulations.
      2. The Data Controller processes the personal data of users who visit the Fanpage when using Meta's products and services. This data is processed:
        1. in connection with the operation of the Fanpage, including for the promotion of its own brand (legal basis: Article 6(1)(f) GDPR - legitimate interest),
        2. for the purpose of responding to enquiries made via Messenger or other services offered by Meta (legal basis: Article 6(1)(f) GDPR - legitimate interest); if the user provides special categories of data (e.g. health information), she/he declares that they consent to its use for the proper handling of the request and the fulfilment of the enquiry, including communication and response (legal basis: Article 9(2)(a) GDPR - consent).
      3. The Data Controller has the right to process:
        1. publicly available personal information (such as username, profile picture, activity status on Facebook or Messenger), content of comments and other information publicly shared by the user using Meta's products and services,
        2. personal data provided by visitors to the Fanpage, including the collection of information provided in the user's profile and other content, comments, messages and communications (e.g. photos, videos, contact details, information on interests or beliefs, place of residence),
        3. other personal data provided by the user in the content of their messages via Messenger or other Meta services (including contact details, health data, etc.) in order to respond to the user’s enquiry or to fulfil your contact request.
      4. The scope of processing of personal data, the specific purposes and the rights and obligations of the user using Meta's products and services arise directly from:
        1. Facebook terms and conditions (the document is available at:
          https://www.facebook.com/legal/terms) and
        2. "Data Principles" (the document is available at:
          https://www.facebook.com/policy) or
        3. laws
        - and are further clarified as a result of the user’s actions on the Facebook social network.
      5. The Data Controller is entitled to process personal data for the period necessary for the purposes indicated above. Depending on the legal basis, this will be respectively:
        1. the time until the objection is submitted (or Facebook user account is deleted),
        2. the time until you withdraw your consent (or Facebook user account is deleted); withdrawal of consent does not affect the lawfulness of data processing while consent was in force,
        3. the period of time necessary to handle an inquiry sent by you through Messenger or other Meta services.
      6. The catalogue of recipients of personal data processed by the Data Controller derives primarily from the range of products and services used by the Facebook user, but also from the user's consent or the law. With all guarantees of data security, the Data Controller may provide personal data of users visiting the Fanpage - in addition to persons authorised by the Data Controller - to other entities, including entities processing data on behalf of the Data Controller, e.g. technical service providers and entities providing advisory services (including law firms) and contractors providing services to the Data Controller on the basis of concluded agreements.
      7. The Data Controller will not transfer the personal data of users of Meta's products and services to countries outside the European Economic Area (countries other than those of the European Union and Iceland, Norway and Liechtenstein).
      8. The Data Controller may process the personal data of users of Meta's products and services who visit the Fanpage in order to analyse the use of the Data Controller's page and related content by users (to keep statistics) - in the event that the use of the Fanpage and related content by users triggers the creation of an event for page statistics, with which the processing of personal data is associated (legal basis: Article 6(1)(f) GDPR - legitimate interest).
      9. In the case of personal data processed in order to keep statistics on the actions taken by the user on the Fanpage (including watching or stopping watching the page, recommending the page in a post or comment, liking the page or post, cancelling a “like”), Axabee and Meta are joint controllers of users' personal data. The types of data and the scope of their processing, as well as the principles of privacy protection and the rights of users, are indicated in detail:
        1. in this document,
        2. in the document "Data Principles," published at: https://www.facebook.com/policy,
        3. 3) in the document "Information on website statistics", published on the website:
          https://www.facebook.com/legal/terms/page_controller_addendum.
      10. It is Meta's responsibility to notify users of Meta's products and services of the processing of data for the purposes of the site statistics and to enable them to enforce their rights under the GDPR (information about the data used to produce the site statistics has been made available at: https://www.facebook.com/legal/terms/information_about_page_insights_data).
      11. 11. The Facebook Data Protection Officer can be contacted via the form available at:
        https://www.facebook.com/help/contact/540977946302970.
    6. F. INSTAGRAM
      1. Axabee is the Data Controller of the personal data of users using the products and services offered by Meta on Instagram who visit the Data Controller's Company Page available at: https://www.instagram.com/axabeecom (hereinafter: Company Profile). As the Data Controller, it is responsible for the security of the personal data provided and its processing in accordance with the legal regulations.
      2. The Data Controller processes the personal data of users who visit the Company Profile when using Meta's products and services. This data is processed:
        1. in connection with the maintenance of the Company Profile, including for the purpose of promoting its own brand (legal basis: Article 6(1)(f) GDPR - legitimate interest),
        2. for the purpose of responding to questions asked via Instagram or other services offered by Meta (legal basis: Article 6(1)(f) GDPR - legitimate interest); if the user provides specific categories of data (e.g. health information), she/he declares that they consent to its use for the proper handling of your request and the processing of their enquiry, including communication and response (legal basis: Article 9(2)(a) GDPR - consent).
      3. The Data Controller has the right to process:
        1. publicly available personal data (such as username, profile picture, activity status on Instagram), the content of comments and other information publicly shared by the user using Meta's products and services on Instagram,
        2. personal data provided by the user visiting the Company Profile, including the collection of information provided in the user profile and other content, comments, messages and communications (e.g. photos, videos, contact details, information on interests or beliefs, place of residence),
        3. other personal data provided by users in the content of messages via Instagram or other Meta services (including contact details, health data, etc.) for the purpose of responding to an enquiry sent or to fulfil a contact request.
      4. The scope of processing of personal data, the specific purposes and the rights and obligations of the user using Meta's products and services arise directly from:
        1. 1) Instagram rules and regulations (the document is available at:
          https://help.instagram.com/581066165581870) and
        2. 2) "Privacy Principles" (the document is available at:
          https://privacycenter.instagram.com) or
        3. laws
        - and are clarified as a result of the user's actions on the Instagram social network.
      5. The Data Controller is entitled to process personal data for the period necessary for the purposes indicated above. Depending on the legal basis, this will be respectively:
        1. the time until an objection is submitted (or the user account is deleted from Instagram),
        2. the time until consent is withdrawn (or the user account is deleted from Instagram); withdrawal of consent does not affect the lawfulness of the processing while consent was in force,
        3. the period of time necessary to handle the request sent by the user via Instagram or other Meta services.
      6. The catalogue of recipients of the personal data processed by the Data Controller is primarily determined by the range of products and services used by the Instagram user, but also by the user's consent or by law. With all guarantees of data security, the Data Controller may provide the personal data of the user visiting the Company Account - in addition to the persons authorised by the Data Controller - to other entities, including entities processing data on behalf of the Data Controller, e.g. technical service providers and entities providing consultancy services (including law firms) and contractors providing services to the Data Controller on the basis of contracts concluded.
      7. The Data Controller will not transfer the personal data of users of Meta's products and services to countries outside the European Economic Area (countries other than those of the European Union and Iceland, Norway and Liechtenstein).
      8. The Data Controller may process the personal data of users of Meta's products and services who visit the Company Profile in order to analyse the use of the Data Controller's page and related content by the users (keeping statistics) - in the event that the use of the Company Account and related content by the users triggers the creation of an event for the page statistics, with which the processing of personal data is associated (legal basis: Article 6(1)(f) GDPR - legitimate interest).
      9. In the case of personal data processed for the purpose of keeping statistics on the actions taken by the user on the Company Profile (including watching or stopping watching the Company Profile, recommending the Company Profile in a post or comment, liking the Company Profile or a post, cancelling a “like”), Axabee and Meta are joint controllers of the users' personal data. The types of data and the scope of their processing, as well as the principles of privacy protection and the rights of users, are indicated in detail:
        1. in this document,
        2. 2) in the 'Privacy Policy' document published on the website:
          https://privacycenter.instagram.com/policy,
        3. n the document "Information on site statistics", published at:
          https://www.facebook.com/legal/terms/page_controller_addendum.
      10. It is Meta's responsibility to notify users of Meta's products and services of the processing of data for the purposes of the site statistics and to enable them to enforce their rights under the GDPR (information about the data used to produce the site statistics has been made available at: https://www.facebook.com/legal/terms/information_about_page_insights_data).
      11. 11. Meta's Data Protection Officer can be contacted via the form available at:
        https://www.facebook.com/help/contact/540977946302970.
    7. G. YOUTUBE
      1. Axabee is the controller of the personal data of users who use the products and services offered by Google Ireland Limited with registered office at: Gordon House, Barrow Street, Dublin, D04 E5W5, Dublin, Ireland (hereinafter: Google) within the YouTube service who visit the Data Controller's Company Page available at:
        https://www.youtube.com/channel/UChJ7xxYhQxgaxnghDfgi2aw/featured
        (hereinafter: "Company Channel"). As the Data Controller, it is responsible for the security of the personal data provided and its processing in accordance with the legal regulations.
      2. The Data Controller processes personal data of users who, using products and services within YouTube, visit the Company Channel. This data is processed:
        1. in connection with the operation of the Company Channel, including for the promotion of its own brand (legal basis: Article 6(1)(f) GDPR - legitimate interest);
        2. for the purpose of responding to enquiries made via YouTube or other services offered by Google (legal basis: Article 6(1)(f) GDPR - legitimate interest; if you provide special categories of data (e.g. health information), you declare that you consent to its use for the proper handling of the request and the execution of the enquiry, including communication and response (legal basis: Article 9(2)(a) GDPR - consent).
      3. The Data Controller has the right to process:
        1. publicly available personal data (such as user name, profile picture, activity status on YouTube), comment content and other information publicly available by the user when using the products and services on YouTube,
        2. personal data provided by the user visiting the Company Channel, including the collection of information provided in the user's profile and other content, comments, messages and communications (e.g. photos, videos, contact details, information on interests or beliefs, place of residence),
        3. other personal data provided by users in the content of messages via YouTube or other Google services (including contact details, health data, etc.) for the purpose of responding to their enquiry or to comply with a request to be contacted.
      4. The scope of the processing of personal data, the specific purposes and the rights and obligations of the user when using YouTube's products and services arise directly from:
        1. YouTube regulations (the document is available on the YouTube website at:
          https://www.youtube.com/intl/pl/about/policies/#community-guidelines) and
        2. "Privacy Policy - privacy and terms and conditions" document (the document is available on Google's website at:
          https://policies.google.com/privacy) or
        3. laws
        - and are further clarified as a result of the user's actions on YouTube.
      5. The Data Controller is entitled to process personal data for the period necessary for the purposes indicated above. Depending on the legal basis, this will be respectively:
        1. the time until the objection is submitted (or deletion of YouTube user account),
        2. the time until the withdrawal of consent (or deletion of YouTube user account). The withdrawal of consent does not affect the lawfulness of data processing during the period in which consent was in force;
        3. the period of time necessary to handle the request sent by the user via YouTube or other Google services.
      6. The catalogue of recipients of personal data processed by the Data Controller derives primarily from the range of products and services used by the YouTube user, but also from the user's consent or from legal regulations. With all guarantees of data security, the Data Controller may transfer the personal data of the user visiting the Company Channel - in addition to persons authorized by the Data Controller - to other entities, including entities processing data on behalf of the Data Controller, e.g. technical service providers and entities providing consulting services (including law firms) and contractors performing services for the Data Controller on the basis of concluded contracts.
      7. The Data Controller will not transfer the user’s personal data using YouTube products and services to countries outside the European Economic Area (countries other than the countries of the European Union and Iceland, Norway and Liechtenstein).
      8. The Data Controller may process personal data of users of YouTube products and services who visit the Company Channel in order to analyse users' use of the Data Controller's page and related content (keeping statistics) - in the event that users' use of the Company Channel and related content triggers the creation of an event for page statistics, with which the processing of personal data is associated (legal basis: Article 6(1)(f) GDPR - legitimate interest).
      9. In the case of personal data processed for the purpose of keeping statistics on user actions taken on the Company Channel (including watching or stopping watching the Company Channel, recommending the Company Channel in a post or comment, liking a video, cancelling a “like”), Axabee and Google are separate controllers of users' personal data. The types of data and the scope of their processing, as well as the principles of privacy protection and the rights of users, are indicated in detail:
        1. in this document,
        2. in the document "Privacy Policy - Privacy and Terms and Conditions", published on the Google website at:
          https://policies.google.com/privacy,
      10. 10. It is Google's responsibility to notify users who use YouTube products and services of the processing of data for the purposes of site statistics and to enable them to exercise their rights under the GDPR (information about the data used to create site statistics has been made available on Google's website at:
        https://policies.google.com/privacy).
      11. Google's Data Protection Officer can be contacted via email address: data-protection-office@google.com.
  4. DATA COLLECTED AUTOMATICALLY
    1. The use of the service available at https://booking.resabee.com involves the sending requests to the server, which are automatically recorded in event logs.
    2. The event logs record user session data. In particular, these include the IP address, device type and name, information about the web browser and operating system, date and time of the visit to the Website.
    3. Data recorded in event logs are not associated with specific individuals.
    4. Access to the content of event logs is available to persons authorized by the Data Controller to manage the Website.
    5. A chronological record of events is only auxiliary material used for administrative purposes. Analysis of event logs makes it possible in particular to detect risks, to ensure that the Website is appropriately secure and to compile statistics in order to understand how the Website is used by its users.
    6. User session data is used by the Data Controller to diagnose problems with the functioning of the Website and to analyse possible security breaches, to manage the Website and to perform statistics (legal basis: Article 6(1)(f) GDPR - legitimate interest).
    7. We use cookies on the Website. For more information, please see the "Cookie Policy" available below.
  5. FINAL PROVISIONS
    1. This "Privacy Policy" is for information purposes and applies specifically to the Data Controller's website operating at https://booking.resabee.com.
    2. The Website may contain links to other websites, in particular to other websites of the Data Controller (e.g. axabee.com), social networks (e.g. Facebook, Instagram, LinkedIn, YouTube), as well as to the websites of Axabee's service providers and partners. The Data Controller recommends that each user, when navigating to third-party sites, reads the privacy policies in force there.
    3. The Data Controller reserves the right to make changes to the current "Privacy Policy", in particular in the event of:
      1. technological developments,
      2. changes in generally applicable laws, including those concerning personal data protection or information security,
      3. development of the Website, including implementation of new services and functionalities.
    4. The Data Controller shall notify users of relevant changes to the content of the Privacy Policy in particular by posting a notice on the Website.
    5. This version of the Privacy Policy is applicable as of 22.06. 2023.

Cookies Policy

  1. GENERAL INFORMATION
    1. Axabee Sp. z o.o. with its registered office in Opole, ul. Reymonta 39 (hereinafter: Administrator or Axabee), pursuant to the provisions of Articles 173-174 of the Act of 16 July 2004 Telecommunications Law, informs on the use of cookies and other similar Internet technologies (e.g. Web Storage) in the service available at https://booking.resabee.com (hereinafter: Website).
    2. Only anonymous statistical data about visitors to the Website is collected using cookies and other Internet technologies. As a rule, the information obtained through the indicated technologies does not constitute personal data - it is not assigned to a specific person and does not allow to identify him/her.
    3. 3. In relation to the information collected by cookies, which may be associated to a specific person (it may constitute personal data for the Administrator), the provisions of the „Privacy Policy” shall apply.
    4. he placement and use of cookies and similar internet technologies is not harmful to the user's device (i.e. computer, phone or tablet) and does not cause any changes to either the configuration of the device or the installed software and applications.
    5. The technologies indicated above are used to:
      1. ensure the safe use of the Website,
      2. adapt the content of the Website's pages to the user's preferences and optimising (facilitating or improving) the use of the Website; in particular, these files make it possible to recognise the user's device and appropriately display the website, adapted to the user's individual needs,
      3. compile statistics, analyses and reports on how users use the Website's pages, in order to improve their structure and content.
      4. present advertisements, including based on user preferences.
  2. COOKIES AND OTHER TECHNOLOGIES
    1. During use of the Website, small text information sent by the server is placed on your device. By default, the text files contain information such as the name of the website, the unique identifier of the visitor to the Website, the time the file is stored.
    2. The following types of cookies are used on the Website:
      1. depending on the entity that uses cookies:
        1. own first-party cookies - placed on the end user's device by the Website she/he is using; the file records the name indicating the Administrator's domain (i.e. booking.resabee.com),
        2. third-party cookies - placed via the Website by external entities whose services are used by the Administrator (e.g. Google LLC, HubSpot Ireland Limited).
      2. depending on the duration of storage on the user's device:
        1. session (temporary) cookies - are created each time you enter the Website and are deleted from your device when you close your browser window,
        2. permanent (long-lasting) cookies - are stored in the final device of the person visiting the Website for the time specified in the parameters of cookies or until they are deleted by the user.
    3. The following types of cookies are used on the Website:
      1. essential cookies - they enable the correct display of the website and the use of the basic functions and services available on the Website. They are also used to ensure safety (e.g. they are used to detect abuse of authentication within the Website). Their use does not require the user's consent and they cannot be deactivated by managing cookie settings; (legal basis: Article 6(1)(f) GDPR - legitimate interest);
      2. functional cookies - these enable the Website to remember the user’s preferences and adapt the website to the settings he/she has chosen. Their use can be switched off, but this may result in some services or parts of the Website not working properly (legal basis: Article 6(1)(a) GDPR - consent);
      3. analytical cookies - used to measure and analyse the viewing of a given website (they allow us to measure e.g. the number of visits, views, average time spent on the site, to collect information about the sources of traffic). Thanks to these types of files, we know how users use the Website, which pages are the most popular and we can improve the operation of the Website; (legal basis: Article 6(1)(a) GDPR - consent);
      4. advertising cookies - make it possible to present information tailored to users' preferences (based on browsing history and actions taken by the user, advertisements are displayed on third-party websites, including social networks). They also allow us to measure the effectiveness of advertising campaigns (legal basis: Article 6(1)(a) GDPR - consent).
    4. The Administrator informs that cookies can also be placed and used by third parties. Third-party cookies are placed on the user's device in particular:
      1. in order to protect against spam and ensure system security (we use the so-called "Google reCAPTCHA" on the Website);
      2. in order to enable the use of services and technologies of third parties posted on the Website (e.g. YouTube, Facebook, Instagram, LinkedIn),
      3. in order to study the activity of anonymous users and, on this basis, to generate statistics (e.g. using Google and HubSpot tools) which help us to learn about the use of the Website.
    5. The Administrator also uses the following internet technologies to store data:
      1. Session Storage - a "data store" that allows data to be saved and stored locally in the browser of the user visiting the Website only until the browser window is closed.
      2. Local Storage - a "data store" that allows data to be saved and stored locally in the browser of the user visiting the Website permanently (even after the browser window is closed), until it is deleted by the user.
  3. HOW TO DEAL WITH COOKIES AND OTHER TECHNOLOGIES
    1. The Website user may make choices concerning the use of cookies by the Administrator and third parties (in particular analytical and advertising cookies). Changing the settings of cookies may, however, affect the quality of use of the services or prevent the use of certain functionalities of the Website (e.g. in a situation of disabling cookies necessary for the proper functioning of the Website, saving the settings concerning user preferences).
    2. The user may manage her/his preferences and, at any time, withdraw her/his consent to the placement and storage (on the device she/he uses) of cookies which are not necessary for the proper functioning of the Website and the use of the available functionalities (in particular analytical and advertising cookies) by changing the settings using the tools available on the Administrator's Website (for this purpose, use the "Settings" option), which does not affect the legality of data processing prior to the withdrawal of consent.
    3. The user can also change the settings of cookies or disable their use at any time in their web browser. If she/he does not change the default settings of her/his browser, the cookies will be placed on the end user’s device and will be used in accordance with the rules set by the browser provider.
    4. The user who, after having consulted the information available on the Administrator's Website, does not want cookies and other technologies to remain stored on the device's web browser, should remove them from her/his browser after completing her/his visit to the Website.
    5. Detailed information on the management of cookies in the most popular web browsers (i.e. changing the settings, restricting the storage of cookies, deactivation, self-deletion) is available in the help section of your web browser and on the following pages:
      1. Chrome: https://support.google.com/chrome/answer/95647?hl=pl
      2. Firefox: https://support.mozilla.org/pl/kb/ciasteczka
      3. Microsoft Edge: https://support.microsoft.com/pl-pl/windows/program-microsoft-edge-i-przegl%C4%85danie-danych-a-prywatno%C5%9B%C4%87-bb8174ba-9d73-dcf2-9b4a-c582b4e640dd
      4. Internet Explorer: https://support.microsoft.com/pl-pl/windows/usuwanie-plik%C3%B3w-cookie-i-zarz%C4%85dzanie-nimi-168dab11-0753-043d-7c16-ede5947fc64d
      5. Opera: https://help.opera.com/pl/latest/web-preferences/#cookies
      6. Safari: https://support.apple.com/pl-pl/HT201265
  4. ADDITIONAL INFORMATION
    1. This "Cookie Policy" is for information purposes only and applies only to the website available at:
      https://booking.resabee.com.
    2. The Website contains buttons, tools or content directing to the services and websites of third parties, including the Administrator's partners and service providers. The Administrator recommends that each user, after navigating to the websites of other entities, reads the cookie policies in force there.
    3. This version of the "Cookie Policy" is applicable as of 22.06. 2023