Przejdź do treści
Logo Kopalnia Soli w Bochni
Logo Kopalnia Soli w Bochni
Buy ticket
Bochnia Salt Mine

Privacy policy

  1. The administrator of Personal Data on the website at kopalnia-bochnia.pl, hereinafter referred to as the Website, is Kopalnia Soli Bochnia sp. z o.o. with its registered office at: 15 Campi Street, 32-700 Bochnia, entered in the Register of Entrepreneurs of the National Court Register kept by the District Court for Krakow-Śródmieście in Krakow, XII Economic Department of the National Court Register, under KRS number: 0000478929, NIP: 8680000485, REGON: 000867845.
  2. Respecting your rights as personal data subjects (data subjects) and respecting the applicable laws, including in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016. on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and the repeal of Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as RODO, the Law of May 10, 2018 on the Protection of Personal Data (Journal of Laws 2018, item 1000, hereinafter referred to as the Law) and other relevant data protection laws, we undertake to maintain the security and confidentiality of the personal data obtained from you. All employees have been properly trained in the processing of personal data, and our company, as a Personal Data Administrator, has implemented appropriate safeguards and technical and organizational measures to ensure the highest level of personal data protection. We have implemented procedures and policies for the protection of personal data in accordance with the RODO, through which we ensure the legality and reliability of data processing, as well as the enforceability of any rights you have as a data subject. Additionally, if necessary, we cooperate with the supervisory authority in the Republic of Poland, i.e. the President of the Office for Personal Data Protection (hereinafter referred to as PUODO).
  3. Any inquiries, requests, complaints regarding the processing of personal data by our company (Personal Data Administrator), hereinafter referred to as Submissions, should be addressed to the following e-mail address: iod@kopalnia-bochnia.pl or in writing to the address of the Personal Data Administrator, i.e. Kopalnia Soli Bochnia Sp. z o.o., 15 Campi Street, 32-700 Bochnia.
  4. The content of the Application must clearly indicate:
    1. Data of the person or persons affected by the Notification,
    2. the event that is the reason for the Notification,
    3. present their demands and the legal basis for those demands,
    4. indicate the expected manner of handling the case.
  5. We collect the following personal information on our Website:
    1. Name – in order to use the services of our Website, you will be asked to provide your name so that we can complete the services and have the ability to contact you
    2. telephone number – it happens that we call you in case of unexpected events at the same time proposing the most favorable solution, while providing a telephone number is voluntary
    3. e-mail address – through the e-mail address we send you a confirmation of the services you will use, and we contact you if there is such a need related to the provided services. The e-mail address is also necessary to send you a message via the contact form available on the Website. If you have become a subscriber to our newsletter, we will also send you commercial information by e-mail several times a month,
    4. TIN – Tax Identification Number we collect from entrepreneurs and individuals who request an invoice and have a TIN number,
    5. IP address of the device – information resulting from the general rules of connections made on the Internet such as IP address (and other information contained in system logs) is used by the administrator of the Website for technical purposes. IP addresses may also be used for statistical purposes, including in particular the collection of general demographic information (e.g. about the region from which the connection is made).
  6. Provision of the data indicated in the preceding paragraph is necessary in the following cases:
    1. in order to use the services on our Website, including, in particular, through the Contact Form provided on the Website,
    2. for the purpose of carrying out the newsletter service (subscription) – if you want to be informed about interesting events and commercial offers, you can become a subscriber to the newsletter we run; joining the subscription is voluntary and you can unsubscribe from it at any time.
  7. Our Website uses Cookies technology in order to adapt its functioning to your individual needs. Accordingly, you may agree that the data and information you have entered will be remembered so that you can use them the next time you visit our Website without having to enter them again. Owners of other sites will not have access to this data and information. If, on the other hand, you do not agree with the personalization of the Website, we suggest that you disable cookies in the options of your Internet browser.
  8. Each of you, as a user of our Website, has the opportunity to choose whether and to what extent you want to use our services and share information and data about yourself to the extent specified in the contents of this Privacy Policy.
  9. Your personal data is processed by our company as a Personal Data Controller in order to perform the services provided to you (i.e., data subjects) offered on the Website. In accordance with the principle of minimization, we process only those categories of personal data that are necessary to achieve the purposes referred to in the preceding sentence.
  10. We process personal data for the time necessary to achieve the purposes listed in the preceding paragraph. Personal Data may be processed for a longer period than the period indicated in the preceding sentence in cases where such a right or obligation imposed on the Personal Data Controller results from specific provisions of law or where the service we provide is of a continuous nature (e.g. newsletter subscription).
  11. The source of the Personal Data processed by the Controller is the data subjects.
  12. Your personal data is not transferred to a third country within the meaning of the RODO.
  13. We do not share any personal data with third parties without the express consent of the data subject. Personal data without the consent of the data subject may be shared only with public law entities, i.e. authorities and administration (e.g. tax authorities, law enforcement agencies and other entities authorized by generally applicable laws).
  14. Personal data may be entrusted for processing to entities that process such data on behalf of our company as Personal Data Controller. In such a situation, as the Personal Data Controller, we enter into an entrustment agreement with the processor for the processing of personal data. The processor shall process the entrusted personal data, but only for the purposes, to the extent and for the purposes indicated in the entrustment agreement referred to in the preceding sentence. Without entrusting your personal data to the Processor, we would not be able to conduct our business on the Website. As Personal Data Administrator, we entrust personal data for processing to:
    • providing hosting services for the website on which our Website operates,
    • providing other services to us as Data Controller that are necessary for the ongoing operation of the Website.
  15. Personal data is not subject to profiling by the Personal Data Administrator.
  16. In accordance with the provisions of the RODO, each person whose personal data we process as a Personal Data Controller has the right to:
    1. to be informed about the processing of personal data , as referred to in Article 12 of the RODO – the Administrator is obliged to provide you, as the data subject, with the information specified in the RODO (among other things, about your data, the contact details of the DPO, the purposes and legal grounds for the processing of personal data, the recipients or categories of recipients of personal data, if any, or the period for which the data will be processed or the criteria for determining that period); this obligation should be fulfilled already at the moment of data acquisition (i.e., e.g., when the customer places an order in the online store). when a customer places an order in an online store), and if the data are not obtained from the data subject, but from another source – within a reasonable period, depending on the circumstances; the Administrator may refrain from providing this information if the data subject already has it,
    2. access to your personal data as provided for in Article 15 of the RODO – when you provide us with personal data, you have the right to inspect and access it; however, this does not mean that you have the right to access all documents on which your data appears, as they may contain confidential information; you do, however, have the right to know what your data is and for what purpose we process it, and the right to obtain a copy of your personal data, with the first copy being issued free of charge, and for each subsequent copy, in accordance with the provisions of the RODO, we charge an appropriate administrative fee corresponding to the cost of making the copy,
    3. Correcting, supplementing, updating, rectifying personal data, as referred to in Article 16 of the RODO – if your personal data has changed, please inform us as the Personal Data Controller of this fact, so that the data we have will be in accordance with the actual state and up-to-date; also, if there has been no change in personal data, but for any reason the data is incorrect or has been recorded incorrectly (e.g. due to a typing error), please inform us in order to correct or rectify such data,
    4. deletion of data (right to be forgotten), as referred to in Article 17 of the RODO – in other words, you have the right to request the “deletion” of data held by us as a Personal Data Controller, and the right to request that we, as a Personal Data Controller, inform other controllers to whom we have provided your data of the need to delete it. You may request deletion of your personal data primarily when:
    • the purposes for which the personal data was collected have been achieved, e.g., we have fulfilled the sales contract concluded with you in full,
    • the basis for the processing of your personal data was solely consent, which was subsequently revoked, and there is no other legal basis for further processing of your personal data, e.g. if you unsubscribe from the newsletter and otherwise no longer use our company’s offerings,
    • you have lodged an objection based on Article 21 of the RODO and you believe that we have no overriding legal grounds to continue processing your personal data,
    • Your personal data was processed unlawfully, i.e. for unlawful purposes or without any basis for the processing of personal data – please note that in this case you must have a basis for your request,
    • The necessity of deleting your personal data arises from the law,
    • personal data concerns a minor and was collected in connection with the provision of information society services,
    1. Restriction of processing, as referred to in Article 18 of the RODO – you can apply to our company with a request to restrict the processing of your personal data (which would consist in the fact that, until the dispute is clarified, our company would primarily only store), if:
      • You question the accuracy of your personal data, or
      • you believe that we are processing your data without a legal basis, but at the same time you do not want us to delete the personal data (i.e. you do not exercise the right referred to in the preceding paragraph), or
      • you have filed an objection as referred to in paragraph f of this section, or
      • Your personal data is needed to establish, assert or defend claims, e.g. before a court of law,
    2. Data portability, referred to in Article 20 of the RODO – you have the right to obtain your data in a computer-readable format and the right to send this data in such a format to another controller; you have this right only if the basis for the processing of your data was consent (e.g. for a newsletter subscription) or the data was processed by automated means,
    3. object to the processing of your personal data, as provided for in Article 21 of the RODO – you have the right to object if you do not agree with our processing of your personal data that we have so far processed for legitimate purposes in accordance with the law; in particular, you have the right to object to the processing of your personal data for direct marketing purposes (e.g. newsletter subscription),
    4. not to be subject to profiling as referred to in Article 22 in conjunction with Article 4(4) of the RODO – on our Website, you will not be subject to automated decision-making or profiling within the meaning of the RODO, unless you consent to it; in addition, we will always inform you of profiling, should it take place,
    5. lodge a complaint to the supervisory authority (i.e. the President of the Office for Personal Data Protection) referred to in Article 77 of the RODO – if you believe that we are processing your personal data unlawfully or in any way violating your rights under generally applicable data protection laws.
  17. With regard to the right to erasure (right to be forgotten), we point out that under the provisions of the RODO, you do not have the right to exercise this right if:
    1. processing of your personal data is necessary to exercise your right to freedom of expression and information, e.g., if you have posted your data on a blog, in comments, etc,
    2. processing of personal data is necessary for our company to comply with legal obligations under the law – we cannot delete your data for the period of time necessary to comply with obligations (e.g., tax obligations) imposed on us by the law,
    3. processing of your data is done for the purpose of investigating, establishing or defending claims.
  18. If you wish to exercise your rights referred to in the preceding paragraph, please use the appropriate tabs on the Website that allow you to delete your account and data collected on our Website, or send a message by e-mail to: iod@kopalnia-bochnia.pl or in writing to the mailing address referred to in para. 3 above.
  19. Each identified security breach shall be documented, and in the event of one of the situations specified in the provisions of the RODO or the Act, data subjects and, if applicable, the PUODO shall be informed of such a data breach.
  20. All capitalized words have the meaning given to them in the Terms and Conditions of our Website, unless otherwise stated in this Privacy Policy.
  21. In matters not regulated by this Privacy Policy, the relevant provisions of generally applicable law shall apply accordingly. In the event of any inconsistency between the provisions of this Privacy Policy and the aforementioned regulations, these regulations shall prevail.