The privacy of Users and the security of their personal data is a priority for us, therefore the protection measures we use ensure the confidentiality of the information we process, while maintaining the transparency of the processes we carry out, where you have the right to know for what purpose and how we process information about you.
Who is the administrator of your data?
The administrator of your data is:
Express Profit sp. Z oo sp. Z oo with its seat in Kielce at ul. Paderewskiego 48, 25-502 Kielce; e-mail: firstname.lastname@example.org, email@example.com
The cloveisland data protection officer can be contacted at firstname.lastname@example.org, email@example.com
Express Profit sp. Z o. O. As the entity managing the cloveisland.com portal / website may also act as a Processor, which, on behalf of other Data Controllers, maintains the ICT infrastructure used to provide individual Services.
How do we process your data? Purposes of processing and the legal basis for processing .
We process personal data in order to enable the use of our Services, which we may define as the necessity to perform contracts for the provision of Services. We process data because it is necessary to fulfill our legal obligations. In addition, the data may be processed as part of our legitimate interest, which is primarily to ensure the security of the provision of services, as well as to establish, investigate or defend claims. In other cases, the basis for processing is the consent you have given voluntarily, which you can withdraw at any time, but this will not affect the lawfulness of the processing carried out before the consent is withdrawn.
Personal data is any information that can identify you, eg your name and surname, telephone number, e-mail address. In the case of legal persons, it also includes the data of members of the management board representing a given entity, data of proxies, proxies or data of employees who are contact persons.
Except for specific cases in which the User consents to the processing of his personal data, in which the processing of the User’s personal data is necessary in connection with:
– with a contract concluded by him with clovisland or,
– The user turned to clovisland with an inquiry, request or request to take specific actions or actions before concluding the contract or in connection with the performance of the contract, or he turned to an entity cooperating with clovisland and the latter forwarded the query to clovisland as the entity competent to hear the case.
Express Profit processes the User’s personal data in order to implement the legitimate interests of the company and processes the User’s personal data for the following purposes:
providing support to the User in order to find an appropriate hotel booking in accordance with the needs and requirements of the user,
providing the User with search results for hotel services tailored to his needs,
developing new products and functions related to searching for hotel services and accommodation, and other tourist services,
conducting direct marketing aimed at users using clovisland’s services regarding the scope of the Services provided by the company or related services provided by cooperating entities, and for the purpose of brand building and better recognition of clovisland.
advertising activities carried out by cloveisland and external entities as part of the Services provided by cloveisland and third party websites / pages,
conducting statistical surveys among users aimed at facilitating the use of cloveisland Services in order to improve the quality of these Services,
User support in the process of booking a hotel or accommodation and other services provided by cloveisland or cooperating entities,
sharing, securing, maintaining, improving and developing Cloveisland Services provided to users,
compliance with the legal obligations imposed on the company by the provisions of generally applicable law in order to prevent fraud and counteract money laundering and protect personal data,
supporting and cooperating with law enforcement agencies in order to ensure the protection of public order in the scope of conducted proceedings,
resolving disputes, considering complaints and objections of users
When the User uses the Cloveisland Services, the company processes the following types of personal data:
personal data enabling identification, such as name and surname, addresses, telephone numbers or e-mail addresses of the User,
personal data such as age, gender or date of birth,
data related to electronic identification, such as IP addresses, cookies, connection moments, device identifiers, mobile advertising identifiers, dates and times of inquiries, time, content of inquiries, (specific page), access status / HTTP status code, amount of data transferred, website receiving the request, browser software and version, operating system and its interface, and language,
data provided by the User’s browser or device,
electronic location data such as GPS data and location data,
financial identification information, such as credit or debit card numbers,
data on the User’s interaction with cloveisland services, including detailed information provided by the User when using the search function as part of the cloveisland Services,
data on reservations made, including data on the hotel, date of stay and price,
security details such as passwords related to cloveisland Services.
When a User uses the cloveisland Services and clicks a link to an accommodation offer listed on the Services, personal data may be sent to cloveisland from the online booking site for each subsequent booking or reservation made by the User on the website.
When the User uses the cloveisland Services, we may share the User’s personal data with the following categories of recipients:
Subsidiaries of cloveisland operating within one capital group and related by capital.
Third party service providers who provide data processing services to us, such as: hosting and storage providers, customer services, communication services, security and fraud prevention services, credit cards and payments, analytics, advertising and marketing services. These providers are required to protect your personal data and are required not to disclose your personal data to anyone and not to use your data for any other purpose.
Third party service providers that are independent data controllers, such as security, anti-fraud, money laundering and counter-terrorism service providers, as well as advertising and marketing providers.
Cooperating entities (business partners) with whom cloveisland may jointly offer products or services. These will be services offered through the cloveisland Services together with or through third party partners.
To external travel service providers, such as: hotel facilities or owners of accommodation facilities, tour operators, carriers, car rental companies, insurance companies in or tour operators.
Law enforcement agencies to prevent, detect and prosecute illegal activities that may pose a threat to state security or public safety, as well as to prevent threats to human health and life and to protect property. We may use certain information about you for profiling in order to detect a specific crime and the person who committed it quickly and efficiently. The effect of a possible finding of reasonable suspicions as to money laundering or terrorist financing is reporting such a transaction to the relevant state authorities or the possibility of refusing the transaction. As a result of such a statement, the conclusion of a contract with the User may also be refused in the future
Providing personal data for the purpose of using the Services is voluntary, except where such an obligation results from applicable law. However, providing data is necessary for the performance of certain Services.
If cloveisland uses the services of suppliers who process data outside the European Union and the European Economic Area, then for the purposes of transferring and processing the User’s personal data outside the European Union, cloveisland applies appropriate remedial measures and safeguards in accordance with the requirements of EU standards for the protection of personal data. in accordance with the Regulation of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 94 / 46 / EC (hereinafter referred to as the “Regulation” or GDPR)
Legal basis for processing and general information :
The information is provided on the basis of art. 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 94/46 / EC (hereinafter referred to as the “Regulation” or GDPR)
Personal Data – this is data within the meaning of Art. 4 point 1) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46 / EC, ie it is all information relating to an identified or identifiable natural person;
Processing of personal data – any operations or sets of operations performed on personal data in an automated or non-automated manner, including collecting, recording, organizing, storing, adapting or modifying, downloading, viewing, using, disclosing, disseminating or otherwise sharing, matching or combining, restriction, removal or destruction;
User – a natural person who performs legal transactions with the entrepreneur not directly related to its business or professional activity, declaring the will to conclude a loan agreement with the Company;
Website / website / portal – a system of internet applications available on the website. Cloveisland .com, used by the User to use the Services provided by the Company
User Account / Client Profile or Profile / Client Account – means an individual internet account set up on the website www.cloveisland.com by the User to use the website / website.
Personal Data Administrator – within the meaning of art. 4 point 7) of the Regulation, which independently or jointly with others determines the purposes and methods of personal data processing, is the company Express Profit Sp. z o. o. a limited liability company with its seat in Kielce, ul. Paderewskiego 48, 25-502 Kielce, entered into the Register of Entrepreneurs of the National Court Register kept by the District Court in Kielce, 10th Commercial Division of the National Court Register under the KRS number: 0000588190, NIP number: 9591967022 ( hereinafter ” Expres Profit Sp. Z oo or “the Company”) the Company, acting on the basis of a written agreement referred to in Art. 28 of the Regulation, may entrust the processing of data to other entities.
2. Contact details: You can contact the Personal Data Administrator
by e-mail: firstname.lastname@example.org, email@example.com or by phone: +48 728 498 069. The Company has a designated data protection officer who can be contacted
by e-mail: firstname.lastname@example.org, email@example.com or in writing to the postal address of Express Profit Sp. z o. o. a limited liability company with its seat in Kielce , ul. Paderewskiego 48, 25-502 Kielce.
Implementation of security measures to protect personal data .
The implementation of the principles of personal data protection takes place on the basis of:
a) risk analysis, in accordance with the requirements set out in Art. 24 GDPR,
b) implementation of the principles of privacy by design and privacy by default (PIA / Privacy by design / Privacy by default), in accordance with the requirements set out in Art. 25 GDPR,
c) implementation of the principles of personal data processing impact assessment (DPIA), in accordance with the requirements set out in art. 35 and 36 GDPR.
The Company applies the technical and organizational measures required by the current provisions on the protection of personal data, necessary to take all measures provided for by law to secure the Personal Data collections – the Company keeps a register of processing activities. The company has appointed a personal data protection officer.
We obtain your personal data directly from you – this is information that you provide to us as part of using the Services.
We also process your personal data when you contact us, eg via our Customer Service Center (BOI) or the Contact Form. This applies to data necessary to communicate with you, including to answer your questions or concerns. For this purpose, we use the data provided by you. The scope of the processed data is limited only to the information required to provide support.
We use your data for the following purposes:
provision of individual Services and their operation,
providing information about the Services performed,
performing legal obligations resulting from the obligations imposed on us under the Act on Counteracting Money Laundering and Terrorism Financing,
providing support during the provision of Services by our employees of the appropriate unit or via the contact form,
providing support in solving technical problems and other issues via the contact form or contacting our employee,
contacting you, including providing information about changes to our Regulations and Policies,
the sale and operation of the Services as well as the implementation of our obligations arising from the contract between us and you
considering complaints for the Services provided,
ensuring the security of the Services provided, including enforcement of anti-fraud and abuse measures,
conducting court proceedings and other proceedings in the event of possible claims,
settlement of the Services.
We also collect your personal data when you contact us via available communication tools, including the use of the contact form, chat or telephone or e-mail. The collected data includes name and surname and e-mail address or contact number for you if you decide to contact us in this form. We process the data for purposes related directly to your inquiry or request, as well as in connection with the proper functioning and provision of a given Service, as well as due to applicable legal provisions, which oblige us to counteract various violations. By sending us a message, you consent to the processing of your personal data contained in its content. You can withdraw your consent at any time by contacting us. We store information about you for the period necessary to achieve the purpose of a given application.
Data that is not necessary to contact the User are always marked as optional in the contact form. These data serve as a justification for the User’s inquiry and improve the handling of his request. The User’s message may be related to various actions taken by the User on the cloveisland.com website. The collected information will only be used to provide the User with assistance related to the booking and a better understanding of the User’s opinion and the performance of the service for you by us or entities cooperating with us. These data are clearly provided on a voluntary basis and with the consent of the User, as provided for in Art.6 sec. 1 lit. a) GDPR. To the extent that this applies to data on communication channels (eg e-mail address or telephone number of the User), the User also agrees to possible contact with him by cloveisland via this channel in order to service the User’s inquiry. The User may withdraw the consent granted at any time.
Cloveisland deletes the data generated in this context when its storage is no longer necessary to achieve the purpose of the contact, or restricts its processing if there are statory retention requirements for such data.
This website cloveisland.com uses social plugins from various providers.
Social media plugins collect data from the User and send it to the server of the respective provider. In order to protect the privacy of the User’s data – cloveisland has taken appropriate remedial measures, thanks to which the providers of individual plug-ins cannot collect User’s data without obtaining their express and prior consent. Each time the User visits other websites related to a given plug-in, it will be initially disabled. If the User does not click on the appropriate field, the plug-in on the website will remain disabled and unavailable. By clicking on the symbol, the plug-in will be enabled and you have consented to the transfer of data to the given Service provider. Legal basis for the use of plugins: Art. 6 sec. 1 lit. a) GDPR.
The enabled plugins also collect personal data, such as the User’s IP address, and send them to the appropriate network that provides the social plug-in. Cloveisland has no influence on the extent to which the User’s data is processed within the network that provides a given social plug-in.
When the User visits the relevant website, the enabled plug-in sets up a cookie with a unique identifier. This allows the network that provides the social plug-in to generate user behavior profiles. This is the case even if the User is not a user of the network that provides the social plug-in. If the User belongs to a network that provides a given social plug-in and logs in while visiting a website, his data and information about his visit to this website may be associated with his profile on the network that provides the social plug-in.
In order to analyze the interaction of Users’ behavior in relation to the Services provided by cloveisland, Cloveisland uses available technical solutions allowing for analysis, thanks to which it can determine how many users use the Cloveisland Services, what information individual Users are looking for and what the interactions, movements and actions of users look like. in connection with the Services provided by cloveisland. Data collected by cloveisland include: data on the referring page, as well as data on which websites as part of the Services are visited by a given User and how often and for how long a given page is displayed. Thanks to this, cloveisland can constantly improve its Services and improve their quality as well as adapt to the individual needs of Users.
Pseudonymised data is used for this purpose. Legal basis: art. 6 sec. 1 lit. f) GDPR.
This website uses Google Analytics, a web analysis service provided by Google Inc. The operating mode of Universal Analytics is used for this. This allows for assigning data, sessions and interactions from various devices to the identifier of a User using a pseudonym, and thus allows for the analysis of actions taken by that User from the level of observed devices.
You can prevent the storage of cookies by selecting the appropriate settings in your browser. In this case, however, the User will not be able to fully use all the functions of the website. You can also prevent Google from collecting and processing data generated by cookies and data related to your use of the website (including your IP address) by downloading and installing the add-on available here . With opt-out cookies, your data will no longer be collected when you visit this website. To prevent cross-device data collection in Universal Analytics mode, you must complete the opt-out on all systems you use. To set an opt-out cookie, please click here: Disable Google Analytics .
The data collected and stored on this website is used for purposes related to the optimization of its operation. This is done using technologies provided by Hotjar Ltd. These data can be used to generate profiles of Users using a pseudonym. Cookies may also be used for this purpose. The data collected using the Hotjar technology is not used to identify the identity of the User visiting this website and will not be combined with the personal data of the User using a pseudonym, unless he or she gives the appropriate consent. You can opt out of using Hotjar technology here .
If you have agreed to receive commercial information, we process your personal data in order to present you with offers regarding the services provided within the portal / website. Offers will be sent to you until your consent is revoked, which you can do yourself by contacting us in a manner convenient for you, eg by e-mail. We obtain your data directly from you and as part of our partnership relations with entities providing economic information. These are entities to which you provide data on the basis of your own decision, we do not have control over the processing of personal data by the above-mentioned. entities. You have the right to withdraw your consent at any time by contacting us in any form whatsoever.
When you use the Services, we may also collect information such as technical data about the devices with which you access them, including internet connection data, IP address or other technical details provided by your browser. In addition, we process information about when and how you use the Services offered on the cloveisland website, such as: measurement data, traffic data, data about your activity. We collect data using cookies or similar technologies.
Cloveisland uses the Google AdWords ad serving system and uses Google Conversion Tracking to personalize online ads based on interests and location.
Ads are displayed based on search requests on pages belonging to the Google Display Network .
Thanks to this technology, Google and Cloveisland (as a Google customer) receive the information that the User has clicked on the ad and has been redirected to the relevant websites. The data obtained in this way is used solely for the purposes of statistical analysis related to the optimization of advertisements.
Cloveisland does not receive any data that would identify the User’s identity. The statistics provided to cloveisland by Google include the total number of Users who clicked on cloveisland ads, as well as any information on whether these Users were redirected to the cloveisland website with a conversion tracking tag. These statistics allow Cloveisland to track which search terms lead Users to click on Cloveisland ads most often and which ads cause Users to contact Cloveisland via the contact form.
If the User does not want to use this technology, he may disable the option of storing cookies necessary for its operation. For this purpose, he must change the appropriate settings in his browser or Application. If he does so, the data on the User’s visits to the website will not be included in the user statistics.
Cloveisland uses on its website the dynamic remarketing function as part of the Google AdWords service. This technology allows cloveisland to place automatically generated targeted advertisements after the User’s visit to the cloveisland website. These advertisements are oriented towards the products and services that were clicked on by the User during their last visit to the cloveisland website.
If you do not want to see interest-based advertising from Google, you can disable ad placement using your Google ad settings .
For more information on how Google’s cookies are used, see the company’s privacy statement .
In the case of establishing business relations with legal entities, we process the personal data of members of the management board representing the legal entity, the data of legal persons’ attorneys, as well as the data of employees who are the contact persons of the legal entity. These data are processed for the purpose of:
conclusion and performance of the contract between the Company, which is a party to the contract, and a legal person – the legal basis is the legitimate interest of the Company,
fulfillment by the administrator of the legal obligations incumbent on the Company in connection with the conducted activity – the legal basis for data processing is the necessity to fulfill the legal obligation incumbent on the administrator resulting from the provisions on counteracting money laundering and terrorist financing, tax laws and accounting regulations,
pursuing possible claims related to the contract concluded between the Company and a legal person – the legal basis for data processing is the necessity of processing to implement the legitimate interest of the Company, which is the possibility of pursuing claims by it,
implementation of other legally justified interests of the Company, which include, in particular, the prevention of fraud and economic crimes.
Voluntary or obligatory data provision:
Providing data is voluntary, but it is necessary to perform booking services and where it is necessary to verify personal data in order to conclude a specific contract (excluding data processing for marketing purposes based on consent, which is not obligatory).
8. Data storage period:
All personal data obtained by us are stored on our servers or those of entities cooperating with us. We use appropriate technical and organizational safeguards to ensure the protection of personal data against unauthorized or unlawful processing, accidental loss, damage or destruction. Entities cooperating with us are also obliged to manage data in accordance with the security and privacy protection requirements adopted by us.
We assure you that when we do not actually need your personal data to provide the Services or for other reasons (in particular legal), this data will be immediately deleted or made anonymous.
Personal data is stored for the period necessary to implement the previously indicated purposes of processing, in particular: in the scope of contract performance until its completion, and then in a legitimate interest to secure any claims of the Company, or until the obligation to store data resulting from the provisions expires laws. These provisions may relate in particular to the obligation to store accounting (accounting) documents relating to the contract and the obligation to store resulting from the provisions on counteracting money laundering and terrorist financing. Providing data is a statory requirement, to the extent specified in the provisions cited above.
Data recipients. Do we share personal data with other entities?
Access to data has the Administrator who manages it, ie the entity providing the Services you use. Your personal data is therefore only transferred when you want to use a given service with your express consent. We assure you that we provide information only to the extent necessary to enable the provision of a specific Service to you. Due to the disclosure of personal data to entities providing individual Services, they become independent data administrators.
The recipient of the data may be entities with whom we cooperate as part of the support of our business and permanent cooperation also with other external entities as well as with bodies authorized to receive such data under the law.
We also use the services of entities that provide us with tools to improve our work, in particular for internal communication or marketing tools.
We are obliged to apply the provisions on counteracting money laundering and terrorist financing, where we are obliged to submit reports to the relevant supervisory authorities, including the General Inspector of Financial Information in Warsaw, which, as a government administration body, controls compliance with the above-mentioned regulations. regulations. Reports are generated and sent automatically by our software. We also cooperate with entities providing analysis services aimed at counteracting fraud and abuse in order to ensure the security of payment processing. In addition, we use the services of professionals who provide services in the field of law, taxes and accounting. The data is also made available to banks executing specific ordered transactions.
Additionally, we are committed to maintaining financial security measures. Therefore, we may also share data with the police or other authorities in the event of a suspicious transaction or when your activity indicates a high risk of money laundering or other act that may constitute a criminal offense.
We would also like to inform you that if you use the online forms available on this website – we make an inquiry as part of the reCAPTCHA plugin, which includes sending the IP address and possibly other data required by Google LLC.
You have the right to object to the processing of your personal data at any time, if the processing of your personal data is carried out on the basis of our legitimate interest. You can do this by sending a message to the address firstname.lastname@example.org, email@example.com or by contacting our BOI-Customer Service Office by phone as well as in any other form by submitting to us such a declaration of will. You also have the right to withdraw your consent (if the basis for the processing of your personal data was such consent). You can do this by contacting our BOI at firstname.lastname@example.org, email@example.com or by phone or in any other form by submitting such a declaration of will to us. In any case, you can withdraw your consent at any time. In addition, if you believe that there are any irregularities in the processing of your personal data, you have the right to lodge a complaint with the Office for Personal Data Protection in Warsaw at any time.
The same situation occurs if cloveisland processes personal data for direct marketing purposes, the User has the right to object to such processing at any time, including profiling, to the extent to which the processing is related to such direct marketing. (Article 21 (2) of the GDPR), where it can be done by contacting our BOI at firstname.lastname@example.org, email@example.com or by phone, as well as in any other form by submitting such a declaration of will to us. If the User objects to the processing of data for direct marketing purposes, cloveisland will no longer process the User’s personal data for such purposes.
You also have the right to access your data, request its removal, rectification, processing restrictions, objection and transfer of data to another entity. You can exercise these rights by contacting us directly by sending us a message at firstname.lastname@example.org, email@example.com.