Test popupu

Click here to change this text.trret Lorem ipsum dolor sit amet, consectetur adipiscing elit. Ut elit tellus, luctus nec ullamcorper mattis, pulvinar dapibus leo.

Call To Action

PRIVACY POLICY

This Privacy Policy contains information regarding the processing of personal data of individuals using, or representing entities using, services provided by Film Hotel Sp. z o.o., individuals visiting websites, in particular the website available under the domain kadr.pl or social media profiles operated by Film Hotel Sp. z o.o., as well as individuals contacting us.

I. Personal Data Controller

The controller of personal data is Film Hotel Sp. z o.o., ul. Łąkowa 29,
90-554 Łódź, Poland, VAT ID (NIP): 7272750210
(hereinafter referred to as the “Controller”).

The Controller may be contacted in writing at the address indicated above or via email at: [email protected]

II. General Conditions of Personal Data Processing

The processing of personal data by the Controller is carried out in accordance with applicable law, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (hereinafter referred to as the “GDPR”).

The processing concerns individuals and personal data depending on the purpose for which they are processed (the purposes of processing are described in detail in Section III of this Privacy Policy). Providing data is voluntary; however, failure to provide it may result in the inability to fulfill a specific purpose, such as responding to an inquiry. If the provision of personal data is required, the Controller will inform the individual directly.

The Controller attaches great importance to the protection of privacy and confidentiality of personal data and exercises due diligence in selecting and applying appropriate technical and organizational measures ensuring the protection of processed personal data. Full access to databases is granted only to persons duly authorized by the Controller. The Controller protects personal data against disclosure to unauthorized persons and against processing in violation of applicable laws.

III. Legal Basis and Period of Personal Data Processing

All personal data processing is carried out for specific, explicit, and legally justified purposes. The Controller ensures that no personal data is collected or processed for purposes inconsistent with those indicated below.

Contract Performance

Activities related to concluding and performing contracts are carried out on the basis of Article 6(1)(b) GDPR and include in particular:

  • providing services in accordance with the concluded agreement;
  • contacting individuals regarding provided services;
  • taking steps prior to concluding a contract, in particular providing an offer at the request of the data subject.

Data is processed for the duration of the contract.

Website Operation

Displaying the Controller’s websites is based on Article 6(1)(f) GDPR in connection with the legitimate interests pursued by the Controller, including operating websites, ensuring security, and enabling proper use by users.

The processing period depends on the cookie or similar technology used (essential cookies – see Section VII Cookie Policy). Detailed retention periods for individual cookies are specified in the cookie banner displayed on the Controller’s website.

Cookies that are not essential are used based on the user’s consent (Article 6(1)(a) GDPR), granted prior to their use. Consent may be withdrawn at any time.

The Controller uses IP addresses collected during internet connections solely for technical purposes related to server administration. IP addresses are also used to collect general statistical demographic information (e.g., region from which the connection originates).

Contact and Business Relations

Establishing business relationships, including responding to inquiries from data subjects, is based on Article 6(1)(f) GDPR in connection with the legitimate interests pursued by the Controller consisting of responding to inquiries.

Personal data will be processed until an effective objection to processing is submitted, but no longer than until the last day of the calendar year following 3 years from the Controller’s response.

Establishing or maintaining cooperation with a contractor/client represented by the data subject or on whose behalf the individual contacts the Controller under a concluded agreement is based on Article 6(1)(f) GDPR in connection with the Controller’s legitimate interest in proper contract performance.

The scope of processed data includes data specified in the agreement. Data will be retained until an effective objection is submitted, but no longer than the duration of the agreement or cooperation.

Claims and Complaints

Pursuing or securing potential claims and handling complaints is based on Article 6(1)(f) GDPR in connection with the legitimate interests pursued by the Controller related to protecting its rights and the rights of individuals concerned.

Data retention corresponds to the limitation period applicable to the claim.

Marketing Activities

Marketing activities concerning the Controller’s own services or third-party services are carried out on the basis of Article 6(1)(f) GDPR in connection with the Controller’s legitimate interests in promoting services and establishing cooperation.

Personal data is processed until consent to receive communications is withdrawn, or until an effective objection to processing is submitted. In the absence of an objection, data will not be processed longer than 3 months after the last correspondence.

Accounting and Tax Obligations

Fulfillment of accounting and tax obligations is carried out on the basis of Article 6(1)(c) GDPR in connection with applicable tax and accounting regulations.

Data is retained for the period required by law.

Analytics and Statistics

Analytical and statistical activities are carried out on the basis of Article 6(1)(f) GDPR, i.e., the Controller’s legitimate interest related to activity analysis, website optimization, and estimating user interests.

Personal data is processed until the use of a given service/functionality ends or until an effective objection is submitted, but no longer than until the last day of the calendar year following 3 years from the date the Controller obtained the data.

Social Media Profiles

Managing social media profiles and informing users about the Controller’s activities, promoting events, brand, products, and services, building and maintaining a community, and communicating via available functionalities is based on Article 6(1)(f) GDPR in connection with the Controller’s legitimate interests.

Data is processed for the duration of the user’s interaction with the social media profile or until an effective objection is submitted.

Competitions and Promotional Campaigns

Conducting competitions/promotional campaigns, including selecting winners and awarding prizes, is based on Article 6(1)(f) GDPR as the Controller’s legitimate interest in organizing such campaigns.

Data is processed until the competition ends and all related activities are completed. Winners’ data will be processed for one month after the competition ends.

IV. Rights of Data Subjects

A person whose personal data is processed by the Controller has the right to:

  • access their personal data and obtain a copy;
  • rectify data;
  • request deletion of data;
  • restrict processing;
  • data portability;
  • object to processing based on the Controller’s legitimate interest due to their particular situation;
  • object to processing for marketing purposes based on the Controller’s legitimate interest;
  • lodge a complaint with the supervisory authority if they believe the processing of personal data by Film Hotel Sp. z o.o. violates applicable law (President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw, Poland).

Individuals also have the right to withdraw consent if processing is based on consent (withdrawal does not affect the lawfulness of processing carried out before withdrawal).

Rights may be exercised in any form, including by sending a request to: [email protected]

If identification of the requesting person is not possible, the Controller may request additional information.

V. Recipients of Personal Data

Personal data may be transferred to entities authorized to receive it under applicable law, including competent judicial authorities.

Data may also be transferred to trusted recipients such as:

  • carriers and postal service providers;
  • accounting service providers;
  • legal service providers;
  • technical service providers (development and maintenance of IT systems and websites);
  • software and IT system providers;
  • debt collection companies.

The Controller transfers personal data outside the European Economic Area (EEA) or to international organizations only when necessary and with an appropriate level of protection.

Transfers outside the EEA are based on:

  • adequacy decisions issued by the European Commission;
  • standard contractual clauses approved by the European Commission;
  • or other legal grounds, such as explicit consent of the data subject.

Detailed information regarding the legal basis for transfers related to individual providers is available from the Controller via email at: [email protected]

VI. Other Information Regarding Data Processing

The Controller may process personal data in an automated manner, including profiling. However, automated processing will not result in decisions producing legal effects or similarly significantly affecting the individual concerned.

Such processing may influence the selection of displayed advertisements or offered products and services.

VII. Cookie Policy

VII.I. General Information

The Controller uses cookies or similar technologies (hereinafter collectively referred to as “cookies”), understood as IT data, in particular text files, intended for use on the Controller’s websites and stored on users’ devices.

Information collected through cookies allows services and content to be tailored to users’ individual needs and preferences and is also used to develop general statistics regarding website usage.

Data collected through cookies is gathered solely for performing specific functions for customers and is encrypted to prevent access by unauthorized persons.

The Controller may process data regarding the user’s device, location, activities on the website (e.g., visit duration), and other data depending on the cookie used (e.g., interest in a selected advertisement).

As a rule, cookies are not personal data; however, when combined with other information, they may constitute personal data to a certain extent.

VII.II. Cookies Used on the kadr.pl Website

The Controller uses:

  • session cookies – temporary files stored until logout, leaving the website, or closing the browser;
  • persistent cookies – stored for the period specified in cookie parameters or until manually deleted.

The Controller uses the following categories of cookies:

  • Essential cookies – enable proper website functioning and cannot be disabled.
  • Statistical cookies – allow monitoring website traffic and analyzing user choices and visit numbers.
  • Marketing cookies – used to display and personalize advertisements based on user behavior analysis.
  • Functional cookies – remember user preferences such as language, content layout, or region.

The Controller uses both first-party and third-party cookies.

Third-party providers include:

  • Google Inc. (Google Analytics, Google Tag Manager, reCAPTCHA);
  • Meta Platforms Inc. (Facebook Pixel and marketing cookies).

Social Media Plugins

The website also uses social media plugins from services such as Instagram, TikTok, LinkedIn, YouTube, and Facebook.

When visiting the website, providers of these plugins may receive information regarding:

  • the visit,
  • user identifiers,
  • browser information.

When logged into a social media service, this information may be linked directly to the user’s profile.

More information:

VII.III. Cookie Management

All cookies except essential cookies require user consent before use.

Users choose which cookies they accept. Until explicit consent is granted, non-essential cookies remain blocked.

Users may change cookie settings at any time on the Controller’s website by withdrawing consent or objecting to non-essential cookies.

Cookie settings may also be modified directly in the web browser. Users can configure browsers to:

  • notify them about cookie placement,
  • block automatic cookie storage.

Depending on the browser, settings may be changed according to the following information:

  • Microsoft Edge
  • Chrome
  • Opera
  • Mozilla Firefox
  • Safari

Restricting cookies may cause some website functionalities to work improperly.

Scroll to Top