Privacy and Cookies Policy

I. Personal Data

We publish this document to explain the reasons why we collect and process personal data as part of our business activities:

1. What is personal data?

Personal data includes any information that makes it possible to distinguish one person from others without significant effort. Such information may relate directly to an individual (such as a name and surname, identification number, and sometimes even an email address or online account), as well as information that does not describe that person directly. For example, it may concern their characteristics, health condition, opinions, place of residence, habits, race, or religion.

2. What personal data do we process?

We process data provided to us by our Clients, Business Partners, and Employees in connection with the use of our services, cooperation with us, or employment.

3. What does data processing mean?

Data processing includes any activities that may be performed on personal data, both active operations such as collecting, obtaining, recording, combining, modifying, or sharing data, as well as passive operations such as storing, restricting, deleting, or destroying data.

4. Who is the Data Controller (i.e., who is responsible for the processing and security of your data)?

The controller of your personal data is DESTRI (PTY) LTD C/O P O BOX 84641, GREENSIDE, 2034 SOUTH AFRICA, correspondence email address: contact@destrilodge.com.

5. On what legal basis and for what purpose do we process your data?

Any processing of your personal data must be based on an appropriate legal basis compliant with applicable laws. Such a basis may be your consent to the processing of personal data or other legal provisions permitting such processing, including those contained in Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons regarding the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (referred to as the “GDPR”), as well as various national laws and regulations.

Your personal data may be processed by us for several different purposes, including:

• You may provide us with your data by sending us an email. In such a case, we process your data based on your consent, which is granted automatically when you send us your data (e.g., your email address). Your consent is voluntary, and you may withdraw it at any time. In such a case, we will immediately delete all information you have provided, unless you have become our Client.
• If you are our Client or a person interested in using our services, your data is processed in connection with a contract concluded with you or as part of preparations for entering into such a contract. This always takes place with your knowledge and consent. By expressing your intention to conclude a contract, you are aware of which personal data will be required for its execution, and after signing the contract, you know which personal data you have provided or will provide in the future for this purpose.
• We may also process your data to ensure the security of our IT network and information systems. This occurs when you use or connect to our IT infrastructure, for example by visiting our website or sending us messages. This constitutes our legitimate interest.
• If you are interested in working with us, your data is processed in the form of the application or CV submitted by you. This is done with your knowledge and written consent, which you may withdraw at any time. In such a case, your application will not be considered, and all provided data will be immediately deleted. Once employed by us, further rules regarding the processing of your data and the mandatory scope of its collection and retention are governed by labor law regulations.

6. Who do we share your data with?

In accordance with applicable law, we may transfer your data to entities processing it on our behalf, such as postal operators, accounting offices, IT service providers, or other subcontractors specified in agreements concluded with you. We are also obliged to disclose your data upon request to entities authorized under applicable law (e.g., courts or law enforcement authorities). Such disclosure will only take place if they submit a formal request indicating the legal basis that authorizes them to obtain such information.

We do not intend to transfer your data to third countries or international organizations outside the European Economic Area. Within the European Union, thanks to the GDPR, you are guaranteed the same level of protection of your personal data in all Member States. The text of the GDPR is available at:

http://eur-lex.europa.eu/legal-content/PL/TXT/?uri=OJ:L:2016:119:TOC

7. How long will we process your data?

We make every effort to limit both the scope of collected data and the duration of its processing to the absolute minimum necessary. To achieve this, we regularly review our paper and electronic records and remove any data that is no longer required.

Please note that the period for which your data is processed may be determined by separate legal regulations beyond our control. Such regulations may require us to retain your data regardless of your wishes. Examples include labor law, social security regulations, and accounting regulations.

If you have used our services and entered into an agreement with us, we will retain your data contained in the related accounting and financial documentation and process it for a period of 5 consecutive calendar years from the date of purchase or conclusion of the agreement, in accordance with applicable accounting regulations.

If we intend to use your data for a purpose other than that for which it was originally collected, you will always be informed in advance and given the opportunity to object.

8. What rights do you have regarding your data?

If we process your personal data, you always have the right to:

• request access to your data – within the scope of Article 15 of the GDPR,
• request rectification of your data – within the scope of Article 16 of the GDPR,
• request erasure of your data – within the scope of Article 17 of the GDPR,
• request restriction of processing – within the scope of Article 18 of the GDPR,
• object to the processing of your data – within the scope of Article 21 of the GDPR,
• data portability, including obtaining a copy of your data – within the scope of Article 20 of the GDPR.

All of these rights are described in detail in Articles 15–21 of the GDPR, available at:

http://eur-lex.europa.eu/legal-content/PL/TXT/?uri=OJ:L:2016:119:TOC

You may also withdraw your consent to the processing of your personal data at any time. In such a case, we will immediately delete your personal data unless we are legally required to continue processing it. For example, if you request the removal of your email address from our newsletter mailing list, it will be deleted immediately.

If you believe that we have violated your rights in any way or failed to ensure the security of your personal data, you have the right to lodge a complaint with the supervisory authority, which is currently the President of the Personal Data Protection Office.

9. Automated decision-making and profiling information.

We do not make any decisions based on your data that are carried out solely by automated means, without human involvement. We also do not undertake any activities aimed at profiling you.

10. How do we protect your data?

To ensure the security of your data, we implement organizational and technical measures required by law. We have installed the necessary physical safeguards at our premises to prevent unauthorized access to personal data. Our employees hold appropriate authorizations and may process data only to the extent necessary for the proper performance of their duties.

11. Protection of minors’ privacy

Our website does not monitor or verify information regarding the age of users, senders, or recipients of messages. Contact information provided by visitors (such as telephone numbers and email addresses) is used for order processing and for sending information about our company.

Minors should not submit any information, place orders, or subscribe to services provided by our company without the consent of their parents or legal guardians. We will require such consent whenever we become aware that a user is a minor (“child”) within the meaning of applicable personal data protection laws.

12. Contact details for the person responsible for personal data protection

For matters relating to personal data protection, you may contact us by sending an email to: contact@destrilodge.com

II. Cookies

1. What are cookies and what are they used for?

Cookies are text files stored on your device and used by a server to recognize that device when reconnecting. Cookies are downloaded each time you enter or leave a website. Cookies are not used to identify you personally, but rather to identify your device. This allows the displayed content to be tailored to your browser, device type, and technical capabilities (such as screen resolution or desktop/mobile version).

Cookies are commonly used for counters, surveys, online stores, websites requiring login, advertising, and monitoring visitor activity. They also allow websites to remember your interests and customize displayed content and advertisements accordingly.

Virtually all websites operating on the Internet today use cookies, including search engines, news websites, blogs, online stores, government websites, magazines, and newspapers. Our website also uses cookies.

More information about cookies can be found at:

www.wszystkoociasteczkach.pl

2. What do cookies do?

Generally, cookies operate according to the following principles:

• they identify information about the computer and browser used to browse websites, allowing, for example, determination of whether a particular computer has previously visited the website,
• data obtained from cookies is not combined with personal data collected from users through registration or other means,
• they are not harmful to you, your computer, or your smartphone and do not affect the operation of your devices,
• they do not alter the configuration of end-user devices or installed software,
• the default cookie settings allow only the server that created the cookie to read the information contained within it,
• based on your activity on visited websites, they provide information to servers that helps tailor displayed content to your preferences.

3. What types of cookies are there?

The following types of cookies are used:

• Session cookies – temporary files stored in the browser’s memory until the browsing session ends (i.e., until the browser is closed). These cookies are essential for certain applications and functionalities to work correctly. They should be automatically deleted from the device once the browser is closed.
• Persistent cookies – facilitate the use of frequently visited websites by remembering preferences such as color schemes or menu layouts. These files are stored for a longer period and can be managed through browser settings. Each time you revisit a website, data from these cookies is transmitted to the server. This type of cookie is sometimes referred to as a “tracking cookie.”
• Third-party cookies – files originating from advertising servers, search engine servers, and similar services cooperating with the website owner. They allow advertisements to be tailored to your preferences and habits and often enable free access to certain website content. They are also used to count advertisement clicks, track user preferences, and similar activities.

4. Do you have to consent to our use of cookies?

Please note that you can manage cookies yourself. Internet browsers usually enable cookies by default and allow you to:

• accept cookies, enabling full use of website functionality,
• manage cookies on a site-by-site basis,
• specify settings for different cookie types, such as treating persistent cookies as session cookies,
• block or delete cookies.