Information about cookies

Privacy Policy on the Use of Cookies

1. This Privacy Policy sets out the rules for the processing and protection of personal data provided by users in connection with their use of the services offered through the qubushotel.com website (the “Website”).

2. The controller of your personal data processed via the Website is Qubus Hotel Management sp. z o.o. with its registered office in Wrocław, entered in the Register of Entrepreneurs of the National Court Register under KRS number 0000014268, at ul. Skierniewicka 18, 53-117 Wrocław (the “Controller”).

3. The Controller operates in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (the “GDPR”), and with the Act of 12 July 2024 – Electronic Communications Law (Journal of Laws of 2024, item 1221, as amended).

4. The Controller collects information about users and their behaviour in the following ways:

• through information voluntarily entered in forms;
• through the collection of cookies.

5. When a user visits qubushotel.com for the first time, they are informed about the use of cookies by a dedicated cookie banner. The storage and activation of optional cookies (analytics, tracking and marketing cookies) requires the user’s explicit, active and voluntary consent. If the user does not change the banner’s default settings or does not expressly click the consent button, optional cookies will not be stored on the user’s device.

6. The storage of cookies in the “Strictly Necessary” category is required to ensure the proper provision of technical services on the Website. These cookies contain information required for the Website to function correctly, in particular in those parts of the Website that require authorisation and for the secure completion of the room booking process. The storage of all other categories of cookies (including analytics, marketing and preference cookies, where applicable) is optional. The user may change their preferences and withdraw consent at any time using the privacy management widget available in the Website footer.

7. The Website uses the following types of cookies, classified by retention period:

• Session cookies – temporary files that remain in the user’s browser storage until the browser is closed or the user logs out of the Website.
• Persistent cookies – files that remain on the user’s end device for the period specified in their detailed parameters (shown in the table in section 14) or until they are deleted by the user.

8. By function, cookies may be divided into:

• conversion cookies, which make it possible to analyse the performance of sales channels;
• tracking cookies, which, together with conversion cookies, help analyse the performance of different marketing channels;
• marketing cookies, used to personalise advertising content and target it appropriately;
• analytics cookies and tools, which help improve the user experience on the Website by showing how users use it;
• strictly necessary cookies, which are essential for the Website’s basic functionality.

9. Some cookies may be placed by the provider of the Website and the online booking system for the purpose of:

• improving and supporting the booking process;
• analysing and collecting statistical data on the use of the Website and the online booking system in order to improve them.

10. To facilitate the booking process and to carry out analytics and marketing activities, the Controller uses the services of external partners, which involves the storage of optional cookies associated with third-party tools:

• Profitroom – an online booking system embedded in the Website. It uses cookies necessary for making room bookings and analytics/marketing cookies to assess the effectiveness of the purchase process and personalise hotel offers.
• Google (Google Analytics, Google Ads) – these cookies are used to compile traffic statistics for the Website and to optimise and measure the effectiveness of advertising campaigns. The collected data may be transferred to the United States on the basis of certification under the EU-U.S. Data Privacy Framework or Standard Contractual Clauses.
• Meta (Facebook Pixel) – this tool enables users visiting the Website to be identified for the purpose of displaying personalised advertising to them on Facebook and Instagram and measuring its effectiveness. This may involve transferring data to Meta Platforms, Inc. entities in the United States.
• Hotjar – an analytics tool that records user behaviour on the Website (e.g. mouse movements, clicks and scrolling) to optimise the Website layout and improve usability. The data is anonymised.
• LinkedIn (LinkedIn Insight Tag) – a tag used to run and measure the effectiveness of advertising campaigns on LinkedIn, particularly in relation to business offers and conference organisation.
• Bing Ads / Microsoft Advertising – a tool used to run, optimise and measure the effectiveness of advertising campaigns in the Bing search engine and the Microsoft advertising network. Cookies may be used, among other things, to measure conversions, conduct remarketing and tailor advertising content to users’ activity on the Website. The collected data may be transferred to Microsoft group entities, including outside the European Economic Area, in accordance with applicable data protection mechanisms, such as the EU-U.S. Data Privacy Framework or Standard Contractual Clauses.

11. In connection with the use of tools provided by external providers, personal data may be transferred outside the European Economic Area (EEA), in particular to the United States of America.

Such transfers are carried out only where an appropriate transfer mechanism required under the GDPR is in place, including in particular:

• an adequacy decision (the EU-U.S. Data Privacy Framework – for certified entities);
• Standard Contractual Clauses (SCCs) approved by the European Commission;
• additional technical and organisational measures ensuring an adequate level of data protection.

The providers whose services may involve transfers of data outside the EEA include in particular: Google, Meta Platforms, LinkedIn and Microsoft Advertising.

12. The user has the right to modify or withdraw any consent given for cookies at any time using the tool available directly in the Website footer. If the user does not want cookies to be used while browsing the Website, they may also change the global privacy settings in their browser. The links below explain how to manage cookies in the most popular browsers:

• Google Chrome: google.com / http://support.google.com/chrome/bin/answer.py?hl=en&hlrm=en&answer=95647 
• Mozilla Firefox: mozilla.org / https://support.mozilla.org/en-US/kb/clear-cookies-and-site-data-firefox 
• Apple Safari: apple.com / https://support.apple.com/en-gb/guide/safari/sfri11471/mac 
• Microsoft Edge: microsoft.com / https://support.microsoft.com/en-us/help/17442/windows-internet-explorer-delete-manage-cookies 

More information about the processing of your personal data can be found at: https://www.qubushotel.com/en/information-obligation/

13. To obtain detailed information on data processing, including the exercise of your rights and the management of cookies, please contact the Data Protection Officer at: iod@qubushotel.com

14. Detailed list and retention periods for cookies:

Cookie name	Provider/Partner	Purpose and function	Storage period	Category	Categories of personal data/device data
test_cookie	DoubleClick (Google)	Checks whether the user’s browser supports cookies.	1 day	Necessary	Browser ID, device technical data
_GRECAPTCHA	Google	Protect forms against spam and automated attacks.	180 days	Necessary	IP address, device ID, security data
_grecaptcha	Google reCAPTCHA	User verification and form protection.	Persistent	Necessary	Device data, browser ID
rc::a	Google reCAPTCHA	Distinguishing users from bots.	Persistent	Necessary	Device data, browser ID
rc::b / rc::c	Google reCAPTCHA	Ensuring the security of forms.	Session	Necessary	Technical Specifications of the Device
CookieConsent	Cookiebot, Profitroom	Storing the user’s preferences regarding cookie consent.	365 days	Necessary	User Permission Settings
_ga / ga#	Google Analytics	User identification for the purposes of statistics and website usage analysis	2 years	Statistics	Online identifiers, IP address (in anonymized form), activity data
hjSession* / hjUser*	Hotjar	To maintain session and user IDs for heat maps, user behavior analysis, and improving website usability	Session / 1 year	Statistics	Session ID, user ID, website behavior data, clicks, scrolling, interactions with website elements, device and browser technical data, approximate location
lastExternalReferrer	Meta Platforms	It records the source of the user’s visit to the website.	Persistent	Marketing	Traffic source, online identifiers
lastExternalReferrerTime	Meta Platforms	It records the time of the user’s last login from an external source.	Persistent	Marketing	User activity data
_fbp	Meta Platforms	Measuring the effectiveness of ads and remarketing.	3 months	Marketing	Advertising ID, user activity data
qubus_em	Meta Platforms	A user’s email address identifier used to measure the effectiveness of advertising campaigns and to target ads in Meta systems (Facebook, Instagram).	365 days	Marketing	An encrypted user ID (SHA-256 hash of the email address). Cookies are set when the user consents to ad_storage, ad_user_data, ad_personalization, and analytics_storage
qubus_ph	Meta Platforms	A user’s phone number identifier used to measure the effectiveness of advertising campaigns and to target ads in Meta systems (Facebook, Instagram).	365 days	Marketing	An encrypted user ID (SHA-256 hash of the phone number). Cookies are set when the user consents to ad_storage, ad_user_data, ad_personalization, and analytics_storage.
pagead/1p-user-list/#	Google Ads	Remarketing and displaying personalized ads.	Session	Marketing	Advertising ID, activity data
_gcl_ls	Google Tag Manager / Google Ads	Supporting Google’s advertising features.	Persistent	Marketing	Online identifiers, device data
__cf_bm	LinkedIn / Cloudflare Profitroom	Automatic traffic detection and service protection.	1 day	Marketing	IP address, browser data, device data, approximate location, referral source, page view data, and website activity
bcookie	LinkedIn	Identifying users for advertising and analytics purposes.	365 days	Marketing	User ID, IP address
li_gc	LinkedIn	Storing information about user consents.	180 days	Marketing	User preferences for consents
lidc	LinkedIn	Optymalizacja działania usług reklamowych LinkedIn.	1 day	Marketing	Device data, browser ID
thn#agent	The Hotels Network	Analysis of user behavior and personalization of the offers displayed.	Persistent	Statistics	Traffic source, online identifiers
thn_id	The Hotels Network	User identification for analytics and personalization purposes.	Persistent	Statistics	User activity data
external_id	Administrator	Saving user settings and preferences.	365 days	Functional	User ID, preferences
onetap-accessibility-free	Administrator	Saving he website’s accessibility settings.	Persistent	Functional	User accessibility preferences