Fulfilling the obligation to provide information in accordance with art.13 Regulation of the European Parliament and of the Council (EU) 2016/679 of April 27, 2016. on the protection of individuals with regard to the processing of personal data and on the free movement of such data and the repeal of Directive 95/46/EC (General Data Protection Regulation) Hotel Atrium in Nowy Tomyśl informs about the principles of personal data processing:
- Data controller
The administrator of your personal data is Dorota Jahn conducting business under the firm: Dorota Jahn “Hotel Atrium” , abbreviated “Atrium” with its registered office at Pl. Chopina 18, 64-300 Nowy Tomyśl, registered in the District Court in Nowy Tomyśl, Nip 788-178-92-72, Regon 634295556, e-mail email@example.com
- Data Protection Officer
TheAdministrator has not appointed a Data Protection Officer.
- Categories and purposes of personal data processing
The Administrator processes the following categories of personal data: Name, address data, contact data, transactional data, communication data, biometric data from surveillance system recordings.
Your personal data may be processed for the purposes of:a) providing hotel services, and in particular to take the necessary steps leading to the conclusion of a contract for the provision of such services ( art.6 Paragraph 1(b)
b) to defend against possible claims related to the performance of the contract by the Administrator during its duration or after its termination ( Art.6.U.1.f). c)
(c) to ensure security and order and the protection of persons and property (Art. 6. Ust1 pkt. f)
(d) statistical and internal reporting (Art.6.1.f)
- Information about recipients of data
Access to your data will be provided only to employees authorized by Hotel Atrium (only to the extent necessary to provide the services provided by the hotel).
Data may be transferred to the following recipients:
a) Entities entrusted by Hotel Atrium with the processing of personal data on the basis of concluded contracts, e.g. IT providers, accounting offices.
(b) Banks and financial institutions that may receive your data for the purpose of payment card transactions and transfers.
(c) Data processors for debt collection and legal representation.
(d) Other entities to which you have given your consent to process personal data
- Transfer of personal data to a third country
Your personal data will not be transferred to a third country/international organization.
- Period of processing of personal data
a) Data obtained for the purpose of concluding and executing the contract will be processed for the duration of the contract, and after its expiration for the period of limitation of claims arising therefrom.
b) The data contained in the invoices are stored for a period of 5 years
(c) Data processed for statistical and internal reporting purposes are stored pursuant to Art. 6 paragraph. 1 pt. f. (until the contracts are fulfilled or until you object).
(d) Biometric data is stored for a period of 30 days.
- Rights of the data subject
You have the right to access the content of your data and the right to request rectification, erasure, restriction of processing, the right to object to the processing of your data, the right to portability of personal data, i.e. The right to receive your data to the controller in a structured, commonly used machine-readable format. You may send this data to another data controller. To the extent that the basis for the processing of your personal data is consensual, you have the right to revoke any consent previously granted. Withdrawal of consent does not affect the compatibility of processing carried out on the basis of consent before its withdrawal.
- The right to lodge a complaint
You have the right to lodge a complaint with the authority supervising compliance with the regulation of the President of the Office for Personal Data Protection, if you consider that the processing of personal data violates the provisions on personal data protection. You have the right to data portability only with respect to those data that we process under contract with you or on the basis of your consent.
You have the right to receive a copy of your data. To do so, please email firstname.lastname@example.org.
- Obligation to provide personal data
Your provision of personal data is voluntary; however, it is a requirement for the conclusion and performance of the contract for the provision of hotel services. You are not required to provide them, but failure to do so will prevent you from entering into a contract for hotel services.
- Automated decision-making including profiling
Your data will not be subject to automated decisions or profiling.