This document explains the processing of your personal data that you are providing to us in connection with the use of services offered by the Hotel or with a relationship resulting from cooperation with the Hotel.

We pay significant attention to the secure processing of your personal data:

• we have prepared and implemented appropriate policies, regulations and registries in order to process your date in accordance with the regulations in force,
• we take care of technical security of our IT systems, meeting the IT security standards in force,
• we train our personnel so that it always respects your right to privacy.
• we secure the data against being provided to unauthorised persons, disclosed, lost, destroyed, or modified in unauthorised manner.

§1. PERSONAL DATA ADMINISTRATOR

The Administrator of your personal data is:

Stalowa 52 Sp. z o.o.

ul. Stalowa 52/2

03-429 Warsaw

hereinafter: the “Administrator” or “Hotel”

§ 2. CONTACT IN MATTERS RELATED TO PERSONAL DATA

In the matters concerning the processing of your personal data, contact the Administrator at the e-mail address administracja@stalowa52.pl

§ 3. PURPOSES AND LEGAL BASIS FOR THE PROCESSING OF PERSONAL DATA

Your personal data will be processed for the following purposes based on the legal basis specified below:

1. signing and performing a contract (booking and sale of hotel services, lease of rooms for events/conferences/courses – applies to Hotel Guests) — pursuant to Article 6(1)(b) of the General Data Protection Regulation (actions are undertaken at the request of the data subject before a contract is signed and are necessary for the performance of the contract),
2. signing and executing a contract of cooperation (applies to the Hotel’s contractors) — pursuant to Article 6(1)(b) of the General Data Protection Regulation (performance of the contract), and also Article 6(1)(f) of the General Data Protection Regulation (legitimate interest — communication with contact persons for the performance of the contract),
3. providing an answer to a question — Article 6(1)(f) of the General Data Protection Regulation (legitimate interest — providing an answer),
4. processing of complaints— the legal basis will be the Article 6(1)(f) of the GDPR, that is, legitimate interest of the Administrator, being the need for providing an answer and considering the claim
5. marketing of the services offered by the Hotel — the legal basis for the processing
   of data will be Article 6(1)(f) of the GDPR, that is, legitimate interest of the Administrator, which is
   the sending of commercial information and promoting the business of the Hotel
6. compliance with obligations resulting from the provisions of law applicable to the Hotel, in particular concerning accounting and fiscal obligations — the legal basis for the processing of data will be Article 6(1)(c) of the GDPR, that is, compliance with a legal obligation
7. seeking and defending against claims, pursuant to Article 6(1)(f) of the General Data Protection Regulation (legitimate interest — seeking of claims, including the undertaking of collection activities).
8. increasing the security of persons and property at the Hotel premises (CCTV) — the legal basis for the processing of data will be Article 6(1)(f) of the General Data Protection Regulation (legitimate interest — protection of persons and property)

§ 4. THE ENTITIES TO WHOM THE PERSONAL DATA MAY BE TRANSFERRED

The hotel transfers personal data to the following categories of entities:

1. companies which provide IT support services and which supply software necessary for the Hotel’s business,
2. companies which provide payment services,
3. companies which destroy documentation,
4. tax consultancies which provide accounting services,
5. transport and taxi companies in the situation where a Hotel guest orders transport or courier shipment,
6. companies which provide consulting and legal services (including debt collection)
7. companies which provide security services to the Hotel

and also persons authorised to receive the data pursuant to provisions of law.

§ 5. PERIOD OF PROCESSING OF PERSONAL DATA

Personal data:

1. obtained in connection with a signed contract through the period of performance of the contract, and after this period, for a time stipulated in the provisions of the law or through the statute of limitations period for possible claims,
2. obtained for marketing purposes will be processed until an objection is filed,
3. obtained in connection with monitoring will be processed for 4 days since being captured, and then will be permanently deleted. 

§ 6. YOUR RIGHTS RELATED TO THE PROCESSING OF PERSONAL DATA

In connection with the processing of your personal data by the Hotel you have the right to access the contents of the personal data, to correct them, delete them, right to data portability or to restriction of processing. Moreover, you have the right to object to processing. In the matter of execution of the aforementioned rights, contact the e-mail address: administracja@stalowa52.pl

§ 7. THE POSSIBILITY OF FILING A COMPLAINT RELATED TO THE PROCESSING OF PERSONAL DATA

In connection with the processing of your personal data by the Hotel, you have the right to file a complaint with regard to the processing of personal data to the supervisory body, which is the President of the Personal Data Protection Office, ul. Stawki 2 00-193 Warszawa.

§ 8. REQUIREMENT TO PROVIDE PERSONAL DATA

Your provision of personal data is voluntary, but necessary for the performance of the purposes referred to above.

§ 9. AUTOMATED DECISIONS BASED ON PERSONAL DATA, INCLUDING PROFILING

The Hotel does not make automated decisions based on personal data, including not conducting any profiling.

§ 9. AMENDMENT TO THE PRIVACY POLICY

We reserve the right to make changes to this privacy policy at any moment, notifying you through our Internet website. We recommend checking the website frequently, and in particular the date of last amendment.

§ 10. COOKIE FILES

All the necessary information concerning cookie files can be found in our cookie policy, available below.