The administrator of voluntarily given personal data is Ekonarie Sp. z o.o. with its headquarter in Warsaw, Puławska street 111 A / 119, 02-707 Warsaw. Personal data is collected in order to answer the questions contained in the booking form, based on the premise of a voluntary consent to the processing of personal data by the person the data concern as expressed in article 6 of the act of RODO (GDPR)
Anyone whose data is processed has the right to:
- require the administrator to access personal data,
- rectification, deletion or limitation of the processing or
- raise objections to the processing, as well
- requests for data transfer
- withdrawal of consent at any time without affecting the legality of the processing which was carried out on the basis of consent prior to its withdrawal
- lodging a complaint to the supervisory body.
At the same time, we would like to inform you that in order to implement the aforementioned rights, you can contact us via e-mail address: firstname.lastname@example.org
Personal data, obtained on the basis of the above-mentioned consent will be processed by Ekonarie Sp. z o.o. for contact purposes until the person the data concern withdraws the consent.
In the event that the guest has consented to the processing of personal data for marketing purposes, the centre processes personal data for this purpose, i.e. in order to send marketing information and offers about its products and services to the guest.
- What is the legal basis for the processing of personal data?
The legal basis for the processing of guest’s personal data obtained by the centre is the contract for the provision of hotel services.
The legal basis for the processing of the guest's personal data used for marketing purposes is the guest's consent.
The centre informs that any consent may be withdrawn at any time. Withdrawal of the consent does not affect the validity of the processing that had taken place prior to withdrawal of consent. The legal basis for the processing of guest’s personal data through video monitoring is the protection of their vital interests and protection of the vital interests of other natural persons, as well as the justified purpose of the administrator. The legal basis for the processing of guest’s personal data to ensure the highest quality of services for the centre guests is justified by the administrator's purposes.
- Who can receive personal data?
The centre provides personal data to the following categories of entities
a) Companies providing IT support services, including e-mail,
b) Accounting firms providing accounting services.
c) Transport and taxi companies in the event of a guest’s order for transport,
d) State authorities and services such as the police, the Internal Security Agency or tax authorities entitled to obtain personal data on the basis of appropriate regulations, provided that they have appropriate legal grounds to request personal data.
- How long will the personal data be processed?
a) Obtained in connection with the concluded contract for the provision of hotel services will be processed during the period of limitation of tax claims or civil law claims of the centre or guest, depending on which of these events will take place later,
b) Obtained on the basis of consent for marketing purposes will be processed during the period of validity of the consent for marketing purposes,
c) Obtained in connection with the video monitoring will be processed for 7 days from the date of fixation, and then will be permanently deleted.
- What are the rights of a visitor in relation to the processing of personal data?
Each guest has the right to access personal data rectifying, deleting or limiting processing. In addition, each guest has the right to object to the processing. Access to data is possible at the centre headquarter. In addition, the centre provides the address email@example.com. through which you can contact us and ask about personal data.
- Is it possible to file a complaint regarding the processing of personal data?
Yes, each guest has the right to lodge a complaint to the supervisory body, who is Inspector General for Personal Data Protection, Stawki Street 2 00-193 Warsaw.
- Will the centre transfer personal data outside the EEA?
No, the centre does not intend to transfer personal data outside the EEA.
- Is the provision of personal data a contractual or statutory requirement?
Providing personal data as the name and address is necessary to enter into a hotel service contract. The lack of personal data prevents the centre from concluding a hotel service contract.
- Are decisions based on personal data made automatically, including profiling?
No, the centre does not take automated decisions based on personal data, including not profiling.