Information on the processing of personal data

Thank you for choosing our establishment. In connection with your stay, we are providing the following information regarding the processing of your personal data:

Data administrator

The administrator of your data is Kamil Mastalski, operating a business under the name Aparthotel Serwis Kamil Mastalski, ul. Chyców Potok 26 /P.II, 34-500 Zakopane, 34-500 Zakopane, NIP: 7361672747.

Contact Details

Tel. +48 535 391 391

Email: rezerwacja@gorskagrupa.pl

THE BASES AND PRINCIPLES OF PERSONAL DATA PROCESSING

Your personal data is processed by the Controller for the purpose of concluding and performing the rental agreement for the apartment or room of your choice at our facility – the basis for processing is Art. 6(1)(b) of the GDPR (performance of a contract).

 Additionally, the administrator may also process personal data for the following purposes:

- in order to fulfil tax obligations incumbent upon the Controller - pursuant to Article 6(1)(c) GDPR (legal obligation);

- for the purpose of investigating, defending and securing claims in connection with the provided services, including investigating claims related to damage incurred by the Administrator caused by the Guest - based on Art. 6(1)(f) of the GDPR, i.e. based on our legitimate interest, consisting in the protection of our rights;

- for the purpose of sending marketing information to Guests, provided they have given their consent - the basis is Article 6(1)(a) of the GDPR (consent);

- in order to fulfil our legal obligations, which consist of adopting and applying Child Protection Standards in our Facilities - on the basis of Article 6(1)(c) of the GDPR (legal obligation);

- to ensure the safety of our Guests and staff - regarding data obtained from CCTV monitoring - based on Article 6(1)(f) of the GDPR, i.e. based on our legitimate interest, consisting in ensuring the safety of property and Guests and staff.

Data recipient

Your personal data may be transferred to entities supporting the Administrator's activities, including IT support and software provision companies, accounting firms providing accounting services, transport and taxi companies in situations where the guest orders transport or courier delivery, and law firms.

The recipient of your personal data is Górska Grupa Inwestycyjna Mastalski Matanyj Sp. J, ul. Chyców Potok 26 /P.II, 34-500 Zakopane, entered in the register of entrepreneurs at the District Court for Krakow-Podgórze in Krakow, XII Commercial Division of the National Court Register, KRS: 0000782149, NIP: 7361730574, which provides reservation services to you.

DATA PROCESSING PERIOD

Personal data will be processed for the following periods:

1. data obtained in connection with the concluded agreement - for the period of the statute of limitations for tax claims or civil claims; ;
2. Data obtained based on consent for marketing purposes will be processed for the duration of the consent for marketing purposes;
3. Data obtained in connection with monitoring will be processed for 30 days from the date of retention, and will then be permanently deleted.,
4. data obtained under the Standards for the Protection of Minors - for the period necessary due to the administrator's statutory obligations, and thereafter for the period of limitation of claims.

RIGHTS

You have the following rights:

- access to your personal data, its rectification, erasure or restriction of processing;

- the right to data portability;

- to object to processing.

- to lodge a complaint with the supervisory authority, which is the President of the Personal Data Protection Office;

- with regard to processing based on consent - the right to withdraw consent, provided that the withdrawal of consent does not affect the lawfulness of the prior processing of personal data;

in relation to processing based on the legitimate interest of the Controller - the right to object to processing.

You may submit your request to exercise your right in person at the Hotel's registered office, by traditional mail to the Hotel's registered address, or by sending the request to ul. Chyców Potok 26 /P.II, 34-500 Zakopane.

PROCESSING OUTSIDE THE EEA

The administrator does not process your data outside the European Economic Area.

VOLUNTARY NATURE OF DATA PROVISION

Providing personal data necessary for the conclusion of the contract is voluntary, but failure to provide it may result in refusal to conclude the contract and the inability to stay at the facility of your choice.