Information obligation

Personal data administrator

HSP Management sp. z o.o. with its registered office in Szczawnica, ul. Główna 25, 34-460 Szczawnica, registered in the National Court Register by the District Court in Krakow, XII Economic Division of the National Court Register. Economic Department of the National Court Register, under the KRS number 0000731486, NIP 7352876841, hereinafter referred to as the Hotel, is the Administrator of your personal data.

Purposes, basis for processing and duration of processing

The processing of your personal data is in accordance with the law, including the following with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons in relation to the processing of personal data and on the free flow of such data and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as GDPR.

We process your data in order to:

• handle reservations made by you for the services of your stay in the facility operated by us facility, as well as to perform the contract and provide services to you at our facility - based on Article 6(1)(b) of the GDPR - until the end of your stay, except that sometimes, the data may also be processed after this period on the basis of our legitimate interest described in the following paragraphs, but only if permitted or required by applicable law, e.g. processing for archival purposes or to ensure accountability,
• ensure safety and order and security of hotel guests and other persons staying on the Hotel premises through hotel monitoring - for this purpose we process data collected by hotel monitoring, on the basis of Article 6 (1). (d) and (f) GDPR i.e. the processing is necessary to protect your vital interests and to protect the vital interests of other guests, as well as it is necessary for purposes resulting from the Hotel's legitimate interest in protecting property and persons for a period of up to 7 days from the date of recording, after which the surveillance recordings are permanently deleted,
• if you agree, in order to send you newsletters (commercial information about our products and services or contests or promotions), via means of communication electronic communication (SMS, MMS, e-mail) or direct marketing done via by means of telecommunication terminal equipment (phone, tablet) to the designated e-mail address or telephone number - based on Article 6(1)(a) of GDPR – until withdrawal of consent,
• direct marketing - on the basis of Article 6(1)(f) GDPR (legitimate legal interest of the administrator) - until an effective objection is made,
• for archival (evidential) purposes to secure information in case of legal need to prove the facts, which is our legitimate interest (basis of of Article 6(1)(f) GDPR) - for the period of time during which the controller is obliged to retain the data or documents containing them for the purpose of documenting compliance with legal requirements and to enable public authorities to control their compliance,
• possible establishment, investigation or defense against claims, which is our legitimate interest (on the basis of Article 6(1)(f) GDPR) - until the expiration of the period of limitation of potential claims under the law

What data do we process?

We process data that you provide directly to us, e.g. during a reservation or in the Hotel Card, or that we receive from entities that make reservations for you services in our facility (e.g. Profitroom Sp. z o.o.) - in this case it is data identifying data such as name, surname, email address and telephone number, as well as financial data such as payment card or credit card data.

Recipients of data

We may share your personal data with the following categories of entities:

• subcontractors,
• accounting firms,
• law firms,
• entities related by capital or organization to the Administrator, including Apartamenty Park sp. z o.o. with its seat in Warsaw, Ul. Ruczaj 2, 02-997 Warsaw, and Marbella sp. z o.o. with its registered seat in Warsaw, at Ul. Ruczaj 2, 02-997 Warsaw, - IT companies,
• IT companies,
• banks,
• operators of payment for products or services,
• entities providing postal and courier services

Your rights

You have the right to request access to your personal data, rectification, erasure or restriction of processing, the right to object to processing (for the purpose of direct marketing or objection due to a particular situation), the right to data portability, the right to lodge a complaint with the competent supervisory authority. Where processing is based on consent, you also have the right to withdraw consent at any time, whereby withdrawal of consent does not affect the the legality of the processing carried out on the basis of consent before its withdrawal.

. Please note that before exercising your rights, we will need to ensure that you are you, i.e. properly identify you.

Your provision of data is a condition for the conclusion and performance of the contract (hotel services).

. Consent to the newsletter is voluntary and if you do not give your consent, we will not send commercial information about our products and services.