Hotel Alpin
Personal Data Processing Information
With regard to activities involving processing personal data in connection with providing Services under mandate/assignment/entrustment/cooperation/one-off services, it is hereby informed these activities are carried out on behalf of Global sp. z o.o.. as Data Controller and as Data Processor, in accordance with the Provisions on the Protection of Personal Data and Article 28 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (24 May 2016) on protection of natural persons regarding processing personal data and on the free movement of such data, repealing Directive 95/46/EC (“GeneralDataProtectionRegulation” or “GDPR”). Applies from 25 May 2018.
1. Purpose of data processing Personal Data are processed solely to perform the provided hotel and catering services.
2. Legal basis for data processing Personal Data will be processed on these legal grounds: a) performance of the contract – Article 6(1)(a) and b) and f of EU Regulation 2016/679 of 27 April 2016, i.e. within the framework of the contract and the Data Controller’s legitimate interest: the ability to inform about all matters related to the contract (hereinafter “GDPR”);
4. Data recipients Access to Personal Data may be granted to: authorised employees of the Data Controller; service providers contractually entrusted with processing Personal Data for services to the Data Controller (incl. IT service providers and their authorised employees), to the extent necessary; entities entitled by law to receive Personal Data; providers of technical and organisational solutions enabling services and management of the Data Controller’s organisation (incl. courier and postal companies); providers of legal/advisory services supporting the Data Controller in pursuing claims (incl. legal and tax firms, debt collection companies).
5. Retention period of data - For processing data under item 3(a): during the period in which the data subject may pursue claims for failure/improper performance of the contract – 3 years from the date of end of cooperation; - For processing data under item 3(b): for the period required by law – 5 years from the beginning of the year following the financial year to which the data relate.
6. Rights related to the processing of Personal Data The data subject may: a) request access to and rectification of their Personal Data; b) restrict processing under Article 18 of the GDPR or have it erased under Article 17 of the GDPR (“right to be forgotten”); c) data portability under Article 20 of the GDPR; d) object at any time to processing of their Personal Data on grounds related to their particular situation under Article 21(1) of the GDPR; e) lodge a complaint with a supervisory authority for personal data protection. For matters on processing and exercising rights, contact the Data Controller by mail to the company’s registered office address or by email recepcja@hotel-alpin.pl, as appointed on behalf of the Data Controller. When an application/request is submitted regarding Personal Data processing, during exercise of rights the Data Controller may ask several questions related to Personal Data to verify identity.
1. Purpose of data processing Personal Data are processed solely to perform the provided hotel and catering services.
2. Legal basis for data processing Personal Data will be processed on these legal grounds: a) performance of the contract – Article 6(1)(a) and b) and f of EU Regulation 2016/679 of 27 April 2016, i.e. within the framework of the contract and the Data Controller’s legitimate interest: the ability to inform about all matters related to the contract (hereinafter “GDPR”);
4. Data recipients Access to Personal Data may be granted to: authorised employees of the Data Controller; service providers contractually entrusted with processing Personal Data for services to the Data Controller (incl. IT service providers and their authorised employees), to the extent necessary; entities entitled by law to receive Personal Data; providers of technical and organisational solutions enabling services and management of the Data Controller’s organisation (incl. courier and postal companies); providers of legal/advisory services supporting the Data Controller in pursuing claims (incl. legal and tax firms, debt collection companies).
5. Retention period of data - For processing data under item 3(a): during the period in which the data subject may pursue claims for failure/improper performance of the contract – 3 years from the date of end of cooperation; - For processing data under item 3(b): for the period required by law – 5 years from the beginning of the year following the financial year to which the data relate.
6. Rights related to the processing of Personal Data The data subject may: a) request access to and rectification of their Personal Data; b) restrict processing under Article 18 of the GDPR or have it erased under Article 17 of the GDPR (“right to be forgotten”); c) data portability under Article 20 of the GDPR; d) object at any time to processing of their Personal Data on grounds related to their particular situation under Article 21(1) of the GDPR; e) lodge a complaint with a supervisory authority for personal data protection. For matters on processing and exercising rights, contact the Data Controller by mail to the company’s registered office address or by email recepcja@hotel-alpin.pl, as appointed on behalf of the Data Controller. When an application/request is submitted regarding Personal Data processing, during exercise of rights the Data Controller may ask several questions related to Personal Data to verify identity.