GDPR

Who is the Data Controller for the personal data of the guests of the No.23 Aparthotel?

The Data Controller for the personal data of the guests of the No.23 Aparthotel is Kraków-Piłsudskiego spółka jawna Obtułowicz with its registered seat in Nowy Sącz, ul. Botaniczna 22, 33-300 Nowy Sącz, entered into the Register of Entrepreneurs of the National Court Register kept by the District Court for Kraków-Śródmieście in Kraków, 12th Commercial Division of the National Court Register under file number KRS 0000311751.

 

How can you contact us with regard to the processing of personal data? The correspondence address is the Company’s official address; the e-mail address: info@no23hotel.pl

What are the purposes for the processing of personal data of the guests of the No.23 Aparthotel?

The purpose for which the No.23 Aparthotel processes personal data is the conclusion and performance of an agreement for the provision of accommodation services. Moreover, the purposes for the processing of personal data by the No.23 Aparthotel include:

  1. pursuing any potential claims in connection with any damage suffered by the No.23 Aparthotel and caused by the guest, or defence against the guest’s claims against the No.23 Aparthotel,
  2. documentation of the provision of services for tax-related purposes,
  3. provision of the highest possible quality of service to the guests.

In the event that the guest expressed consent to the processing of their personal data for marketing purposes, the Company processes such personal data for this purpose, i.e. in order to send marketing information and information about its product and service offer to the guest. In the event that the guest expressed consent to the processing of their personal data for the purpose of taking part in a survey after their stay at the accommodation facility, the Company processes such personal data for this purpose, i.e. in order to send the survey to the guest after their stay at the accommodation facility. Moreover, the Company processes the guests’ personal data collected by the video surveillance system in operation at the accommodation facility for the purpose of ensuring safety of the guests and other persons remaining within the premises of the facility.

What is the legal basis for the processing of personal data?

The legal basis for the processing of the guest’s personal data obtained by the Company is the agreement for the provision of accommodation services. The legal basis for the processing of the guest’s personal data used for marketing purposes is the guest’s consent. The Company hereby informs that the guest may withdraw their consent at any time. The withdrawal of such consent shall not affect the lawfulness of the processing based on the consent before its withdrawal. The legal basis for the processing of the guest’s personal data by the video surveillance system is the protection of their vital interests or the protection of the vital interests of other natural persons, as well as the legitimate interest of the Data Controller. The legal basis for the processing of the guest’s personal data for the purpose of providing the highest quality of service to the Company’s guests is the legitimate interest of the Data Controller.

 

Who can receive the personal data we process?

The Company may transfer the personal data to the following categories of entities:

  1. companies providing IT services to the Company and IT software providers;
  2. companies and other subcontractors whose services the Company uses in order to provide the accommodation services;
  3. accounting companies providing accountancy services to the Company;
  4. companies providing cashless payment services for the purpose of processing payments.

 

How long will the personal data be processed?

Personal data:

  1. obtained in connection with the conclusion of the agreement for the provision of accommodation services shall be processed throughout the period of limitation for tax liabilities or civil claims of the Company or the guest, depending on which of these events occurs later;
  2. obtained based on the consent to processing for marketing purposes shall be processed throughout the period of validity of the consent to the processing for marketing purposes;
  3. obtained in connection with the video surveillance system shall be processed for 30 days from the date of recording, and shall be permanently erased after that period.

 

What are the guest’s rights with regard to the processing of their personal data?

Every guest has the right to request access to and rectification or erasure of their personal data or restriction of processing. Moreover, every guest has the right to object to the processing. The personal data may be accessed at the Company’s registered seat. What is more, the Company provides an e-mail address: info@no23hotel.pl, which may be used to contact the Company with regard to all issues related to personal data.

 

Is it possible to file a complaint with regard to the processing of personal data?

Yes, every guest has the right to lodge a complaint with a supervisory authority, which is the Inspector General for the Protection of Personal Data, ul. Stawki 2, 00-193 Warszawa.

 

Will the No.23 Aparthotel transfer personal data outside the European Economic Area?

No, the Company does not intend to transfer any personal data outside the European Economic Area.

 

Is the provision of the personal data a contractual or statutory requirement?

The provision of the personal data including full name and address of residence is required in order to conclude the agreement for the provision of accommodation services. Failure to provide such personal data will make it impossible for the Company to conclude the agreement for the provision of accommodation services.

 

Are any automated decisions made based on the personal data, including profiling?

No. The Company does not make any automated decisions based on the personal data, including profiling.