Dear Sir or Madam,
The Data Administrator in accordance with art. 37 of the Regulation on the protection of personal data of 27 April 2016, appointed the Data Protection Inspector (DPO).
Ms Agnieszka Dworak - Data Protection Inspector at Malinowe Hotele Sp. z o.o.
Contact to the DPO through:
a) e-mail: iod@malinowehotele.pl
b) by post with a note for the DPO to the correspondence address: Malinowe Hotele Sp. z o.o., ul. Leśna 7, 28-131 Solec-Zdrój.
By contacting our Data Protection Officer, you will share your data in the form of an e-mail and letter. Therefore, please read the following information clause addressed to persons contacting our Inspector in the field of personal data protection.
INFORMATION CLAUSE
OBJECTIVE: FOR PEOPLE CONTACTING THE DATA PROTECTION SUPPLIER MALINOWE HOTELE SP. Z o.o.
Based on Article. 13 section 1 and 2 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46 / EC (GDPR), we inform that:
1. The administrator of your personal data is the company Malinowe Hotele Sp. z o. o. with its registered office in Solec-Zdrój (28-131) at ul. Leśna 7, NIP: 678-14-01-345, REGON: 351061573.
2. The composition of the company Malinowe Hotele Sp. z o.o. in Solec-Zdrój there are entities:
Malinowy Zdrój Hotel **** Medical Spa
Raspberry Raj Mineral Hotel ****
Malinowy Dwór Hotel **** Medical Spa
Solec-Zdrój Mineral Pools
Balneokosmetyki
3. The Administrator has appointed a Data Protection Officer who can be contacted in all matters related to the processing of personal data by the Administrator.
Contact to the Data Protection Inspector Agnieszka Dworak: e-mail: iod@malinowehotele.pl or by post to the correspondence address indicated above in point 1 with a note for the DPO.
4. The purpose of processing your personal data is to contact the Data Protection Officer regarding the processing of personal data and / or exercise your rights as a data subject. However, the basis for processing the data provided during contact is your consent to the processing expressed in the form of a clear action confirming the desire to contact the DPO (sending data).
5. Your personal data is secured in accordance with applicable regulations, and their recipients may be entities authorized to disclose data to them under superior legal provisions and entities processing personal data as part of providing services on behalf and for the Administrator (e.g. in the scope of IT services) with which he concluded in accordance with art. 28 GDPR of the contract entrusting data processing.
6. Your personal data will not be transferred to countries outside the European Economic Area or international institutions, nor will it be processed for any purpose other than the purpose for which the personal data was collected.
7. Decisions regarding your personal data will not be taken in an automated manner and will not be profiled.
8.Your personal data will be stored until your consent is revoked in order to contact the Administrator and / or Data Protection Inspector and for a period of 5 years from the date of revocation of consent for archival purposes or to secure any claims.
9. You have the right to:
obtaining information on the rules for the processing of your personal data, the right to access and copy them, as well as the right to rectify, delete or limit the processing and transfer of data;
notifying each recipient about rectifying, deleting or limiting the processing of your data as a result of the Administrator's obligation;
lodging a complaint to the President of the Office for Personal Data Protection (to the address of the Office for Personal Data Protection, ul. Stawki 2, 00-193 Warsaw), if it is considered that your personal data is being processed unlawfully in breach of the provisions of the General Regulation;
withdrawal of consent if the processing took place on the basis of its consent. Withdrawal takes place without affecting the lawfulness of processing based on consent before its withdrawal.
contact with the Data Protection Officer appointed by the Administrator;
10. In order to report the exercise of your rights, you can use the ready applications available on the entity's website in the tab INFORMATION / RODE / RIGHTS OF PEOPLE WHO DATA CONCERNS who, after completing and signing, should be sent to the e-mail address: iod@malinowehotele.pl or sent by post to the correspondence address given above in item 1 with the note "for DPO" or delivered in person to the address indicated above.
11. Information on the obligation to provide data and the consequences of not providing it:
Providing data is voluntary, but it is necessary to process the contact and answer and / or exercise the rights that you would like to use.
Failure to provide data will result in the inability to achieve the purpose indicated above.
We also inform that:
The Administrator makes every effort to ensure all means of physical, technical and organizational protection of personal data against their accidental or intentional destruction, accidental loss, alteration, unauthorized disclosure, use or access, in accordance with all applicable regulations.