Data Controller:
Malinowe Hotele Sp. z o. o. with registered office in Solec-Zdrój, ul. Leśna 7, 28-131 Solec-Zdrój, Tax Number 678-14-01-345, REGON: 351061573
For the entity: Mineral Hotel **** Malinowy Raj, ul. Partyzantów 18A, 28-131 Solec-Zdrój.
Contact: recepcja@malinowyraj.com
Contact details for:
Data Protection Supervisor (IOD): iod@malinowehotele.pl.
Data Protection Inspector: iod@malinowehotele.pl
Acquiring personal data:
We obtained your personal data as you contacted us via telephone, e-mail, in person, via the contact form, as well as by submitting online bookings through our website or through the booking portal.
- The purpose of processing of your personal data:
- In order to implement the agreement concluded with us in the form of a registration / check-in card, in particular:
- issuing the documents required to use our services (invoices, receipts) and making cash and non-cash payments;
- handling applications that are submitted to us by telephone or e-mail;
- using contact details for purposes related to the provision of services resulting from the concluded contract for the provision of services; handling claims and complaints if submitted; for tax and accounting purposes as the hotel is required to abide by the law;
- In accordance with the legally justified purpose of the Controller:
- running direct marketing activities of own services and / or products;
- maintaining relationship with the client;
- conducting statistical analyzes;
- providing payment services;
- debt collection; archiving data to ensure accountability and fulfillment of our obligations under the law;
- In accordance with your consent:
- to process data for marketing, commercial, replying to inquiries, statistical, promotional purposes when organizing events, contests, etc.;
- for data processing:
- stored in the contact form;
- contained on the registration / check-in card;
- saved in cookie files and collected on our website: http://www.malinowehotele.pl
- when subscribing to organized loyalty programs, competitions and promotional campaigns;
- image campaigns;
Providing data:
Providing data is voluntary, but not providing them will make it impossible to conclude an agreement and use the services offered by the Data Controller.
Your data is downloaded:
- on registration / check-in cards;
- when booking by phone or e-mail;
- in the contact form;
- with group bookings;
- when ordering events;
- when applying up a loyalty card;
- when using rehabilitation services;
- when using spa services;
If required by law, we may require you to provide other data necessary for, for instance, accounting, tax or other reasons resulting from the legal provisions.
Your rights regarding the processing of personal data:
You have the right to:
- access to you data and its correction;
- to a written, motivated request to cease the processing of your data due to your special situation;
- object to the processing of your data when the Data Controller intends to process it for marketing and commercial purposes or to transfer your personal data to another Data Controller;
- to lodge a complaint to the supervisory body in accordance with Art. 77 and Art. 79, when it is considered that the processing of personal data violates the provisions of the general regulation on the protection of personal data of April 27, 2016.
- obtain comprehensive information in accordance with article 15 of the RODO regarding:
- the occurrence of your data in the Administrator's collection and the address of its registered office,
- the purpose, scope and manner of processing the data contained in such a file;
- status, from when your data is processed in the set;
- possible source of data acquisition;
- sharing your data, in particular information about recipients or categories of recipients to whom these data are made available;
- the planned period of data storage.
Sharing your personal data:
We may share your personal data with:
- entities cooperating with us under the contract for entrusting the processing of personal data;
- other entities you have given us consent to share data with;
- public bodies fighting against fraud and abuse, operating under separate, superior laws;
Your personal data will not be transferred to a third country.
Personal data storage:
We store your personal data for the duration of the agreement and also after its completion for the purposes of:
- pursuing claims in connection with the performance of contractual terms;
- performing duties resulting from the legal regulations, including tax and accounting regulations;
- preventing abuse and fraud; statistical and archiving;
- for the maximum of 6 years from the end of the performance of the services agreement;
We will process your data for marketing and / or commercial purposes for the term of the agreement or until you object, withdraw consent for further processing depending on which of these events occurs first.
The consent can be withdrawn free of charge in three ways, always with the annotation: To Data Controller:
- by sending written information in the form of an e-mail to the above-mentioned e-mail address.
- by sending the information by post to the Data Controller's address indicated above.
- by submitting a letter at the hotel reception.
In the case of organization of loyalty programs, competitions and promotional campaigns, in which you participate voluntarily, we will process your data for the duration of such events and the period for presentation of awards. In order to ensure accountability, i.e. to prove compliance with the provisions on the processing of personal data, we will keep it for the period for which we are required to save data or documents containing the data to document the fulfillment of legal requirements and enable control of public authorities.
