Source: http://www.hotelvega.pl/en/data-protection-page-152763
Timestamp: 2019-04-22 10:00:00+00:00

Document:
In connection with the new provisions on personal data of natural persons (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ L 119, p. 1) - hereinafter referred to as the GDPR - in force since 25 May 2018, we would like to inform you about what we do with the data we collect, what data we use and what rights apply in connection with the processing.
The administrator of your personal data is Jolanta Walczak "Bacero" Przedsiębiorstwo produkcyjno- usługowo- handlowych (production, service and trading company) with registered office at Wrocław (postcode 53-234), ul. Grabiszyńska 251, NIP: 8940000253, REGON: 006009551, which owns the Vega Hotel, the Bacero Hotel and the Grand City Hotel.
Purpose and legal basis of data processing.
Your personal data may only be processed in accordance with the provisions of the applicable law; the GDPR provides for a number of reasons for the processing of personal data of natural persons.
We process the following data concerning you - your name, e-mail address, telephone number, place of residence, PESEL number, identity card or passport number, date of birth and, if applicable, financial identification data (credit/payment card data).
- data processed by video surveillance will be kept for 30 days, unless the occurrence of an incident requires further processing for the purposes of the proceedings in accordance with the provisions of the law.
Parties to whom we may disclose personal data.
The data can also be passed on to the following categories of recipients: Law firms, courier and postal companies, insurance companies, licensed bodies (e.g. courts, public prosecutors), tax offices.
Data transmission to third countries or international organisations.
We do not share your personal information with third countries or international organizations.
Rights to which you are entitled.
to access them and receive a copy of them.
remove them if you believe that we have no reason to edit them.
to limit the processing of the data, e.g. exclusively to their storage or other purposes stated by you, as well as in a situation in which an objection has been raised against the processing of personal data.
oppose marketing. You can object to the processing of your personal data for direct marketing purposes at any time (in this case we will not process your personal data for this purpose).
to object to the processing on the basis of a legitimate interest on the basis of your special circumstances. You must give us a reason (special situation) why we have to stop processing the data. We will stop processing your data for these purposes unless we can prove that our reasons for processing take precedence over your rights or if we need them to justify, prosecute or defend claims.
lodge a complaint with the President of the Office for the Protection of Personal Data, whose contact details and the way in which you exercise this right can easily be found on the Internet on the official website of the Office for the Protection of Personal Data.
Once we have confirmed your identity, we will process your requests, rights and questions.
Do you have the right to revoke your consent for certain purposes of data processing if you have previously given it?
You can revoke your consent at any time by sending a short message to our e-mail address daneosobowe@hotelbacero.com.pl that you revoke your consent to the processing of your personal data.
Please note that if we process your data for purposes other than those for which you have given your consent, we may process your data for purposes for which we have a different legal basis. We have defined the cases for the purposes for which we process personal data.
Information on the request / voluntary provision of data.
In order to use our services and conclude a contract with us, you must provide us with your personal data, as this is a prerequisite for its conclusion. The need to provide information is also required by law (e.g. for the documentation of sales with VAT invoice). If you do not wish to provide this information, we may refuse to enter into a contract.
Providers who have provided us with personal information about you.
If you have not provided us with your personal data, we may have received your data from the travel agency or booking portal through which you made your reservation.
We work together with the following online booking portals: booking.com, HRS.com, CiH, eHoliday.pl, Expedia.com, Netmedia, PTQV.
Personal data that we have received from other companies are in particular first and last name, e-mail address, telephone number, date of birth, pesel.
Purpose and legal basis of the processing of personal data.
We may process your personal data only on the basis of the provisions of applicable law, and the GDPR provides for several reasons for processing personal data of natural persons.
After filling in the contact form on the hotel's website, we will process your data in order to contact you and answer the questions asked in the message. In such a case, the legal basis for the processing of your data is your consent (Art. 6 para. 1 lit. a GDPR).
Furthermore, due to the content of your message sent via the contact form, we can process your data within the framework of direct marketing of our own products and services, which is our legitimate interest as an administrator of personal data (legal basis Art. 6 para. 1 lit. f GDPR).
We process the following data about you - your name, your e-mail address and your telephone number.
- for which they are processed for the purpose of direct marketing of our own products and services until any objections are raised.
Entities to which we may disclose personal data.
Data transmission to third countries and international organisations.
to raise objections to the marketing. You can object to the processing of your personal data for direct marketing purposes at any time (in this case we will not process your personal data for this purpose).
to object to the processing on the basis of a legitimate interest on the basis of your particular circumstances. To do so, you must give us a reason (a special situation) why you believe that we must stop processing your data. We will stop processing your data for these purposes unless we can prove that our reasons for processing take precedence over your rights or if we need them to justify, prosecute or defend claims.
to transmit data that can be processed by receiving data from us in easily readable formats (e.g. csv or other easily accessible formats) on request or by contacting us so that we can transmit the data to another administrator (other service provider) named by you.
You can revoke your consent at any time by sending a short message to our e-mail address daneosobowe@hotelbacero.com.pl, with which you withdraw your consent to the processing of your personal data.
Please note that if we process your data for purposes other than those for which you have given your consent, we may process your data for purposes for which we have a different legal basis. We have identified these situations for the purposes for which we process personal data.
Providing the data in the contact form is completely voluntary, but failure to provide the data may mean that we cannot contact you and respond to the message sent.
- Conclusion and performance of an employment contract or another contract under civil law (work contract, order, etc.) between us, i.e. keeping of employee files, accounting of wages and salaries, payment of salaries, accounting of sickness cases and benefits, preparation of employment contracts, appendices to contracts, termination of contracts, employment certificates, accounting and dispatch of income tax returns (legal basis of Art. 6 para. 1 lit. b GDPR). The provision of this information is a legal requirement and a prerequisite for the conclusion of a contract.
- Recruitment of applicants for employment (for different employment relationships: employment contract, order, work contract, internship), on the basis of your consent (legal basis Art. 6 para. 1 lit. a GDPR). The provision of data for this purpose is a legal requirement and a prerequisite for the conclusion of a contract.
- in connection with the legal obligation imposed on the administrator of personal data as an employer resulting from the binding legal provisions, i.e. the archiving of personal files and documents relating to employment, personnel and accounting, the granting of additional benefits to employees and their families, insurance cover, health and safety at work - in particular from the Labour Code of 26 June 1974, the Law of 13 October 1988 on the social security system, the Law of 26 July 1991 on the income tax of natural persons (legal basis Art. 6 para. 1 lit. c GDPR). The provision of data for this purpose is a legal requirement and a prerequisite for the conclusion of a contract.
- in addition, personal data can be processed by video surveillance systems on the company premises - the hotel. The purpose of video surveillance is to ensure the safety of employees and other people in the area and the protection of property. The processing of the data for this purpose is our legitimate interest as an administrator of personal data (legal basis Art. 6 para. 1 lit. f GDPR).
If it results from the legal obligation of the controller as employer, we can also process your personal data of a special category on the basis of Art. 9 para. 2 lit. h GDPR. This legal obligation of the employer may arise, inter alia, from Article 57 of the Sickness and Maternity Cash Benefits Act, Article 185 of the Labour Code in the context of information on pregnancies of employees and others.
Special categories of data include in particular health data or biometric data.
We process personal data only to the extent required by mandatory legal provisions. In accordance with Article 221 of the Labour Code, we process your first and last names, parents' names, date of birth, place of residence (address for correspondence), education, previous professional experience, PESEL number and other personal data of an employee, if the disclosure of this data is necessary due to the exercise of the special rights provided for in the Labour Code.
- the data processed by the video surveillance system will be stored for 30 days, unless, as a result of an incident, further processing is necessary for the purposes of a procedure carried out in accordance with the provisions of the law.
Entities to which we may disclose data.
We provide personal data only to our subcontractors with whom we have concluded separate contracts for the processing of personal data - the supplier of the integrated information systems Bon-Net Sp. z o. o. - located at Poznań, ul. Polna 13 a/5, Profitroom Sp. z o.o., located at Poznań, ul. Roosevelta 9/3, 60-829.
As well as the following categories of beneficiaries: Social Insurance Institution (ZUS), tax offices, institutions cooperating to provide services from the Social Insurance Fund, institutions cooperating in the field of insurance cover, institutions authorised under the binding provisions of the law (including courts, public prosecutors' offices).
to withdraw your consent to the processing of personal data if we process the data on this legal basis, by sending a declaration to: daneosobowe@grandcity.pl, in which it is sufficient to point out that you withdraw your consent to the processing of personal data.
to transmit data that can be processed by receiving data from us in easily readable formats (e.g. csv or other easily accessible formats) on request or by contacting us so that we can transmit the data to another administrator named by you.
Your personal data will not be processed automatically, not even during profile creation.
Providing data is voluntary, but refusal to provide it may lead to refusal to conclude a contract.
- to respond to inquiries, requests and wishes.
The basis for data processing for the above-mentioned purposes may be the necessity to fulfil a legal obligation incumbent on the Hotel, which may result, inter alia, from the provisions of the law of 26 June 1974 on the Labour Code, the Civil Code of 23 April 1964, the law of 10 May 2018 on the protection of personal data and the law of 16 July 2004 on telecommunications.
The processing of these data may also be based on the legitimate interest of the data administrator (art. 6 par. 1 lit. f GDPR).
For the above purposes we may process personal data such as your name, PESEL, identity card and your picture.
The duration of the storage of your data may depend in individual cases on the legal provisions that determine the necessity of the storage of the data for the period specified therein. The storage of data in which the controller has a legitimate interest may continue for as long as such interest exists.
- The data processed by the video surveillance system will be stored for 30 days, unless an incident requires further processing for the purposes of a procedure carried out in accordance with the provisions of the law.
The data can also be passed on to the following categories of recipients: Law firms, courier and postal companies, insurance companies, licensed bodies (e.g. courts, public prosecutors, bailiffs), tax offices.
The processing of data for the purposes mentioned above may be a legal or contractual obligation.
If you do not provide your information for these purposes, you may not be able to enter the hotel area, leave the hotel or fulfil your request, concern or wishes.
Welcome to the modern interiors of the Vega Hotel. The elegant decor and professional service will make any stay at our hotel a real pleasure.
The Vega Hotel is a business hotel in Wroclaw, located away from the city’s hustle and bustle, and providing excellent conditions for both relaxation and work. Access to fast and reliable wireless Internet is available throughout the hotel.
Guests with cars can park their vehicles right outside the hotel on a large, monitored round-the-clock car park. Moreover, our offer includes a modern and well-equipped conference centre.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 9