Source: https://www.hotelunicuspalace.pl/en/privacy-notice-page-177891
Timestamp: 2019-04-21 11:01:31+00:00

Document:
Companies are joint controllers of your data, which means they together set the purposes and methods of processing your data. In matters related to the processing of your personal data by the Companies, please contact the person responsible for the protection of personal data at the following e-mail address: rodo@dobryhotel.com or at the following address: Dobry Hotel Mięczkowski Sp. k., al. Grunwaldzka 229, 80-226 Gdańsk. This is a joint contact for all the Companies.
Dobry Hotel – as the joint controller - is responsible for providing you with the information about how the Companies process your personal data.
Companies have entered into the agreement; this agreement does not limit the liability of each of the Companies. You can execute your rights against each of the Companies (joint and several liability of the Companies).
The contact details of the controllers representatives in the matter of personal data protection.
In matters related to the processing of your personal data by the Companies, please contact the person responsible for the protection of personal data at the following e-mail address: rodo@dobryhotel.com or at the following address: Dobry Hotel Mięczkowski Sp. k., al. Grunwaldzka 229, 80-226 Gdańsk.
This is a joint contact for all the Companies.
In order to provide services within the scope of the company’s operations, we will process your personal data, for a variety of purposes, all of which are in compliance with the law. Below you can find a detailed list of the purposes for which your personal data is processed along with the legal basis for such processing.
Your personal data are being processed by the Companies in connection with services rendered by the Companies on your request. The purpose of this processing is primarily to ensure proper performance of the service agreement and to present to you our special offers presenting. Below you will find purposes for the processing of personal data along with the legal basis.
car registration number (if provided).
Under art. 6 paragraph 1 b GDPR (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (Text with EEA relevance) - processing is necessary for the performance of a contract to which the you are the party or in order to take steps at the request of the data subject prior to entering into a contract.
Under art. 6 paragraph 1 b GDPR - processing is necessary for the performance of a contract to which you are the party or in order to take steps at the request of the data subject prior to entering into a contract.
bank account number (if there is a refund).
Under art. 6 paragraph 1 b GDPR - processing is necessary for the performance of a contract to which the you are the party or in order to take steps at the request of the data subject prior to entering into a contract.
You can inform the Companies at any time that you do not wish to receive such content. Upon your request the information will cease to be sent.
Under art. 6 paragraph 1 f GDPR - processing is necessary for the purposes of the legitimate interests of the Companies. In this particular situation this purpose shall mean development and improvement quality of the services rendered by the Companies.
The information may only be provided upon your consent given under the Act on the provision of electronic services and the Act on the telecommunications law.
images of the natural person.
Under art. 6 paragraph 1 f GDPR - processing is necessary for the purposes of the legitimate interests of the Companies. In this particular situation this purpose shall mean providing security to another legally protected good (e.g. company resources, personal safety in or around premises).
Under art. 6 paragraph 1 f GDPR - processing is necessary for the purposes of the legitimate interests of the Companies. In this particular situation this purpose shall mean possession of personal data that will allow to prove certain facts related to the provision of services, e.g. needed at the request of public authorities.
Under art. 6 paragraph 1 f GDPR - processing is necessary for the purposes legitimate interests pursued by the Companies. In this particular situation this purpose shall mean establishing, investigating or defending the Companies rights.
Under art. 6 paragraph 1 a GDPR – you have given consent to the processing of your personal data for one or more specific purposes.
These data are processed primarily because the GDPR imposes on the Companies numerous documentary obligations to demonstrate the compliance of the processing with the law and the possibility of demonstrating such compliance (in order to implement one of the basic principles of GDPR, that is accountability). In addition, if you submit, for example, an objection to the processing of personal data for marketing purposes, the companies need to know who should not use direct marketing, because they do not want it.
Under art. 6 paragraph 1 c GDPR - processing is necessary for compliance with a legal obligation to which the controller is a subject to.
Under art. 6 paragraph 1 f GDPR - processing is necessary for the purposes of the legitimate interests of the Companies. In this particular situation this purpose shall mean having knowledge about people who exercise their rights resulting from the GDPR.
Art. 6 paragraph 1 c GDPR in relation to regulations contained in the Accounting Act dated on 29 September 1994.
information about the operating system - these data are automatically saved in the server logs, while using the page belonging to the Companies. It would not be possible to administrate the website without using the server and without this automatic savings.
Under art. 6 paragraph 1 f GDPR - processing is necessary for the purposes of the legitimate interests of the Companies. In this particular situation this purpose shall mean proper website.
Under art. 6 paragraph 1 f GDPR - processing is necessary for the purposes of the legitimate interests of the Companies. In this particular situation this purpose shall mean having knowledge about client’s activity on the website.
they provide security – cookies are used to verify and authenticate users and to prevent unauthorised access to the client panel. In this way they protect your personal data from access by unauthorised parties.
they increase the efficiency and comfort of using the website – cookies are used to make your experience browsing the website run more smoothly and to ensure that you have full access to its functionality, which is possible among other reasons thanks to cookies remembering your settings from visit to visit. Thanks to this it is easy to smoothly move from page to page.
cookies identify session status — cookies frequently store information on how you use the website, such as which subpages are most often displayed. These cookies help us identify display errors in the website.
cookies maintain session status — once you have logged into the reservation system, cookies allow your session to be maintained. This means that it is not necessary to log into the system again every time you visit a subpage, undoubtedly increasing the comfort of use of the system.
they create statistics —cookies are used to analyse how users are using the website (for example how many people visit the site, how long they remain on the site, which contents generate the most interest, etc.). Thanks to this information, we can improve the website and adapt its operations to the preferences of its users. In order to monitor page activity and create statistics, we use Google tools such as Google Analytics; in addition to reporting on usage statistics for the website, Google Analytics may also be used together with some of the types of cookies mentioned above to provide the user with more tailored and relevant content in Google services (such as the Google search engine) and throughout the Internet.
It is important to remember that many cookies have an anonymous nature; that is, they cannot be used to identify the individual user.
If processing of your personal data takes place on the basis of your consent, you may withdraw that consent at any time and for any reason.
Dear Customer, the use of hotel services provided by the Company or access services to the booking system is fully voluntary, however, for the proper performance of the contract, personal data is necessary.
For the purpose of rendering services through the booking system, the Companies process following personal data: first name and surname, e-mail address.
In order to issue an invoice and fulfill other obligations resulting from the provisions of tax law, the Companies process personal data such as: first name and surname, address of residence or headquarters address, tax identification number (if provided).
You also provide your telephone number or e-mail address on a voluntary basis. The companies point out, however, that in the absence of these data, they will not be able to submit their offers.
In order to use the loyalty program, the Companies process personal data such as: first name and surname, phone number, e-mail address.
One of the ways of processing your personal data is the profiling. Profiling means that each of the Companies may - based on your preferences - adapt services and content sent to you electronically by the Companies. For its part, each of the Companies guarantees that the data is not processed automatically, that is, without human interference.
owners of facilities in which there are hotels.
Like most entrepreneurs, the Companies use various popular services and technologies offered by such entities as Facebook, Microsoft or Google. These companies are based outside the European Union and therefore, in the light of the provisions of the GDPR, they can be treated as third countries.
Due to the fact that each of the Companies uses the services of different suppliers, your personal data may be transferred outside the European Union and the European Economic Area. The companies ensure, however, that in such a case the data transfer will take place on the basis of a contract between the Companies and this entity, containing exemplary clauses on data protection adopted by the European Commission.
In a situation where the Companies do not need to perform other operations on your personal data than storing (e.g. .when the content of the order is stored for defenses against claims), until the permanent removal or destruction of the data are additionally protected - for example by pseudonymization. Pseudonymisation consists of such encryption of personal data or a personal data set that it is impossible to read them without an additional key, and thus such information becomes completely useless to the unauthorized person.
until obsolescence or obsolescence, but no more than 5 years - in relation to personal data processed mainly for analytical purposes.
Please note that periods in years are counted from the end of the year in which the Companies began processing personal data. Such actions are primarily aimed at improving the process of removing or destroying personal data.
Please note that a separate counting of the deadline for each contract would entail significant organizational and technical difficulties for the Companies as well as significant financial expenses, therefore setting one date for removing or destroying personal data allows the Companies to manage this process more efficiently and effectively.
However, if you exercise the right to be forgotten by the Company, such situations are considered and solved individually.
The rights described above are honoured by the company, and the company shall make efforts to ensure that the exercise of these rights is as easy as possible.
The company would also like to inform you that the rights listed above are not absolute rights and that in some situations the company may choose to or be required to refuse to honour these rights. However, such rights shall only be refused after thorough and careful analysis and only when absolutely necessary.
Additionally, at any time you may object to the processing of your personal data for marketing purposes. In such a case, processing will cease after we receive your request.
If you feel that your personal data have been processed in violation of applicable law, you may lodge a complaint with the President of the Office of Personal Data Protection.

References: art. 6
 art. 6
 art. 6
 art. 6
 art. 6
 art. 6
 art. 6
 art. 6
 art. 6
 art. 6

Art. 6
 art. 6
 art. 6