INFORMATION ON THE PROCESSING OF PERSONAL DATA CONTRACTORS
The below referenced information originates with, and is being passed on to you in pursuance of the Regulation of the European Parliament and of the Council (EU) 2016/679, of April 27, 2016, on the protection of natural persons with regard to the processing of personal data, and on the free movement of such data, and on repealing Directive 95/46/EC (General Data Protection Regulation - GDPR).
I. Personal Data Administrator
The administrator of personal data is Kraków Airport Hotel, a limited liability company with its registered office in Balice at the following address: ul. Kpt. Mieczysława Medweckiego 3, 32-083 Balice, evidenced in the National Court Register of Entrepreneurs as entry No KRS 0000335628, NIP (tax identification number): 5130189547, REGON: 120944716, tel.: + 48 12 340 00 00 (hereinafter referred to as ‘the Administrator’ or ‘the Company’).
II. Contact to the Data Protection Officer:
Contact with the Data Protection Inspector is possible at the following e-mail address: iod@krakowairporthotel.pl or at the correspondence address indicated in point I.
III. Purposes and legal basis of personal data provision
Your personal data will be processed for purposes related to the conclusion, performance and continuation of contracts, commercial cooperation, service support or delivery:
if you are, as a natural person, a Party to the contract concluded with us, the data will be processed for the purposes of negotiation, conclusion, performance and continuation of contracts, commercial cooperation, support of service or delivery of data processing is necessary to perform the contract for which you is a party or to take action before the conclusion of the contract (Article 6 paragraph 1. point b of the GDPR);
if you represent our Contractor, the basis for data processing is our legitimate interest, consisting in the need to ensure proper representation of our Contractor, contact and ensure and perform the contract (Article 6 paragraph 1 point f of the GDPR).
data may also be processed in order to fulfill the obligations imposed by applicable law, such as tax and accounting obligations, obligations in the field of counteracting money laundering and terrorist financing, etc. (Article 6 paragraph 1. point c of the GDPR).
data may be processed in order to implement the Administrator's legitimate interest in pursuing claims or defending against claims (Article 6 paragraph 1. point f of the GDPR).
The data will not be processed without separate consent for the purposes of direct marketing of our products and services.
IV. The scope of data processed
The following categories of personal data will be processed: name and surname, address, e-mail address, position held or function performed, telephone number, tax identification number (if an invoice is issued).
V. Information on the mandatory / voluntary provision of data
Providing personal data is voluntary, but necessary to conclude a contract.
VI. Period of data processing
Personal data processed in order to conclude an agreement, will be processed for a period of negotiations and its validity. Data processed for the purpose of cooperation will be processed for the duration of this cooperation. Data processed in order to fulfill the obligations arising from legal provisions will be processed for the period resulting from these provisions (5 years from the end of cooperation). Data processed for the purpose of pursuing claims or defense against claims will be processed until such claims expire (up to 6 years from the end of cooperation).
VII. Recipients of personal data
We may transfer your personal data to the processors processing data on behalf of the Administrator to provide services to the Administrator, such as IT services (e.g. hosting, supply or maintenance of IT systems), accounting services, postal services, legal services, etc.
VIII. Your statutory rights related to the processing of personal data
You have the right to access the data and the right to request their rectification (if they are inconsistent with the facts), deletion, processing restrictions (in cases provided for by applicable law). To the extent that the basis for the processing of your personal data is the legitimate interest of the Administrator, you have the right to object to the processing of personal data. To the extent that the basis for the processing of your personal data is consent, you have the right to withdraw consent. Withdrawal of consent does not affect the lawfulness of processing until the consent is withdrawn. You also have the right to transfer personal data, i.e. to receive from the Administrator, in a structured, commonly used machine-readable format. The right to transfer data does not apply to data that is a business secret, cannot adversely affect the rights and freedoms of others, including trade secrets or intellectual property, and will be implemented to the extent technically possible.
The first copy of the data is free.In order to exercise your rights, please contact the addresses indicated in points I. or II.
IX. The right to lodge a complaint with the supervisory body
You also have the right to lodge a complaint with the supervisory body, which is the President of the Office for Personal Data Protection (00-193 Warszawa, ul. Stawki 2, e-mail: kancelaria@uodo.gov.pl)
X. Automated decision making
Decisions are not made in an automated manner, and your personal data is not subject to profiling by Personal Data Administrator.
XI. Transfer of data to third countries or international organizations
The data will not be transferred outside the European Economic Area.