INFORMATION ON THE PROCESSING OF PERSONAL DATA E-MAIL CORRESPONDENCE
The below referenced information originates with, and is being passed on to you in pursuance of the Regulation of the European Parliament and of the Council (EU) 2016/679, of April 27, 2016, on the protection of natural persons with regard to the processing of personal data, and on the free movement of such data, and on repealing Directive 95/46/EC (General Data Protection Regulation - GDPR).
I. Personal Data Administrator
The administrator of personal data is Kraków Airport Hotel, a limited liability company with its registered office in Balice at the following address: ul. Kpt. Mieczysława Medweckiego 3, 32-083 Balice, evidenced in the National Court Register of Entrepreneurs as entry No KRS 0000335628, NIP (tax identification number): 5130189547, REGON: 120944716, tel.: + 48 12 340 00 00 (hereinafter referred to as ‘the Administrator’ or ‘the Company’).
II. Contact to the Data Protection Officer:
Contact with the Data Protection Inspector is possible at the following e-mail address: iod@krakowairporthotel.pl or at the correspondence address indicated in point I.
III. Purposes and legal basis of personal data provision
We process your personal data contained in the content of e-mail correspondence in order to enable you to contact us via e-mail and to contact the addressees of the message, documenting the arrangements made, accepting letters, applications and applications. The basis for data processing in this area is:
if you represent our Contractor, the basis for data processing is the Administrator's legitimate interest in providing the possibility of contacting the Administrator via electronic mail (Article 6 paragraph 1 point f of the GDPR).
if you, as a natural person, are directly a Party to the contract concluded with us, the processing of data contained in e-mail correspondence may be necessary to perform the contract to which you are a party or to take action before the conclusion of the contract (Article 6 paragraph. 1.point b of the GDPR);
data may be processed in order to implement the Administrator's legitimate interest in pursuing claims or defending against claims (Article 6 paragraph. 1.point f of the GDPR);
The data will not be processed for the purposes of direct marketing of our products and services without separate consent. Marketing information can be sent using the data provided in the e-mail only if the content of the correspondence implies the expectation of receiving such information. The basis for data processing is then your consent expressed by express confirmation action, consisting of submitting a query with a specific content (Article 6 paragraph. 1.point a of the GDPR);
IV. The scope of data processed
The following categories of personal data will be processed: name and surname, e-mail address, position held or function performed, telephone number.
V. Information on the mandatory / voluntary provision of data
Providing personal data is voluntary, but necessary for correspondence.
VI. Period of data processing
Personal data contained in e-mail correspondence will be processed during the period of cooperation or conducting correspondence, and after it can be archived on the Administrator's servers.
VII. Recipients of personal data
We may transfer your personal data to the processors processing data on behalf of the Administrator to provide services to the Administrator, such as IT services (e.g. hosting, supply or maintenance of IT systems), accounting services, postal services, legal services, etc.
VIII. Your statutory rights related to the processing of personal data
You have the right to access the data and the right to request their rectification (if they are inconsistent with the facts), deletion, processing restrictions (in cases provided for by applicable law). To the extent that the basis for the processing of your personal data is the legitimate interest of the Administrator, you have the right to object to the processing of personal data. To the extent that the basis for the processing of your personal data is consent, you have the right to withdraw consent. Withdrawal of consent does not affect the lawfulness of processing until the consent is withdrawn. You also have the right to transfer personal data, i.e. to receive from the Administrator, in a structured, commonly used machine-readable format. The right to transfer data does not apply to data that is a business secret, cannot adversely affect the rights and freedoms of others, including trade secrets or intellectual property, and will be implemented to the extent technically possible.
The first copy of the data is free.In order to exercise your rights, please contact the addresses indicated in points I. or II.
IX. The right to lodge a complaint with the supervisory body
You also have the right to lodge a complaint with the supervisory body, which is the President of the Office for Personal Data Protection (00-193 Warsaw, ul. Stawki 2, e-mail: kancelaria@uodo.gov.pl)
X. Automated decision making
Decisions are not made in an automated manner, and your personal data is not subject to profiling by Personal Data Administrator.
XI. Transfer of data to third countries or international organizations
The data will not be transferred outside the European Economic Area.