INFORMATION CLAUSE FOR THE CLIENTS OF SKY HOTEL KRAKÓW
Pursuant to Article 13(1) and (2) of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as GDPR, this is to inform that:
1. The controller of your personal data processed in connection with the provision of hotel services is Sunshine Property sp. z o.o. with its registered office at ul. Lubicz 9, 31-034 Kraków (phone: 12 306 5500, info@sunshineproperty.pl).
2. Sky Hotel Kraków has its Data Protection Officer, who can be contacted by e-mail at info@sunshineproperty.pl or by traditional mail sent to ul. Lubicz 9, 31-034 Kraków, with an annotation reading “IOD” (“DPO”) on the envelope.
3. Your personal data will be processed pursuant to Article 6(1)(c) and Article 9(2)(g) of GDPR for the purpose of the provision of hotel services/carrying out the delivery defined in the agreement you have concluded with us and which we perform or performed for your benefit or on the grounds of a business relationship we have established with you with a view to conclude such an agreement, which is our legitimate interest on the grounds of GDPR. Moreover, the said data are processed to enable the pursuit of claims related to the agreement and to document the completion of the service/delivery for tax purposes. If you have given your consent to have your personal data processed for marketing and/or profiling purposes, Sky Hotel Kraków will process your data to send you marketing communication and commercial information about its products and services and for profiling purposes accordingly. The legal grounds for the processing of personal data is the accommodation service/delivery agreement which you have concluded with us and which we perform or performed for your benefit. The legal grounds for the processing of personal data used for marketing and/or profiling purposes is your consent. At the same time, this is to inform you that you may withdraw your consent at any time, and the withdrawal of your consent does not affect the lawfulness of any processing that took place before you withdrew your consent.
4. The recipients of your personal data may be: the company providing management services, companies providing IT support services to Sky Hotel Kraków and software suppliers, companies providing accounting services, companies providing transportation or taxi services if a guest orders a transportation service or package shipment/delivery, law firms.
5. Your personal data acquired in connection with the concluded accommodation service agreement will be processed until the expiry of tax claims or civil-law claims, whichever of the two expires later, and the personal data acquired on the basis of a consent to the processing of data for marketing purposes will be processed throughout the period of validity of the consent to the processing of data for marketing and/or profiling purposes.
6. You have the right to access your personal data and to rectify them, erase them or restrict the processing thereof, to object to the processing thereof, and to lodge a complaint with the relevant supervisory authority, which in this case is the Polish Data Protection Commissioner (PL: Prezes Urzędu Ochrony Danych Osobowych) ul. Stawki 2, 00-193 Warsaw. Provision of personal data is obligatory under the provisions of the law.
7. Sky Hotel Kraków does not intend to transfer personal data outside the EEA.
8. Provision of personal data is voluntary, but please be informed that if you decide not to provide your personal data, it may be impossible or difficult for us to perform an accommodation service/delivery agreement for your benefit.
9. Your personal data may be subject to automated decision-making, including profiling, as referred to in Article 22(1) and (4) of GDPR, which will be carried out in accordance with the mandatory provisions of law. Sky Hotel Kraków makes automated decisions on the basis of personal data, including profiling - unless you have not given your consent to profiling. Profiling involves the use of historical personal data acquired by Sky Hotel Kraków in connection with the provision of accommodation services to its guests.