RODO

We inform you that the administrator of personal data is:
UNU spółka z ograniczoną odpowiedzialnością sp.k., based in Puszczykowo [62-040], ul. Czarnieckiego 56.
As of May 25, 2018, you can contact us regarding the processing of personal data by emailing: rec@hotelarnia.pl

Personal data will be processed by UNU spółka z ograniczoną odpowiedzialnością sp.k. in particular:

1) Based on Article 6(1)(b) and (c) of the GDPR* for the purpose of:

a) taking action prior to entering into a contract at the request of the data subject, or performing a contract to which the data subject is a party (the data necessary for concluding the contract are indicated in the contract form);
b) fulfilling a legal obligation incumbent upon the Administrator.

2) Based on the legitimate interest of UNU spółka z ograniczoną odpowiedzialnością sp.k. [Article 6(1)(f) of the GDPR] for the purpose of:

a) marketing its own products or services, including personalized marketing based on the client’s profile;
b) organizing and conducting contests and other marketing events;
c) pursuing or securing legal claims;
d) analyzing the technical quality of services and equipment.

3) Based on separate consent [Article 6(1)(a) of the GDPR] for the purpose of:

a) verifying the client’s creditworthiness based on information from economic information bureaus, in particular from the Economic Information Bureau InfoMonitor S.A. (BIG InfoMonitor) or data contained in the Administrator’s database;
b) sending information to the client regarding proposed changes to the contract, including the Regulations and Price List, change of company name or address, and confirmation or response to complaints via the provided email address;
c) direct marketing of UNU spółka z ograniczoną odpowiedzialnością sp.k.’s own products or services;
d) direct marketing of products or services of partners cooperating with UNU spółka z ograniczoną odpowiedzialnością sp.k.
In this case, personal data will not be shared with third parties, and such communication will be conducted by UNU spółka z ograniczoną odpowiedzialnością sp.k. itself, potentially using electronic means (e.g. SMS, MMS, email) or telecommunication devices (e.g. telephone).
 

Data retention period:

1. Personal data processed for the purpose of performing a contract or fulfilling legal obligations will be stored for the duration of the contract, and thereafter for the period necessary to:
   a) provide after-sales customer service (e.g. complaint handling);
   b) secure or pursue possible claims;
   c) fulfill the Administrator’s legal obligations (e.g. under tax or accounting regulations).

2. Personal data processed for marketing purposes based on legitimate interest will be stored until an objection is raised by the data subject.

3. Personal data processed based on consent will be stored until consent is withdrawn.
   If consent has been granted for processing transmission data for marketing purposes, the data will only be processed during the term of the contract.

Rights of the data subject:

1. Right to access personal data (confirmation of processing and related information);

2. Right to rectification of incorrect or incomplete data;

3. Right to request deletion of data;

4. Right to request restriction of processing;

5. Right to data portability (to receive and transmit data to another controller);

6. Right to object to processing based on the Administrator’s legitimate interest or for direct marketing;

7. Right to lodge a complaint with a supervisory authority in Poland or another EU member state;

8. Right to withdraw consent at any time (without affecting prior lawful processing);

9. Right to obtain human intervention, express one’s point of view, and contest automated decisions.

These rights (points 1–6 and 8–9) can be exercised by contacting the Data Protection Officer (email provided above) or UNU spółka z ograniczoną odpowiedzialnością sp.k. (address provided above, with the note: “Personal Data Protection”).

Categories of data recipients

Entities processing data on behalf of UNU spółka z ograniczoną odpowiedzialnością sp.k. include:
telecommunications providers, debt collection companies, banks, postal operators, couriers, credit information bureaus, and partners providing technical services (e.g. IT system and website development and maintenance).

*Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).