Who is the controller of your personel data? The Data Controller, meaning the entity deciding on the use of your personal data is altin Hotels sp. z o.o., ul. Młyńska 12, 61-730 Poznań, NIP: 7822622688 (hereinafter referred to as the “Company”).
How can you contact the Company in order to receive more information about the processing your personal data? Contact details: email address:email@example.com, postal address: Baltin Hotels sp. z o.o., ul. Warszawska 43/127, 61-028 Poznań.
How did we obtain your data? We obtained this data from you, in connection with the provision of tourism services for you or based on your consent.
What is the purpose and legal basis for processing your personal data by the Company?
We can process your personal data because it is necessary for the conclusion and performance of the agreement between us, including: 1) provision of tourism services, 2) complaint handling; 3) processing of your inquiries (e.g. sent using the contact form); 4) contacting you, also for purposes associated with the provision of services.
Moreover, we process your personal data for purposes stated below based on the legally justified interest of the Company, which is: 1) ensuring safety of services provided by us; 2) debt collection; participation in court, arbitration and mediation proceedings; 3) performance of statistical analyses; 4) storage of data for archivising purposes, 5) for tax- and accounting-related purposes as well as other public responsibilities we are bound to observe under the existing law.
Moreover, only if you give consent for doing so, the Company will process your personal data for the purpose of saving data in cookies and collecting data from websites and mobile apps as well as other purposes, including marketing purposes, which were specifically indicated in a given data processing consent statement.
Do you have to give us your personal data? What type of data do we process? The Company requires you to give your personal date for the purpose of conclusion and performance of the agreement concluded with you. The required data includes: name, surname, residiential address, PESEL, ID number, telephone number and email address. If you decide not to provide you personal date, unfortunately we will not be able to provide our services to you. If this is required by the existing regulations, we may need other data that is necessary e.g. for accounting- or tax-related purposes. In other respects, the provision of your data is voluntary.
What are your rights towards the Company with regard to the processed data? You have the access, correct and remove your personal data as well as to restrict its processing, transfer it, exclude it from automated decision-making processes, including profiling, as well as the right to object to the processing of your personal data.
With regard to data processed by us based on your consent, you have the right to withdraw the given consent at any given time without affecting the lawfulness of the processing performed based on that consent before its withdrawal.
Moreover, you have the right to lodge a complaint with regard to our processing of your personal data to a supervisory authority, which is the President of the Personal Data Protection Office (address: Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw).
Under what circumstances can you object to the processing of your data? You are entitled to object to the processing of your personal data if it is processed based on the legally justified interest or for statistical purposes and such an objection is justified by extraordinary circumstances you are in.
With whom we share your personal data? The Company may share your personal data with personally- or equity-related companies as well as couriers, service providers and other entities as long as it is necessery for the provision of services for your interest. The Company may transfer your personal data to public authorities.
How long do we keep your personal data? The company keeps your personal data for the period necessary for performance of the contract plus a period during which it is possible to pursue claims regarding contract performance as well as a period necessary with regard to public settlements, maximum 6 years from the date of ending the cooperation. Additionally, the data may be stored by the Company for purposes related to prevention of abuse and fraud, and for statistical and archiving purposes for a period of 10 years from the day of ending the cooperation or occurrence of an event necessitating such processing.
Do we transfer your data to countries not belonging to the European Economic Area? Your data will not be transfered by the Company outside the European Economic Area, with the exception of transfering data to Google LLC based on appropriate legal safegards in the form of standard personal data protection agreements approved by the European Commission.
Do we process your personal data automatically (including profiling) in a way that affects your rights? Your personal data will not be processed in an automated manner or be subject to profiling.