GDPR

In accordance with Article 13, Paragraph 1 and Paragraph 2 of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as the GDPR), we inform you that:

1. The Administrator of personal data is HB Invest Limited Liability Company, located at 242 E Żmigrodzka Street, 51-131 Wrocław.
2. Contact for matters related to the protection of personal data: iod@hasco-lek.pl
3. Personal data will be processed for the following purposes:
   • In connection with the contract performed, for the purpose of providing hotel services, based on Article 6, Paragraph 1, Point b) of the GDPR.
   • In connection with the performance of legal obligations by the Administrator, including accounting and tax obligations, based on Article 6, Paragraph 1, Point c) of the GDPR.
   • In connection with the video surveillance system to ensure the safety of people and property on the hotel premises, based on Article 6, Paragraph 1, Point f) of the GDPR. The monitoring covers the following areas: corridors, elevators, entrances.
   • In connection with conducting marketing activities, based on Article 6, Paragraph 1, Point a) of the GDPR.
4. Personal data will be stored for the following periods:
   • In connection with the contract performed, i.e., the provision of hotel services - the statute of limitations for claims arising from the performed contract.
   • In connection with the performance of legal obligations by the Administrator, for a period of 6 years from the end of the year in which the stay was completed.
   • In connection with the video surveillance system for a period of 30 days, for a period of 1 year from the date of the end of the stay.
   • Until the withdrawal of consent.
5. You have the right to access the content of your data and their rectification, deletion, processing restrictions, and data portability. You also have the right to object to data processing and to withdraw your consent to data processing at any time without affecting the lawfulness of processing based on your consent before its withdrawal. To exercise these rights, please send a written or electronic request to the data controller or email address: iod@hasco-lek.pl. The Administrator will implement the rights you specify if there are no circumstances that entitle the Administrator to process them, about which you will be informed.
6. The recipients of the data may be persons authorized to process personal data, entities servicing the Administrator or its subcontractors (including law firms, IT support, accounting offices), and recipients authorized under the law.
7. You have the right to lodge a complaint with the supervisory authority if the processing of personal data violates the provisions on personal data protection.
8. Providing personal data is voluntary, but it is necessary to achieve the purpose of processing.
9. Data will not be transferred to third countries, nor will it be processed in an automated manner.