Privacy Policy

Privacy Policy

The Data Controller is POZIOM 511 Sp. z o.o., with its registered office in Ogrodzieniec, ul. Bonerów 33, Podzamcze, NIP: 649 226 27 65, KRS: 0000452486.

Personal data (the Controller, via the Service and other forms of communication, collects and processes the following personal data of Users provided during registration processes in the Service: first name and surname, residential address, email address, phone number) are processed by the Controller:

• for the purpose of taking action prior to concluding a contract and for the performance of the contract;
• to ensure the safety of hotel guests and other persons staying on the hotel premises;
• for purposes related to business activity, i.e. pursuing claims related to conducted business activity and fulfilling the legally justified interests of the Controller;
• on the basis of consent – exclusively for the purpose specified in the content of the consent given by the Client.

The legal basis for the processing of a guest’s personal data by the hotel is the contract for hotel services or the consent given by the data subject.

Personal data will be stored for the duration of the contract and after its termination in order to fulfil a legal obligation incumbent on the Controller, for the period required by applicable law, and in the case of legally justified purposes of the Controller, including sales and direct marketing, until the consent is withdrawn by the Client. Personal data of hotel guests and other persons staying on the hotel premises collected via hotel monitoring are processed for a period of 30 days.

The Client has the right to access their data and the right to rectify, erase, or restrict processing, the right to data portability, the right to object, and the right to withdraw consent at any time. Each guest has the right to lodge a complaint with the supervisory authority, which is the General Inspector of Personal Data Protection, ul. Stawki 2, 00-193 Warsaw.

Requests regarding the processing of personal data may be submitted via email to the data controller’s address. Submitting personal data is voluntary, but necessary for concluding and performing the contract. Personal data may be processed in an automated manner, including profiling, which may involve proposing services best suited to the client’s needs and expectations.

The Controller undertakes to make efforts to ensure proper protection of the Client’s personal data.