Purpose of the processing data | Legal basis |
For the purpose of proper fulfillment of the hotel service agreement the Companies processing your personal data given in the registration card, i.e.: • first name and surname, • place and address of the residence, • id card number, • phone number, • date of birth, • nationality, • credit card number (if provided), • car registration number (if provided). |
Under art. 6 paragraph 1 b GDPR (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (Text with EEA relevance) - processing is necessary for the performance of a contract to which the you are the party or in order to take steps at the request of the data subject prior to entering into a contract. |
For the purpose of rendering services through the booking system (including information send by the system) available on the website www.dobryhotel.com the Companies process following personal data: • first name and surname, • e-mail address. |
Under art. 6 paragraph 1 b GDPR - processing is necessary for the performance of a contract to which you are the party or in order to take steps at the request of the data subject prior to entering into a contract. |
In order to process a complaint, the Companies process personal data, such as: • first name and surname, • e-mail address, • booking number, • address of the residence (if there is a refund), • bank account number (if there is a refund). |
Under art. 6 paragraph 1 b GDPR - processing is necessary for the performance of a contract to which the you are the party or in order to take steps at the request of the data subject prior to entering into a contract. |
Ensuring the quality of the services provided to you is a priority for the Companies, which is why during the period of the service or after completing a given service, the Companies may send you short surveys with request for your feedback. The companies may also send you offers covering the services they provide. In this case, the Companies process personal data such as: • first name and surname, • e-mail address You can inform the Companies at any time that you do not wish to receive such content. Upon your request the information will cease to be sent. |
Under art. 6 paragraph 1 f GDPR - processing is necessary for the purposes of the legitimate interests of the Companies. In this particular situation this purpose shall mean development and improvement quality of the services rendered by the Companies. The information may only be provided upon your consent given under the Act on the provision of electronic services and the Act on the telecommunications law. |
In order to ensure safety and security at facilities managing by the Companies, we use video monitoring. Therefore, the Companies process data such as: • images of the natural person. |
Under art. 6 paragraph 1 f GDPR - processing is necessary for the purposes of the legitimate interests of the Companies. In this particular situation this purpose shall mean providing security to another legally protected good (e.g. company resources, personal safety in or around premises). |
For archiving and evidence purposes, the Companies process personal data such as: • name and surname, • e-mail address, • booking number. |
Under art. 6 paragraph 1 f GDPR - processing is necessary for the purposes of the legitimate interests of the Companies. In this particular situation this purpose shall mean possession of personal data that will allow to prove certain facts related to the provision of services, e.g. needed at the request of public authorities. |
In order to establish, investigate or defend against claims, the Companies process personal data such as: • first name and surname, • address/place of residence (if provided), • PESEL number or NIP number (if provided), • e-mail address, • booking number, • identification number. |
Under art. 6 paragraph 1 f GDPR - processing is necessary for the purposes legitimate interests pursued by the Companies. In this particular situation this purpose shall mean establishing, investigating or defending the Companies rights. |
In order to use the loyalty program, the Companies process personal data such as: • first name and surname, • phone number, • e-mail address. |
Under art. 6 paragraph 1 a GDPR – you have given consent to the processing of your personal data for one or more specific purposes. |
In order to create registers and records related to the GDPR, including for example the register of guests who raised objections or exercise the right to limit the processing of their data in accordance with the GDPR, the Companies process personal data such as: • first name and surname, • e-mail address.These data are processed primarily because the GDPR imposes on the Companies numerous documentary obligations to demonstrate the compliance of the processing with the law and the possibility of demonstrating such compliance (in order to implement one of the basic principles of GDPR, that is accountability). In addition, if you submit, for example, an objection to the processing of personal data for marketing purposes, the companies need to know who should not use direct marketing, because they do not want it. Under art. 6 paragraph 1 c GDPR - processing is necessary for compliance with a legal obligation to which the controller is a subject to. |
Under art. 6 paragraph 1 f GDPR - processing is necessary for the purposes of the legitimate interests of the Companies. In this particular situation this purpose shall mean having knowledge about people who exercise their rights resulting from the GDPR. |
In order to issue an invoice and fulfill other obligations resulting from tax law regulations, such as storing accounting records for 5 years, the Companies process personal data such as: • first name and surname, • address of residence or headquarters address, • tax identification number (if provided), • booking number. |
Art. 6 paragraph 1 c GDPR in relation to regulations contained in the Accounting Act dated on 29 September 1994. |
To enable the use of cookies on the website, we also process text information (cookies are described in a separate section). | Article 6 para. 1a of the GDPR, which allows personal data to be processed on the basis of voluntary consent (during the first visit to the website, a request for consent to the use of cookies will appear). |
For the purpose of the administration of a website, the Companies process personal data such as: • IP address, • server date and time, • information about the web browser, • information about the operating system - these data are automatically saved in the server logs, while using the page belonging to the Companies. It would not be possible to administrate the website without using the server and without this automatic savings. |
Under art. 6 paragraph 1 f GDPR - processing is necessary for the purposes of the legitimate interests of the Companies. In this particular situation this purpose shall mean proper website. |
For the analytical purpose, i.e. providing research and analysis of the activity on the website www.dobryhotel.com, the Companies process such personal data as: • date and time of visiting the website, • type of operating system, • approximate location, • type of web browser used to browse the website, • time spent on the site, • subpages visited. |
Under art. 6 paragraph 1 f GDPR - processing is necessary for the purposes of the legitimate interests of the Companies. In this particular situation this purpose shall mean having knowledge about client’s activity on the website. |