RoomPrice

Data Protection

INFORMATION ABOUT THE PROCESSING OF YOUR PERSONAL DATA

In connection with the new provisions on personal data of natural persons (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ L 119, p. 1) - hereinafter referred to as the GDPR - in force since 25 May 2018, we would like to inform you about what we do with the data we collect, what data we use and what rights apply in connection with the processing.

Administrator of personal data.

The administrator of your personal data is Jolanta Walczak "Bacero" Przedsiębiorstwo produkcyjno- usługowo- handlowych (production, service and trading company) with registered office at Wrocław (postcode 53-234), ul. Grabiszyńska 251, NIP: 8940000253, REGON: 006009551, which owns the Vega Hotel, the Bacero Hotel and the Grand City Hotel.

You can contact the administrator for personal data directly at the e-mail address: daneosobowe@hotelbacero.com.pl


Purpose and legal basis of data processing.

Your personal data may only be processed in accordance with the provisions of the applicable law; the GDPR provides for a number of reasons for the processing of personal data of natural persons.

 When using our hotel, your personal data will be processed for various purposes:

- to enter into and perform a contract with you for the provision of hotel services or similar services provided by the hotel at the request of a guest (e.g. reservation of a special reception in our restaurant - weddings, baptisms, ceremonial dinners, etc.). Legal basis Art. 6 para. 1 lit. b of the GDPR,

As well as:

- the establishment, prosecution or defence of claims, if applicable,

- archiving of information where it is necessary to prove the facts arising from the provisions of the applicable law,

- financial services to settle the costs of your stay in the hotel through our accounting department, including the issuance of accounting documents,

- statistics, surveys on your satisfaction with our service, analytical - consisting of adapting our services to the needs of customers, handling complaints and notifications,

- for the direct marketing of own products and services,

- furthermore, the personal data of the guest can only be processed in public areas (corridors, stairwells, reception, restaurant, etc.) by video surveillance in the hotel. The purpose of video surveillance is to ensure the safety of our guests and others in the area and the protection of property,

which is our legitimate interest as an administrator of personal data (legal basis Art. 6 para. 1 lit. f of the GDPR)

Scope of data processing.

We process the following data concerning you - your name, e-mail address, telephone number, place of residence, PESEL number, identity card or passport number, date of birth and, if applicable, financial identification data (credit/payment card data).

 

Duration of data processing

We process your personal data:

- for the entire duration of the contract for hotel services or another contract concluded at the request of a guest and thereafter until the expiry of the limitation period - for a maximum of 10 years,

- necessary for invoicing - for 5 years from the end of the billing period,

- which are processed by us on the basis of our legitimate interest as holders of personal data for the entire period in which this interest exists,

- for the direct marketing of own products and services - up to the objection,

- data processed by video surveillance will be kept for 30 days, unless the occurrence of an incident requires further processing for the purposes of the proceedings in accordance with the provisions of the law.

 

Parties to whom we may disclose personal data.

We will only pass on your personal data to our subcontractors with whom we have concluded separate agreements for the processing of personal data:

- IT companies and companies offering the hotel's IT support and infrastructure (provider of integrated information systems Not7.pl based in Chyby, ul. Pomarańczowa 5 Spółka z o.o., Profitroom Sp. z o.o. based in Poznań, ul. Roosevelta 9/3, 60-829),

The data can also be passed on to the following categories of recipients: Law firms, courier and postal companies, insurance companies, licensed bodies (e.g. courts, public prosecutors), tax offices.

Data transmission to third countries or international organisations.

We do not share your personal information with third countries or international organizations.

Rights to which you are entitled.

The provisions of the GDPR protect the processing of your personal data. You have the right:

  1. to access them and receive a copy of them.
  2. to correct your data.
  3. remove them if you believe that we have no reason to edit them.
  4. to limit the processing of the data, e.g. exclusively to their storage or other purposes stated by you, as well as in a situation in which an objection has been raised against the processing of personal data.
  5. oppose marketing. You can object to the processing of your personal data for direct marketing purposes at any time (in this case we will not process your personal data for this purpose).
  6. to object to the processing on the basis of a legitimate interest on the basis of your special circumstances.  You must give us a reason (special situation) why we have to stop processing the data. We will stop processing your data for these purposes unless we can prove that our reasons for processing take precedence over your rights or if we need them to justify, prosecute or defend claims.
  7. to transmit data that can be processed by receiving personal data from us in easily readable formats (e.g. csv or other easily accessible formats) on request or by requesting that we transfer this data to another administrator (service provider),
  8. lodge a complaint with the President of the Office for the Protection of Personal Data, whose contact details and the way in which you exercise this right can easily be found on the Internet on the official website of the Office for the Protection of Personal Data.

To exercise your rights, please contact us by e-mail: daneosobowe@hotelbacero.com.pl

Once we have confirmed your identity, we will process your requests, rights and questions.

Do you have the right to revoke your consent for certain purposes of data processing if you have previously given it?

You can revoke your consent at any time by sending a short message to our e-mail address daneosobowe@hotelbacero.com.pl that you revoke your consent to the processing of your personal data.   

Please note that if we process your data for purposes other than those for which you have given your consent, we may process your data for purposes for which we have a different legal basis. We have defined the cases for the purposes for which we process personal data.

Information on the request / voluntary provision of data.

In order to use our services and conclude a contract with us, you must provide us with your personal data, as this is a prerequisite for its conclusion. The need to provide information is also required by law (e.g. for the documentation of sales with VAT invoice). If you do not wish to provide this information, we may refuse to enter into a contract.

 

Providers who have provided us with personal information about you.

If you have not provided us with your personal data, we may have received your data from the travel agency or booking portal through which you made your reservation.

We work together with the following online booking portals: booking.com, HRS.com, CiH, eHoliday.pl, Expedia.com, Netmedia, PTQV.

Personal data that we have received from other companies are in particular first and last name, e-mail address, telephone number, date of birth, pesel.

Detailed information about the location that has provided us with this information is available at the hotel reception or at – www.hotelvega.pl

 

INFORMATION ABOUT

THE PROCESSING OF YOUR PERSONAL DATA

(CONTACT FORM)

 

In connection with the new provisions on personal data of natural persons (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ L 119, p. 1) - hereinafter referred to as the GDPR - in force since 25 May 2018, we would like to inform you about what we do with the data we collect, what data we use and what rights apply in connection with the processing.

Administrator of personal data.

The administrator of your personal data is Jolanta Walczak "Bacero" Przedsiębiorstwo produkcyjno- usługowo- handlowych (production, service and trading company) with registered office at Wrocław (postcode 53-234), ul. Grabiszyńska 251, NIP: 8940000253, REGON: 006009551, which owns the Vega Hotel, the Bacero Hotel and the Grand City Hotel.

You can contact the administrator for personal data directly at the e-mail address: daneosobowe@hotelbacero.com.pl

Purpose and legal basis of the processing of personal data.

We may process your personal data only on the basis of the provisions of applicable law, and the GDPR provides for several reasons for processing personal data of natural persons.

After filling in the contact form on the hotel's website, we will process your data in order to contact you and answer the questions asked in the message. In such a case, the legal basis for the processing of your data is your consent (Art. 6 para. 1 lit. a GDPR).

Furthermore, due to the content of your message sent via the contact form, we can process your data within the framework of direct marketing of our own products and services, which is our legitimate interest as an administrator of personal data (legal basis Art. 6 para. 1 lit. f GDPR).

 

Scope of data processing.

We process the following data about you - your name, your e-mail address and your telephone number.

Duration of data processing.

We process your personal data on a permanent basis:

- necessary to process the content of the message sent to us, but not longer than 12 months,

- for which they are processed for the purpose of direct marketing of our own products and services until any objections are raised.

Entities to which we may disclose personal data.

This data may be made available to IT companies and companies providing hotel support and IT infrastructure with which the administrator has concluded separate contracts for the processing of personal data (provider of integrated information systems Not7.pl based in Chyby, ul. Pomarańczowa 5 Spółka z o.o., Profitroom Sp. z o.o. based in Poznań, ul. Roosevelta 9/3, 60-829),

 

Data transmission to third countries and international organisations.

We do not share your personal information with third countries or international organizations.

Rights to which you are entitled.

The regulations of the GDPR protect the processing of personal data. You have the right:

  1. to access them and receive a copy of them.
  2. correct (update) your data.
  3. remove them if you believe that we have no reason to edit them.
  4. to limit the processing of the data, e.g. exclusively to their storage or other purposes stated by you, as well as in a situation in which an objection has been raised against the processing of personal data.
  5. to raise objections to the marketing. You can object to the processing of your personal data for direct marketing purposes at any time (in this case we will not process your personal data for this purpose).
  6. to object to the processing on the basis of a legitimate interest on the basis of your particular circumstances.  To do so, you must give us a reason (a special situation) why you believe that we must stop processing your data. We will stop processing your data for these purposes unless we can prove that our reasons for processing take precedence over your rights or if we need them to justify, prosecute or defend claims.
  7. to transmit data that can be processed by receiving data from us in easily readable formats (e.g. csv or other easily accessible formats) on request or by contacting us so that we can transmit the data to another administrator (other service provider) named by you.
  8. lodge a complaint with the President of the Office for the Protection of Personal Data, whose contact details and the way in which you exercise this right can easily be found on the Internet on the official website of the Office for the Protection of Personal Data.

To exercise your rights, please contact us by e-mail: daneosobowe@hotelbacero.com.pl

Once we have confirmed your identity, we will process your requests, rights and questions.

Do you have the right to revoke your consent for certain purposes of data processing if you have previously given it?

You can revoke your consent at any time by sending a short message to our e-mail address daneosobowe@hotelbacero.com.pl, with which you withdraw your consent to the processing of your personal data.

Please note that if we process your data for purposes other than those for which you have given your consent, we may process your data for purposes for which we have a different legal basis. We have identified these situations for the purposes for which we process personal data.

Information on the request / voluntary provision of data.

Providing the data in the contact form is completely voluntary, but failure to provide the data may mean that we cannot contact you and respond to the message sent.

 

INFORMATION FOR

EMPLOYEES, CO-WORKERS, TRAINEES, APPLICANTS FOR THE PROCESSING OF PERSONAL DATA

 

               In connection with the new provisions on personal data of natural persons (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ L 119, p. 1) - hereinafter referred to as the GDPR - in force since 25 May 2018, we would like to inform you about what we do with the data we collect, what data we use and what rights apply in connection with the processing.

Administrator of personal data.

The administrator of your personal data is Jolanta Walczak "Bacero" Przedsiębiorstwo produkcyjno- usługowo- handlowych (production, service and trading company) with registered office at Wrocław (postcode 53-234), ul. Grabiszyńska 251, NIP: 8940000253, REGON: 006009551, which owns the Vega Hotel, the Bacero Hotel and the Grand City Hotel.

You can contact the administrator for personal data directly at the e-mail address: daneosobowe@grandcity.pl

Purpose and legal basis of the processing of personal data.

We process your personal data for this purpose:

- Conclusion and performance of an employment contract or another contract under civil law (work contract, order, etc.) between us, i.e. keeping of employee files, accounting of wages and salaries, payment of salaries, accounting of sickness cases and benefits, preparation of employment contracts, appendices to contracts, termination of contracts, employment certificates, accounting and dispatch of income tax returns (legal basis of Art. 6 para. 1 lit. b GDPR). The provision of this information is a legal requirement and a prerequisite for the conclusion of a contract.

- Recruitment of applicants for employment (for different employment relationships: employment contract, order, work contract, internship), on the basis of your consent (legal basis Art. 6 para. 1 lit. a GDPR). The provision of data for this purpose is a legal requirement and a prerequisite for the conclusion of a contract.

- in connection with the legal obligation imposed on the administrator of personal data as an employer resulting from the binding legal provisions, i.e. the archiving of personal files and documents relating to employment, personnel and accounting, the granting of additional benefits to employees and their families, insurance cover, health and safety at work - in particular from the Labour Code of 26 June 1974, the Law of 13 October 1988 on the social security system, the Law of 26 July 1991 on the income tax of natural persons (legal basis Art. 6 para. 1 lit. c GDPR). The provision of data for this purpose is a legal requirement and a prerequisite for the conclusion of a contract.

- in addition, personal data can be processed by video surveillance systems on the company premises - the hotel. The purpose of video surveillance is to ensure the safety of employees and other people in the area and the protection of property. The processing of the data for this purpose is our legitimate interest as an administrator of personal data (legal basis Art. 6 para. 1 lit. f GDPR).

If it results from the legal obligation of the controller as employer, we can also process your personal data of a special category on the basis of Art. 9 para. 2 lit. h GDPR. This legal obligation of the employer may arise, inter alia, from Article 57 of the Sickness and Maternity Cash Benefits Act, Article 185 of the Labour Code in the context of information on pregnancies of employees and others.

Special categories of data include in particular health data or biometric data.

Scope of data processing.

We process personal data only to the extent required by mandatory legal provisions. In accordance with Article 221 of the Labour Code, we process your first and last names, parents' names, date of birth, place of residence (address for correspondence), education, previous professional experience, PESEL number and other personal data of an employee, if the disclosure of this data is necessary due to the exercise of the special rights provided for in the Labour Code.

Duration of data processing.

Personal data are processed in connection:

- with the employment relationship (in the personnel files) we will process it for a maximum of 50 years after termination of the employment relationship. The obligation to keep the data for the specified period arises, among other things, from Article 125a paragraph 4 of the Social Insurance Fund Pensions Act,

- in the case of civil law contracts concerning the performance of the contract and the data of the employees, they are processed for the period specified in separate provisions of the mandatory law - for a maximum of 10 years,

- necessary for accounting and accounting documents for a period of 5 years from the end of the tax period,

- for recruitment purposes - 2 years from the date of application for a specific position,

- the data processed by the video surveillance system will be stored for 30 days, unless, as a result of an incident, further processing is necessary for the purposes of a procedure carried out in accordance with the provisions of the law.

 

Entities to which we may disclose data.

We provide personal data only to our subcontractors with whom we have concluded separate contracts for the processing of personal data - the supplier of the integrated information systems Bon-Net Sp. z o. o. - located at Poznań, ul. Polna 13 a/5, Profitroom Sp. z o.o., located at Poznań, ul. Roosevelta 9/3, 60-829.

As well as the following categories of beneficiaries: Social Insurance Institution (ZUS), tax offices, institutions cooperating to provide services from the Social Insurance Fund, institutions cooperating in the field of insurance cover, institutions authorised under the binding provisions of the law (including courts, public prosecutors' offices).

Data transmission to third countries and international organisations.

We do not share your personal information with third countries or international organizations.

Rights to which you are entitled.

The regulations of the GDPR protect the processing of personal data. You have the right:

  1. to access them and receive a copy of them.
  2. correct (update) your data.
  3. remove them if you believe that we have no reason to edit them.
  4. to limit the processing of the data, e.g. exclusively to their storage or other purposes stated by you, as well as in a situation in which an objection has been raised against the processing of personal data.
  5.  to object to the processing on the basis of a legitimate interest on the basis of your particular circumstances.  To do so, you must give us a reason (a special situation) why you believe that we must stop processing your data. We will stop processing your data for these purposes unless we can prove that our reasons for processing take precedence over your rights or if we need them to justify, prosecute or defend claims.
  6. to withdraw your consent to the processing of personal data if we process the data on this legal basis, by sending a declaration to: daneosobowe@grandcity.pl, in which it is sufficient to point out that you withdraw your consent to the processing of personal data.
  7. to transmit data that can be processed by receiving data from us in easily readable formats (e.g. csv or other easily accessible formats) on request or by contacting us so that we can transmit the data to another administrator named by you.
  8. lodge a complaint with the President of the Office for the Protection of Personal Data, whose contact details and the way in which you exercise this right can easily be found on the Internet on the official website of the Office for the Protection of Personal Data.

Your personal data will not be processed automatically, not even during profile creation.

Providing data is voluntary, but refusal to provide it may lead to refusal to conclude a contract.

 

INFORMATION OBLIGATION

FOR HOTEL GUESTS AND PERSONS RECORDED AND RECORDED BY A VIDEO SURVEILLANCE SYSTEM

 

            In connection with the new provisions on personal data of natural persons (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ L 119, p. 1) - hereinafter referred to as the GDPR - in force since 25 May 2018, we would like to inform you about what we do with the data we collect, what data we use and what rights apply in connection with the processing.

Administrator of personal data.

The administrator of your personal data is Jolanta Walczak "Bacero" Przedsiębiorstwo produkcyjno- usługowo- handlowych (production, service and trading company) with registered office at Wrocław (postcode 53-234), ul. Grabiszyńska 251, NIP: 8940000253, REGON: 006009551, which owns the Vega Hotel, the Bacero Hotel and the Grand City Hotel.

You can contact the administrator for personal data directly at the e-mail address: daneosobowe@hotelbacero.com.pl

Purpose and legal basis of the processing of personal data.

We may process your personal data only on the basis of the provisions of applicable law, and the GDPR provides for several reasons for processing personal data of natural persons.

When you enter our hotel, we may process your personal data for this purpose:

- to ensure the safety of persons, property and information,

- to respond to inquiries, requests and wishes.

The basis for data processing for the above-mentioned purposes may be the necessity to fulfil a legal obligation incumbent on the Hotel, which may result, inter alia, from the provisions of the law of 26 June 1974 on the Labour Code, the Civil Code of 23 April 1964, the law of 10 May 2018 on the protection of personal data and the law of 16 July 2004 on telecommunications.

The processing of these data may also be based on the legitimate interest of the data administrator (art. 6 par. 1 lit. f GDPR).

Scope of data processing.

For the above purposes we may process personal data such as your name, PESEL, identity card and your picture.

Duration of data processing.

The duration of the storage of your data may depend in individual cases on the legal provisions that determine the necessity of the storage of the data for the period specified therein. The storage of data in which the controller has a legitimate interest may continue for as long as such interest exists.

- The data processed by the video surveillance system will be stored for 30 days, unless an incident requires further processing for the purposes of a procedure carried out in accordance with the provisions of the law.

Entities to which we may disclose personal data.

We will only pass on your personal data to our subcontractors with whom we have concluded separate agreements for the processing of personal data:

- Companies we work with to ensure the safety of people, property and information,

- IT companies and enterprises providing hotel support and IT infrastructure (provider of integrated information systems Not7.pl based in Chyby, ul. Pomarańczowa 5 Spółka z o.o., Profitroom Sp. z o.o. based in Poznań, ul. Roosevelta 9/3, 60-829),

The data can also be passed on to the following categories of recipients: Law firms, courier and postal companies, insurance companies, licensed bodies (e.g. courts, public prosecutors, bailiffs), tax offices.

Data transmission to third countries and international organisations.

We do not share your personal information with third countries or international organizations.

Rights to which you are entitled.

The regulations of the GDPR protect the processing of personal data. You have the right:

  1. to access them and receive a copy of them.
  2. correct (update) your data.
  3. remove them if you believe that we have no reason to edit them.
  4. to limit the processing of the data, e.g. exclusively to their storage or other purposes stated by you, as well as in a situation in which an objection has been raised against the processing of personal data.
  5. to raise objections to the marketing. You can object to the processing of your personal data for direct marketing purposes at any time (in this case we will not process your personal data for this purpose).
  6. to object to the processing on the basis of a legitimate interest on the basis of your particular circumstances.  To do so, you must give us a reason (a special situation) why you believe that we must stop processing your data. We will stop processing your data for these purposes unless we can prove that our reasons for processing take precedence over your rights or if we need them to justify, prosecute or defend claims.
  7. to transmit data that can be processed by receiving data from us in easily readable formats (e.g. csv or other easily accessible formats) on request or by contacting us so that we can transmit the data to another administrator (other service provider) named by you.
  8. lodge a complaint with the President of the Office for the Protection of Personal Data, whose contact details and the way in which you exercise this right can easily be found on the Internet on the official website of the Office for the Protection of Personal Data.

To exercise your rights, please contact us by e-mail: daneosobowe@hotelbacero.com.pl

Once we have confirmed your identity, we will process your requests, rights and questions.

Do you have the right to revoke your consent for certain purposes of data processing if you have previously given it?

You can revoke your consent at any time by sending a short message to our e-mail address daneosobowe@hotelbacero.com.pl, with which you withdraw your consent to the processing of your personal data.

Please note that if we process your data for purposes other than those for which you have given your consent, we may process your data for purposes for which we have a different legal basis. We have identified these situations for the purposes for which we process personal data.

Information on the request / voluntary provision of data.

The processing of data for the purposes mentioned above may be a legal or contractual obligation.

If you do not provide your information for these purposes, you may not be able to enter the hotel area, leave the hotel or fulfil your request, concern or wishes.

This website uses COOKIES.

By browsing it you accept our cookies policy, according to your browser settings. Read more about Privacy Policy.

OK, close