1. The controller of the Guests' personal data is the Mazurskie Centrum Kongresowo-Wypoczynkowe „ZAMEK RYN” sp. z o.o. with its registered office in Ryn, Plac Wolności 2, 11-520 Ryn NIP [VAT No.] 7393112796, REGON [Business reg. No.] 510953863.
2. Personal Data Inspector – address pl. Wolności 2, 11-520 Ryn, Poland, email: daneosobowe@zamekryn.pl, tel. +48 87 429 7040.
3. The personal data of the Guest is processed on the basis of an agreement for the provision of hotel services concluded between the Guest and the Hotel. The purpose of personal data processing is to provide hotel services or other similar services that are provided by the Hotel at the Guest's request. In addition, the personal data of the Guest can be processed by video monitoring used in the Hotel. The purpose of the video monitoring is to protect the Guest and other people staying at or around the hotel.
4. If the Guest provides personal data regarding their preferences of the stay or the services rendered, the Hotel may process this personal data for the purpose of improving the quality of the services rendered by the Hotel or ensuring the Guest's comfort or provision of additional services. This also applies to the processing of sensitive data. The legal basis for the processing of personal data for this purpose is the justified interest of the Hotel (Article 6 (1) letter "f" of the GDPR). The Hotel has assessed the impact of activities undertaken for this purpose on the privacy of the Guest. This assessment led the Hotel to conclude that the processing of personal data in justified interest does not interfere too much with the privacy of the Guest, as this way of processing the Guest's personal data is used to improve the quality of services provided by the Hotel, which will in turn benefit the Guest in the form of better understanding of their needs. Therefore the Guest's interests and privacy will not be compromised.
5. The personal data of the Guest may also be processed in order to conduct guest satisfaction surveys regarding the services provided by the Hotel. The legal basis for the processing of personal data for this purpose is the justified interest of the Hotel (Article 6 (1) letter "f" of the GDPR). The hotel has assessed the impact of activities undertaken for this purpose on the privacy of the Guest. This assessment led the Hotel to conclude that the processing of personal data in a justified interest does not interfere too much with the privacy of the Guest, because this way of processing the Guest's personal data is used to improve the quality of services provided by the Hotel, which will in turn benefit the Guest in the form better understanding of the Guest's needs. Therefore, the Guest's interests and privacy will not be compromised.
6. The Hotel informs you that providing personal data to the extent necessary in order to identify the Guest is a contractual and statutory requirement (when documenting the sale to the Guest with of a VAT invoice). The lack of personal data prevents the conclusion of the contract with the Hotel and makes it impossible to issue a VAT invoice.
7. The Hotel informs you that every Guest has the right to access, correct and update their personal data. Each Guest also has the right to transfer data, object to processing, place processing restrictions and delete personal data if there is a legal basis to do so.
8. The Hotel informs you that the personal data of the Guest will be kept for the whole period of the provision of hotel service to the Guest. The data will be kept during the period of prescription of any claims, including tax and civil claims. Personal data processed by the video monitoring will be stored for a period of 8 days.
9. The Hotel informs you that the personal data of the Guest may be disclosed to the following categories of recipients:, a. Law firms in cooperation with the Hotel, b. Insurance companies in cooperation with the Hotel, c. IT companies and companies which provide the Hotel with IT system support and management services, d. Courier companies and postal services, e. Travel agencies.
10. The Hotel informs you about the right to make a complaint to the body which supervises the processing of personal data.
11. In the event of booking a stay at the Hotel through a travel agency or a booking website, the categories of personal data of the Guests submitted to the Hotel by said entities may include especially: the given name and surname, the period of stay, the e-mail address and the telephone number of the Guest. The details of the source which provided the Hotel with the personal data of the Guest are available at the Reception desk.