INFORMATION OBLIGATION

Dear Customer,

In accordance with Article 13 paragraphs 1 and 2 of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation - GDPR (OJ EU L 119/1 of 4.5.2016)), we inform you that:

  1. The administrator of your personal data is MPM Hotele SPA Sp. z o.o. with its registered office in Milanówek, ul. Brzozowa 3, 05-822 Milanówek, KRS: 0000175947, REGON: 016865236, NIP: 5291626119.
  2. The administrator has appointed a Data Protection Officer, Mr. Łukasz Grabowski, who can be contacted at the email address: iod@mpm.pl.
  3. The administrator processes your personal data for the purpose of:
    1. responding to your inquiries made via the contact form on the website,
    2. sending you newsletters,
    3. booking rooms, as well as services offered by entities belonging to MPM Hotele SPA Sp. z o.o.
  4. Your data will be processed based on Article 6 paragraph 1 letters a), b), c) and f) of the GDPR.
  5. For the purpose of responding to inquiries, your personal data processed include your first name, last name, and email address.
  6. For the purpose of sending you newsletters, your personal data processed include your email address.
  7. For the purpose of booking rooms, as well as services offered by entities belonging to MPM Hotele SPA Sp. z o.o., your personal data processed include your first name, last name, email address, phone number, and bank account number.
  8. Your personal data will be processed:
    1. in the case of inquiry response, until the response is provided, and after that period, for 1 year,
    2. in the case of newsletters, until the consent to such processing is withdrawn,
    3. in the case of room and/or service bookings, for a period of 3 years from the moment the data are registered.
  9. Your personal data may be processed for a longer period than indicated above if required by mandatory legal provisions.
  10. The data are protected by technical and organizational measures to ensure an appropriate level of protection in accordance with applicable regulations.
  11. The administrator may collect data from third parties who may book a stay for you in facilities belonging to the administrator.
  12. The administrator does not collect data from publicly available sources.
  13. Your data will be transferred to the service provider, which is Profitroom Sp. z o.o. based in Poznań, ul. Roosevelta 9/3, 60-829 Poznań, KRS 0000303746; NIP: 525-24-23-458; REGON: 141374990 – data will be transferred in order to enable you to book rooms.
  14. Your data may be transferred to third parties who will be responsible for processing payments for rooms and/or services – these entities are separate personal data controllers.
  15. You have the right to:
    1. obtain information about the processing of your data, including categories of processed data and possible recipients of the data;
    2. request correction of incorrect data or completion of incomplete data,
    3. request deletion of data – by objecting to their processing,
    4. request restriction of data processing – if legal requirements justifying such restriction are met,
    5. data portability – by receiving data in a format enabling transmission to a third party chosen by the user,
    6. withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal,
    7. file a complaint with the supervisory authority, the President of the Personal Data Protection Office, ul. Stawki 2, 00 – 193 Warsaw – in case of finding that the data is processed unlawfully.
  16. Your data will not be subject to automated processing, including profiling.