Privacy Policy
PERSONAL DATA PROTECTION AND PROCESSING (GDPR)
Personal data will be processed for the purpose of completing the reservation process, investigating any violations of the Regulations or applicable law, and reviewing any complaints. The premises (ul. Rzeszowska 4, 31-035 Kraków) are monitored.
The administrator of personal data such as image and behavior obtained from the monitoring of the common areas of the building is the Property Manager: ADMINISTRATIVE AND TECHNICAL SERVICES COMPANY KAZIMIERZ sp. Z.O.O. NIP: 9440000109, REGON: 350823822 address: ul. Bożego Ciała 8, 31-059 Kraków. The premises of the Memory Apartments accommodation facility – the common area – are also covered by video surveillance. The administrator of personal data such as image and behavior obtained from the monitoring of the common areas of the Memory Apartments accommodation facility is the owner of the facility: Julita Wójtowicz-Sap Memory Apartments with its registered office in Kraków 31-035, ul. Rzeszowska 4/7 NIP: 9441119798, REGON: 520784849 - managing Memory Apartments in Kraków.
Data are collected in order to protect people and property and to ensure safety within the building and facility, and their processing is based on the legitimate interest of the controller (Article 6 paragraph 1 letter f of the GDPR). In accordance with Article 13 paragraph 1 and paragraph 2 of the Regulation of the European Parliament and of the Council
European Parliament and of the Council (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (GDPR), we would like to inform you that:
Administrator of the personal data obtained during the booking process within the meaning of the applicable provisions of generally applicable law is Julita Wójtowicz-Sap Memory Apartments with its registered office in Kraków 31-035, ul. Rzeszowska 4/7 NIP: 9441119798, REGON: 520784849 - managing Memory Apartments in Kraków
Processor personal data is processed by the hotel reservation system called Hotres, which belongs to Hotres Sp. z o.o. with its registered office in Jelenia Góra 58-500, ul. Osiedle Robotnicze 10, NIP: 6112816201, KRS: 0000947675
PERSONAL DATA
- For the purposes of the reservation process and issuing the sales document, the Guest's personal data is collected. Providing personal data is voluntary, but necessary to complete the reservation process.
- The Guest has the right to access the content of his or her personal data, the right to rectify it, delete it, as well as the right to limit its processing.
- The Guest's optional consent to data processing for marketing purposes requires checking the appropriate checkbox during the booking process. This consent may be withdrawn by sending an appropriate email to: memoryaparts@gmail.com
- The detailed purposes and scope of personal data processing in the Hotres reservation system are specified in this attachment..
PURPOSES AND PRINCIPLES OF PERSONAL DATA PROCESSING
- Guests' personal data will be processed for the following purposes:
- in order to perform the concluded contract and take the necessary actions before its conclusion, in particular making a reservation (GDPR Art. 6 Section 1 Point b)
- in order to fulfill the legal obligations incumbent on the Data Controller, in particular those resulting from the Accounting Act (GDPR Art. 6 Section 1 Point c)
- to achieve the objectives arising from the legitimate interests of the Controller, in particular marketing and for the purpose of establishing, defending and pursuing claims (GDPR Art. 6 Section 1 Point f)
- Your personal data will be processed for the period necessary to perform the contract, as well as for the period during which claims related to this contract may arise, and for the period required by applicable law in connection with the need to meet our tax obligations.
- The recipients of the personal data collected from you may, in justified cases, be the Controller's subcontractors, entities providing accounting, IT, advertising, marketing, auditing, consulting, legal, transport, courier and postal services to the Controller.
- Your personal data will not be transferred to a third country or international organisation (i.e. outside the European Economic Area).
- Your personal data is not subject to automated decision-making and is not used for profiling.
- In matters concerning data processing, please contact the Administrator directly.
- You have the right to lodge a complaint with a supervisory authority regarding matters relating to the processing of your personal data. The competent authority is the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw.
OBLIGATIONS OF THE ADMINISTRATOR
- The Administrator ensures that the Guest's personal data is not made available to third parties and in this respect will take the necessary measures and ensure the use of its knowledge and experience in order to implement this assurance.
- The Administrator reserves the right to disclose personal data to authorized entities (Subprocessors) and in cases specified by generally applicable law. This applies in particular to entities such as online payment systems and reception software.
- The Administrator is obligated to maintain the secrecy and confidentiality of information obtained for the purpose of completing the reservation process. This obligation remains in effect for an indefinite period.
OBLIGATIONS OF THE PROCESSOR
- Hotres, as the entity processing the Guest's personal data, ensures the implementation of appropriate technical and organizational measures and additional IT security measures based on proven servers and systems for processing personal data in services provided electronically.
- Hotres declares that the IT systems used to process personal data meet the requirements of applicable law, in particular that they are protected to a high degree within the meaning of the Regulation of the Minister of Internal Affairs and Administration of 29 April 2004 on the documentation of personal data processing and the technical and organisational conditions that should be met by devices and information systems used to process personal data.
- Hotres subcontractors and employees will be duly authorized to process personal data in connection with the booking process, to which the Administrator and the Guest consent.
- In order to ensure the highest security in storing personal data in accordance with GDPR requirements, Hotres undertakes to:
- continuously ensuring the confidentiality, integrity, availability and resilience of processing systems and services
- encryption and anonymization of personal data transmission
- the ability to quickly restore the availability and access to personal data in the event of a physical or technical incident
- regularly testing, measuring and assessing the effectiveness of technical and organizational measures to ensure the security of data processing