Information notice for clients

On 25 May 2018 Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (known as the “GDPR” or the “General Data Protection Regulation”), came into force. We would therefore like to inform you about the processing of your data and the rules under which it takes place.

We are talking about personal data collected directly from you in order to provide you with a service in our company.

The controller of your data is P.P.H.U. BIX Beata Misztal, Rybitwy 10/4, 88-170 Pakość, Poland, tax ID (NIP) 556-207-50-69, tel. +48 510 050 908, e-mail: kontakt@sunrise-sarbinowo.pl.

Your personal data will be processed in order to:

send you an offer on the basis of consent (Art. 6(1)(a) GDPR); you have the right to withdraw your consent to the processing of personal data at any time, but withdrawal does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal;

conclude a contract on the basis of your interest in our offer (Art. 6(1)(b) GDPR);

perform the contract for the provision of accommodation services and provide those services in accordance with the contract (Art. 6(1)(b) GDPR);

fulfil legal obligations (in particular obligations regarding the prevention of money laundering and terrorist financing, and obligations under tax and accounting law) — on the basis of Art. 6(1)(c) of the Regulation and in particular the Polish Act of 16 November 2000 on counteracting money laundering and terrorist financing;

for archiving (evidentiary) purposes, which is the pursuit of our legitimate interest in securing information in case of a legal need to prove facts (Art. 6(1)(f) GDPR);

to establish, pursue or defend against possible claims, which is the pursuit of our legitimate interest (Art. 6(1)(f) GDPR);

to offer our products and services directly (direct marketing), including tailoring them to your needs, i.e. profiling, which is the pursuit of our legitimate interest (Art. 6(1)(f) GDPR);

to directly offer products and services of companies cooperating with us (our partners), including tailoring them to your needs, i.e. profiling, which is the pursuit of our and our partners' legitimate interest (Art. 6(1)(f) GDPR);

to ensure the safety of guests and other persons on the premises of the Property (legal basis: Art. 6(1)(f) GDPR).

Your personal data will be stored for the period required by law, in particular for the period indicated in tax and accounting regulations and regulations on counteracting money laundering and terrorist financing. Data obtained through CCTV monitoring will be processed for 21 days from recording and then permanently deleted.

Your personal data will be transferred only to entities entitled to obtain personal data under the law or to entities cooperating with us in the process of providing the service to you. Your personal data may therefore be disclosed to external entities, in particular: couriers and postal operators; banks and payment operators; companies cooperating with us in performing the service.

Data may be transferred to third countries (the United Kingdom, the USA) as described in the privacy policy of sunrise-sarbinowo.pl: on the basis of European Commission adequacy decisions (including the EU-US Data Privacy Framework) or standard contractual clauses (SCC). The Controller does not transfer data to international organisations.

To protect your personal data we have implemented a Personal Data Protection Policy compliant with the GDPR, applied in our company according to the following rules and standards.

Rule of adequacy — we process only the data necessary to achieve the given purpose of processing.

Rule of transparency — you should know exactly what happens to your data. This document, in which we try to give you full information about the rules under which we process your personal data, is an expression of that.

Rule of accuracy — we try to keep your personal data in our systems up to date and correct. If you find that in some area your personal data has not been updated by us or is incorrect, please contact us: tel. +48 510 050 908, e-mail kontakt@sunrise-sarbinowo.pl.

Rule of integrity and confidentiality — we apply the necessary measures to protect the confidentiality and integrity of your personal data. We improve them all the time, along with the changing environment and technological progress. The safeguards include physical and technological measures restricting access to your data, as well as appropriate measures protecting against the loss of your data.

Rule of accountability — we want to be able to account for every action we take on personal data, so that at your request we can give you full and reliable information about what we did with your data.

Data protection law gives you a number of rights that you may exercise at any time. As long as you do not abuse these rights (e.g. by unjustified daily requests for information), exercising them is free of charge for you and should be easy.

Right of access to your personal data — you may ask us to export the information we hold about you from our databases and send it to you in one of the commonly used formats.

Right to rectification — if you learn that the data we process is incorrect, you have the right to ask us to correct it and we will be obliged to do so. In that case we may ask you to present a document or other evidence of the change.

Right to restriction of processing — if, despite our compliance with the rule of adequacy, you consider that for a given process we are processing too broad a range of your personal data, you have the right to demand that we limit the scope of processing. As long as your request does not conflict with the requirements imposed on us by applicable law or make it impossible to perform the contract, we will comply.

Right to erasure — also known as the right to be forgotten, this is your right to demand that we delete from our database systems and our documentation all information containing your personal data. Please remember that we will not be able to do so if we are legally obliged to process your data.

Right to data portability — under the General Data Protection Regulation you may ask us to export the data you provided in the course of all our contacts and cooperation to a separate file, for transfer to another data controller.

You may exercise the rights described above by contacting us: tel. +48 510 050 908, e-mail kontakt@sunrise-sarbinowo.pl. You may also contact us at these details whenever any of our actions raises your concern that it may infringe your rights or freedoms.

If you consider that we have in any way breached the rules of processing your personal data, you have the right to lodge a complaint directly with the supervisory authority — the President of the Personal Data Protection Office (UODO). When exercising this right you should give a full description of the situation and indicate which action you consider to infringe your rights or freedoms. The complaint should be lodged directly with the supervisory authority at: ul. Stawki 2, 00-193 Warsaw, Poland.

Right to object — you also have the right to object to the processing of your personal data. You lodge an objection when you do not want us to process your personal data for a specific purpose. In that case we will continue to process your data for other processes (other purposes), but no longer for the purpose you objected to, unless your request conflicts with obligations imposed on us by law. You may lodge an objection at: tel. +48 510 050 908, e-mail kontakt@sunrise-sarbinowo.pl.