Privacy

INFORMATION ABOUT PERSONAL DATA
We inform you that the data controller is Habenda Sp. z o.o. based in Budzyń (64-840), ul. Leśna 32. From May 25, 2018, you can contact us regarding the processing of personal data by writing to the email address: hotel-habenda@hotel-habenda.pl
Personal data will be processed by Habenda Sp. z o.o. in particular:
  1. on the basis of Article 6(1)(b) and (c) of the GDPR* for the purpose of:
    • taking actions before concluding a contract at the request of the data subject or performing a contract to which the data subject is a party (the data necessary to conclude the contract are indicated on the contract form)
    • fulfilling a legal obligation incumbent on the Controller;
  2. on the basis of the legitimate interest of Habenda Sp. z o.o. [i.e. on the basis of Article 6(1)(f) of the GDPR] for the purpose of:
    • marketing its own products or services, including those personalized based on customer profiling
    • organizing and conducting competitions and other marketing activities
    • claiming or securing claims
    • conducting analyses of the technical quality of the services provided;
  3. on the basis of separate consent [i.e. on the basis of Article 6(1)(a) of the GDPR] for the purpose of:
    • verifying the creditworthiness of the client based on information from economic information bureaus, in particular from the Economic Information Bureau InfoMonitor S.A. based in Warsaw (BIG InfoMonitor) or contained in the Controller's database
    • providing the client with information about proposed changes to the Agreement, including Regulations and Price List, changes in name (company), address, or registered office, confirming the receipt of complaints and providing responses to the specified email address (e-mail)
    • direct marketing of products or services of Habenda Sp. z o.o.
    • direct marketing of products or services of entities cooperating with Habenda Sp. z o.o., whereby the personal data of the client will not be provided to third parties, and the information will be conveyed by Habenda Sp. z o.o.

Direct marketing referred to in points c)-d) above may be carried out by Habenda Sp. z o.o. using electronic communication means (e.g. SMS, MMS, e-mail), telecommunication terminal devices (e.g. telephone).

The period for which personal data will be stored:

  1. personal data processed for the purpose of concluding or performing a contract and fulfilling the legal obligation of the Controller will be stored for the duration of the contract, and after its expiration for the necessary period to:
    • post-sale customer service (e.g. handling complaints)
    • securing or claiming any claims due to Habenda Sp. z o.o.
    • fulfilling the legal obligation of the Controller (e.g. arising from tax or accounting regulations);
  2. personal data processed for the marketing of products or services of Habenda Sp. z o.o. based on legitimate legal interest will be processed until the objection is raised by the data subject;
  3. personal data processed on the basis of separate consent will be stored until it is revoked. If consent for the processing of transmission data for the purpose of marketing telecommunications services of the Controller is granted, data will be processed only for the duration of the contract.
Rights of the data subject:
  1. the right to access the content of their personal data, i.e. the right to obtain confirmation as to whether the Controller processes data and information regarding such processing
  2. the right to rectify data if the data processed by the Controller are incorrect or incomplete
  3. the right to request the Controller to delete data
  4. the right to request the Controller to restrict the processing of data
  5. the right to data portability, i.e. the right to receive personal data provided to the Controller and to transmit them to another administrator;
  6. the right to object to the processing of data based on the legitimate interest of the Controller or to the processing for direct marketing purposes
  7. the right to lodge a complaint with the Polish supervisory authority or the supervisory authority of another EU member state, competent due to the place of habitual residence or work of the data subject or due to the place of the alleged violation of the GDPR
  8. the right to withdraw consent at any time (without affecting the lawfulness of processing based on consent before its withdrawal)
  9. the right to obtain human intervention from the Controller, to express their own opinion and to contest decisions based on automated processing of data. Rights listed in points 1)-6) and points 8)-9) above can be exercised, among others, by contacting the Data Protection Officer (address provided at the beginning) or by contacting Habenda Sp. z o.o. (address provided at the beginning, with the note: "Personal Data Protection").
Categories of data recipients (data processors on behalf of Habenda Sp. z o.o.: telecommunications entrepreneurs, debt collection companies, banks, postal operators, carriers, economic information bureaus, partners providing technical services (e.g. developing and maintaining IT systems and websites).
*Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation).