1) The administrator of your personal data is Hotel OTTAVIANO ul. Monte Cassino 3, 72-600 Świnoujście.
2) Contacting the Data Protection Officer:
Hotel OTTAVIANO – biuro@ottaviano.pl
Hotel OTTAVIANO ul. Monte Cassino 3, 72-600 Świnoujście. with its registered office in Świnoujście in accordance with the applicable legal provisions on the protection of personal data, including Regulation 2016/679 of the European Parliament and of the Council (EU) of 27 April 2016. on the protection of natural persons in relation to the processing of personal data and on the free movement of such data and the repeal of Directive 95/46/EC (General Data Protection Regulation) (OJ EU. L. 2016 No. 119, p. 1) is the controller of the personal data and ensures that the data is used in a contractually compliant, secure manner and in accordance with applicable laws.
Subjects’ personal data are processed for the following purposes:
1) the conclusion and performance of the contract and the execution of orders;
2) to comply with legal obligations, in particular accounting and bookkeeping obligations, e.g. the issuing and retention of invoices, the handling of personnel matters;
3) the enforcement of claims;
4) companies providing IT support services to the hotel and IT software providers,
4) direct marketing.
Personal data will be processed for a period of time:
1) the execution of the contract duration orders and post-contract settlement;
2) to carry out accounting, bookkeeping and taxation duties, personnel matters;
3) to carry out statutory tasks for legitimate purposes;
Hotel OTTAVIANO processes basic data such as name, surname, telephone numbers, e-mail address, PESEL for the purposes described in point. 1.
The processing of sensitive data by the OTTAVIANO Hotel in Świnoujście is carried out for the purpose of fulfilling the employer’s obligations towards employees, to the extent provided for by employment law, and for the provision of services for which it is necessary to obtain health information.
Personal data that are processed are transferred:
1) to providers of legal assistance, including debt recovery, tax, accounting;
2) to postal or courier operators;
3) transport service providers;
4) entities carrying out payment activities;
1) rectification – the right to request the rectification of inaccurate personal data or the completion of incomplete data;
2) deletion – a request for deletion of data under certain circumstances:
a) the personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
b) the data subject has withdrawn consent to the processing of personal data and there is no other legal basis for the processing;
c) the data subject objects to the processing of personal data and there are no overriding legitimate grounds for the processing or the person
d) personal data has been unlawfully processed;
e) in order to comply with a legal obligation under Union law or the law of a Member State to which the controller is subject;
f) the personal data was collected in connection with the offering of information society services;
3) restriction of the processing of personal data – a request to stop the processing of personal data in the following circumstances:
a) the data subject contests the accuracy of the personal data, withholding shall take place for a period allowing the controller to verify the accuracy of the data;
b) the processing is unlawful and the data subject objects to the erasure of the personal data, requesting instead the restriction of its use;
c) the controller no longer needs the personal data for the purposes of the processing, but they are needed by the data subject to establish, assert or defend a claim;
d) the data subject has objected to the processing, the restriction shall continue until it is established whether the legitimate grounds on the part of the controller override the grounds of the data subject’s objection.
Notification of entitlements shall be made in writing by submitting an appropriate request to the personal data processor.
The data subject has the right to object at any time to the processing of personal data concerning him or her on grounds relating to his or her particular situation. The data subject also has the right to object to data that are processed for direct marketing purposes.
Once an objection is raised, the data processor shall no longer be allowed to process the personal data. If the processor demonstrates the existence of valid legitimate grounds for the processing, which at the same time override the interests, rights and freedoms of the data subject, further processing of the personal data will be possible.
