Hotel Cumulus

Privacy

PRIVACY POLICY
In connection with the entry into force on 25 May 2018 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (the General Data Protection Regulation, commonly referred to as GDPR) we provide below information regarding the processing of your personal data.

Please note that:

1) Your data are collected for specified and lawful purposes and processed in a lawful manner. To ensure the security of your data we have taken all possible technical, organizational and legal measures.

2) The controller of your personal data is: Zakład Działalności Gospodarczej Wielobranżowy Krzysztof Suchecki with its registered office in Sosnowiec, postal code 41-200, ul. Przyjaciół Żołnierza 5a NIP 2220001563, REGON 270625593

3) Contact with the controller of your data is possible via:
- email address recepcja@cumulushotel.pl
- telephone number + 48 32/ 762 22 20, 267 52 15
- by mail or in person :
a) Zakład Działalności Gospodarczej Wielobranżowy Krzysztof Suchecki, 41-200 Sosnowiec, ul. Przyjaciół Żołnierza 5a
b) Hotel Cumulus, ul. Sportowa 3, 42-500 Będzin

4) We obtained the data we hold from you in connection with reservations, inquiries, transactions made by email, post, telephone, via the website or they were provided by you personally. The data include: first name, last name, home/correspondence address, PESEL number, NIP number, telephone number, email address, dates of stay/reservations, credit card details and other data provided by you.

5) All data collected by us will be processed for the period necessary for the performance of the contract, and after that period:

  • data obtained in connection with the concluded contract for the provision of hotel services will be processed for the period of limitation of tax claims or civil law claims of the Hotel or the Guest, whichever of these events occurs later,
  • data obtained on the basis of consent for marketing purposes will be processed for the duration of the consent for marketing purposes,
  • data obtained in connection with monitoring will be processed for 30 days from the date of recording, and will then be permanently deleted.

All data collected by us will be processed for the period necessary for the performance of the contract, and after that period:
a) for the period during which tax regulations require these data to be retained
b) for the period of pursuing any claims due to ZDG Wielobranżowy Krzysztof Suchecki
c) for the time required to handle complaints

6) Your personal data will be processed for the purposes of:
- performance of the contract/reservation/order – Art. 6(1)(a) GDPR
- issuing and storing accounting documents – Art. 6(1)(c) GDPR
- fulfillment of a legal obligation incumbent on the Controller
- sending commercial information electronically and by telephone – Art. 6(1)(a) and (f) GDPR
- pursuing or securing claims, debt collection, court proceedings
- conducting sales analyses of services, statistics
- storing data for archival purposes (ensuring accountability)

7) The data subject has the right to:
- access to the content of the data
- rectification
- deletion - restriction of processing
- data portability
- object to their processing
- withdraw consent to data processing

8) Personal data are protected against unlawful disclosure/theft by unauthorized persons, destruction, loss, damage and processing inconsistent with legal regulations.

9) Your personal data may be made available by the Controller to:
a) employees and associates of the Controller who need access to your data in order to perform the Controller's obligations or act on its behalf for your benefit
b) entities processing the Client's personal data on behalf of the Controller and participating in the performance of the Controller's activities, namely :
- subcontractors supporting the Controller in the performance of contracts/orders and customer service
- entities operating the Controller's ICT systems
- entities providing the Controller with advisory, consulting, auditing or legal, tax, accounting assistance
- entities conducting postal or courier activities - for the purpose of delivering correspondence or parcels
- entities providing payment services (banks, payment institutions)

10) If it is found that the processing of personal data infringes the provisions of applicable law, the data subject has the right to lodge a complaint with the President of the Personal Data Protection Office.

11) Providing personal data is voluntary, but it constitutes a condition for the performance of the contract/reservation/order

12) We do not sell personal data. Personal data will not be transferred outside the European Economic Area

Yours sincerely, Data Controller

COOKIES

  1. Cookies are transferred to web browsers and then stored in the memory of devices and read by the server each time a connection to the Website is made.
  2. We note that the storage of cookies does not enable us to access your private device or to read any data other than that stored in the cookies.
  3. We use so-called technical cookies that enable the proper use of message transmission and remember your settings and to create simple statistics of the Service.
  4. We use cookies and technologies to collect data that help us analyze traffic on the Website. Thanks to this we can optimize its operation, improve solutions that enjoy the greatest interest and display dedicated messages and offers. You can give consent, refuse consent, withdraw it or manage settings by clicking here.
  5. We use the following cookies: