THE HOTEL POLICY

The Collector of the personal data collected by the internet site: http://www.thegranaryhotel.com (hereinafter the “Site”) is WINGS HOTELS Sp. z o. o. with its registered seat in Wroclaw entered into Register of   Entrepreneurs of National Register Court maintained by the District Court for the Wroclaw -Fabryczna in Wroclaw VI Commercial Division of the National Register Court under the no. KRS 0000271077, e-mail: granary@granaryhotel.com (hereinafter the “Collector”). The Company has appointed a Data Protection Officer, who can be reached under the above mentioned e-mail address.

The personal data of our Clients collected due to their activities on the Site are collected, recorded and processed in accordance with the provisions of the REGULATION (EU) 2016/679 of the European Parliament and the Council of 27 April 2016on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter “GDPR”). Disclosure of my personal data is voluntary, yet a non-disclosure may result in preventing the use of services provided by the Collector.

Every entry on the Site is additionally recorded by logging the IP address used by a Client, date, hour, type of web browser and computer operating system used, as well as the sites reviewed.  The aforesaid however does not provide for the Client’s personal data to be collected since it  does not enables for his identification.

The Client’s personal data are processed only for the purpose for which it has been disclosed (eg.: booking, answering queries, sending newsletter).

The personal data may be processed based on Client’s consent (Article 6.1.a. of the GDPR),  if necessary for the performance of a contract or prior to entering into a contract (Article 6.1.b. of the GDPR), for compliance with a legal obligation (Article 6.1.c. of the GDPR), for the purposes of the legitimate interests pursued by the Controller (Article 6.1.f. of the GDPR), the latter may include direct marketing of Collector’s own services or exercising claims. If the personal date is processed based on Client’s consent, a Client has the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.          

For the purposes of performing personal data processing the Collector may use services of other entities and disclose to such entities the personal date (entrusting processing). Such entities are obligated to act in accordance with the legal provisions regarding personal data protection, by entrusting processing agreement.  

The personal data collected by the Site and recorded by the Collector, are being kept only for the time necessary to fulfil the purpose for which it has been collected, in accordance with the applicable regulations obliging the Collector to store the data as stipulated therein. In event the reason for which the personal data is processed expires, it will be erased or rendered anonymous.

Client has a right to obtain any information about all his personal data processed by the Collector (access to data) and a right to request rectification thereof. The client has also a right to request erasure of personal data or restriction of processing concerning the data subject or to object to processing as well as a right to data portability, based on applicable GDPR provisions. To exercise the aforesaid rights the Collector can be reached in writing or by e-mail under the addresses indicated above. Client has a right to lodge a complaint with the supervisory authority (President of the Personal Data Protection Office) regarding the manner in which his personal data is processed.

The Collector uses the technical and organizational measures to ensure the protection of the processed personal data, adequate to potential risks and categories under protection, in particular protects the data form its disclosure to unauthorized persons, its seizure by unauthorized person, unlawful processing, alteration, loss, damage or destruction.

If the Site links to the internet sites of third persons, the Collector does not guarantee nor is responsible for accuracy and completeness of the content presented on such websites. Since the Collector does not have any influence on obeying by third persons the legal provisions concerning personal data protection, please be advice to check each and every time the declarations regarding personal data protection posted on such websites.