GDPR

The controller of personal data concerning individuals using the services of Hotel Nafta Krosno is INVESTIMUS Sp. z o.o., ul. Lwowska 21, 38-400 Krosno, NIP 685-23-26-534, REGON 181078510, share capital: 2 300 000 PLN, KRS 0000500303, District Court in Rzeszów, 12th Commercial Division of the National Court Register (hereinafter: INVESTIMUS Sp. z o.o.).

For what purpose and on what legal basis will INVESTIMUS Sp. z o.o. process personal data?

Personal data will be processed for the following purposes:

  • to enter into and perform the agreement for the provision of hotel services, catering services
    and their complementary services;
  • to pursue any potential claims by INVESTIMUS Sp. z o.o. in connection with damage incurred by Hotel Nafta Krosno, caused by the Guest, or to defend against the Guest’s claims in relation to Hotel Nafta Krosno;
  • to document service performance for tax purposes (Article 86 of the Tax Ordinance);
  • to ensure the safety of hotel guests and other persons staying
    on the premises of Hotel Nafta Krosno, using the property monitoring system;
  • to fulfil statistical reporting obligations (Article 30 of the Act on Public Statistics).

Personal data may also be processed for marketing purposes by the data controller,
and, if consent is given when providing personal data, also for marketing purposes of other entities belonging to the INVESTIMUS Sp. z o.o. group.

The legal basis for processing personal data for the purposes mentioned above is Article 6(1)(b) and (c) and Article 6(1)(f) of the GDPR. The legitimate interest of INVESTIMUS Sp. z o.o. is to ensure the safety of guests, to pursue any potential claims, and to market its own products or services.
Providing data is voluntary, however necessary to achieve the above purposes.

INVESTIMUS Sp. z o.o. will share personal data with other entities entrusted with processing personal data on behalf of and for INVESTIMUS Sp. z o.o., including:

  • entities providing IT services and supplying software,
  • companies providing advisory services and law firms providing legal advisory and litigation representation
  • in addition, INVESTIMUS Sp. z o.o. will make personal data available to other recipients,
    where such an obligation results from legal provisions. The data will not be
    transferred to third countries and international organisations.

How long will INVESTIMUS Sp. z o.o. process personal data?

Personal data will be processed for the duration of our services and, once they have ended, for the period provided for by law, including the provisions of the Civil Code and the Act
on accounting.

What rights does the data subject have?

The person whose personal data is processed is entitled to:

  • access to their personal data and to receive a copy of the personal data being processed;
  • rectification of their inaccurate personal data;
  • request deletion of data (the right to be forgotten) where the circumstances set out in Article 17 of the GDPR apply;
  • request restriction of processing of data in the cases indicated in Article 18 of the GDPR;
  • object to the processing of data in the cases indicated in Article 21 of the GDPR;
  • the portability of provided data processed in an automated manner.

Any person who believes that their personal data is being processed unlawfully may lodge a complaint with the supervisory authority (GIODO, Stawki 2, Warsaw).

Contact:

If you require additional information relating to the protection of personal data or wish to exercise your rights, please contact:

INVESTIMUS Sp. z o.o., ul. Lwowska 21, 38-400 Krosno

Scroll to Top