Pursuant to art. 13 sec. 1 and 2 of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (Official Journal of the EU L 119/1 of 04.05.2016), hereinafter referred to as the “GDPR,” Warmia Resort Spółka z ograniczoną odpowiedzialnością, with its registered office in Warsaw 02-972, ul Prymasa A. Hlonda 2B suite 122, registered under KRS no. 0000776259 hereinafter referred to as the “Company,” informs that:
a. the administrator of your personal data is Warmia Resort Sp. z o.o., with its registered office in Warsaw 02-972, ul. Prymasa A. Hlonda 2B suite 122, registered under KRS no. 0000776259, NIP no.: 951-248-03-21, REGON no.: 382803697;
b. Your personal data will be processed in order to present you with a commercial offer of services provided by the Company, on the basis of art. 6 sec. 1 a) of the GDPR, i.e. a separate consent; in the case of possible disputes, your personal data may also be processed in order to assert claims or defend the Company’s rights – on the basis of Article 6 sec. 1 f) of the GDPR, which is the so-called legitimate interest, which is to assert claims and defend the Company’s rights;
c. the recipients of your personal data will be only entities authorized to receive personal data on the basis of separate provisions of law, authorized employees/associates of the Company, providers of technical and organizational services, including payment services and other companies of the Group;
d. Your personal data will not be transferred to recipients in third countries or international organizations;
e. Your personal data will be stored for 1 year, unless you revoke your consent to its processing earlier; data processed for the purpose of asserting claims (e.g. in court proceedings) will be stored for the period of the statute of limitations for claims arising under the Civil Code;
f. You have the right to access the content of your data and the right to rectify, erase, restrict the processing, the right to transfer data, the right to object, the right to withdraw consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent prior to its withdrawal;
g. You have the right to lodge a complaint with the supervisory authority – the President of the Office for Personal Data Protection, if you consider that the processing of your personal data by the Company violates the provisions of the GDPR;
h. Providing personal data is voluntary.
i. no automated decisions (decisions without human involvement) will be made against you, AND ALSO your personal data will not be subject to profiling;
j. You have the right to withdraw your consent at any time.