EN
EN
EN

Data Protection Officer
Hotel**** Medical Spa Malinowy Dwór

Dear Sirs, The Data Controller has appointed a Data Protection Inspector (DPO) in accordance with Article 37 of the Regulation on the Protection of Personal Data of April 27, 2016.

Ms. Agnieszka Dworak Inspector of Data Protection at Malinowe Hotele Sp. z o.o.

Contact the DPO by:
a) e-mail: iod@malinowehotele.pl
b) by mail with a note for the DPO to the following mailing address: Malinowe Hotele Sp. z o.o., ul. Leśna 7, 28-131 Solec-Zdrój.

By contacting our Data Protection Officer both by e-mail and by letter, you will be sharing your data. Therefore, please read the following information clause addressed to those contacting our Data Protection Officer.

INFORMATION CLAUSE
PURPOSE: FOR PERSONS CONTACTING THE DATA PROTECTION OFFICER OF RASPBERRY HOTELS SP. Z O.O..

Pursuant to Article 13 (1) and (2) of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (RODO), we inform you that:

1. the administrator of your personal data is the company Malinowe Hotele Sp. z o. o. with its registered office in Solec-Zdrój (28-131) at 7 Leśna Street, NIP: 678-14-01-345, REGON: 351061573.

2. The company Malinowe Hotele Sp. z o.o. in Solec-Zdrój consists of entities:
- Malinowy Zdrój Hotel**** Medical Spa
- Malinowy Raj Mineral Hotel****
- Malinowy Dwór Hotel ****Medical Spa
- Baseny Mineralne Solec-Zdrój
- Balneokosmetyki

3 The Administrator has appointed a Data Protection Supervisor who can be contacted on all matters related to the Administrator's processing of your personal data.

Contact to the Data Protection Supervisor Ms. Agnieszka Dworak: e-mail: iod@malinowehotele.pl or by mail to the mailing address indicated above in point 1 with a note for the DPO.

4. The purpose of the processing of your personal data is to contact the Data Protection Officer regarding the processing of personal data and/or to exercise your rights as a data subject. In turn, the basis for the processing of the data provided during the contact is your consent to the processing expressed in the form of an explicit action confirming your desire to make contact with the DPO (submission of data).

5. Your personal data shall be secured in accordance with applicable regulations, and their recipients may be entities authorized to disclose data to them under overriding legal provisions, as well as entities processing personal data as part of the provision of services on behalf of and for the Administrator (e.g., IT support), with whom it has entered into data processing entrustment agreements in accordance with Article 28 RODO.

6. Your personal data will not be transferred to countries outside the European Economic Area or international institutions, nor will they be processed for a purpose other than the purpose for which the personal data was collected.

7. Decisions regarding your personal data will not be made by automated means and will not be profiled.

8. Your personal data will be kept until you revoke your consent for the purpose of contacting the Administrator and/or Data Protection Officer, and for a period of 5 years from the date of revocation of consent for archival purposes or to secure possible claims.

9. You have the right to:
- to be informed about the principles of processing of your personal data, the right to access and obtain copies of your personal data, as well as the right to rectification, deletion or restriction of processing and data portability;
- to notify any recipient of the rectification, deletion or restriction of the processing of your data as a result of the Administrator's obligation;
- to lodge a complaint to the President of the Office for Personal Data Protection (to the address of the Office for Personal Data Protection, 2 Stawki Street, 00-193 Warsaw), if it is considered that your personal data is being processed unlawfully in violation of the provisions of the General Regulation;
- withdrawal of consent in the event that the processing took place on the basis of its expression. Withdrawal shall not affect the legality of processing carried out on the basis of consent before its withdrawal.
- to contact the Data Protection Officer appointed by the Administrator;

10. in order to report the exercise of your rights, you can use the ready-made applications available on the entity's website in the CONTACT/ROD/RIGHTS OF PERSONS TO WHOM DATA ARE SUBJECTED section, which, once completed and signed, should be sent to the e-mail address: iod@malinowehotele.pl or send by mail to the mailing address given above in item 1 with the note “for DPO” or deliver by hand to the address given above.

11. Information about the obligation to provide data and the consequences of not doing so: Provision of data is voluntary, but is nevertheless necessary in order to process the contact and respond and/or to exercise the rights you would like to exercise. Failure to provide data will result in the inability to fulfill the purpose indicated above.

We also inform you that:
The Administrator shall use its best endeavors to provide all means of physical, technical and organizational protection of personal data against accidental or intentional destruction, accidental loss, alteration, unauthorized disclosure, use or access, in accordance with all applicable laws.