T: 75 738 10 00

EN
EN
75 738 10 00
recepcja@malinowydwor.pl
EN
EN

RODO

Information obligation for the processing of personal data pursuant to Article 13 (1) and (2) and Article 14 of the RODO

Data Administrator: Raspberry Hotels Sp. z o. o. with its registered office in Solec-Zdrój at ul. Leśna 7, 28-131 Solec-Zdrój NIP: 678-14-01-345, REGON: 351061573

For entity: Hotel**** Medical Spa Malinowy Dwór at ul. Długa 10-11, 59-580 Świeradów-Zdrój. Contact: recepcja@malinowydwor.pl

Contact information for: Data Protection Inspector (DPO): iod@malinowehotele.pl
Deputy Inspector of Data Protection: iod@malinowehotele.pl

Acquisition of personal data: We obtained your personal data through your contact with us by phone, email, in person, through a contact form, as well as by making an online reservation through our website or through a reservation portal.

Purpose of processing your personal data:

1. In order to implement the contract concluded with us in the form of a registration/registration card, in particular:
- issuing the necessary documents of use of our services (invoice, receipt) and making cash and non-cash payments;
- handling requests that are directed to us by phone, e-mail;
- our use of contact data for the purpose related to the provision of services under the concluded contract for the provision of services;
- handling complaints and grievances
- if submitted;
- for tax and accounting purposes, as required by our hotel by law;

2. In accordance with the Administrator's legally justified purpose:
- to conduct direct marketing activities of its own services and/or products;
- to maintain customer relationships;
- to conduct statistical analysis;
- to provide payment processing;
- debt collection;
- archiving data in order to ensure accountability and for us to meet our obligations under the law;

3. In accordance with your consent:
- for data processing for marketing, commercial purposes, responding to inquiries, statistical purposes, promotional purposes in organizing events, contests, etc.;
For processing of data:
- recorded in the contact form;
- contained on the registration/registration card;
- saved in cookies and collected from our website: http://www.malinowehotele.pl
- when signing up for organized loyalty programs, contests and promotional actions;
- image;

Provision of data: The provision of your data is voluntary, but failure to provide it will prevent you from entering into a contract and using the services offered by the Data Administrator.
Your data is collected:
- on registration/registration cards;
- when making a reservation by phone or e-mail;
- in the contact form;
- when making a group reservation;
- when ordering an event;
- when setting up a loyalty card;
- when using rehabilitation services;
- when using spa services;

If required by law, we may require you to provide other data necessary, e.g., for accounting or tax reasons or as otherwise required by law.

Your rights regarding the processing of personal data: You have the right to:
- access to and correction of the content of your data;
- to make a written, reasoned request to stop the processing of your data due to your particular situation;
- object to the processing of your data when the Data Controller intends to process it for marketing and or commercial purposes, or to the transfer of your personal data to another Data Controller;
- lodge a complaint with a supervisory authority in accordance with art.77 and art.79 , when it is considered that the processing of your personal data violates the provisions of the General Data Protection Regulation of April 27, 2016.
- obtain comprehensive information in accordance with Article.15 of the RODO regarding:
• the occurrence of your data in the Administrator's files and the address of its registered office,
• the purpose, scope and manner of processing of the data contained in such collection;
• the state from when your data are processed in the filing system;
• the possible source of obtaining the data;
• the sharing of your data, and in particular information about the recipients or categories of recipients to whom the data are shared;
• the planned period of data storage,

Sharing of your personal data: We may share your personal data with:
- entities cooperating with us under an agreement of entrustment of personal data processing;
- other entities for which you have given us consent;
- public authorities fighting fraud and abuse, and which operate under separate, overriding legislation;
Your personal data will not be transferred to a third country.

Storage of personal data: We store your personal data for the duration of the contract with you, as well as after its termination for the purposes of:
- asserting claims in connection with the performance of the terms of the contract;
- performing legal obligations including tax and accounting;
- preventing fraud and abuse;
- statistical and archiving purposes;
- for a maximum of 6 years after completion of the service contract;

We will process your data for marketing and/or commercial purposes for the duration of the contract or until you object, withdraw your consent to further processing, whichever comes first.

You can withdraw your consent free of charge in three ways always with a note: “To the Data Controller”:
- by sending written information in the form of an email to the above-mentioned email address.
- by sending it by regular mail to the address of the Data Controller indicated above.
- by submitting the letter at the hotel reception desk.

In the case of the organization of loyalty programs, contests and promotional actions in which you may voluntarily participate, we will process your data for their duration and the period of accounting for the presentation of prizes. For the purpose of accountability, i.e. proving our compliance with the regulations on the processing of personal data, we will keep your data for the period in which we are obliged to retain the data or documents containing them in order to document compliance with legal requirements and to enable public authorities to control their compliance.

MONITORING Information Clause
In connection with Article 13(1) and (2) and Article 14(5)(b) of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation).

1. Video surveillance is carried out by the Hotel**** Medical SPA Raspberry Manor, in order to ensure the safety of persons residing in the monitored area (including the safety of employees) and the protection of property, fire and flood protection.
2. Video surveillance covers: the hotel reception area, restaurant, cafeteria, SPA Center, Wellness area reception, elevator entrances, hotel entrance, parking lot, green area
3. The administrator of the Data contained in the video surveillance system is: Malinowe Hotele Sp. z o.o.
4. Regarding video surveillance, you can contact:
a) by mail: Malinowy Dwór Hotel, Długa10-11 Street, 59-850 Świeradów-Zdrój
b) by e-mail: recepcja@malinowydwor.pl.
c) by phone: +48 75 738 10 00 5 Contact with the Data Protection Officer: iod@malinowehotele.pl. 6. The recipients of your personal data will be only entities authorized by law.
7. Processing is necessary for the fulfillment of the Administrator's legal obligation - Article 6(1)(c) and (f) RODO.
8. Surveillance recordings will be stored until overwritten (depending on the of the recordings) for a maximum of approximately 30 days or until the legal conclusion of proceedings under the law.
9. You have the right to access the recordings in justified cases and the right to process the data for a limited period of time.
10. The person recorded by the monitoring system has the right to the content of the data under the terms of Article 15 of the RODO, the right to restrict data processing under the terms of Article 18 of the RODO.
11 You have the right to lodge a complaint to the supervisory authority-President of the Office for Personal Data Protection (to the address of the Office for Personal Data Protection, 2 Stawki Street, 00 - 193 Warsaw), if you consider that the processing of personal data concerning you violates the provisions of the General Data Protection Regulation.

GENERAL INFORMATION CLAUSE
PURPOSE: INFORMATION FOR PERSONS FROM WHOM PERSONAL DATA WAS COLLECTED

Dear Sirs,
Pursuant to Article 13 (1) and (2) of the Regulation of the European Parliament and of the Council (EU) of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC, hereinafter referred to as RODO, we inform you that:
1.The administrator of your personal data is the company Malinowe Hotele Sp. z o.o., based in Solec-Zdrój (28-131) at 7 Leśna Street, NIP: 678-14-01-345, REGON: 351061573.
2.The company Malinowe Hotele Sp. z o.o. in Solec-Zdrój consists of entities:
- Raspberry Zdrój Hotel**** Medical Spa
- Raspberry Paradise Mineral Hotel****
- Malinowy Dwór Hotel ****Medical Spa
- Solec-Zdrój Mineral Pools
- Balneocosmetics
3.The contact person for matters related to the processing of your personal data and exercising your rights under the RODO is the Data Protection Inspector - Ms Agnieszka Dworak. Contact with the Data Protection Officer is possible at the e-mail address: iod@malinowehotele.pl or by writing to the address indicated in point 1 above.
4.Your personal data will be processed for:
- the provision of medical services
- the provision of hotel services;
- direct marketing of the Administrator's own products and services, presentation of commercial offers, participation in a loyalty programme and solicitation of opinions about the hotel;
- the protection of persons and property.
5.The legal basis for data processing is:
- legal obligation (art.6.1.c) RODO);
- conclusion and performance of a contract (art.6(1)(b) RODO);
- the data subject's consent in the case of participation in a loyalty programme, presentation of a commercial offer, use of treatments without medical consultation (art.6(1)(a) RODO); and - the legitimate interest of the Controller in the case of: direct marketing, obtaining hotel reviews and video surveillance (Art.6(1)(f) RODO).
6.Your personal data:
- may be transferred only to those recipients-entities that cooperate with the with the Administrator or their subcontractors on the basis of the concluded cooperation agreement including an agreement on entrustment of personal data processing, entities authorized to obtain your personal data on the basis of applicable law, and authorized employees of the Administrator.
- will not be transferred to third countries and international organizations.
7.Your personal data will be stored:
- in the case of medical services - 20 years;
- 6 years for securing possible claims;
- in other cases, for the period necessary to achieve the purposes of processing or to withdraw your consent to further processing, if processing was based on your consent.
8.You have the right to:
- access to the content of your personal data, their rectification, deletion or restriction of processing; - to object to further processing of your personal data;
- revoke at any time your consent to the processing of your data without affecting the legality of the processing performed before its revocation;
- You also have the right to request the Administrator to transfer your data to another Administrator, if this will not adversely affect the rights and freedoms of others.
9.You have the right to lodge a complaint to the supervisory authority, which is the President of the Office for Personal Data Protection.
10.The provision of your personal data required by the Administrator is a condition for the conclusion and performance of a contract for services rendered, a condition for joining a loyalty program, a condition for the presentation of a commercial offer, obtaining opinions about the hotel and a statutory requirement. In other cases, the provision of personal data is voluntary.
11.Your personal data are not subject to automated decision-making, including profiling except in the case of granting consent to such processing for commercial purposes and participation in the loyalty program.

INFORMATION CLAUSE
PURPOSE: FOR HOTEL GUEST-USE OF ACCOMMODATION SERVICES

Pursuant to Article 13(1) and (2) of the Regulation of the European Parliament and of the Council (EU) of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and the repeal of Directive 95/46/EC, hereinafter referred to as RODO, we inform you that:
1.The administrator of your personal data is the company Malinowe Hotele Sp. z o.o., based in Solec-Zdrój (28-131) at 7 Leśna Street, NIP: 678-14-01-345, REGON: 351061573.
2.The company Malinowe Hotele Sp. z o.o. in Solec-Zdrój consists of entities:
- Raspberry Zdrój Hotel**** Medical Spa
- Raspberry Paradise Mineral Hotel****
- Malinowy Dwór Hotel ****Medical Spa
- Solec-Zdrój Mineral Pools
- Balneocosmetics
3.The contact person for matters related to the processing of your personal data and exercising your rights under RODO is the Data Protection Inspector - Ms. Agnieszka Dworak. Contact with the Data Protection Inspector is possible at e-mail address: iod@malinowehotele.pl or by writing to the address indicated in item 1 above.
4.For the accommodation service, the Administrator will process personal data to the following extent: first and last name, contact number (in case of telephone reservation) and identity document number (as a legitimate legal interest in case of establishing, asserting and defending mutual claims).
5.The provision of personal data is necessary for the conclusion and performance of the contract, the performance of the service and the solicitation of opinions about the hotel.
6.Your personal data will be processed for the purpose of using accommodation services- on the basis of Article 6(1)(b) and (f) of the General Data Protection Regulation of April 27, 2016.
7.Recipients of your personal data will be authorized employees of the Administrator, entities authorized to obtain personal data under the law, as well as entities participating in the implementation of services on the basis of a contract of entrustment of personal data processing or a cooperation agreement.
8.Your personal data will be stored by the Administrator in the case of issuing a VAT invoice for a period of 6 years, and in the reception system after the completion of the service, the data will be stored only on the basis of your consent to further processing for the purpose of accelerating the registration in case you use the accommodation service.
9.You have the right to request from the controller access to your personal data, the right to rectify, delete or restrict its processing, and the right to data portability.
10.You have the right to lodge a complaint to the supervisory authority - the President of the Office for Personal Data Protection.
11.Your personal data are not subject to automated decision-making, including profiling.


INFORMATION CLAUSE
PURPOSE: USING THE SERVICES OF THE REHABILITATION CENTER
WITH AND WITHOUT MEDICAL CONSULTATION

Pursuant to Article 13 (1) and (2) of the Regulation of the European Parliament and of the Council (EU) of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC, hereinafter referred to as RODO, we inform you that:
1.The administrator of your personal data is the company Malinowe Hotele Sp. z o.o., based in Solec-Zdrój (28-131) at 7 Leśna Street, NIP: 678-14-01-345, REGON: 351061573.
2.The company Malinowe Hotele Sp. z o.o. in Solec-Zdrój consists of entities:
- Raspberry Zdrój Hotel**** Medical Spa
- Raspberry Paradise Mineral Hotel****
- Malinowy Dwór Hotel ****Medical Spa
- Solec-Zdrój Mineral Pools
- Balneocosmetics
3.The contact person for matters related to the processing of your personal data and exercising your rights under RODO is the Data Protection Inspector - Ms. Agnieszka Dworak. Contact with the Data Protection Inspector is possible at e-mail address: iod@malinowehotele.pl or by writing to the address indicated in item 1 above.
4.Patients' personal data are used for the following purposes and on the following legal grounds:
a.to establish the identity of patients in accordance with the requirements of the Law on Patients' Rights and Patients' Ombudsman, which is a legal obligation (Article 6.1.c RODO in conjunction with Article 9.2.h RODO),
b.to maintain medical records in accordance with the requirements of relevant laws, including the Law on Patients' Rights and the Ombudsman for Patients' Rights and the Ordinance of the Minister of Health of November 9, 2015 on types, scope and specimens of medical records and the manner of their processing, which constitutes a legal obligation (Article 6(1)(c) RODO in conjunction with Article 9(2)(h) RODO),
c.To be contacted in connection with the activities and services provided, including appointments which constitutes a legitimate legal interest (Article 6(1)(f) RODO).
4.Processed personal data may include all personal data necessary for the conduct of treatment activities, including health data, and in particular data will be processed for the above purpose in the following areas: name, address, PESEL, telephone number, e-mail address. The data controller has a statutory obligation to keep personal data confidential.
5.The Administrator informs that the provision of personal data necessary for the maintenance of medical records is mandatory - without the provision of personal data the Administrator will not be able to fulfill the obligations incumbent on him, and as a consequence may refuse to make an appointment or provide medical services.
6.The Administrator informs that due to legal regulations, personal data will be stored for at least 20 years from the last entry in the medical records (including data will be stored for this period in the reception system).
7.The Administrator may provide patient data to entities that provide services to the Administrator related to the support of its activities or to entities with which the Administrator has entered into an agreement for the entrustment of personal data processing. In particular, this applies to IT support services, or support of the Administrator's operations. In addition, personal data may be shared with persons designated by the patient.
8.The Administrator informs about the right to lodge a complaint to the supervisory authority, which is the President of the Office for Personal Data Protection. The Administrator also informs about the right of access to personal data, the right to erasure and restriction of processing. The Administrator also informs about the right to object to the processing and the right to transfer the data to another data controller.
9.Provision of personal data is mandatory based on the law and otherwise voluntary.
10.Your personal data are not subject to automated decision-making, including profiling.


INFORMATION CLAUSE
PURPOSE: USE OF SPA/BEAUTY STUDIO SERVICES
WITHOUT MEDICAL CONSULTATION

Pursuant to Article 13 (1) and (2) of the Regulation of the European Parliament and of the Council (EU) of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC, hereinafter referred to as RODO, we inform you that:
1.The administrator of your personal data is the company Malinowe Hotele Sp. z o.o., based in Solec-Zdrój (28-131-) at 7 Leśna Street, NIP: 678-14-01-345, REGON: 351061573.
2.The company Malinowe Hotele Sp. z o.o. in Solec-Zdrój consists of entities:
- Raspberry Zdrój Hotel**** Medical Spa
- Raspberry Paradise Mineral Hotel****
- Malinowy Dwór Hotel ****Medical Spa
- Solec-Zdrój Mineral Pools
- Balneocosmetics
3.The contact person for matters related to the processing of your personal data and exercising your rights under RODO is the Data Protection Inspector - Ms. Agnieszka Dworak. Contact with the Data Protection Inspector is possible at e-mail address: iod@malinowehotele.pl or by writing to the address indicated in item 1 above.
4.Your personal data will be processed for the purpose of realization of the service consisting in performance of treatments without medical consultation in the SPA and Beauty Studio within the scope of: name and surname, room number (in case you are a hotel guest), address, telephone number, e-mail address.
5.Your provision of personal data is voluntary, however, it is necessary for the purpose mentioned above in item 4, and failure to provide data will result in refusal of service.
6.The basis for the processing of your personal data is your consent to the processing of your personal data provided voluntarily on the basis of Article 6.1.a) RODO and Article 6.1.f) RODO for the purposes arising from the legitimate interests pursued by Malinowe Hotele Sp. z o.o., including in particular the examination of complaints and the establishment, investigation and defense of mutual claims.
7.The recipients of your personal data will be authorized employees of the Administrator, entities cooperating with the Administrator and processing your personal data on the Administrator's instructions on the basis of an authorization to process personal data, or entities with whom the Administrator has entered into an agreement of entrustment of personal data processing. In particular, this applies to IT support services or support of the Administrator's operations.
8.The personal data collected from you will not be transferred to entities outside the European Union or the European Economic Area.
9.You have the right to access the content of your data and the right to rectify, erase, restrict processing, the right to data portability, the right to object, the right to withdraw consent at any time without affecting the legality of the processing performed on the basis of consent before its withdrawal.
10.You have the right to lodge a complaint with a supervisory authority if you consider that the processing of personal data concerning you violates the provisions of the RODO or other regulations governing the processing and protection of personal data.
11.The personal data you provide will not be used for automated decision-making and will not be profiled.


INFORMATION CLAUSE
PURPOSE: FOR PARTICIPANTS OF THE LOYALTY PROGRAM
“RASPBERRY PARADISE” AND FOR THE PURPOSE OF PRESENTING A COMMERCIAL OFFER

Pursuant to Article 13(1) and (2) of the Regulation of the European Parliament and of the Council (EU) of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 9A5/46/EC hereinafter referred to as RODO, we inform you that:
1.The administrator of the personal data provided by you in the framework of your participation in the in the “Raspberry Paradise” loyalty program is the company Malinowe Hotele Sp. z o.o. with its seat in Solec-Zdrój (28-131) at ul. Leśna 7, NIP: 678-14-01-345, REGON: 351061573.
2.The company Malinowe Hotele Sp. z o.o. in Solec-Zdrój consists of entities:
- Raspberry Zdrój Hotel**** Medical Spa
- Raspberry Paradise Mineral Hotel****
- Malinowy Dwór Hotel ****Medical Spa
- Solec-Zdrój Mineral Pools
- Balneocosmetics
3.Your personal data will be processed for the purpose of participation in the “Raspberry Paradise” loyalty program and for commercial purposes within the scope of: name and surname, address, PESEL ( for the purpose of identification of the card holder and calculation and granting of discounts), e-mail address, telephone number on the basis of the consent granted in accordance with Art. 6 par. 1 lit. a) RODO and for the purposes resulting from the legitimate interests pursued by Malinowe Hotele Sp. z o.o. in accordance with Article 6(1)(f) RODO, including in particular for the purposes of participation in the loyalty program, presentation of the commercial offer, tailoring the offer to the needs of Guests, processing complaints and determining, obtaining opinions about the hotel, investigation and defense of mutual claims.
4.Your personal data will be processed for the period of your participation in the “Raspberry Paradise” loyalty program and presentation of the commercial offer until you withdraw your consent for further processing or until the expiration of mutual claims arising from your participation in the loyalty program.
5.Recipients of your personal data will be authorized employees of the Administrator, entities providing IT services to the Administrator on the basis of an entrustment agreement concluded, and entities cooperating with the Administrator and processing personal data on the Administrator's instructions on the basis of an authorization to process personal data.
6.The personal data collected from you will not be transferred to entities outside the European Union or the European Economic Area.
7.You have the right to access the content of your data and the right to rectify, erase, restrict processing, the right to data portability, the right to object, the right to withdraw consent at any time without affecting the legality of the processing performed on the basis of consent before its withdrawal.
8.You have the right to lodge a complaint with a supervisory authority if you consider that the processing of personal data concerning you violates the provisions of the RODO or other regulations governing the processing and protection of personal data.
9.Provision of personal data by you is voluntary and results from participation in the loyalty program “Raspberry Paradise”, and the consequence of failure to provide data will be loss of participation in the loyalty program.
10.The personal data you provide will be used to make decisions in an automated manner on the basis of personal data processed within the framework of the “Raspberry Paradise” loyalty program (by means of profiling), and the consequence of such processing will be the ability to determine your personal preferences and shopping behavior on the basis of your personal data and your transaction history within the loyalty program. Profiling will be used for the purpose of preparing and tailoring the offer to the needs of Guests.
11.You may contact regarding the processing of your personal data with our data protection officer - Ms. Agnieszka Dworak, by sending a message to the following address e-mail: iod@malinowehotele.pl or by sending a letter to the address indicated in point 1 of this clause.


INFORMATION CLAUSE
PURPOSE: FOR THE CONTRACTOR

Pursuant to Article 13 (1) and (2) and (14) of the Regulation of the European Parliament and of the Council (EU) of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC, hereinafter referred to as RODO, we inform you that:
If you have provided us with the personal data of your employees or associates as part of the contract, we inform you that this information clause pursuant to Article 14(1) of the RODO also applies to them and should be provided by you to them.

1.The administrator of your personal data is the company Malinowe Hotele Sp. z o. o. with its registered office in Solec-Zdrój, ul. Leśna 7, 28-131 Solec-Zdrój, NIP: 678-14-01-345, REGON: 351061573.
2.The company Malinowe Hotele Sp. z o.o. in Solec-Zdrój consists of the entities:
- Raspberry Zdrój Hotel**** Medical Spa
- Raspberry Paradise Mineral Hotel****
- Malinowy Dwór Hotel ****Medical Spa
- Solec-Zdrój Mineral Pools
- Balneocosmetics
3.Any questions regarding the manner and scope of processing of your personal data and your rights under RODO can be directed to the designated Data Protection Inspector - Ms. Agnieszka Dworak. At e-mail address: iod@malinowehotele.pl or by writing to the address indicated in point 1 above.
4.We process your personal data on the basis of the applicable legal regulations in order to conclude and execute contracts with the Administrator's contractors (Article 6.1.b RODO), as well as for the purposes of:
the duration of the contract and settlements thereafter (Article 6(1)(c) RODO); to fulfill the Administrator's legal obligations;
legal obligations incumbent on the Administrator;
defense and redress of claims (Article 6(1)(f) RODO) - for the period after which claims become time-barred;
payment reliability (Article 6(1)(f) of the RODO) - for the period necessary for such assessment when concluding, renewing or extending a contract;
fraud and fraud prevention (Article 6(1)(c) and (1)(f) RODO) - for the duration of the contract and thereafter for the period after which claims become time-barred or for the duration of proceedings conducted by the relevant public authorities;
other cases, your personal data are processed only on the basis of previously granted consent in the scope and purpose specified in the content of the consent (Article 6(1)(a) RODO) - for the period from the granting of consent until its withdrawal.
5.Provision of personal data is voluntary, however, refusal to provide such data may result in refusal to conclude a contract or inability to establish contact.
6.You may request access to your data, rectification, transfer, deletion, restriction of processing, as well as object to further processing at any time.
7.The personal data you entrust to us is stored in our contractor database. It is properly secured against unauthorized access or loss. We will process the personal data contained therein until the purpose of processing ceases, i.e. until the end of the cooperation, after which we will archive it for 6 years.
8.Recipients of your personal data will be entities with whom the Administrator has entered into data entrustment agreements in accordance with Article 28 of the RODO, as well as entities authorized by overriding law, or entities entitled to obtain them in connection with the performance of the contract.
9.We will not transfer your personal data to third countries or international organizations.
10.We would also like to inform you that if your personal data is processed in violation of the RODO Regulation, you have the right to file a complaint with the President of the Office for Personal Data Protection), based in Warsaw (00-923) at Stawki 2 Street.
11.Your personal data will not be subject to automated decision-making processes, including profiling.

INFORMATION CLAUSE
PURPOSE: RECRUITMENT

Pursuant to Article 13(1) and (2) of the Regulation of the European Parliament and of the Council (EU) of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC, hereinafter referred to as RODO, we inform you that:
1.The administrator of your data processed as part of the recruitment process is the company Malinowe Hotele Sp. z o.o., ul. Leśna 7, 28-131 Solec-Zdrój, NIP: 678-14-01-345,
REGON: 351061573 as the employer, for whom the President of the Company's Board of Directors performs activities within the scope of labor law.
2.The company Malinowe Hotele Sp. z o.o. in Solec-Zdrój consists of the entities:
- Malinowy Zdrój Hotel**** Medical Spa
- Raspberry Paradise Mineral Hotel****
- Malinowy Dwór Hotel ****Medical Spa
- Solec-Zdrój Mineral Pools
- Balneocosmetics
3.The Administrator has appointed a Data Protection Inspector. whom you can contact in matters related to the processing of your personal data at:
Malinowe Hotele Sp. z o.o., 7 Leśna St., 28-131 Solec-Zdrój
e-mail: iod@malinowehotele.pl
4.The legal basis for the processing of personal data for recruitment purposes is the Act of June 26, 1974 of the Labor Code. The provision of personal data in the scope resulting from Article 22 1 of the Labor Code is necessary to carry out the recruitment process and is based on the fulfillment of the administrator's legal obligation under Article 6.1.c of the Regulation. Provision of personal data other than those listed in Article 22 1Labor Code is voluntary and takes place on the basis of voluntarily given consent on the basis of Article 6(1)(a) of the Regulation.
5.Your personal data will also be able to be processed, irrespective of your consent, in connection with the assertion or defense of claims, if the claims relate to the recruitment conducted by us (Art.6(1)(f ) of the Regulation.
6.The personal data provided will be processed for the purpose of current recruitment and if your consent is granted - for the purposes of future recruitment. Your provision of personal data for the purpose of current recruitment is voluntary, but necessary to participate in the recruitment process.
7.Giving your consent to the processing of personal data for future recruitment is voluntary. If you do not give your consent for the purpose of participating in future recruitment, taking part in future recruitment processes conducted by the Administrator will be possible after you fill out and submit recruitment documents again.
8.Your personal data will be kept for the purposes of the current recruitment for a period of 3 months from the date of completion of this recruitment, i.e. informing you about the outcome of the recruitment.
9.In the event that you consent to the processing of your personal data for the purpose of participating in future recruitment, your personal data will be stored for a period of 1 year from the date of completion of the current recruitment, that is, from the date of informing you about the outcome of the recruitment.
10.You have the right to access the content of your personal data, the right to rectify them, as well as the right to delete them, to request restriction of processing or to object to processing, and the right to data portability.
11.You have the right to withdraw your consent to the processing of personal data at any time, which does not affect the lawfulness of the processing that took place on the basis of consent before its withdrawal. If you have given your consent for several purposes, you have the right to revoke each consent separately. After revoking your consent, your data will be immediately deleted from the candidates' database.
12.Recipients of personal data will be: associates of the Administrator authorized to participate in the recruitment process, entities operating ICT systems and providing information tools, entities providing maintenance services, entities operating and maintaining the IT network, entities providing e-mail services, entities providing advisory, consulting, auditing services.
13.In connection with the processing of your personal data, you have the right to lodge a complaint with the President of the Office for Personal Data Protection.
14.Your personal data will not be used for automated decision-making and will not be profiled.


INFORMATION CLAUSE
PURPOSE: FOR THE TRAINEE/INTERN

Pursuant to Article 13(1) and (2) of the Regulation of the European Parliament and of the Council (EU) of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC, hereinafter referred to as RODO, we inform you that:
12.The administrator of your personal data is the company Malinowe Hotele Sp. z o.o., based in Solec-Zdrój (28-131-) at 7 Leśna Street, NIP: 678-14-01-345, REGON: 351061573.
13.The company Malinowe Hotele Sp. z o.o. in Solec-Zdrój consists of entities:
- Raspberry Zdrój Hotel**** Medical Spa
- Raspberry Paradise Mineral Hotel****
- Malinowy Dwór Hotel ****Medical Spa
- Solec-Zdrój Mineral Pools
- Balneocosmetics
14.The contact person for matters related to the processing of your personal data and exercising your rights under RODO is the Data Protection Inspector - Ms. Agnieszka Dworak. Contact with the Data Protection Inspector is possible at the following address e-mail: iod@malinowehotele.pl or by writing to the address indicated in item 1 above.
15.Purposes of processing your personal data: We will process your personal data in order to:
1)To enter into and perform the contract or agreement entered into with you or another entity regarding your internship or apprenticeship with our company.
2)Fulfill our legal obligations and entitlements relating to your internship or apprenticeship under the regulations governing the conduct of the internship or apprenticeship.
3)Fulfill our obligations regarding you under tax, accounting regulations.
4)Provide security on the premises used by Raspberry Hotels Ltd. , including information security, through access control or monitoring.
16.Legal basis for processing your personal data: We will process your personal data on the basis:
1)that they are necessary for the conclusion and performance of a contract or agreement for your internship or apprenticeship;
2)relevant legal provisions:
-Act of December 14, 2016 - Education Law, -
Act of July 27, 2005. - Law on Higher Education,
-The Act of July 17, 2009 on graduate internships,
-Act of April 20, 2004 on employment promotion and labor market institutions,
3)Our legitimate interests;
4)your consent.
17.Recipients of your personal data: We will transfer your personal data to:
1)Processors, in connection with the performance of contracts entered into by Raspberry Hotels Sp. z .o.o. under which they have been entrusted with the processing of personal data, including, for example, IT service providers. Such entities process data on the basis of a contract with us and only in accordance with our instructions.
2)Entities to which our company provides personal data necessary to provide services to Malinowe Hotele Sp. z .o.o. on the basis of agreements concluded.
3)To our contractors (service providers, clients) in connection with the performance by you of the duties entrusted to you as part of your internship or apprenticeship.
18.Legally legitimate interests pursued by Raspberry Hotels Ltd. - if the processing is carried out on the basis of Article 6.1(f):
The scope of personal data processed at Malinowe Hotele Sp. z .o. o concerning apprentices or interns, for which the legal basis of processing is the legitimate interest of the company, includes personal data processed in connection with ensuring security on the premises used by the company, including information security, through the use of video surveillance. The legitimate legitimate interest of the company related to the processing of such data is to ensure at the appropriate level of security on the premises used by our company.
19.Period of storage of your personal data: We will process your personal data for the duration of your internship or apprenticeship. We will retain your personal data contained in tax or accounting records until the expiration of data retention obligations under specific legislation.
20.Transfer of data outside the European Economic Area. Not applicable
21.Your rights related to the processing of personal data.
You have the following rights related to the processing of your personal data:
1)The right to access your personal data;
2)The right to request rectification of your personal data;
3)The right to lodge a complaint to the supervisory authority in charge of personal data protection, i.e. the President of the Office for Personal Data Protection;
4)The right to withdraw consent to the processing of your personal data;
5)The right to demand erasure of your personal data - if the basis for processing is not a legal obligation;
6)The right to request restriction of the processing of your personal data;
7)The right to object to the processing of your data due to your particular situation - in cases where we process your data on the basis of our legitimate interest,
8)The right to portability of your personal data, i.e. the right to receive your personal data from us, in a structured, commonly used machine-readable computer format. You may send this data to another Data Controller or request that we send your data to another Data Controller. However, we will only do so if such a transfer is technically possible. You have the right to data portability only as to those data that we process on the basis of an agreement or internship or apprenticeship contract concluded with you, or on the basis of your consent.
22.Obligation to provide data: Your obligation to provide personal data results in particular from the legal provisions indicated in point 5.
23.Information on automated decision-making , including profiling:
Not applicable.

We also inform you that:
The Administrator shall make every effort to ensure all physical, technical and organizational measures to protect personal data against accidental or intentional destruction, accidental loss, alteration, unauthorized disclosure, use or access, in accordance with all applicable laws.


VIDEO SURVEILLANCE

INFORMATION CLAUSE
PURPOSE: INFORMATION FOR PERSONS FOR THE OPERATION OF VIDEO SURVEILLANCE AT THE ADMINISTRATOR'S PREMISES

Pursuant to Article 13 (1) and (2) of the Regulation of the European Parliament and of the Council(EU) of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC hereinafter referred to as RODO, we inform you that:
1. The administrator of your personal data processed on the basis of video surveillance without audio recording is the company Malinowe Hotele Sp. z o.o. with its registered office in Solec-Zdrój (28-131) at 7 Leśna Street, NIP: 678-14-01-345, REGON: 351061573.
2. The company Malinowe Hotele Sp. z o.o. in Solec-Zdrój consists of entities:
Malinowy Zdrój Hotel**** Medical Spa
Malinowy Paradise Mineral Hotel****
Malinowy Manor Hotel ****Medical Spa
Baseny Mineral Solec-Zdrój
Balneokosmetyki
3.The contact person for matters related to the processing of your personal data and the exercise of your rights under RODO is the Data Protection Inspector - Ms. Agnieszka Dworak. Contact with the Data Protection Supervisor is possible at e-mail: iod@malinowehotele.pl or by writing to the address indicated in item 1 above.
4.Video surveillance is carried out at individual sites by the Administrator in order to ensure the safety of persons residing in the monitored area (including the safety of visitors, employees) and to protect property.
5.The monitored sites have been marked, and the list of monitored sites is available in each entity on the information board at the entrance to the facility.
6.For video monitoring, you can contact:
(a)by mail: Malinowe Hotele Sp. z o.o. 28-131 Solec Zdrój, ul. Leśna 7.
b)via e-mail address: jamrozy@malinowyzdroj.pl
c)by phone: +48 41370 40 00
7.Malinowe Hotele Sp. z o.o. shall, for evidentiary purposes, secure events recorded by the video surveillance system that, among other things, threaten security, destruction and theft of property:
(a)at the request of third parties;
b)at the request of authorities conducting investigations;
c)at the request of the Data Controller's Board of Directors.
8.Each time security of events recorded by video surveillance is carried out at the written request submitted to the Data Controller. The secured data from video surveillance shall be made available only to the authorities investigating the recorded event, e.g. police, prosecutor's office, courts, which act on the basis of separate legal regulations.
9.The legal basis for the processing of personal data from video surveillance is Article 6(1), letter f) of the General Data Protection Regulation (RODO) and Article 222 of the Labor Code Act of June 26, 1974.
10.The scope of data processed by the Administrator on the basis of video surveillance: silhouette/posture and car registration numbers.
11.Video surveillance records will be stored until overwritten (depending on the of the recordings) up to a maximum of 30 days or until the legal conclusion of the proceedings conducted under the provision of the law.
12.You have the right to access the recordings only in justified cases.
13.Your data will not be transferred to a third country or international organization.
14.You have the right to lodge a complaint to the supervisory authority - the President of the Office for Personal Data Protection (to the address of the Office for Personal Data Protection, 2 Stawki Street, 00 - 193 Warsaw), if you consider that the processing of personal data concerning you, violates the provisions of the General Data Protection Regulation.
15.The personal data processed via video surveillance and shared will not be subject to automated decision-making, including decisions resulting from profiling.
We also inform you that:
The Administrator shall make every effort to ensure all physical, technical and organizational measures to protect personal data against accidental or intentional destruction, accidental loss, alteration, unauthorized disclosure, use or access, in accordance with all applicable laws.

INFORMATION CLAUSE IN CONNECTION WITH THE FIGHT AGAINST COVID-19

Pursuant to Article 13 (1) and (2) of the Regulation of the European Parliament and of the Council (EU) of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC, hereinafter referred to as RODO, we inform you that:

1.The administrator of your personal data is the company Malinowe Hotele Sp. z o.o., based in Solec-Zdrój (28-131) at 7 Leśna Street, NIP: 678-14-01-345, REGON: 351061573.

2.The company Malinowe Hotele Sp. z o.o. in Solec-Zdrój consists of entities:
- Raspberry Zdrój Hotel**** Medical Spa
- Raspberry Paradise Mineral Hotel****
- Malinowy Dwór Hotel ****Medical Spa
- Solec-Zdrój Mineral Pools
- Balneocosmetics

3.Contact with the Data Protection Officer is possible at e-mail address: iod@malinowehotele.pl

4.Your personal data will be processed in order to:
- ensure the safe operation of the facility in connection with the COVID-19 outbreak

5.The legal basis for data processing is:
- Art.9(1)(i) RODO (public interest in the field of public health, such as protection against serious cross-border health threats),
- Article 17 of the Law of March 2, 2020 on special solutions related to the prevention, prevention and control of COVID-19, other infectious diseases and emergencies caused by them,
- guidelines of the Chief Sanitary Inspectorate of April 29, 2020 on the operation of hotels, facilities, guesthouses during the COVID-19 epidemic in Poland, issued pursuant to Article 8a paragraph 5 item 2 of the Law of March 14, 1985 on State Sanitary Inspection.

6.Your personal data:
- may be transferred only to those recipients-entities that cooperate with the Administrator or their subcontractors on the basis of the concluded agreement on cooperation including the agreement on entrustment of personal data processing, entities entitled to obtain your personal data under the applicable law.

7.Provision of personal data is an obligation under generally applicable laws

8.Your personal data will be kept:
- for the period of spread of COVID-19.

9.You have the right to:
- access to the content of your personal data, rectification, deletion or restriction of processing;
- to object to further processing of your personal data;
- lodge a complaint to the supervisory authority, which is the President of the Office for Personal Data Protection.