Privacy Policy

v.4 dated 01.12.2023

§I Introduction to the Privacy Policy.

This document contains our Privacy Policy, i.e. the rules we follow in the processes of processing your personal data. This document also includes the content of information obligations, which, according to generally applicable laws, should be presented to the persons to whom the data relate, i.e. you.

  1. This Privacy Policy sets out the principles of processing and protecting personal data provided by users of the services provided by Art Hotel Sp. z o.o. (hereinafter Art Hotel or Administrator). It concerns:
    - using our products and services,
    - visits to our websites and social media profiles.
  2. In order to ensure the security of entrusted personal data, Art Hotel operates based on internal procedures and recommendations, compliant with relevant legal acts regarding personal data protection, and in particular with the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (hereinafter GDPR). Art Hotel uses only the data necessary to achieve each of the purposes for which personal data are processed.
  3. Art Hotel makes every effort to protect the interests of the data subjects, in particular ensuring that personal data are:
    1. processed in accordance with the law;
    2. collected for specified, lawful purposes and not subjected to further processing incompatible with those purposes;
    3. factually correct and adequate in relation to the purposes for which they are processed;
    4. stored in a form enabling identification of the data subjects no longer than necessary to achieve the processing purpose.

§II Data Controller

The data controller, i.e. the entity deciding how your personal data will be used, is Art Hotel Sp. z o.o., Wrocław 50-110, ul. Kiełbaśnicza 20, entered in the Register of Entrepreneurs of the National Court Register, whose registration files are kept by the District Court for Wrocław-Fabryczna in Wrocław, 6th Commercial Division of the National Court Register under number 0000090062, NIP 8971046888, REGON 930782333.

§III Contact Details

For all matters related to personal data processing, you can contact us via email: daneosobowe@arthotel.pl or in writing at Art Hotel Sp. z o.o., ul. Kiełbaśnicza 20, 50-110 Wrocław.

§IV Source of Personal Data

We have received them from you or other persons/entities authorized by you in connection with our business activities and also automatically, e.g. through the collection of "cookies" files.

§V Purposes and bases of personal data

  1. Your personal data will be processed by Art Hotel for the purpose of:
    1. Marketing of own services, sending newsletters electronically, saving data in "cookies" files, organizing contests and promotional campaigns in which you may participate, recording calls during telephone conversations – based on the explicit consent of the data subject given before the recording begins (Art. 6(1)(a) GDPR).
    2. Taking actions before concluding a contract, at the request of the data subject or performing a contract for the provision of services by Art Hotel, to which the data subject is a party (Art. 6(1)(b) GDPR).
    3. Fulfilling a legal obligation imposed on Art Hotel (including tax, archival, complaint handling, reporting behavior that may constitute a crime or offense or is generally considered reprehensible) – based on Art. 6(1)(c) GDPR.
    4. Protecting vital interests (life, health) and interests of the data subject (including processing data of accompanying persons, including children using hotel services) – based on Art. 6(1)(d) GDPR.
    5. Realizing legally justified interests of Art Hotel (e.g. pursuing or securing claims, providing security and protection of persons and property, conducting direct marketing other than based on consent, e.g. discount cards, loyalty programs, sending occasional gifts or Christmas cards) – based on Art. 6(1)(f) GDPR.
  2. Providing personal data is voluntary, and consent can be withdrawn at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. In case of conclusion of civil law contracts, provision of personal data is necessary. If for any reason you do not provide the required personal data, we may refuse to conclude the contract.
  3. Public personal data – provided, e.g., on social media or review sites when sending comments, opinions, etc., are available to all visitors to the pages containing these data. Art Hotel cannot secure the use of this data by private individuals or companies who use this data to send unsolicited information to the user. Therefore, these data are not covered by this Privacy Policy.

§VI Categories of data processing

We process the following personal data:

  1. In case of actions before concluding a contract, concluding and performing a service contract:
    - first and last name,
    - residential address,
    - document number,
    - PESEL number,
    - date of birth,
    - phone number,
    - email address,
    - image,
    - car registration number,
    - dates of ordered events and personal data contained in correspondence,
    - stay information, type of ordered services,
    - other necessary data, e.g. for returning forgotten items.
  2. In case of marketing activities:
    - first and last name
    - email address
    - phone number
    - social media nickname
  3. In case of automatic collection of information:
    - device information,
    - cookies,
    - IP addresses,
    - browser information.
    - other user and behavior information.

§VII Profiling

Your data may be processed in an automated way (including profiling), however, this will not cause any legal effects or otherwise significantly affect your situation. Automated processing may be carried out to assess and determine personal characteristics or user needs. For providing content tailored to your needs in various services, we use the Facebook pixel code, which helps us manage ads on Facebook and conduct remarketing activities. Regarding newsletter statistics, we track your email open history to later send you the most useful information. Data processed for contract performance purposes are not subject to profiling. Entities receiving your personal data in connection with accessing the Administrator's websites may use them to display you similar content tailored to previous online activity (profiling). This is based on previously visited websites, especially Google and Facebook services.

§VIII Transfer of data to third countries

We inform you that we do not transfer your personal data to third countries and international organizations except as specified in point IX.1i.

§IX Recipients of personal data

  1. Your data may be shared with entities providing services for us:
    1. hosting and IT services,
    2. legal and insurance,
    3. courier and postal,
    4. managing newsletter contact databases and sending newsletters,
    5. running the reservation module on our website,
    6. conducting marketing for Art Hotel,
    7. state bodies and services based on relevant laws to obtain personal data, provided they have appropriate legal grounds to request personal data,
    8. performing tasks related to cooperation with Art Hotel,
    9. owners of websites/search engines such as Google, YouTube, Facebook and other sites whose plugins may be found on Art Hotel's websites and social media profiles.
  2. Personal data are not sold or rented to other entities.

§X Retention period

  1. In case of contracts for the provision of services, personal data will be stored for the duration of the contract and after its expiration for the period necessary to:
    1. secure or pursue potential claims, for no longer than the statute of limitations according to Polish law or until the criminal proceedings are conclusively concluded;
    2. fulfill legal obligations, including tax and accounting, for a period of 5 years counted from the end of the calendar year in which the tax obligation arose;
    3. fulfill statistical and archival purposes;
    4. maximum of 6 years from the day of contract completion.
  2. In other cases, personal data will be processed:
    1. until the withdrawal of consent, objection to processing, or until it is no longer necessary to fulfill the purpose. After this period, until the statute of limitations of potential claims.
    2. call recording from the telephone switchboard – for no longer than 3 months unless special circumstances require longer storage, e.g., until the conclusion of legal proceedings.
    3. CCTV recordings – for no longer than 3 months unless special circumstances require longer storage, e.g., until the conclusion of legal proceedings.

§XI Rights related to personal data processing

  1. Rights of data subjects.

    You have the right to:

    1. access your data and receive copies, obtain information about the processing of your data,
    2. rectify (correct and supplement) data,
    3. restrict data processing,
    4. delete data,
    5. object to data processing,
    6. data portability,
    7. file a complaint with the supervisory authority,
    8. withdraw consent to data processing at any time, with withdrawal not affecting the lawfulness of processing performed before its withdrawal.
  2. Submitting requests related to rights.

    Requests regarding the exercise of the above rights may be submitted in writing to the addresses indicated in the Contact Details section. The request should precisely indicate:

    - the right that the applicant wants to use,
    - the purposes of processing to which the request relates,
    - processing procedures and scope of data.

    The Administrator may ask the applicant for additional information if identification is not possible. The response should be provided within 30 days in the same form as the request. If an extension is necessary, the Administrator will inform the applicant.

  3. Data processed by Art Hotel for monitoring purposes, not allowing identification of natural persons.

We inform that based on the monitoring image alone, Art Hotel Sp. z o.o. cannot identify a natural person, which means under Art. 11 GDPR, processing does not require identification. Therefore, pursuant to Art. 11 GDPR, Articles 15, 16, 17, 18, 19, and 20 GDPR do not apply – an unidentified person has no right to: access the content of their data in monitoring, obtain information such as categories and purposes of data processing or receive data copies; rectify incorrect or incomplete data; be forgotten, i.e. remove data processed unlawfully; restrict processing, i.e. suspend operations or not delete data according to a submitted request; be notified about rectification or deletion or restriction of processing; request transfer of personal data to another controller, if technically feasible.

At the same time, you have the right to request the Administrator access, correction, deletion, or restriction of your personal data, and data portability, provided you supply additional information allowing the Administrator to identify the above unidentified natural person.

An unidentified natural person based on the Administrator's monitoring image has the right to object to data processing (subject to providing additional information enabling identification) and the right to lodge a complaint to the supervisory authority, which is the President of the Personal Data Protection Office.

§XII Cookies Policy

  1. On the first visit to arthotel.pl, the user is informed about using "cookies" files. By staying on the site, the user accepts the use of ordinary "cookies" on the website. Not changing the browser settings by users equals giving consent to the use of "cookies".
  2. Installing "cookies" is necessary for proper service on our website. These cookies contain information essential for the proper functioning of the website, especially for pages requiring authorization. The user can change browser settings at any time to accept, reject, or be notified about cookie storage on their device.
  3. The following types of cookies are used on the service
    1. session – remain in the browser until it is closed or you log out from the page where they are placed,
    2. persistent – stay in the browser until deleted by the user or until a predetermined time specified in the cookie parameters.
  4. External "cookies":
    1. Google Analytics – allows analysis of how our sites are used, more at Google Privacy Policy.
    2. Google AdWords – we can target ads to selected recipient groups but do not have access to cookie data stored on your device. More at Google Privacy Policy.
    3. YouTube – our sites may contain videos shared by YouTube service. Cookie is stored when the browser accesses YouTube, more at Google Privacy Policy.
    4. Facebook – we use the so-called "Facebook conversion pixel" on our pages to manage our Facebook ads and conduct marketing activities. More at Facebook Privacy Policy.
  5. You can independently and at any time change cookie settings, specifying storage conditions and scope of use. Changes can be made through browser settings or your mobile device. Detailed information about cookie handling options is available in browser settings.

§XIII Collection of personal data of persons under 18 years of age (children)

We do not knowingly collect or seek any personal data of persons under 18 years of age nor knowingly allow such persons to make reservations at our hotel. If we learn that we have obtained personal data of a person under 18 without parental or legal guardian consent, we will promptly delete such data. If you believe we have or may have data about a person under 18 or originating from them, please contact us at daneosobowe@arthotel.pl.

§XIV Changes to the Privacy Policy

Art Hotel reserves the right to amend the Privacy Policy, which may be caused by the development of internet technology, possible changes to data protection laws, and the website's development. Each customer is bound by the current Privacy Policy available on the website on the day of using Art Hotel's service.

§XV Links to other websites

The website may contain links to other websites that operate independently of the website and are not supervised by Art Hotel in any way. These sites may have their own privacy policies and terms of use, which we recommend reading carefully.

§XVI Contact with us

In summary, we take utmost care to ensure that the processing of your personal data minimally impacts your privacy. However, if at any stage of processing your personal data doubts arise regarding the compliance with legal regulations, please contact us. Regardless, we encourage you to send questions, comments, remarks, requests, or complaints concerning this Privacy Policy to the email address: daneosobowe@arthotel.pl.

You can also write to us at the postal address:

ART HOTEL Sp. z o.o., ul. Kiełbaśnicza 20, 50-110 Wrocław