Terms and Conditions

Date of updating the regulations: 02.01.2023

§1

1. The Regulations apply to all persons staying at the Hotel (Guests), who are obliged to observe and comply with its provisions.

2. The Hotel Guest is obliged to show the Reception employee a document with a photo confirming the Guest’s identity for check-in. In the event of refusal to present the document in a way that allows check-in, the Receptionist is obliged to refuse to issue an access card (key) to the room. 

3. The Guest accepts the content of the Hotel Regulations by signing the registration card.

4. The hotel reserves the right to demand payment in advance for services ordered at the hotel. In the event of a refusal by the Guest, the Receptionist is obliged to refuse to issue an access card (key) to the room. 

§2

1. A room in the Hotel is rented for days. The hotel day lasts from 14.00 to 11.00 the next day. 

2. If the Guest does not specify the length of stay, it is assumed that the room has been rented for one day. 

3. The wish to extend the stay at the Hotel beyond the period indicated on the day of arrival should be reported by the Hotel Guest at the Reception Desk by 9.00 a.m. on the day on which the room rental period expires.

4. The hotel will take into account the wish to extend the stay as long as there are free rooms. 

5. Staying in the room or leaving things after 11.00 am is treated as an extension of the stay. If the Guest does not leave the room by 11.00, the reception computer program will charge for the next day of renting the room at full prices. If it is not possible to extend the stay, the hotel staff will remove all the Guest’s belongings from the room and deposit them for a period of 7 days.

6. The hotel accepts pets only in designated rooms. The guest is obliged to report the stay of the dog when booking. Detailed regulations regarding animals in the hotel are available at the reception. 

§3

Throughout their stay at the Hotel, children under 13 must be under the constant care and supervision of adults. The children’s legal guardians are responsible for the behavior of children, including damage and/or damage.

§4

1. The Guest may not transfer the room to other persons, even if the period for which he has paid has not expired. 

2. Unregistered persons may stay in the hotel room from 7.00 to 22.00. The presence of unregistered persons in the hotel room after 22.00 is tantamount to the consent of the Guest who rents the room to accommodate these persons in the room for a fee. Each person will be accommodated according to the current price of an extra bed for an adult, from the price list available at the Hotel Reception. 

3. The Hotel has the right to refuse to accept a Guest who, during the previous stay, violated the regulations, causing damage to the property of the Hotel or Guests, or damage to Guests, Hotel employees or other persons staying at the Hotel, or otherwise disturbed the peace at the Hotel.

§5

The hotel provides services in accordance with its category and standard. In the event of reservations regarding the quality of services, the Guest is asked to immediately report them to the Reception Desk, tel. 100. 

§6

The Hotel’s liability for loss or damage to items brought by the Guest to the Hotel is governed by the provisions of art. 846-849 of the Civil Code. The Hotel’s liability is limited if these items are not deposited at the Reception. The Hotel has the right to refuse to store money, securities and valuable items, in particular valuables and items of scientific or artistic value, if they threaten security or are too valuable in relation to the size or standard of the Hotel or take up too much space. 

§7

The hotel is obliged to observe the quiet hours from 22.00 to 6.00 the next day. During the curfew hours, guests and people using the hotel’s services are obliged to behave in such a way that it does not disturb the peace of other people in any way. 

§8

1. Each time when leaving the room, the Guest should make sure that he has closed the doors and windows.

2. Upon check-out, the guest is obliged to return the magnetic card. In case of losing the card, the card costs PLN 35.

3. Due to fire safety, it is forbidden to use in hotel rooms and other rooms: heaters and other electrical devices that are not part of the equipment of these rooms (the above does not apply to chargers and computer power supplies) and open fire in any form.

§9

1. In the Hotel, including: on balconies, in rooms and bathrooms – in accordance with the Act of 8 April 2010 amending the Act on protection of health against the consequences of the use of tobacco and tobacco products and the Act on the State Sanitary Inspection (Journal of Laws No. 81, item 529) – there is a total ban on smoking cigarettes and tobacco products outside the designated area. 

2. Breaking the ban on smoking cigarettes or other tobacco products in a hotel room is tantamount to the consent of the Guest who rents the room to cover the costs of dearomatization of the room in the amount of PLN 1,000. 

3. It is forbidden to consume alcohol on the mezzanines, hotel corridors and balconies in the Hotel. 

4. The Hotel may refuse or cease to provide hotel services to Guests who are under the influence of alcohol or drugs.

5. In the event of unjustified triggering of the fire alarm, including pressing the ROP (manual fire alarm) button, the Guest or a person staying at the Hotel at his invitation will be charged a fine of PLN 5,000. The Hotel reserves the right to claim damages exceeding the amount of the contractual penalty, if the costs of the evacuation action, restoring the Hotel building to its operating condition before the evacuation, the costs of claims by third parties, as well as the Hotel’s lost profit, exceed the contractual penalty.

§10

1. The Hotel Guest who rents a room is obliged to familiarize himself with the equipment of the room and keep it intact. It is forbidden to take furniture and equipment outside the hotel room. The guest bears full financial and legal responsibility for any damage or destruction of the hotel’s furnishings and devices caused by him or his visitors. 

2. It is forbidden at the Hotel to throw medical waste (e.g. syringes, needles) into the waste bins in the room, under pain of incurring all costs of damage caused by such a needle being injured by another person/Hotel employee, including in particular reimbursement of the costs of treatment, stay in hospital, costs of medicines, rehabilitation, specialist care, proper nutrition, costs of travel to hospital. The desire to dispose of medical waste should be reported to the reception department.

3. It is forbidden to bring into the Hotel and to possess: dangerous items, including in particular firearms, pneumatic and gas weapons, knives and umbrellas with sharp ends, explosives and pyrotechnics, including: fireworks, glowing balls, flares and other similarly operating items and all kinds of potentially fire-hazardous materials, narcotic and psychotropic substances or other similar substances, containers for spraying gasses, corrosive or dyeing substances.

§11

In the event of violation of the provisions of these regulations, the Hotel may refuse to continue providing services to the person who violates them. Such a person is obliged to immediately comply with the requests of the Hotel staff, pay for the services provided so far and pay for any damage and destruction, and leave the Hotel and the area belonging to the Hotel.

§12

The hotel is not liable for damage or loss of items due to leaving a window open or an incorrectly closed door to the room. Personal belongings left by the departing Guest in the hotel room will be sent to the address indicated by the Guest at his expense. If no such instruction is received, the Hotel will store the above items at the owner’s expense for a period of three months, and after this period, the items left behind will be disposed of. Proceedings regarding found items are governed by the provisions of art. 187 of the Civil Code and the Act of February 20, 2015 on found items.

§13

The paper version of the Regulations is available at the reception.

Effective from January 29, 2020

This privacy policy is adapted to the standards of the GDPR, i.e. Regulation of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and the repeal of Directive 95 / 46 / EC (General Data Protection Regulation, hereinafter referred to as GDPR).

ADMINISTRATOR

The administrator of the website https://www.hotellamberton.pl/ (hereinafter: the Website or the Website) and personal data processed for the purposes referred to below is Hotel Lamberton run by Przedsiębiorstwo Handlowo-Usługowe MEGA Małgorzata Biesalska, ul. Poznańska 492, 05-850 Ołtarzew, NIP: 8381013698 (hereinafter referred to as: Administrator or Hotel).

CONTACT
You can contact the Administrator by sending a letter to the following address: ul. Poznańska 492, 05-850 Ołtarzew or by sending an e-mail to the following address: rodo@cloud.trabsky.com, and the recommended method of contact is sending an e-mail.

PURPOSES OF THE PROCESSING OF PERSONAL DATA, BASES AND RECIPIENTS OF DATA

BOOKING A HOTEL SERVICE

Booking a hotel service is possible via the Website, by phone, e-mail or via external internet portals, such as Booking.com.

The reservation form requires the provision of the following data: name and surname, e-mail address, payment card details, possibly invoice details.

You can also make a reservation by phone or via a dedicated e-mail.

The data obtained in the course of booking will be processed by the Hotel for the purpose of: booking, concluding and implementing a contract for the provision of hotel services (if you are a party to this contract), fulfillment of legal obligations incumbent on the Administrator (resulting from the provisions of tax and financial law – if booking involves charging any fee from you) and in order to implement the Administrator’s legitimate interests, which are: booking a hotel room for a third party (e.g. booking a room for an employee, which is made by the employer), increasing the quality and personalization of services, goals archival and statistical data of the Administrator, defense or pursuit of possible claims, including consideration of complaints and complaints.

The basis for the processing of personal data:
art. 6 sec. 1 lit. b GDPR – booking, conclusion and implementation of a contract for the provision of hotel services with the Administrator, if you are a party to this contract,
art. 6 sec. 1 lit. c GDPR – fulfillment of the legal obligations incumbent on the Administrator (issuing an invoice, other accounting documents, storing this documentation – provided that the reservation involves charging any fee from you),
art. 6 sec. 1 lit. f RODO – implementation of the legitimate interests of the Administrator, listed above.

The data will be processed for the period necessary to perform the reservation, conclusion and performance of the contract, and after this period – for the period enabling the implementation of the legitimate interests of the Administrator (including the expiry of the limitation periods for any claims or allegations arising from the above-mentioned contract), unless you will submit an effective objection to the processing of data in advance.

Your personal data is transferred to: suppliers of the Administrator’s IT systems and IT services, a payment processing bank, and possibly also companies responsible for accounting and legal services.

Providing data is a condition for making a reservation. Failure to provide data makes it impossible to make a reservation.

HOTEL GUEST CHECK-IN

At the hotel guest check-in stage, the Administrator obtains the following data: name and surname, company, ID / passport number, residence address.

The data will be processed in order to conclude and implement a contract for the provision of hotel services (if you are a party to this contract), fulfill the legal obligations incumbent on the Administrator (resulting from the provisions of tax, financial and reporting law) and to implement the Administrator’s legitimate interests, which are: check-in in the room of a hotel guest who is not a party to the contract for the provision of hotel services, increasing the quality and personalization of services, satisfaction surveys, archival and statistical purposes of the Administrator, defense or pursuing possible claims, including handling complaints and complaints.

The basis for the processing of personal data:
art. 6 sec. 1 lit. b GDPR – conclusion and implementation of a contract for the provision of hotel services with the Administrator, if you are a party to this contract,
art. 6 sec. 1 lit. c GDPR – implementation of legal obligations incumbent on the Administrator (issuing an invoice, other accounting documents, storing this documentation, reporting obligations to the Central Statistical Office),
art. 6 sec. 1 lit. f RODO – implementation of the legitimate interests of the Administrator, listed above.

The data will be processed for the period necessary to perform the contract, and after this period – for the period required by law or for the period enabling the implementation of the legitimate interests of the Administrator (including the expiry of the limitation periods for any claims or allegations arising from the above-mentioned contract), unless that you will raise an effective objection to data processing in advance.

Providing data is a condition for concluding a contract with the Administrator, including – issuing an invoice for the services provided. Failure to provide data makes it impossible to make a reservation or issue an invoice.

Your personal data is transferred to: suppliers of IT systems and IT services of the Administrator, bank servicing payments, companies responsible for accounting, legal or insurance services (in the event of raising claims by you or such claims on the part of the Administrator), and in the case of directing to your correspondence – courier companies / Polish Post.

SERVICE OF EVENTS – FAMILY PARTIES

If you are organizing a family celebration at the Hotel (e.g. wedding, baptism), the Administrator may obtain the following data from you: – name and surname, address, telephone number or e-mail address and ID card number.

The data will be processed in order to conclude and perform the contract for the organization of the reception, fulfill the legal obligations incumbent on the Administrator (resulting from the provisions of tax, financial or reporting law) and to implement the Administrator’s legitimate interests, which are: check-in in the room of a hotel guest who does not is a party to the contract for the provision of hotel services (as long as the contract for the organization of a family party involves the provision of accommodation), increasing the quality and personalization of services, satisfaction surveys, archival and statistical purposes of the Administrator, defense or pursuing possible claims, including considering complaints and complaints.

The basis for the processing of personal data:
art. 6 sec. 1 lit. b GDPR – conclusion and implementation of an agreement with the Administrator for the organization of the party,
art. 6 sec. 1 lit. c GDPR – fulfillment of legal obligations incumbent on the Administrator (issuing an invoice, other accounting documents, storing this documentation,
art. 6 sec. 1 lit. f RODO – implementation of the legitimate interests of the Administrator, listed above.

The data will be processed for the period necessary to perform the contract, and after this period – for the period required by law or for the period enabling the implementation of the legitimate interests of the Administrator (including the expiry of the limitation periods for any claims or allegations arising from the above-mentioned contract), unless that you will raise an effective objection to data processing in advance.

Your personal data may be transferred to: suppliers of IT systems and IT services of the Administrator, companies responsible for accounting, legal or insurance services (in the event of raising claims by you or such claims on the part of the Administrator), and in the case of directing you to Your correspondence – to courier companies / Polish Post.

Providing data is a condition for concluding a contract with the Administrator, including – issuing an invoice for the services provided. Failure to provide data makes it impossible to make a reservation or issue an invoice.

In the case of organizing a party, the Administrator acquires the data of participants only if it is combined with the overnight stay of guests at the Hotel. The administrator then collects the name and surname of the guest in order to check him in the correct room.

BUSINESS COOPERATION – CONFERENCES, COMPANY EVENTS

If you organize a conference, corporate event or other event from the hotel’s business offer, the Administrator obtains contact details and data necessary to issue an invoice from you.

The data will be processed in order to conclude and implement a business contract, e.g. for the organization of a conference or a corporate event (in the case of a party to this contract), fulfillment of legal obligations incumbent on the Administrator (resulting from the provisions of tax and financial law) and to implement the Administrator’s legitimate interests, which are: processing of your personal data as the person responsible for organizing a conference or other event from the Administrator’s business offer, increasing the quality and personalization of services, satisfaction surveys, archival and statistical purposes of the Administrator, defense or pursuing possible claims, including handling complaints and complaints .

The basis for the processing of personal data:
art. 6 sec. 1 lit. b GDPR – conclusion and implementation of an agreement with the Administrator to organize a conference / event from the Administrator’s business offer – in the case of a party to this agreement,
art. 6 sec. 1 lit. c GDPR – fulfillment of legal obligations incumbent on the Administrator (issuing an invoice, other accounting documents, storing this documentation),
art. 6 sec. 1 lit. f RODO – implementation of the legitimate interests of the Administrator, listed above.

The data will be processed for the period necessary to perform the contract, and after this period – for the period required by law or for the period enabling the implementation of the legitimate interests of the Administrator (including the expiry of the limitation periods for any claims or allegations arising from the above-mentioned contract), unless that you will raise an effective objection to data processing in advance.

Your personal data may be transferred to: suppliers of IT systems and IT services of the Administrator, companies responsible for accounting, legal or insurance services (in the event of raising claims by you or such claims on the part of the Administrator), and in the case of directing you to Your correspondence – to courier companies / Polish Post.

Providing data is a condition for concluding a contract with the Administrator, including issuing an invoice. Failure to provide data makes it impossible to make a reservation or issue an invoice.

In the case of business cooperation, e.g. to organize a conference / other event from the hotel’s business offer, the Administrator obtains the data of event participants only if it is combined with the overnight stay of guests in hotel rooms. The administrator then only collects the name and surname of the guest in order to check him in the correct room.

EVENTS ORGANIZED IN THE HOTEL – IMAGE

During public cultural events organized at the Hotel (such as, for example, a vernissage), photos are taken that can be disseminated in promotional materials, on the Hotel’s website and social media (on the fanpage on Facebook, on Instagram). Before each event, the Administrator informs that participation in a given event is associated with the taking and dissemination of photos from the event.

Your personal data, i.e. your image and possibly your name and surname (if you mark yourself as a participant in the event on the photographs posted by the Administrator), are processed for informational and promotional purposes of the Administrator pursuant to art. 6 sec. 1 lit. a GDPR – your consent – if the image is important for the photograph (e.g. a photo taken is a portrait) or pursuant to art. 6 sec. 1 lit. f RODO – the legitimate interest of the Administrator, which is the inclusion of photos in promotional materials and in the Administrator’s social media, i.e. for information and promotional purposes.

Your personal data may be transferred to: IT system and IT service providers of the Administrator and – in the case of placing photos in the Administrator’s social media – to the administrator of the given portal (Facebook or Instagram).

HOTEL MONITORING

The administrator uses video monitoring. Video surveillance includes the following zones: parking, building entrances and exits, bar, restaurant, banquet hall, hotel lobby, corridors, gazebo. Monitoring is used to: ensure the safety of personnel, property, information and people in the Administrator’s buildings.

The basis for the application of monitoring is Art. 6 sec. 1 lit. f RODO – the legitimate interest of the Administrator, which is to ensure the safety of staff, property, information and people in the Administrator’s buildings.

The image recorded with the monitoring devices is stored for a period not exceeding seven days from the date of recording. After this period, as a rule, the image recordings are destroyed. In the event that the image recordings constitute evidence in legal proceedings or the Administrator has learned that they may constitute evidence in the proceedings, this period may be extended until the final conclusion of the proceedings.

Video surveillance recordings may be made available only to authorities or public entities authorized to obtain data on the basis of applicable law, e.g. courts, law enforcement authorities or state institutions, in the case of a legitimate request resulting from the scope of such authority’s activity.

Your personal data may be transferred to the Administrator’s IT system and IT service providers or companies responsible for the Administrator’s legal services.

CONTACT FORMS ON THE SITE

You can contact the Administrator at any time by filling out any contact form on the Website. For this purpose, please provide your name, e-mail address or telephone number. Other personal data may also be included in the content of the inquiry.

The purpose of processing your personal data obtained via the contact form is to handle your inquiries, archive your inquiries as well as analyze and statistics on inquiries. Alternatively, depending on the content of your inquiry or e-mail – the Administrator’s goal may also be to respond to your claims or allegations or to raise such claims.

The legal basis for the processing of personal data is therefore Art. 6 sec. 1 lit. f RODO, i.e. the legitimate interest of the Administrator, which is to answer your inquiry, archiving correspondence, analysis and statistics regarding inquiries or defense against claims / allegations or pursuing such claims. The data processed on the basis of the legitimate interest of the Administrator will be processed for a period enabling the implementation of this interest, unless you submit an effective objection to data processing in advance.

Your personal data may be transferred to the suppliers of IT systems and IT services of the Administrator, and depending on the content of the inquiry / e-mail, also to companies responsible for
accounting, legal or insurance services.

Providing data is voluntary, but necessary to answer your inquiry or e-mail.

MAIL CORRESPONDENCE

You can contact the Administrator at any time via e-mail. By sending an e-mail to the Administrator, you automatically provide him with your e-mail address, because you are the sender of the message. You can also provide other personal data in the content of the e-mail.

The purpose of processing your personal data obtained via e-mail is to conduct e-mail correspondence with you, to archive your correspondence and to analyze it and statistics.

The legal basis for the processing of personal data is Art. 6 sec. 1 lit. f RODO, i.e. the legitimate interest of the Administrator, which is replying to your e-mail, archiving correspondence, analysis and statistics regarding inquiries or defense against claims / allegations or pursuing such claims (depending on the content of the e-mail). The data processed on the basis of the legitimate interest of the Administrator will be processed for a period enabling the implementation of this interest, unless you submit an effective objection to data processing in advance.

Your personal data is transferred to: suppliers of IT systems and IT services of the Administrator, and depending on the content of the e-mail, also to companies responsible for accounting, legal or insurance services.

Providing data is voluntary, but necessary to answer your e-mail.

MARKETING COMMUNICATION

By using the Website, you may provide your personal data (name and surname, e-mail address, telephone number) in order to receive information and marketing offers from the Administrator.

Receipt of information and marketing offers requires consent to the Hotel sending commercial information by means of electronic communication in accordance with the Act on the provision of electronic services (in the case of e-mail) or consent to the use of telecommunications end devices for direct marketing purposes, in accordance with telecommunications law .

By completing the form and selecting the selected communication channel, you give your consent. Lack of consents will make it impossible to send information and commercial offers via the appropriate communication channel. You can withdraw your consent at any time, which will not affect the lawfulness of the processing carried out before its withdrawal.

The data will be processed on the basis of art. 6 sec. 1 lit. f GDPR, i.e. in order to implement the Administrator’s legitimate interest, which is the Administrator’s direct marketing, including presenting commercial offers and defense against possible claims or allegations. Data related to the presentation of offers through the selected communication channel will be processed until the consent is withdrawn or an effective objection to data processing is submitted (including the expiry of the limitation period for any claims or allegations).

The recipients of your data are companies that provide IT systems to the Administrator. Your personal data is not profiled, and a decision is not made for you based solely on automated processing.

NEWSLETTER

If you subscribe to the Hotel’s newsletter, which may include the Administrator’s commercial information, the Administrator will process your name and e-mail address for this purpose.

To send the newsletter, including commercial information, you need your consent to send commercial information by means of electronic communication, in accordance with the Act on the provision of electronic services.

The data will be processed on the basis of art. 6 sec. 1 lit. f GDPR, i.e. the Controller’s legitimate interest, which is the Controller’s direct marketing, including the sending of the newsletter, including commercial information and defense against possible claims or allegations. The data related to the sending of the newsletter will be processed until the consent is withdrawn or an effective objection to data processing is submitted (including the expiry of the limitation period for any claims or allegations).

You can withdraw your consent at any time. Withdrawal of consent will not affect the lawfulness of the processing carried out before its withdrawal.

Your personal data may be transferred to the suppliers of IT systems and IT services of the Administrator.

CUSTOMER PREFERENCES, SATISFACTION SURVEY

The hotel processes information about your preferences. The catalog of processed data includes only ordinary data. The data is processed in order to improve the quality and personalization of services, as well as satisfaction surveys, including for the Administrator’s statistical purposes, which is the Administrator’s legitimate interest. The basis for data processing is Art. 6 sec. 1 lit. f GDPR.

SOCIAL MEDIA (Facebook, LinkedIn, Instagram, YouTube, Twitter)

The administrator processes the personal data of people visiting the Administrator’s profiles in social media (Linkedin, Facebook, Instagram, YouTube, Twitter). These data are processed only in connection with the running of profiles. The legal basis for the processing of personal data by the Administrator for this purpose is its legitimate interest (Article 6 (1) (f) of the GDPR) – promoting its own brand.

RECRUITMENT

As part of the recruitment process, the Hotel processes personal data only to the extent specified in the provisions of the labor law. If the sent application contains a scope of data wider than in the provisions of the labor law, their processing will be based on your consent expressed by sending your application documents.

Purposes and grounds for processing personal data in connection with the recruitment process:
in the case of preference for employment based on an employment contract – in order to perform the obligations arising from the provisions of labor law – the legal basis for processing is the legal obligation incumbent on the Administrator (Article 6 (1) (c) of the GDPR);
if you prefer employment based on a civil law contract – the legal basis for data processing is taking action before concluding the contract at the request of the data subject (Article 6 (1) (b) of the GDPR);
in the case of data not required by law or necessary to conclude a contract, as well as for the purposes of future recruitment processes – the legal basis for processing is consent (Article 6 (1) (a) of the GDPR);
in the case of verification of your qualifications and skills – the legal basis for processing is the legitimate interest of the Administrator, which is the verification of job candidates (Article 6 (1) (f) of the GDPR);
The Administrator also has the right to process data in order to establish or pursue any claims or defend against such claims by the Administrator, which is his legitimate interest (Article 6 (1) (f) of the GDPR).

Your personal data may be transferred to suppliers of IT systems and IT services.

The data will be processed until the end of the recruitment for the position specified in the advertisement, and in the case of consent to the processing of data for the purposes of future recruitment – for one year from the date of completion of the current recruitment. The processing period may be extended each time by the limitation period for claims, if the processing of your personal data is necessary to establish or pursue any claims or defend against such claims by the Administrator.

Each of the expressed consents can be withdrawn at any time. Withdrawal of consent does not affect the lawfulness of the processing carried out before its withdrawal.

Providing data in the scope specified by art. 221 of the Labor Code is required – if you prefer employment based on a contract of employment – by the provisions of the labor law, and if you prefer employment based on a civil law contract – by the Administrator. Failure to provide this data makes it impossible to consider your candidacy in the recruitment process. Providing other data is voluntary.

DETAILS OF SUPPLIERS / CONTACT PERSONS

If you are a hotel supplier or a contact person in connection with the implementation of the contract concluded with the Administrator, the Hotel processes your personal data, such as: data necessary to issue an invoice and business contact details (name and surname, telephone number, e-mail address). -mail).

The data will be processed in order to conclude and perform the contract (if you are a party to the contract with the Hotel), fulfill the legal obligations incumbent on the Administrator (resulting from the provisions of tax and financial law) and to implement the Administrator’s legitimate interests, which are: archival purposes and statistical, defense or pursuit of possible claims and – in the case of appointing you as a contact person in a situation where you are not a party to the contract – data processing for contact purposes, based on:

art. 6 sec. 1 lit. b GDPR in order to conclude and perform the contract with the Administrator (if you are a party to the contract),
art. 6 sec. 1 lit. c GDPR in order to fulfill the legal obligations incumbent on the Administrator (issuing an invoice, other accounting documents, fulfilling other legal obligations imposed on the Administrator by tax and financial regulations),
art. 6 sec. 1 lit. f GDPR, i.e. in order to implement the Administrator’s legitimate interests, which are archival and statistical purposes, defense or pursuit of possible claims in connection with the contract and – in the case of appointing you as a contact person, in a situation where you are not party to the contract – data processing for contact purposes.

The data will be processed for the period necessary to perform the contract, and after this period – for the period required by law or for the period enabling the implementation of the legitimate interests of the Administrator (including the expiry of the limitation periods for any claims or allegations arising from the above-mentioned contract), unless that you will raise an effective objection to data processing in advance.

Your personal data may be transferred to the suppliers of IT systems and IT services of the Administrator and a law firm, in the event of the occurrence or need to defend against claims, and also – in the event of your correspondence being addressed – to courier companies / Poczta Polska.

Providing data is necessary to conclude and perform the contract with the Administrator.

DATA SOURCES

If you did not provide the data yourself, the data may have been provided to the Administrator by a member of your family, an employee of the company where you work or another organizer of your stay at the Hotel or may have been made available by an external internet portal: Booking , eTravel, Hotels.com, HRS, Profitroom through which you made your booking. Detailed information on the source of the data can be obtained from the reception desk.

RIGHTS OF PERSONS WHO THE DATA CONCERNS

The purposes, legal bases, periods of personal data processing and recipients of personal data have been indicated above – separately for each purpose of data processing.

Your rights related to the processing of personal data by the Hotel are:

the right to request access to your personal data, as well as to receive a copy thereof,
the right to rectify your personal data,
the right to delete your personal data,
the right to limit the processing of personal data,
the right to object to the processing of personal data – in principle, it is necessary to indicate a specific situation which, in your opinion, justifies the cessation of processing (this does not apply to cases where the Administrator processes personal data for direct marketing purposes, e.g. when sending a newsletter ),
the right to transfer data – if the Administrator has obtained personal data on the basis of your consent or contract,
the right to withdraw consent to the processing of personal data for a specific purpose – as long as the basis for the processing of your personal data is consent,
the right to lodge a complaint with the supervisory body in relation to the processing of personal data by the Administrator – the supervisory body in Poland is the President of the Office for Personal Data Protection, ul. Stawki 2, 00-193 Warsaw.

You can exercise your rights in accordance with the principles contained in art. 16-21 of the GDPR, by contacting the Administrator by sending an e-mail to the following address: rodo@cloud.trabsky.com.

Your rights are not unconditional and you are entitled to it depending on the circumstances. For example – the right to data portability may be exercised by you only if the Administrator has obtained it on the basis of your consent or contract, and the processing is carried out in an automated manner. The right to lodge a complaint with the supervisory authority is absolute, which you can use whenever you feel that the protection of personal data has been violated by the Administrator.

The administrator does not profile your data, including no decision made against you based solely on automated processing, which would have legal effects on you or similarly significantly affect you.

COOKIES, SERVER LOGS

The administrator uses cookies to adjust the website to your needs. Cookies are small text information stored on your end device (e.g. smartphone or computer) that can be read by the Administrator’s IT system. Cookies themselves do not contain personal data that could directly identify you, but contain information (e.g. regarding your preferences) that, together with other information about you, may be treated as personal data.

During your first visit to the website, information about the Administrator’s use of cookies will be displayed at the bottom of the Website. You can modify cookie settings in your browser at any time.

Cookies can be divided into three main groups according to their application, information storage technology and the provider.

The Hotel Lamberton website primarily uses:

Session cookies – session cookies – these are information that allows you to maintain the user’s session until the web browser is closed. Usually they are limited to putting the session ID in the browser. The rest of the data associated with the identifier is kept on the server side, over which users have no influence. Session cookies are, however, necessary to provide services that require logging in and user recognition.

Long live cookies – long-term cookies – are cookies whose presence in the browser is most often the conscious activity of webmasters. The lifetime of such files (their storage period) is usually a few days, but sometimes they are set for several months. These types of cookies are usually used for websites that do not have their own databases and allow, for example, personalization of services for their users – e.g. saved search criteria, page layout, etc. Such cookies are harmless and do not interfere with our privacy. Sometimes such cookies play a key role in providing services.

Third parties cookies – third party cookies – these are information posted by scripts of other websites. Contrary to appearances – these cookies are most often found on various websites. An example is the Google Analytics script, which is used to monitor traffic on your own website. Therefore, it gives the possibility of placing and reading cookies by other providers, losing access to the information collected by them – because its domain does not have the right to read files placed by another domain. This is the most dangerous of all cookies because they can collect and send information about the same user between different websites.

When visiting the Hotel website, your device sends a query to the server on which the website is stored, which is saved in the server logs. The logs mainly include the IP number of the device, the date and time of sending the inquiry, information about the operating system used by you and your web browser. Logs are saved and stored on the server. They are not stored in conjunction with your personal data, so they are not used for identification. Their task is to help the Administrator improve the website.