Dear Guests,In accordance with the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, hereinafter referred to as the "Regulation" or "GDPR", we inform you that:

The Data Controller of your personal data is ARKADIA.
You may contact the Data Controller at:
Phone: (+48) 71 303 56 56
Email: recepcja@arkadiahotel.com.pl
Correspondence address: ul. Zachodnia 12, 55-220 Jelcz-Laskowice, Poland

Your personal data will be processed for the purposes of:
• providing services;
• fulfilling legitimate interests pursued by the Data Controller or a third party;
• marketing activities, provided you have given separate consent.

The legal basis for data processing includes:
‍Article 6(1)(b) of the Regulation – processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract (e.g. check-in, provision of services);
‍Article 6(1)(c) of the Regulation – processing is necessary for compliance with a legal obligation to which the controller is subject (e.g. issuing invoices);
‍Article 6(1)(f) of the Regulation – processing is necessary for the purposes of the legitimate interests pursued by the controller (e.g. pursuing claims);
‍Article 6(1)(a) of the Regulation – the data subject has given consent to the processing of his or her personal data for one or more specific purposes (e.g. informing about events).

Your personal data may be disclosed to the following categories of recipients:
• entities handling card or electronic payments,
• entities related to your reservation,
• selected entities acting on behalf of the Controller for accounting, tax, advisory, legal, or debt collection services,
• entities providing technical support and IT solution providers enabling the Controller to conduct its business,
• public authorities acting in accordance with applicable legal provisions.

Personal data will not be transferred outside the EEA (European Economic Area) nor disclosed to international organizations. Your personal data will be processed only for the period necessary and as specified by law. You have the right to request from the Controller access to your personal data, rectification, erasure, or restriction of processing, the right to object to processing, as well as the right to data portability. The extent to which these rights can be exercised is determined by data protection regulations, particularly the GDPR, and depends on the legal basis and purpose of the processing. You also have the right to lodge a complaint with the supervisory authority – the President of the Personal Data Protection Office (UODO).

If providing personal data is a condition for entering into a contract, the required scope of data will be communicated to the data subject. Failure to provide the required data may result in the inability to conclude the contract or may hinder the Controller’s ability to contact you regarding service-related matters.

If data is processed based on your consent, providing such data and giving consent is voluntary. Please note that you may withdraw your consent at any time. Your personal data will not be used for automated decision-making, including profiling, that produces legal effects or significantly affects you.