Privacy Policy

v.4 dated 01.12.2023

§I Introduction to the Privacy Policy.

This document contains our Privacy Policy, i.e. the principles governing our processing of your personal data. It also contains the information obligations which, under applicable law, should be presented to data subjects, i.e. you.

  1. This Privacy Policy sets out the rules for processing and protecting personal data provided by users of services offered by Art Hotel Sp. z o.o. (hereinafter Art Hotel or Controller). It concerns:
    - use of our products and services,
    - visits to our websites and social media profiles.
  2. To protect entrusted personal data, Art Hotel follows internal procedures and guidelines compliant with applicable data protection laws, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals regarding the processing of personal data and the free movement of such data and repealing Directive 95/46/EC (GDPR). Art Hotel uses only data necessary to fulfil each purpose for which personal data are processed.
  3. Art Hotel takes particular care to protect the interests of data subjects and ensures in particular that personal data are:
    1. processed lawfully;
    2. collected for specified, lawful purposes and not further processed inconsistently with those purposes;
    3. accurate and adequate for the purposes for which they are processed;
    4. stored in a form allowing identification of data subjects for no longer than necessary to achieve the processing purpose.

§II Personal data controller

The controller of personal data, i.e. the entity deciding how your personal data will be used, is Art Hotel Sp. z o.o., Wrocław 50-110, ul. Kiełbaśnicza 20, entered in the Register of Entrepreneurs of the National Court Register, whose registration files are held by the District Court for Wrocław-Fabryczna in Wrocław, 6th Commercial Division of the National Court Register, under no. 0000090062, NIP 8971046888, REGON 930782333.

§III Contact details

For all matters related to personal data processing, contact us by email: daneosobowe@arthotel.pl or in writing at Art Hotel Sp. z o.o., ul. Kiełbaśnicza 20, 50-110 Wrocław.

§IV Source of personal data

We received it from you or persons/entities authorised by you in connection with our business, and automatically, e.g. through cookies.

§V Purposes and legal bases

  1. Your personal data will be processed by Art Hotel for:
    1. Marketing own services, sending newsletters electronically, storing data in cookies, organising competitions and promotions in which you may participate, recording calls – based on the explicit consent of the data subject given before recording starts (Art. 6(1)(a) GDPR).
    2. Taking steps before entering into a contract at the data subject’s request, or performing a contract for services provided by Art Hotel to which the data subject is party (Art. 6(1)(b) GDPR).
    3. Compliance with Art Hotel’s legal obligation (including tax, archival and complaint-handling obligations, and reporting conduct constituting an offence or commonly considered reprehensible) – under Art. 6(1)(c) GDPR.
    4. Protecting vital interests (life, health) and the interests of the person concerned (including processing data of accompanying persons, including children using hotel services) – under Art. 6(1)(d) GDPR.
    5. Pursuing Art Hotel’s legitimate interests (including pursuing or securing claims, ensuring safety and protecting people and property, and direct marketing other than based on consent, e.g. discount cards, loyalty programmes, occasional gifts or Christmas cards) – under Art. 6(1)(f) GDPR.
  2. Providing personal data is voluntary and consent may be withdrawn at any time. Withdrawal does not affect the lawfulness of processing based on consent before withdrawal. Providing personal data is necessary to conclude civil-law contracts. If you do not provide required data, we may refuse to conclude a contract.
  3. Public personal data – provided, for example, on social or opinion websites when posting comments or reviews – are available to all visitors to pages containing such data. Art Hotel cannot prevent private individuals or companies from using this data to send users unsolicited information. Therefore, such data are not covered by this Privacy Policy.

§VI. Data processing categories

We process the following personal data:

  1. For steps before entering into, concluding and performing a service contract:
    - first and last name,
    - residential address,
    - document no.,
    - PESEL no.,
    - date of birth,
    - telephone no.,
    - email address,
    - image,
    - vehicle registration no.,
    - dates of ordered events and personal data in correspondence,
    - stay details and type of services ordered,
    - other necessary data, e.g. to return forgotten items.
  2. For marketing activities:
    - first and last name
    - email address
    - telephone no.
    - social media username
  3. For automatic information collection:
    - device information,
    - cookies,
    - IP addresses,
    - browser information.
    - other information about users and their behaviour.

§VII. Profiling

Your data may be processed automatically, including for profiling, but this will not produce legal effects or similarly significantly affect your situation. Automated processing may assess and determine users’ personal characteristics or needs. To provide content tailored to your needs on various services, we use Facebook pixel code to manage Facebook advertising and conduct remarketing. For newsletter statistics, we track whether you open emails so we can later send the most useful information. Data processed to conclude contracts are not subject to profiling. Entities receiving your data when you visit the Controller’s websites may use it to display similar content tailored to your previous online activity (profiling), based on websites previously visited. This particularly concerns Google and Facebook services.

§VIII. Transfers to third countries

We inform you that we do not transfer your personal data to third countries or international organisations, subject to section IX.1i.

§IX Personal data recipients

  1. We may share your data with entities providing:
    1. hosting and IT services,
    2. legal and insurance services,
    3. courier and postal services,
    4. newsletter contact database management and newsletter delivery,
    5. operation of the booking module on our website,
    6. marketing for Art Hotel,
    7. state authorities and services entitled by law to obtain personal data, provided they have a legal basis to request it,
    8. tasks related to cooperation with Art Hotel,
    9. owners of websites/search engines Google, YouTube, Facebook and other services whose plugins may appear on Art Hotel websites and social media profiles.
  2. Personal data are not sold or rented to other entities.

§X. Processing period

  1. For service contracts, personal data will be stored for the contract term and thereafter for the period necessary to:
    1. secure or pursue potential claims, for no longer than the limitation period under Polish law or until criminal proceedings conclude with a final judgment;
    2. fulfil legal, including tax and accounting, obligations; under applicable law, this is 5 years from the end of the calendar year in which the tax obligation arose;
    3. to meet statistical and archival purposes;
    4. for up to 6 years from the date the agreement ends.
  2. In other cases, personal data will be processed:
    1. until consent is withdrawn, an objection is made, or processing is no longer necessary for the purpose. Thereafter, until the limitation period for potential claims expires.
    2. call recordings from the telephone exchange – for no longer than 3 months, unless special circumstances require longer storage, e.g. until proceedings are finally concluded.
    3. CCTV recordings – for no longer than 3 months, unless special circumstances require longer storage, e.g. until proceedings are finally concluded.

§XI. Rights related to personal data processing

  1. Rights of data subjects.

    You have the right to:

    1. access your data and receive a copy, and obtain information on its processing,
    2. rectify (correct and complete) your data,
    3. restrict data processing,
    4. erase your data,
    5. object to data processing,
    6. data portability,
    7. complain to a supervisory authority,
    8. withdraw consent to personal data processing at any time; withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.
  2. Submitting requests to exercise rights.

    A request concerning the above rights may be submitted in writing to the addresses in Contact details. It should specify:

    - the right the applicant wishes to exercise,
    - the processing purposes covered by the request,
    - the processing operations and data scope.

    The Controller may request additional information if unable to identify the applicant. A response will be provided within 30 days in the same form as the request. If an extension is necessary, the Controller will inform the applicant.

  3. Data processed by Art Hotel for monitoring purposes that do not permit identification of a natural person.

We inform you that, based solely on CCTV footage, Art Hotel Sp. z o.o. cannot identify a natural person. Under Article 11 GDPR, processing does not require identification; therefore Articles 15, 16, 17, 18, 19 and 20 GDPR do not apply. An unidentified person has no right to access their personal data in the monitoring scope or information, including data categories and processing purposes, or a copy; rectify inaccurate or complete missing data; be forgotten, i.e. erase data processed without basis or unlawfully; restrict processing, i.e. suspend data operations or retain data as requested; be notified of rectification, erasure or restriction; or request direct transfer of their data to another controller where technically possible.

At the same time, we inform you that you may request access to, rectification, erasure or restriction of processing of your personal data, and data portability, provided you give the Controller additional information enabling identification of the unidentified natural person referred to above.

A natural person not identified from the Controller's CCTV footage may object to data processing, provided additional information enabling identification is supplied, and may lodge a complaint with the supervisory authority, the President of the Personal Data Protection Office.

§XII. Cookies Policy

  1. On the first visit to arthotel.pl, users are informed that “cookies” are used. By remaining on the site, users accept standard “cookies”. Leaving browser settings unchanged constitutes consent to their use.
  2. Installing “cookies” is necessary to provide our website services properly. “Cookies” contain information needed for proper website operation, especially for services requiring authorisation. Users may change browser settings at any time to accept or reject cookies, or be notified when they are not placed on their computer.
  3. The following types of “cookies” are used
    1. session – remain in the browser until it is closed or the website is logged out,
    2. persistent – remain in the device's browser until deleted by the user or until the period specified in the cookie parameters expires.
  4. Third-party “cookies”:
    1. Google Analytics – lets us analyse how our websites are used; see Google's Privacy Policy.
    2. Google AdWords – we may target ads to selected audiences, but cannot access cookie data stored on your device. See Google's Privacy Policy.
    3. YouTube – our websites may contain videos provided by YouTube. A cookie is saved when the browser accesses YouTube; see Google's Privacy Policy.
    4. Facebook – our pages use the “Facebook conversion pixel” to manage Facebook advertising and conduct marketing activities. See Facebook's Privacy Policy.
  5. You can change cookie settings at any time, defining their storage conditions and scope of use. Settings can be changed in your browser or mobile device. Detailed information on cookie options and management is available in your browser settings.

§XIII. Collection of Personal Data of Persons Under 18 (Children)

We do not knowingly collect or solicit personal data from anyone under 18, nor knowingly allow them to make hotel reservations. If we learn that we have obtained data from a person under 18 without parental or legal guardian consent, we will promptly delete it. If you believe we have or may have data about or from a person under 18, please contact us at daneosobowe@arthotel.pl.

§XIV. Changes to the Privacy Policy

Art Hotel reserves the right to amend this Privacy Policy due to internet technology developments, changes in data protection law or website development. Each customer is bound by the current Privacy Policy available on the website when using Art Hotel's service.

§XV. Links to Other Websites

The service may contain links to other websites operating independently and not supervised by Art Hotel. These sites may have their own privacy policies and terms, which we recommend reading carefully.

§XVI. Contact Us

In summary, we make every effort to ensure that processing your personal data interferes as little as possible with your privacy. However, if any doubt arises at any stage about compliance with the law, please contact us. We also invite questions, comments, feedback, requests or complaints about this Privacy Policy at daneosobowe@arthotel.pl.

You can also write to us at:

ART HOTEL Sp. z o.o., ul. Kiełbaśnicza 20, 50-110 Wrocław