Maly Sopot Boutique GDPR Information Clause

Personal data processing and video surveillance

In accordance with the Regulation of the European Parliament and the Council (EU) 2016/679 dated 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR), we inform you that the data administrator of your personal data is B20 Spółka z o.o., 20 Brzeźna Street, 86-300 Grudziądz, NIP (Tax ID) 8762464647.

Personal data is processed in order to book accommodation and provide hotel services in the facility at ul. Chodkiewicza 10 in Iława and additional services, as well as to ensure safety in the facility, and in the case of consent given – also for marketing purposes.

The basis for data processing is Article 6(1)(a)-(c) of the General Data Protection Regulation (GDPR).

Data collected for the purposes of providing services will be processed for the period specified in legal provisions and, in the case of data collected on the basis of consent, until it is revoked.

Video surveillance is carried out continuously 24/7 and is done by recording CCTV images inside and outside of the facility.

Personal data, collected during video surveillance, will be kept for the time necessary to fulfil the purposes for which they were collected, but no longer than 3 months after they were recorded.

In specific situations, it is possible for the data administrator to make your data available to entities authorized to legally receive it (e.g. the police).

You have the right of access to your data content, the right to your data transfer and the right to obtain a copy of the personal data processed by the data administrator.

If you have given your consent for the processing of your data for marketing purposes, you have the right to withdraw your consent at any time, request restriction of processing, deletion and the right to be forgotten.

Your data may be shared or transferred, in particular, to the following categories of recipients:
- transport, taxi and courier companies in the event that transport or courier services are ordered for the guest,
- companies providing additional services to guests,
- companies providing IT support services,
- companies providing accounting services,
- companies providing legal services,
- companies providing marketing services.

In case you discover that your personal data is processed unlawfully, you have the right to file a complaint to the President of the Office for Personal Data Protection, 2 Stawki Street, 00-193 Warsaw.

The Data Protection Officer (DPO) can be reached at the following e-mail address