Information clause on the processing of the Guest's personal data

A
Object "TATANKA" HOUSE IN PUSZCZY ul. Kamienne Bagno 39, 17-230 Białowieża, respecting your right to privacy, makes every effort to ensure that your personal data is processed with the highest security standards. Therefore, pursuant to Art. 13 (1) and (2) or Art. 14 of the Regulation of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016. on the protection of individuals with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as "GDPR"), we would like to inform you that:

1. The administrator of your personal data is "WHITE SPOT Jacek Stasiewicz" ul. Gliniana 12 F, 15-068 Białystok NIP 542 5421562123, REGON 384884659.
2. Contact to the Data Protection Officer by e-mail: domtatanka@gmail.com or by post to the correspondence address “WHITE SPOT Jacek Stasiewicz” ul. Gliniana 12 F, 15-068 Białystok
3. The property obtains your personal data directly from you when you contact the facility employees by phone, e-mail or in person, or via the contact form, as well as by submitting an online booking via our website or via an external booking portal.

4. The processing of your personal data is carried out for the following purposes and based on legal grounds:

a) legal basis: art. 6 sec. 1 lit. a of the Regulation
- within the scope of your consent:

• sending commercial and marketing offers;

• providing the newsletter service;

• responding to inquiries sent via the contact form, whether by e-mail or letter correspondence;

• adjusting the services provided in terms of the preferences indicated;

• personalizing the website in terms of displayed content and matching advertisements after accepting cookies;

• data processing in the reception system to speed up the next check-in procedure;

b) legal basis: art. 6 sec. 1 lit. b of the Regulation
- taking actions at your request by the facility before concluding the contract (e.g. making a reservation), as well as the conclusion and performance of a short-term rental contract

c) legal basis: art. 6 sec. 1 lit. c of the Regulation
- fulfillment of the legal obligation imposed on the administrator (facility) to issue and then archive documents in order to document by the administrator the fulfillment of tax and accounting obligations related to the performance of the service.

d) legal basis: art. 6 sec. 1 lit. f of the Regulation
- ensuring the safety of the guests of the facility and other people staying on the premises of the facility or within it through the video monitoring system registering people staying in the monitored area;

- conducting guest satisfaction surveys using, for example, surveys to determine the quality of the service provided and the level of guest satisfaction, and for this purpose the facility can analyze your purchasing choices related to the facility's operations, and then select and offer its own products and services directly in accordance with the guests' needs object in order to best meet them;

- pursuing possible claims by the facility in connection with the damage suffered by the guest or defense against the guest's claims in relation to the property, as well as debt collection;

5. Your personal data will be processed:
a) for the duration of the short-term rental agreement, and after its termination, the data will be stored for a maximum of 6 years in order to:

- pursuing claims in connection with the performance of the terms of the contract, including limitation of possible claims (tax and civil);

- documenting the performance of obligations by the administrator in relation to tax and accounting regulations;

b) by the video monitoring system for a period of about 7-14 days (depending on the size of the recordings), unless, due to special circumstances (e.g. an accident), the monitoring record will have to be stored longer, including for the duration of any proceedings conducted on the basis of the provisions of the Act;

c) until you withdraw your consent, in the case of processing personal data based on your consent, and then for 5 years from the date of revocation of consent for archival purposes, to be documented against any claims.

Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

6. The recipients of your personal data may be:

- processing entities performing activities for or on behalf of the administrator (facility) under the concluded data processing agreement, e.g. a company servicing ICT systems, entities supporting legal, accounting and HR services;

- public authorities operating under separate legal regulations, e.g. the police, courts, tax office;

7. Your personal data will not be transferred to countries outside the European Economic Area or international institutions, or the processing of personal data for purposes other than the purpose for which the personal data was collected.

8. Decisions regarding your personal data in the field of satisfaction surveys and in order to personalize services based on your preferences will be preceded by the collection of appropriate consent for the facility to take action.

9. You have the right to: obtain information about the rules for the processing of your personal data, the right to access and obtain a copy of it, as well as the right to rectify, delete or limit processing and data transfer;

● withdrawal of consent in the event that the processing took place on the basis of its expression. The withdrawal does not affect the lawfulness of the processing which was carried out on the basis of consent before its withdrawal.

In order to exercise your rights, please send them to the correspondence data provided in point 1 clause or by e-mail to the following address: domtatanka@gmail.com Some of these rights may be limited due to another legal obligation imposed on the administrator.

● file a complaint to the President of the Personal Data Protection Office (to the address of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw), when it is deemed that your personal data is unlawfully processed in violation of the provisions of the Regulation;

Information on the obligation to provide data and the consequences of not providing it:

Providing personal data by you is voluntary and is a contractual requirement, because if you do not provide personal and contact data, it will result in the inability to perform activities by the facility before your arrival, i.e. make a reservation and will prevent the conclusion of a contract with the facility and issuing an invoice. VAT, and consequently you will not be able to use the offer and services of the facility. Therefore, providing personal data is necessary in order to perform the above-mentioned tasks.

A