This Privacy Policy defines the rules for processing the personal data of users of the website hotelkasztelan.pl and Guests of Hotel Kasztelan***.

1. Data Controller

The data controller is Elżbieta Kudlik, ul. Przedbronie 3, 32-410 Dobczyce, NIP (Tax Identification Number): 681-150-00-53.

2. Scope of Processing

We process data provided during booking, e-mail contact, stay fulfillment, payments, and data captured by video surveillance (CCTV).

3. Purposes and Legal Bases

fulfillment of bookings and the hotel services contract (Art. 6(1)(b) of the GDPR),
processing of online payments via Przelewy24,
fulfillment of tax and accounting obligations (Art. 6(1)(c) of the GDPR),
establishment, exercise, or defense of legal claims (Art. 6(1)(f) of the GDPR),
contacting the Guest regarding their booking.

4. Data Recipients

Data may be transferred to IT service providers, the payment operator Przelewy24, Booking.com, GuestsSage (booking engine), an accounting office, a hosting company, and entities authorized by law.

5. Retention Period

Booking data – for the period of contract performance and the limitation period for claims.
Accounting documents – in accordance with tax regulations.
Video surveillance (CCTV) – as a rule, up to 3 months, unless the recording constitutes evidence.
Correspondence – until the matter is resolved or the limitation period for claims expires.

6. Rights of Individuals

The right to access, rectify, erase, restrict processing, object, data portability, and the right to lodge a complaint with the President of the Personal Data Protection Office (UODO).

7. Voluntary Provision of Data

Providing the data necessary for the booking is a condition for concluding the contract.

8. Online Bookings

Online bookings are processed through the GuestsGE system and can also be made via Booking.com in accordance with the terms of these services.

9. Payments

Online payments are processed by Przelewy24. Data necessary to process the payment is transferred to the operator only to the extent required. Payment is part of the performance of the contract (i.e., the same article as the booking). Performance of bookings, hotel services contract, and online payment processing (Art. 6(1)(b) of the GDPR).

10. E-mail Contact

Contacting us via the email address recepcja@hotelkasztelan.pl involves processing the data contained within the message.

11. Video Surveillance (CCTV)

The property is subject to video surveillance to ensure the safety of individuals and the security of property.

12. Google Maps

The website uses embedded Google Maps, which may involve data processing in accordance with Google's policy.

13. Cookies

The website uses cookies necessary for the operation of the site and booking management. Technical cookies related to Google Maps and the functioning of the website may also be used.

14. Security

The Data Controller applies technical and organizational measures to ensure an appropriate level of data protection.

15. Contact

For matters regarding personal data, please contact: recepcja@hotelkasztelan.pl.

16. Final Provisions

The Policy may be updated in the event of changes in regulations or the operation of the website.

Polityka Prywatności Hotelu Kasztelan