Hotel Cristal Białystok **** makes every effort to ensure that guests' data are processed in compliance with the highest security standards in accordance with the General Data Protection Regulation of 27 April 2016 (Journal of Laws, Journal of Laws. EU L 119 of 04.05.2016) (hereinafter referred to as GDPR).

At the same time, we would like to inform you that:

1. the administrator of your personal data is Cristal Sp. z o.o. with its registered office at ul. Lipowa 3/5, 15-424 Białystok;
2. You can contact the data protection officer via e-mail at inspektor@cristal.com.pl;
3. the purpose of processing is to:
4. handling incoming inquiries electronically — pursuant to Article 6 (1) (a) of the GDPR — consent of the data subject;
5. booking a hotel room — pursuant to Art. 6 (1) (a) of the GDPR — consent of the data subject;
6. implementation of the hotel service contract — pursuant to Art. 6 (1) (b) of the GDPR — in order to conclude the contract;
7. marketing of personal data controller services — pursuant to Art. 6 para. 1 lit. a GDPR — subject to obtaining the consent of the data subject;
8. ensuring the safety of people and property located in the hotel and restaurant through the use of video surveillance — pursuant to Art. 6 (1) (f) of the GDPR;
9. in order to fulfill a legal obligation (issuing an invoice documenting the performance of the service) — pursuant to Art. 6 para. 1 lit. c GDPR
10. personal data will be stored:
11. concerning submitted inquiries — for a period of 30 days from the end of correspondence;
12. for bookings made — for a period of 12 months from the date of booking;
13. concerning the performance of a hotel service contract or necessary to issue an invoice — for a period of 5 years from the end of the year in which the hotel took place;
14. processed for marketing purposes — until the withdrawal of the consent of the data subject or until the business reason ceases;
15. in video surveillance systems — for 30 days;
16. recipients of personal data may be:
17. provider of the hotel booking platform (if the reservation is received through the booking portal);
18. companies providing marketing services (applies to persons who have consented to receive commercial information);
19. provider of an application for sending commercial information (applies to persons who have agreed to receive commercial information);
20. provider of the application used to manage hotel reservations (applies to persons who have made a reservation, are a party to a hotel service contract);
21. entities authorized to obtain personal data on the basis of legal provisions;
22. you have the right to request access to personal data from the controller, the right to rectify it — concerns the purposes resulting from legitimate interests pursued by the administrator or performance of a hotel service contract or fulfillment of a legal obligation, and to the extent to which consent has been given — you also have the right to delete or limit processing, the right to transfer data, the right to object to processing, the right to withdraw consent at any time. In order to exercise the above rights, please contact the inspector.
23. you have the right to lodge a complaint with the supervisory authority;
24. providing personal data is voluntary, however refusal to provide data may result
25. refusal to provide a hotel service — in the case of data processed in order to conclude a hotel service contract;
26. refusal of booking — in case of booking a room;
27. Your data will not be profiled.