Dear Sir/Madam,

The administrator of your personal data will be Topacz Investments SP. Z O.O., with tax identification number (NIP) 8961338394, located in Ślęza 55-040 at Templariuszy 1, hereinafter referred to as "Hotel" or "administrator." You can contact the Hotel via email at ado@topacz.pl or in writing to the administrator's address. The obtained personal data will be processed only in a lawful manner. Personal data will be processed for the purpose of:

1. Conclusion and Execution of the Contract – The legal basis for processing is the necessity of processing data for the conclusion and execution of the contract.
2. Direct Marketing of Own Products and Services, Including Analytical and Profiling Purposes – The legal basis for processing data is the necessity of processing for the realization of the legitimate interest of the administrator; the legitimate interest of the administrator is to conduct direct marketing of its services.
3. Possibly for Claims Related to the Contract – The legal basis for processing data is the necessity of processing for the realization of the legitimate interest of the administrator; the legitimate interest of the administrator is the possibility of asserting claims.

Your personal data will be processed in accordance with:

1. With your consent - that is, by your voluntary expression of consent to data processing (Art. 6 para. 1 lit. a).
2. Contractual requirements - i.e., the necessity of having your data to perform the service agreed upon in the contract between the Hotel and you (Art. 6 para. 1 lit. b).
3. Legal requirements - i.e., fulfilling the legal obligations of the company arising from legal provisions (Art. 6 para. 1 lit. c).

You can withdraw your consent to the processing of your personal data at any time. The withdrawal of consent does not affect the legality of the processing carried out based on the consent before its withdrawal. Refusal to give consent or its withdrawal results in the impossibility of processing your personal data and, consequently, providing you with further services. The withdrawal of consent does not mean the complete deletion of your data. Data resulting from the need to fulfill the company's legal obligations will not be deleted. The processing period of the collected personal data depends on the purpose of their processing. Personal data will be stored until the expiration of claims under the contract or until the expiration of the obligation to store data under legal provisions, in particular the obligation to store accounting documents related to the contract and regulations on the automatic exchange of tax information with other countries. The administrator will stop processing data used for direct marketing purposes, including profiling and analytical purposes if you object to the processing of your data for these purposes. As part of the processing, the personal data obtained from you may be disclosed to entities other than the Hotel, namely:

1. Entities providing services to the Hotel, such as IT service providers, auditors, advisors, entities cooperating to provide services to the Hotel.
2. Other authorized entities, solely within the scope defined by legal regulations.

The processing of data obtained from you is based on a voluntary basis.
However, refusal to provide data is associated with the impossibility of offering services by the Hotel.

In accordance with the provisions of data protection regulations, you have the right to access your data, rectify it, delete it, restrict itsprocessing, object to the processing of personal data based on the legitimate requirements of the administrator, and transfer personal data. You also have the right to file a complaint with the competent supervisory authority as indicated in the currently applicable law regulating the principles of personal data protection.

Personal data will not be transferred to recipients located in countries outside the European Economic Area.