at the “Piaskowy Raj” Holiday Resort
Pursuant to Article 13(1) and (2) of Regulation EU 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter: “GDPR”), we hereby inform you of the principles governing the processing of your image within the video surveillance system.
1. DATA CONTROLLER
The controller of your personal data (image) is:
KOSMET Wanda Tomaszewska
Tax Identification Number (NIP): 1130028397
Correspondence address: Plac Tadeusza Kotarbińskiego 6/40, 03-988 Warsaw, Poland
E-mail address: rezerwacje@piaskowyraj.com
2. PURPOSES AND LEGAL BASIS FOR PROCESSING
Your personal data in the form of image recordings captured by the CCTV cameras are processed for the following purposes:
- Ensuring the safety and security of Guests and other persons present on the resort premises;
- Protecting the property of the “Piaskowy Raj” Holiday Resort and the property of our Guests, including vehicles and personal belongings;
- Clarifying disputes and accidents and, where applicable, establishing, pursuing or defending legal claims.
The legal basis for the processing is Article 6(1)(f) GDPR, namely the legitimate interest pursued by the Controller in protecting persons and property and ensuring safety on the premises.
3. SCOPE AND AREAS COVERED BY VIDEO SURVEILLANCE
The video surveillance system covers only selected and designated publicly accessible areas of the resort, including:
- The car park;
- The playground;
- Selected paths and passageways between the holiday cottages.
The surveillance system does not cover the entire resort premises. Under no circumstances do the cameras record the interiors of holiday cottages, guest rooms, private terraces, toilets, bathrooms or any other sanitary facilities.
4. RECIPIENTS OF PERSONAL DATA
Recipients of your personal data may include only:
- Entities authorised to obtain personal data under applicable law, such as the Police, Public Prosecutor’s Office or courts, particularly in the event of a reported incident;
- Service providers acting on behalf of the Controller, such as a security company operating the system, a company servicing the surveillance system or legal advisers, solely under appropriate data processing agreements.
5. DATA RETENTION PERIOD
Video recordings are retained for a period of 7 days from the date of recording. After this period, the recordings are automatically and permanently overwritten or deleted by the IT system.
Where a recording constitutes evidence in proceedings, or where the Controller becomes aware that it may constitute evidence in proceedings, the retention period shall be extended until the final conclusion of such proceedings.
6. RIGHTS OF DATA SUBJECTS
You have the right to:
- Access your personal data, including the right to view the recording, provided that doing so does not adversely affect the rights and freedoms of other third parties visible in the recording;
- Request the erasure of your data (“right to be forgotten”) once the purposes of processing have ceased;
- Request restriction of processing;
- Object to the processing of your image on grounds relating to your particular situation.
7. RIGHT TO LODGE A COMPLAINT
If you believe that the processing of your image by the “Piaskowy Raj” Holiday Resort infringes the GDPR, you have the right to lodge a complaint with the supervisory authority, namely the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, Poland.
8. VOLUNTARY NATURE / REQUIREMENT TO PROVIDE DATA
Staying on the premises of the “Piaskowy Raj” Holiday Resort and entering a publicly accessible area marked with a camera pictogram is voluntary; however, it results in the automatic recording of your image by the video surveillance system. It is not possible to disable the cameras for individual persons.
9. PROFILING
Video surveillance recordings are not subject to automated decision-making, including profiling. The data will not be transferred to third countries outside the European Economic Area.