INFORMATION ON THE PROCESSING OF PERSONAL DATA

Pursuant to Article 13(1) and (2) and Article 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons concerning the processing of personal data and on the free movement of such data (General Data Protection Regulation, Official Journal of the EU L 119 - hereinafter: GDPR), we hereby inform you that:

1. The operator of the website family-holiday.pl and the controller of your personal data

The operator of the website family-holiday.pl and the controller of your personal data is Family Holiday Sp. z o.o. (formerly Tomasz Trzpis), NIP 8551605565. Registered office: 72-600 Świnoujście, ul. Krzywa 14A (hereinafter: O.W. "Family Holiday"). You can contact us in writing at the above address, by phone at +48 600 100 204, by email at biuro@family-holiday.pl, or via the contact form available at https://www.family-holiday.pl/kontakt.

2. O.W. "Family Holiday" obtains personal data directly from you when you:

▪ make a booking or check in,
▪ voluntarily fill out the contact form,
▪ use the O.W. "Family Holiday" profiles on Facebook and Instagram,
▪ store cookies on your devices,
▪ contact O.W. "Family Holiday" directly,
▪ have a direct conversation with an employee of the resort.

3. Your personal data (including data of children) may also be provided to O.W. "Family Holiday" by:

▪ a person making the booking and naming you or your children as guests or as the new holder of the booking,
▪ a person who was already our client and recommended our services to you,
▪ an external booking portal where you placed your reservation,
▪ a travel organizer booking on your behalf.

4. O.W. "Family Holiday" may process personal data for the following purposes and legal bases:

• Pursuant to Article 6(1)(a) GDPR (based on your consent):
▪ to carry out future marketing activities and to send future marketing offers via specified communication channels.
• Pursuant to Article 6(1)(b) GDPR:
▪ to take steps at your request before entering into a contract for the provision of hospitality services (hereinafter: "Contract"), e.g., to make a reservation, and to perform such Contract,
▪ to perform other services provided by O.W. "Family Holiday", including the sale of products (goods).
• Pursuant to Article 6(1)(c) GDPR:
▪ to fulfill legal obligations imposed on O.W. "Family Holiday" concerning issuing and archiving documents necessary for fulfilling tax and accounting obligations related to the execution of the Contract, provision of other services, or sale of products (goods).
• Pursuant to Article 6(1)(f) GDPR (based on legitimate interest of O.W. "Family Holiday"):
▪ direct marketing of our own products and services,
▪ complaint handling,
▪ ensuring order and safety for guests and others present within or around the resort area, and collecting evidence of legal violations and for prevention purposes, including through the use of video surveillance monitoring systems that record individuals within the monitored area,
▪ pursuing or defending against legal claims.

5. Automated decision-making and profiling

Personal data is not subject to automated decision-making, including profiling, by O.W. "Family Holiday".

6. You have the right to:

▪ access and receive a copy of your data,
▪ rectify (correct) your personal data,
▪ erase your data (subject to the conditions set out in Article 17 GDPR),
▪ restrict the processing of your data (subject to the conditions set out in Article 18 GDPR),
▪ data portability - to receive your personal data in a structured, commonly used, machine-readable format if processed based on the Contract or consent and processed by automated means. You also have the right to transmit those data to another controller,
▪ object at any time to the processing of your personal data if the processing is based on the legitimate interests of O.W. "Family Holiday", including profiling. In particular, you have the right to object to the processing of your data for direct marketing purposes,
▪ lodge a complaint with a supervisory authority responsible for data protection,
▪ withdraw your consent at any time, if processing is based on consent.
▪ Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.

To exercise the above rights, please contact O.W. "Family Holiday" in writing at the address provided above, by phone at +48 600 100 204, by email at biuro@family-holiday.pl, via the contact form at https://www.family-holiday.pl/kontakt, or in person at the office of O.W. "Family Holiday".

7. Data storage period

O.W. "Family Holiday" will store your data related to the conclusion and performance of the Contract, provision of other services, or sale of products (goods) for 5 years from the end of the calendar year in which the Contract or service was completed. O.W. "Family Holiday" will cease processing your data for direct marketing purposes earlier if you object or withdraw your consent.

8. Video surveillance on the premises

Video surveillance recordings will be stored no longer than 3 weeks from the recording date - after which they will be automatically deleted by overwriting. If the recordings constitute evidence in legal proceedings or O.W. "Family Holiday" receives information that they may serve as such evidence, the storage period will be extended until the conclusion of the proceedings. O.W. "Family Holiday" will cease processing such data earlier if you object.

9. O.W. "Family Holiday" may disclose your personal data to:

▪ entities providing services to or supporting O.W. "Family Holiday" in its operations, in particular: HR and accounting services, legal services, IT companies, security firms, monitoring service providers, postal or courier service providers,
▪ public authorities or other entities authorized by law for the purpose of fulfilling the obligations of Family Holiday SPA & Resort.

10. Transfer of personal data to third countries

O.W. "Family Holiday" declares that it does not and does not intend to transfer your personal data to a third country or international organization.

11. Acceptance of providing personal data

Providing your personal data is voluntary, but also contractually and legally required, as failure to do so will prevent O.W. "Family Holiday" from performing actions before your arrival (e.g., making a reservation), prevent the conclusion of a Contract, or issuing a VAT invoice, and consequently will prevent you from using the services and offers of O.W. "Family Holiday". Therefore, providing data is necessary to conclude a Contract and receive services. Providing data for marketing purposes, or providing it based on your consent, is voluntary.

Being in the monitored area of the resort constitutes consent to the processing of personal image data recorded by the surveillance system. Refusing to provide such data will result in the loss of the right to remain in the monitored area.