Privacy Policy

We respect the privacy of our Guests and Users. This Privacy Policy explains how we collect, process, and protect personal data on the WROCLAW HOTEL website available at: www.wroclawhotel.pl.

1. Data Controller

The data controller is BW Hotel Wrocław Sp. z o.o., with its registered office in Wrocław (postal code: 50-110), at 16-19 Kiełbaśnicza Street, REGON: 93266027800000 | NIP (Tax ID): 897-16-59-817 | KRS (National Court Register): 0000010915.

The data controller can be contacted via email at: hotel@wroclawhotel.pl.

2. What data do we collect?

Depending on how you use our website, we may collect the following personal data:

  • First name and last name (Full name)
  • Email address
  • Phone number
  • Reservation details (stay dates, number of guests, preferences)
  • IP address
  • Information contained in cookies
  • Data from contact forms and newsletter subscriptions

3. Purpose and legal basis for data processing

Data are processed for the purpose of:

  • fulfillment of hotel reservations (Article 6(1)(b) GDPR),
  • handling inquiries and customer contact (Article 6(1)(f) GDPR),
  • sending newsletters (based on consent, Article 6(1)(a) GDPR),
  • analytics and improvement of website performance (cookies – Article 6(1)(f) GDPR).

4. Who do we share data with?

Data may be shared with:

  • entities providing IT and hosting services,
  • operators of reservation and payment systems (e.g., \[name, if applicable]),
  • public authorities, if required by law.

We do not transfer data outside the European Economic Area (EEA), unless the user is explicitly informed about it.

5. User rights

You have the right to:

  • access your data,
  • rectification of your data,
  • erasure (right to be forgotten),
  • restriction of processing,
  • data portability,
  • objection to processing,
  • withdrawal of consent at any time (without affecting the lawfulness of processing based on consent before its withdrawal).

To exercise your rights, please contact us at: hotel@wroclawhotel.pl

6. Cookies

Our website uses cookies for the following purposes:

  • technical purposes (proper functioning of the website),
  • technical purposes (proper functioning of the website),
  • analytical purposes (Google Analytics or others),
  • marketing purposes (e.g., remarketing).

The user can manage cookies independently in their browser settings.

7. GDPR

In accordance with Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as “GDPR,” we inform you that:

  1. the controller of your personal data is BW HOTEL Wrocław Sp. z o.o., with its registered office in Wrocław (postal code: 50-110), at 16-19 Kiełbaśnicza Street, with a share capital of PLN 20,000,000, registered in the Register of Entrepreneurs of the National Court Register under number 0000010915, with files kept by the District Court for Wrocław-Fabryczna in Wrocław, 6th Commercial Division of the National Court Register, holding Tax Identification Number (NIP) 897-16-59-817 and National Business Registry Number (REGON) 932660278;
  2. The Data Protection Officer at the controller is Izabela Swornowska, phone: +48 71 782 5555;
  3. Your data will be processed for the purpose of fulfilling the agreement concluded with you through the provision of hotel and catering services, participation in marketing and loyalty programs, for the fulfillment of the legal obligations of the controller in the form of keeping accounting, reservation, and registration records, as well as for the legitimate interests of the controller consisting of conducting direct marketing and pursuing claims arising from the legal relationship between you and the controller, as well as defending against such claims. Data are also collected for statistical and personalization purposes, web analytics, and to adapt the www.wroclawhotel.pl website to users’ needs;
  4. Your personal data are collected on the basis of your consent referred to in Article 6(1)(a) GDPR, on the basis of Article 6(1)(b) GDPR – with respect to data necessary for the performance of the contract, on the basis of Article 6(1)(c) GDPR – with respect to data necessary for the fulfillment of the controller’s legal obligations, in particular keeping accounting, reservation, and registration records, as well as on the basis of Article 6(1)(f) GDPR – with respect to data necessary for the pursuit of the controller’s legitimate interests, consisting of conducting direct marketing and pursuing claims arising from the legal relationship between you and the controller, as well as defending against such claims;
  5. Your personal data will be stored no longer than until the reason for their collection for processing ceases to exist. Data related to the performance of the contract will be processed for no longer than 5 years from the end of the calendar year in which the tax payment deadline related to the contract expired (Article 86 § 1 of the Tax Ordinance) or no longer than necessary for the performance of the contract. Data processed on the basis of your consent will be processed until such consent is withdrawn. Data processed for the fulfillment of the controller’s legal obligation will be stored until that obligation is fulfilled. Data processed on the basis of the controller’s legitimate interest will be processed for the duration of that interest (e.g., until claims become time-barred);
  6. The recipients of your personal data will only be entities authorized to obtain personal data and entities involved in the provision of services, including the provider of necessary software, entities providing accounting, IT, legal, or advisory services to the controller, as well as postal services, couriers, banks, and payment processors;
  7. You have the right to request from the controller access to your personal data, their rectification, erasure, or restriction of processing. You also have the right to data portability and to object to the processing of personal data. To exercise these rights, an appropriate request should be sent to the following email address: kadry@wroclawhotel.pl;
  8. If your personal data are processed on the basis of your consent, you have the right to withdraw this consent at any time. This does not affect the lawfulness of data processing carried out before the withdrawal. Consent may be withdrawn in the same form in which it was given;
  9. In the event of a breach of your personal data protection, you have the right to lodge a complaint with the supervisory authority;
  10. Providing personal data is voluntary; however, refusal to provide such data may result in refusal to conclude a contract, provide a service, or use the website www.wroclawhotel.pl. Providing personal data is justified by the performance of the contract;

8. Surveillance

  1. The controller of the surveillance system is BW Hotel Wrocław Spółka z ograniczoną odpowiedzialnością, with its registered office in Wrocław (postal code: 50-110), at 16-19 Kiełbaśnicza Street;
  2. Surveillance is used for the purpose of protecting property and ensuring safety within the monitored area (the legitimate interest of the controller, within the meaning of Article 6(1)(f) GDPR);
  3. The legal basis for processing is Article 6(1)(f) GDPR – the legitimate interest of the controller in protecting property and ensuring safety within the building;
  4. Recordings from the surveillance system will be stored for a period of 14 days; after this period, the recordings will be overwritten with new ones;
  5. Surveillance data will be shared with the following groups of recipients: entities authorized to receive information from the surveillance system for the purpose of maintaining order and safety;
  6. A person recorded by the surveillance system has the right to access their personal data, to have them rectified, erased, or to restrict their processing. This person also has the right to object to the processing of their data, as well as the right to data portability;
  7. The obligation to provide personal data in the form of an image arises from being present in the area under surveillance. Providing personal data in the form of an image is a necessary condition for staying in the monitored area. If such data are not provided, it is not possible to remain in this area;
  8. A person recorded by the surveillance system has the right to lodge a complaint with the supervisory authority if they believe that their personal data protection has been violated;