Privacy Policy of B&B HOTELS in Poland

Last update: 05/11/2024

GENERAL PRIVACY NOTICE

B&B HOTELS Polska sp. z o.o. with its registered office in Warsaw at al. Jana Pawła II 25, 00-854, Warsaw, KRS 302122 (“B&B Hotels Polska”) may have access to various types of information, including your personal data, and may, in particular, process it for various purposes in a number of areas, depending on the nature of your relationship with B&B Hotels Polska.

Therefore, we would like to provide you with some basic information on the personal data processing rules in force at B&B Hotels Polska.

Pursuant to Article 13 sections 1 and 2 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (the “GDPR”), we hereby inform you that your personal data will be processed by the data controller, i.e. B&B Hotels Polska, for the following purposes:

1. If you are a supplier of goods or services to B&B Hotels Polska, your personal data (in the case of natural persons carrying out business activity), the personal data of your employees, associates and individuals authorised to represent your company are processed for the purpose of:

• concluding and performing the agreement between you and B&B Hotels Polska (including for the purposes of accounting and financial operations) and examining any complaints, i.e. based on Article 6 section 1 point b) of the GDPR (processing necessary to perform the contract), 
• exercising the obligations imposed on B&B Hotels Polska under the generally applicable laws (in particular for the purpose of making data available to public administration bodies, in situations specified by law), i.e. based on Article 6 section 1 point c) of the GDPR (processing necessary to fulfil the legal obligation of B&B Hotels Polska), and 
• for the purposes of establishing the existence of a claim, pursuing claims and defence against claims, i.e. based on Article 6 section 1 point f) of the GDPR (processing necessary for the purposes of legitimate interests pursued by B&B Hotels Polska). 

Examples of supplier categories: providers of accounting and bookkeeping services, legal, administrative, financial and IT services, as well as suppliers of goods to B&B Hotels Polska.

2. If you are a client of B&B Hotels Polska (a guest at one of the hotels belonging to the B&B Hotels Polska chain), your personal data are processed for the purpose of:

• concluding and performing the agreement between you and B&B Hotels Polska for the provision of hotel services (including the processing of data for hotel bookings or accounting and financial operations) and examining any complaints, i.e. based on Article 6 section 1 point b) of the GDPR (processing necessary to perform the contract), 
• exercising the obligations imposed on B&B Hotels Polska under the generally applicable laws (in particular for the purpose of making data available to public administration bodies, in situations specified by law), i.e. based on Article 6 section 1 point c) of the GDPR (processing necessary to fulfil the legal obligation of B&B Hotels Polska),
• establishing the existence of a claim, pursuing claims and defence against claims; in connection with the processing of data in the form of video surveillance records in order to ensure the security of people and property in the hotels of B&B Hotels Polska and to improve the user experience, i.e. based on Article 6 section 1 point f) of the GDPR (processing necessary for the purposes of legitimate interests pursued by B&B Hotels Polska), and
• creating and managing your user account on our website available at https://www.hotel-bb.com (if you have such an account), managing your membership in the loyalty programme (if you are a member of one of our loyalty programmes, e.g. E-Club) as well as for marketing purposes, in particular by sending you commercial communications, i.e. based on Article 6 section 1 point a) of the GDPR (consent of the data subject). 

3. If you are a candidate for an employee of B&B Hotels Polska (an applicant for a job at B&B Hotels Polska), your personal data are processed for the purpose of conducting the recruitment process(s) for the conclusion of an employment contract or a civil law contract between you and B&B Hotels Polska, i.e. based on Article 6 section 1 point a) of the GDPR (consent of the data subject).
4. If you are a potential business or commercial partner (we maintain a B2B relationship outside of the contractual relationship), your personal data are processed for business purposes (for the purpose of establishing a professional relationship, making an offer for co-operation, trading, exchanging business information or seeking mutual economic advantages, i.e. based on Article 6 section 1 point a) of the GDPR (consent of the data subject) expressed by handing in a business card, orally during a meeting or telephone conversation, or by exchanging electronic correspondence or based on Article 6 section 4 of the GDPR (if data is acquired indirectly, i.e. by a third party providing B&B Hotels Polska with your business contact).
5. If you are a potential seller of real estate that B&B Hotels Polska is interested in acquiring, or a potential buyer of real estate that B&B Hotels Polska is interested in selling, your personal data are processed for business purposes (to contact you and to make an offer to buy or sell real estate, i.e. based on Article 6 section 1 point a) of the GDPR (consent of the data subject), expressed by handing in a business card, orally during a meeting or telephone conversation, or by exchanging electronic correspondence, i.e. based on Article 6 section 4 of the GDPR (if data is acquired indirectly, i.e. by a third party, such as a real estate agent, providing B&B Hotels Polska with your business contact). However, if a proposal to sell or purchase real estate is sent between you and B&B Hotels Polska, and is accepted, then your personal data will be processed by B&B Hotels Polska in order to take the necessary actions before the conclusion of a contract for the sale of the real estate (e.g. preparation and subsequent conclusion of a contract in the form of a notarial deed), i.e. based on Article 6 section 1 point b) of the GDPR.

Providing the data for these purposes is voluntary, but a refusal to provide such data will make it impossible to:

• conclude an agreement (and consequently enter into co-operation with B&B Hotels Polska) if you are a supplier of goods or services to B&B Hotels Polska;
• conclude a contract for the provision of hotel services (and consequently book hotel accommodation), or will make it impossible to create and manage your user account on our website available at https://www.hotel-bb.com (if you have such an account), to manage your membership in the loyalty programme (if you are a member of one of our loyalty programs, e.g. E-Club), or to receive commercial information if you are a client of B&B Hotels Polska;
• participate in any recruitment process(s), if you are a candidate for an employee of B&B Hotels Polska;
• establish a business or commercial relationship if you are a potential business or commercial partner, or a potential seller of real estate that B&B Hotels Polska is interested in acquiring, or a potential buyer of real estate that B&B Hotels Polska is interested in selling.

Your data will not be processed automatically, regardless of the purpose of the processing, including in particular in the form of profiling.

Your data will be processed for the purposes indicated above and for the following periods, namely:

• if you are a supplier of goods or services to B&B Hotels Polska – for the time of performing your contract and until the expiry of the periods of limitation on claims that may arise under your contract, the expiry of any warranty periods and/or for the periods arising under the generally applicable laws (i.e. regarding the periods for obligatory keeping of accounting documents);
• if you are a client of B&B Hotels Polska – for the time of performing your contract and until the expiry of the periods of limitation on claims that may arise under your contract, and thereafter for the periods required under the generally applicable laws (e.g. regarding the periods for obligatory keeping of accounting documents), as well as, if the processing of personal data is based on your consent, until it is withdrawn; 
• if you are a candidate for an employee of B&B Hotels Polska – until the end of the recruitment process (if the scope of consent covered the processing of personal data for the purposes of the given recruitment process) or recruitment processes (if the scope of consent covered the processing of personal data for the purposes of future recruitment processes conducted by B&B Hotels Polska);
• if you are a potential business or commercial partner – until you withdraw your consent for the processing of your personal data;
• if you are a potential seller of property that B&B Hotels Polska is interested in acquiring, or a potential buyer of property that B&B Hotels Polska is interested in selling – until you withdraw your consent to the processing of your personal data (if, for example, you hand in your business card and subsequently request to delete your data) or until the real estate sale agreement is performed (if any such agreement is concluded between you and B&B Hotels Polska), and until the lapse of the periods of limitation for claims that may arise under such an agreement, the expiry of warranty periods and/or for the periods arising under the generally applicable laws (e.g. regarding the periods for obligatory keeping of accounting documents).

B&B Hotels Polska may make your personal data available to entities providing the following services to B&B Hotels Polska: office administration, legal, accounting, financial or IT services, or to entities authorised to receive your data in cases provided for by the generally applicable laws.

You have the right to request access to your personal data, to rectify and/or erase them, and/or restrict the processing of your personal data, as well as the right to object to the processing, the right to transfer your data and the right to lodge a complaint with a supervisory authority (which, in Poland, is the President of the Data Protection Office, Polish: Prezes Urzędu Ochrony Danych Osobowych), whereby the exercise of some of these rights may be limited by the contents of the contractual relationship between you and B&B Hotels Polska, or by the obligations imposed on B&B Hotels Polska by the generally applicable laws.

If the processing is based on consent, you may also withdraw it at any time without compromising the lawfulness of processing carried out on the basis of your consent before its withdrawal.