EN
EN
EN

Video monitoring

INFORMATION CLAUSE

PURPOSE: INFORMATION TO PEOPLE FOR THE OPERATION OF THE VIDEO SURVEILLANCE SYSTEM AT THE ADMINISTRATOR Dear Sir/ Madam, Pursuant to Article 13(1) and (2) of the Regulation of the European Parliament and of the Council(EU) of 27th April, 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC hereinafter referred to as RODO, we inform you that:

1 The administrator of your personal data processed on the basis of video surveillance without sound recording is the company Malinowe Hotele Sp. z o.o. with its registered office in Solec-Zdrój (28-131) at ul. Leśna 7, NIP: 678-14-01-345, REGON: 351061573.

2. The company Malinowe Hotele Sp. z o. o. in Solec-Zdrój includes the following entities: - Malinowy Zdrój Hotel**** Medical Spa - Malinowy Raj Mineral Hotel**** - Malinowy Dwór Hotel ****Medical Spa - Baseny Mineralne Solec-Zdrój - Balneocosmetics

3. The contact person in matters related to the processing of your personal data and the exercise of rights arising from the GDPR is the Data Protection Inspector - Ms. Marta Krajewska. Contact with the Data Protection Inspector is possible at the e-mail address: iod@malinowehotele.pl or by writing to the address indicated in point 1 above.

4. Video monitoring is carried out in individual facilities by the Administrator in order to ensure the safety of people staying in the monitored area (including the safety of employees) and to protect the property.

5. Monitored places have been marked and the list of monitored places is available in each entity on the information board at the entrance to the facility.

6. Regarding video monitoring, you can contact: a) by letter: Malinowe Hotele Sp. z o. o. 28-131 Solec Zdrój, ul. Leśna

7. b) via e-mail: jamrozy@malinowyzdroj.plc) by phone: 48 41370 40 00 7. Malinowe Hotele Sp. z o. o. for evidentiary purposes, secures events recorded by the video monitoring system that, among others, threaten security, destruction and theft of property: a) at the request of third parties; b) at the request of the authorities conducting the proceedings; c) at the request of the Management Board of the Data Controller

8. Each event recorded by video monitoring is secured upon a written request submitted to the Data Administrator. Secured data from video monitoring is made available only to authorities conducting proceedings regarding the registered event, e.g. the police, prosecutor's office, courts that operate on the basis of separate legal provisions.

9. The legal basis for the processing of personal data from monitoring is Art. 6 section 1, letter f) General Data Protection Regulation (GDPR), and Art. 111 of the Act of 10th May, 2018 on the protection of personal data (Journal of Laws of 2018, item 1000, as amended).

10. The scope of data processed by the Administrator on the basis of video monitoring: silhouette/figure and car registration numbers.

11. Monitoring records will be stored until they are overwritten (depending on the of the recordings) for a maximum of 30 days or until the proceedings conducted under the law are legally concluded.

12. You have the right to access the recordings only in justified cases.

13. Your data will not be transferred to a third country or international organization. 14. You have the right to lodge a complaint with the supervisory body - the President of the Office for Personal Data Protection (to the address of the Office for Personal Data Protection, ul. Stawki 2, 00 - 193 Warsaw), if you consider that the processing of your personal data regarding, violates the provisions of the General Data Protection Regulation. 15. Personal data processed via video monitoring and made available will not be subject to automated decision-making, including decisions resulting from profiling. We also inform you that: The Administrator makes every effort to provide all physical, technical and organizational measures to protect personal data against accidental or intentional destruction, accidental loss, change, unauthorized disclosure, use or access, in accordance with all applicable regulations.