Your personal data shall be processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as "GDPR").

1. The Administrator of your personal data is HOTELE GROCHOWSKA Sp. z o.o. (Administrator).
2. The Administrator has appointed a person who can be contacted on all matters related to the protection of your personal data by e-mail at iodo@trybonppi.pl.
3. Your personal data will be processed for the purposes of:
   1. direct marketing of products and services on the basis of your consent, where such consent has been given by you (legal basis: Article 6(1)(a) GDPR), or
   2. to take action at your request prior to entering into a contract, if such a request was made by you (legal basis: Article 6(1)(b) GDPR), or
   3. to conclude and perform a contract (legal basis: Article 6(1)(b) GDPR), or
   4. to arrange an appointment with you concerning the services provided and products offered by the Administrator, being a legitimate interest of the Administrator (legal basis: Article 6(1)(f) GDPR),
   5. if you consent to your data being made available for disclosure to a credit advisor who will present you with credit products and provide you with advice on the choice of investment loans from the Administrator's offer.
4. The categories of personal data processed include contact details, e.g. name, telephone number, e-mail address, information concerning your property purchase preferences, e.g. location of the building, floor area of the property, etc.
5. Your personal data will be processed:
   1. until you withdraw your consent to its processing, if it is based on your consent,
   2. until action is taken in relation to the conclusion of the contract and, if concluded, until the statute of limitations for potential claims under the contract,
   3. regarding the implementation of the Administrator's legitimate interest until the date on which an objection is lodged or the existence of such justification ceases.
6. The recipients of your personal data may be:
   1. employees and associates of the Administrator,
   2. entities entitled to receive them on the basis of legal regulations (e.g. courts, bailiffs, state administration bodies, supervisory bodies),
   3. entities providing services to the Administrator, in particular IT, marketing, legal and telecommunication services, to whom the Administrator entrusts the processing of personal data,d. institutions financing the investment and keeping an escrow account,
   4. financial intermediaries, participants in the investment process such as the general investment contractor, subcontractors, entities executing interior finishing works,
   5. notary offices, before which contracts will be concluded with you,
   6. property managers,
   7. entities with capital ties to the Administrator.
7. Your personal data will not be transferred to third countries, i.e. to countries outside the European Economic Area.
8. You have the right to request access to your personal data, their rectification, deletion, restriction of their processing, as well as the right to data transfer.
9. If the processing of your personal data is based on a legitimate interest, you have the right to object to the processing. You also have the right to object to the processing of your personal data for direct marketing purposes.
10. To the extent that you have given your consent to the processing of your personal data, you have the right to withdraw your consent to the processing of your data at any time without affecting the lawfulness of the processing carried out on the basis of your consent prior to its withdrawal.
11. You have the right to lodge a complaint with the supervisory authority in charge of personal data protection (President of the Office for Personal Data Protection).
12. The provision of personal data is voluntary. The consequence of failing to provide this data will be the inability to process your personal data for the purpose of direct marketing of products and services, or to take action at your request before concluding a contract, or to arrange a meeting with you regarding the services and products offered by the Administrator. (The information in this section is intended only for persons whose personal data is obtained directly from those persons).
13. Personal data will not be processed on the basis of automated decision-making, and personal data will not be subject to profiling.