1. Data Controller
The controller of your personal data is Tauria Katowice Sp. z o.o., with its registered office in Katowice (40-000), Aleja Korfantego 2, entered into the Register of Entrepreneurs,
VAT ID (NIP): 6342723236, REGON: 241142549, hereinafter referred to as the “Controller”.
2. Contact regarding personal data
If you have any questions regarding the processing of your personal data, you may contact the Controller:
📧 e-mail: rezerwacje@27thfloor.pl
✉️ postal address: ul. Uniwersytecka 13, 40-007 Katowice, Poland
3. Scope of processed data
The Controller may process the following personal data:
- first and last name,
- e-mail address,
- phone number,
- any other information voluntarily provided in the message or contact form.
4. Purposes and legal basis of data processing
Your personal data is processed for the following purposes:
- Contact and correspondence – to respond to enquiries sent via the contact form, e-mail or phone
(legal basis: Article 6(1)(f) GDPR – legitimate interest of the Controller consisting in responding to enquiries). - Performance of services or conclusion of a contract – if cooperation is established
(legal basis: Article 6(1)(b) GDPR). - Marketing purposes – if you have given your consent
(legal basis: Article 6(1)(a) GDPR).
5. Data recipients
Personal data may be shared with entities providing services necessary for the operation of the Controller, in particular:
- IT, hosting and e-mail service providers,
- reservation system operators,
- marketing or legal service providers – only to the extent necessary to achieve the processing purpose.
All entities entrusted with personal data process it on the basis of data processing agreements and in accordance with GDPR regulations.
6. Data retention period
Personal data will be stored:
- for the period necessary to achieve the purpose for which it was collected,
- in the case of contact – for up to 12 months from the last contact,
- in the case of a contract – for the duration of the contract and for the period required by applicable law (e.g. tax or accounting regulations),
- in the case of marketing consent – until the consent is withdrawn.
7. Your rights
You have the right to:
- access your personal data,
- rectify your data,
- request deletion of your data (“right to be forgotten”),
- restrict processing,
- data portability,
- object to data processing,
- withdraw consent at any time (where processing is based on consent).
To exercise your rights, please contact us at: rezerwacje@27thfloor.pl
8. Right to lodge a complaint
You have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO) if you believe that the processing of your personal data violates GDPR provisions.
9. Voluntary provision of data
Providing personal data is voluntary, however necessary in order to contact us, process enquiries or conclude a contract.
10. Automated decision-making and profiling
Personal data is not used for automated decision-making or profiling.
