Pursuant to Art. 13(1) of Regulation (EU) 2016/679 of 27 April 2016 (GDPR), this notice explains how we process your personal data.
1. Data controllers
The controllers of your personal data are Hotel Professionals Sp. z o.o. (KRS 0000491414, REGON 147079810, NIP 5252573212) and Hotel Professionals Management Group Sp. z o.o. (KRS 0000639470, REGON 365568864, NIP 7010620498), both with their registered office in Warsaw at al. Jerozolimskie 65/79, 00-697 Warsaw (the “Companies”).
Data protection contact: ado@hotelpros.pl, phone +48 22 630 55 10, or by post to the registered office.
2. What data we collect and how
We obtain data primarily directly from you: via the confidential briefing form (name, e-mail, company, phone and the content of your enquiry), via the market report request form (name, e-mail, company, role), and through e-mail correspondence, phone contact, business cards exchanged at meetings and events, and in connection with services performed under contracts. Some data may come from publicly available sources (Polish company registers KRS and CEIDG, or your company’s website).
3. Purposes and legal bases
We process your data to: respond to your enquiry and take steps at your request prior to entering into a contract, including preparing a proposal (Art. 6(1)(b) GDPR); verify report access requests and deliver the download link (Art. 6(1)(b) and (f) GDPR); perform concluded contracts and document their proper performance (Art. 6(1)(b) and (c) GDPR); and pursue the Companies’ legitimate interests, in particular establishing or defending legal claims and preventing form abuse (Art. 6(1)(f) GDPR). Data submitted in recruitment processes is processed on the basis of your consent (Art. 6(1)(a) GDPR).
4. Voluntary provision
Providing data is voluntary but necessary to contact us, receive a report, conclude a contract or take part in recruitment.
5. Retention
Retention depends on the purpose: correspondence and form submissions are kept for as long as needed to handle the matter and for the limitation period of potential claims; contract-related data for periods required by law (including tax and accounting rules); consent-based data until consent is withdrawn.
6. Recipients
Data may be shared with the Companies’ partners, employees and associates, and with providers of accounting, legal and IT services — including our website hosting provider (Hetzner Online GmbH, servers located in the EU) and our e-mail and productivity provider (Microsoft Ireland Operations Ltd., Microsoft 365). For visit statistics (Google Analytics), data may be transferred to Google; transfers outside the EEA rely on standard contractual clauses and the EU–US Data Privacy Framework adequacy decision.
7. Your rights
You have the right to access your data, rectify it, erase it or restrict processing, the right to data portability, the right to object, and the right to withdraw consent at any time (without affecting the lawfulness of processing carried out before withdrawal). You may also lodge a complaint with the President of the Personal Data Protection Office (PUODO, ul. Stawki 2, 00-193 Warsaw, Poland).
8. Cookies
The website uses cookies to ensure it functions properly and — via Google Analytics — to measure visit statistics anonymously. Session cookies are deleted when you close your browser; persistent cookies remain until deleted. You can manage cookies in your browser settings; restricting them may affect some site functionality.
9. Final provisions
The Companies reserve the right to amend this Privacy Policy. Amendments will be published on this page with a new version date.
Version of 08/07/2026 (replaces the version of 24/05/2018).