You arrive at your destination, but before you enter the cottage or hotel room, you must complete the formalities related to your stay. A friendly lady at the reception asks you to fill out a form containing personal data of your family (first names, last names, dates of birth, address, PESEL numbers), checks your ID, or – horror of horrors! – makes a copy of it. You want to get this over with as quickly as possible, so you also provide your phone number and email address, sign, and… after receiving the key to your room, you rush to unpack.
Or
While in Rhodes, you want to enjoy the charms of the island, so you rent a car or purchase an optional excursion from a local travel agency. Or perhaps you prefer a boat? Again, the procedure of providing personal data begins, showing documents, or – horror of horrors! – you leave them in deposit. Just quickly and efficiently, because you want to start exploring.
Stop!
Did you pay attention to whether there was an information clause available at the reception desk/on the form/in the rental agency informing you about the data controller, the purposes and duration of data processing, data recipients, and your rights related to their processing? Are you sure that the number of personal data you provided was not excessive? And for what purpose did you provide your email address?
Remember!
Holidays do not exempt us from protecting our data and that of our loved ones. On the contrary, it is a time when thieves do not sleep, and you have the right to know what happens to your data and to whom it will be transferred, in order to avoid unwanted credit or impersonation on social media. Therefore, you have the right to:
-
access your data and receive a copy of it,
-
rectify (correct) your data,
-
delete personal data,
-
restrict data processing,
-
transfer data if the legal basis for processing is consent or a contract,
-
withdraw consent to data processing when it constitutes the basis for data processing, provided that this does not affect the processing carried out prior to the withdrawal,
-
object to the processing of your personal data if the legal basis for processing is the legitimate interest of the data controller,
-
file a complaint with the President of the Polish Data Protection Authority.
PS. It is better to post photos on social media after returning from vacation, so that no uninvited guest can peek into our home during our absence :)
