INFORMATION CLAUSE FOR CLIENTS OF CELESTIN RESIDENCE

Last update: February 2026

This document provides detailed information on how your personal data is processed, whether you are staying at our Reisdence, visiting our website, or are within the range of our video surveillance system.

Pursuant to Article 13(1) and (2) of Regulation (EU) 2016/679 (GDPR), we inform you that:

1. Data Controller: The controller of your personal data is Sunshine Gdansk Sp. z o.o. with its registered office at ul. Lubicz 9, 31-034 Krakow (tel.: +48 12 306 5500, e-mail: info@sunshineproperty.pl).

2. Data Protection Officer (DPO): We have appointed a Data Protection Officer who can be contacted via e-mail at info@sunshineproperty.pl or by mail at the registered office address with the annotation "DPO".

3. Purposes and Legal Grounds for Processing: Your personal data will be processed for the purpose of:

• concluding and performing the accommodation service agreement (Art. 6(1)(b) GDPR);
• complying with legal obligations of the Controller, e.g., issuing invoices, tax regulations (Art. 6(1)(c) GDPR);
• pursuing potential claims, which constitutes our legitimate interest (Art. 6(1)(f) GDPR);
• marketing and profiling – solely based on voluntarily granted consent (Art. 6(1)(a) GDPR). Consent may be withdrawn at any time.

4. Data Recipients: Recipients of the data may include entities providing management services, IT support, software suppliers, accounting firms, transport companies (at the guest's request), and law firms.

5. Retention Period: Data will be processed for the period necessary to perform the agreement, and subsequently until the expiry of the limitation period for civil law or tax claims (whichever occurs later). Data processed based on consent will be stored until the consent is withdrawn.

6. Your Rights: You have the right to access your data, rectify it, erase it, restrict processing, the right to data portability, and the right to object. You also have the right to lodge a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, Poland).

7. Voluntary Provision of Data: Providing data is voluntary, but necessary to conclude and perform the accommodation agreement.

8. Profiling: Your data may be subject to profiling to tailor marketing offers to your preferences (e.g., based on stay history), provided that consent has been granted.

INFORMATION REGARDING THE CELESTINRESIDENCE.PL WEBSITE

1. General Information: The website collects information about users through voluntarily entered data in forms and through cookies stored on end devices.

2. Cookies: The website uses cookies for:

• creating statistics (Google Analytics);
• maintaining the user session (no need to log in again);
• tailoring advertising content in networks such as Google. Users can change their browser settings at any time to block cookies, which may, however, affect the functionality of the website.

3. Server Logs: Certain behaviors (request time, IP address, browser type) are logged on the server solely for technical and administrative purposes. This data is not associated with specific individuals.

INFORMATION CLAUSE REGARDING VIDEO SURVEILLANCE

Celestin Residence is covered by video surveillance to ensure the safety of guests and employees and to protect property (Art. 6(1)(f) GDPR).

1. Monitored Area: Entrances/exits, reception, restaurant, corridors, communication routes, and the area around the building.

2. Recording Rules: The system records images only (no audio). Recordings are stored for 14 days, after which they are automatically overwritten.

3. Protection of Recordings: In the event of an incident, a recording may be secured at the request of authorized authorities (e.g., the Police) and stored until the conclusion of the proceedings.

4. Rights of Individuals: You have the right to access the recordings (provided it does not violate the rights of third parties), the right to erase them, and the right to lodge a complaint with the President of the Personal Data Protection Office.