​​1. Data Controller

The Data Controller of personal data is Edyta Patacz, operating in Gąski (76-034).
Contact details: +48 693 108 099 edzia1703@o2.pl

2. Contact Regarding Personal Data

In matters concerning the processing of personal data, you may contact the Data Controller: 
edzia1703@o2.pl +48 693 108 099

3. Scope and Purpose of Data Processing

Personal data is processed exclusively for purposes related to handling inquiries and accommodation bookings. The Data Controller may process the following data: full name, email address, phone number, information regarding the date and details of the stay. Purposes of data processing: responding to inquiries submitted via the contact form or email, handling bookings made directly, contacting the client in matters related to the booking.

4. Legal Basis for Processing

Data is processed in accordance with Article 6(1)(b) of the GDPR – for the purpose of executing a contract (booking or accommodation inquiry), and Article 6(1)(f) of the GDPR – the legitimate interest of the Data Controller consisting of correspondence handling.

5. Data Retention Period

Personal data is stored: for the period necessary to handle the inquiry and potential booking, for no longer than 12 months from the last contact, booking-related data – in accordance with accounting and tax regulations (if applicable to invoicing).

6. Data Recipients

Data may be entrusted only to trusted entities providing services on behalf of the Data Controller: website hosting provider, email service operator, Booking.com B.V. – for bookings made through the Booking portal. Data is not transferred to third countries (outside the EU).

7. User Rights

Every person whose data is processed has the right to: access their data, rectify or supplement their data, erasure, restriction of processing, object to processing, data portability, lodge a complaint with the President of the Personal Data Protection Office (UODO).

8. Voluntary Nature of Data Provision

Providing personal data is voluntary, but necessary to handle an inquiry or make a booking.

9. Data Security

The Data Controller implements technical and organizational measures ensuring the protection of personal data, including an encrypted SSL connection and protection of access to the mailbox receiving messages from the form.

10. Cookies and External Tools

The website uses cookies for its proper functioning and to provide basic features. Cookies are small text files stored in the user's browser.

Types of cookies used: technical cookies – essential for the website's operation, functional cookies – enable remembering user preferences (e.g., language, page appearance), external cookies – originating from services such as Google Maps or Google Calendar, which may store data about location or IP address.

Purposes of using cookies: correct display of the website and its features, presentation of the facility's location map (Google Maps), presentation of available dates in the calendar (Google Calendar).

The user can at any time: change cookie settings in their browser, delete stored cookies, block their storage.

A cookie banner may appear on the website, informing about their use and allowing the acceptance or rejection of non-essential cookies. Using the website without changing browser settings signifies consent to the use of technical cookies.

11. Changes to the Privacy Policy

The Data Controller reserves the right to introduce changes to this Policy in the event of changes in legal regulations or the website's operation methods. The new version of the document will be published on this same page.