Privacy policy

Data controller

The controller is Jakub Suski, tax ID (NIP) 735-27-99-098, ul. Władysława Orkana 23, 34-424 Szaflary, Poland. Data enquiries: recepcja@nowotarska25.pl, +48 736 280 280.

Website and statistics

Without your consent this site does not store cookies. It has no forms either. We count visits with Cloudflare Web Analytics, which according to its provider uses no cookies and does not track users across sites. We see aggregate data: pages visited, traffic source, country, device type and page speed.

Cloudflare also processes your IP address to deliver the site and protect it from attacks. The legal basis is our legitimate interest in running, securing and improving the site (Art. 6(1)(f) GDPR). You may object by writing to the address above.

Cookies with your consent

Only if you agree do we switch on: Google (Google Analytics). They measure traffic, clicks on booking, phone and e-mail links, and the results of our marketing. The legal basis is your consent (Art. 6(1)(a) GDPR). These companies may transfer data outside the European Economic Area under the mechanisms provided for in the GDPR.

We keep your choice in your browser's storage so that we do not ask again. You can withdraw consent at any time through “Cookie settings” in the page footer. This does not affect the lawfulness of earlier processing.

Booking and stay

The “Check availability” button leads to the Guestsage booking engine, which runs on a separate domain with its own cookie settings. For bookings and the online registration card we process the data needed to conclude and perform the contract and for accounting: name, contact details, dates of stay, payment details and, if you use the car park, your vehicle registration number. We send entry instructions with the door code to the e-mail address you provide.

The legal basis is the contract and legal obligations such as tax law (Art. 6(1)(b) and (c) GDPR). Providing data is voluntary, but we cannot conclude the contract without it. If you book through another service such as Booking.com, it also processes data under its own terms.

Car park

The car park by the building is shared with a public car park, and entry and exit are handled by cameras that read number plates. The rules are set out in the car park privacy policy (in Polish).

Contacting us

When you write or call, we use your data to reply and deal with your request (Art. 6(1)(b) or (f) GDPR).

Recipients of data

Data may be received by companies that serve us under contract: Cloudflare (hosting and statistics), providers of the booking system, e-mail and payments, our accounting office, and authorities entitled by law. Cloudflare operates internationally, so data may be transferred outside the European Economic Area under the mechanisms provided for in the GDPR.

How long we keep data

We keep contract data for the duration of the contract and until claims expire. We keep accounting documents for the period required by tax law, generally 5 years from the end of the tax year. We keep correspondence for as long as needed to deal with the matter.

Your rights

You have the right to access, rectify, erase, restrict and port your data, and to object to processing based on legitimate interest. You may lodge a complaint with the President of the Personal Data Protection Office (UODO) in Poland. We do not make decisions about you by solely automated means.