Domek w sam las – logo

Privacy Policy

1. General Provisions

This Privacy Policy defines the rules for processing personal data of persons using the "Domek w sam las" website available at https://domekwsamlas.pl ("Website") and contacting regarding booking a stay.

The personal data administrator is Artur Królczyk, owner of "Domek w sam las", with correspondence address: Osiedle Osobie 11A, 34-451 Ochotnica Dolna, email: kontakt@domekwsamlas.pl ("Administrator").

The Administrator makes efforts to protect Users' privacy and process personal data in accordance with applicable regulations, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council ("GDPR").

2. Scope of processed data

The Administrator may process in particular the following personal data:

Data provided voluntarily by the User in the contact / booking form:

  • first and last name,
  • email address,
  • phone number,
  • planned stay dates, number of persons,
  • message content.

Data provided in email or telephone correspondence.

Data related to settlements in case of entering into a rental agreement (e.g., invoice data, if required).

Technical data related to using the Website:

  • IP address,
  • information about web browser, operating system, language settings,
  • identifiers of cookies necessary for Website operation and cookies to which the User has consented – as described in the Cookie Policy.

3. Purposes and legal bases for processing

Personal data is processed for the following purposes:

Responding to inquiries and contacting the User

  • e.g., responding to a form message, discussing stay details, preparing an offer;
  • legal basis: Art. 6(1)(b) GDPR – taking action at the request of the data subject before entering into a contract.

Entering into and performing the cabin rental agreement (booking a stay)

  • confirming reservation, handling stay, organizational contact;
  • legal basis: Art. 6(1)(b) GDPR – performance of a contract.

Conducting accounting and tax settlements

  • issuing invoice/receipt, storing accounting documentation;
  • legal basis: Art. 6(1)(c) GDPR – legal obligation of the Administrator (tax and accounting regulations).

Pursuing claims and defense against claims

  • e.g., in case of damages to the Property or payment disputes;
  • legal basis: Art. 6(1)(f) GDPR – legitimate interest of the Administrator.

Ensuring security and proper Website operation

  • using necessary cookies, server logs, etc.;
  • legal basis: Art. 6(1)(f) GDPR – legitimate interest of the Administrator.

Analytical or statistical purposes (optionally, if analytics tools are implemented in the future)

  • analyzing Website usage to improve its operation and offer;
  • legal basis: Art. 6(1)(a) GDPR – User consent (expressed through cookie panel).

4. Data retention period

Data related to inquiries and bookings:

  • stored for the time necessary to handle the inquiry and perform the stay,
  • then for the period required by law (e.g., tax regulations) or until the limitation period for potential claims expires.

Data processed for accounting purposes:

  • stored for the period resulting from legal regulations (usually 5 years from the end of the tax year).

Data collected through cookies:

  • stored for the time specified in the settings of a given cookie or until deleted by the User (details in Cookie Policy).

Data processed based on consent:

  • stored until consent is withdrawn or the processing purpose is achieved.

5. Data recipients

Personal data may be transferred to:

Entities processing data on behalf of the Administrator:

  • hosting and IT service providers,
  • booking system providers (if used),
  • accounting office,
  • other entities supporting payment and settlement handling – only to the extent necessary to achieve a given purpose.

Public authorities and institutions authorized to receive data under legal regulations (e.g., tax offices, law enforcement – in justified cases).

When transferring data to processing entities, the Administrator enters into appropriate data processing agreements with them.

6. Rights of the data subject

The User has the following rights:

  • Right of access to data – obtaining information whether the Administrator processes their data, and if so – access to them and receiving a copy.
  • Right to rectification of data – correcting data that is incorrect or completing incomplete data.
  • Right to erasure of data ("right to be forgotten") – in cases provided for in Art. 17 GDPR, e.g., when data is no longer needed for the purposes for which it was collected.
  • Right to restriction of processing – in situations indicated in Art. 18 GDPR, e.g., during consideration of an objection.
  • Right to data portability – regarding data processed based on consent or contract, in a machine-readable format.
  • Right to object – to processing based on the Administrator's legitimate interest (e.g., pursuing claims), for reasons related to the User's particular situation.
  • Right to withdraw consent – if processing is based on consent; its withdrawal does not affect the lawfulness of processing before withdrawal.
  • Right to lodge a complaint with a supervisory authority – President of the Personal Data Protection Office, if the User believes that processing violates GDPR provisions.

To exercise the above rights, you can contact the Administrator via email: kontakt@domekwsamlas.pl.

7. Voluntary provision of data

Providing personal data in the contact / booking form is voluntary but necessary to:

  • respond to an inquiry,
  • prepare an offer,
  • make and handle a reservation.

Failure to provide data may prevent entering into a rental agreement or effective handling of an inquiry.

8. Cookies

The Website uses cookies and similar technologies.

Detailed information on the use of cookies, their types, purposes and ways of managing them are described in a separate Cookie Policy, available on the Website.

9. Data security

The Administrator applies appropriate technical and organizational measures to ensure protection of processed personal data, in particular securing them against access by unauthorized persons, loss, destruction or damage.

Only authorized persons have access to data, obliged to maintain confidentiality and trained in personal data protection.

10. Privacy Policy changes

The Administrator reserves the right to make changes to this Privacy Policy, in particular in case of:

  • changes in legal regulations,
  • changes in the way services are provided or the Website operates,
  • implementation of new technological solutions.

The updated Privacy Policy will be published on the Website along with the update date.

Continued use of the Website after changes are introduced means acceptance of the updated Privacy Policy.

We care about your privacy

We use cookies to ensure the site works properly and – with your consent – for statistics and service improvements.

Privacy Policy – Domek w sam las