1. Controller and contact

The data controller is Jakub Rusiecki, Poniatowskiego 92c, 34-700 Rabka-Zdrój, Poland. For personal-data matters, contact k.rusiecki@interia.pl.

2. Purpose and legal basis

We use the information in your inquiry to reply and take the steps you requested before entering into a contract for a stay. The legal basis is Article 6(1)(b) GDPR. This notice covers stay inquiries made through this website, by phone or by email. We handle the information in this website and CiviCRM, and through manual phone and email contact. We do not use these inquiries for marketing. An inquiry is not a booking.

3. Information we need

We process the contact details, inquiry message and information about your planned stay that you provide. The form requires at least an email address or a phone number so we can reply. Other fields are optional. Providing information is voluntary; without contact details, we cannot reply. Please do not send information that is unnecessary for handling your inquiry.

4. How long we keep information

We keep information from a stay inquiry that does not result in a booking only for as long as needed to take the steps you requested before entering into a contract, and no longer than 12 months after the last substantive contact in the same matter. We delete it earlier once it is no longer needed for those steps.

5. Your rights

You may request access to and correction of your personal data and, where the GDPR conditions apply, erasure or restriction of processing. Data portability applies within the GDPR's conditions where processing is automated and based on a contract. Contact the controller to exercise your rights. You may also complain to the President of the Polish Personal Data Protection Office; complaint information: https://uodo.gov.pl/pl/526/2464.

6. Decision-making

When handling these inquiries, we do not make decisions based solely on automated processing, including profiling.

Service providers and hosting

Hostinger provides this website's hosting and email services. Inquiry data may be handled by Hostinger and the sub-processors it uses to provide these services. The website's selected hosting location is Lithuania; its backup location is France.

Possible transfers outside the EEA

Hostinger's processing terms contemplate possible processing outside the European Economic Area. Where data is transferred to a country outside the EEA without an EU adequacy decision, Hostinger's DPA provides for EU standard contractual clauses unless another recognized lawful transfer mechanism applies. The DPA explains these terms and how to access the clauses: Hostinger DPA.