Privacy policy

What data we collect

We collect only the data we need to answer your enquiry and deliver your stay.

• Data given in an enquiry: name, e-mail address, optionally a phone number, the dates you have in mind and the number of guests
• Data needed to order a gift voucher: additionally the name of the person receiving it and the dedication text
• Data required to conclude and settle a contract for accommodation services, including invoicing details if you ask for an invoice
• Technical data recorded automatically by the server: IP address, date and time of the request and the type of browser

How the forms on this site work

Messages sent through the contact form and the voucher order form go to the guesthouse mailbox. We use an external e-mail service provider, which stores the correspondence on our mail servers under a data processing agreement.

We do not build a guest database out of these messages and we do not use them for profiling or marketing mailings. We answer the enquiry, and that is all.

Why and on what basis we process data

• To answer an enquiry and present an offer, on the basis of our legitimate interest, that is Article 6(1)(f) GDPR
• To conclude and perform a contract for accommodation services, that is Article 6(1)(b) GDPR
• To issue and keep accounting documents, that is Article 6(1)(c) GDPR in connection with tax law
• To pursue or defend against possible claims, that is Article 6(1)(f) GDPR

How long we keep data

Correspondence about enquiries that did not end in a booking is kept for as long as needed to handle the matter, and no longer than a year from the last contact.

Data related to a completed stay is kept for the period required by tax law, as a rule five years counted from the end of the year in which the accounting document was issued.

Who we share data with

We do not sell or share your data for marketing purposes. We do use service providers that process data on our behalf.

• The e-mail service provider hosting the guesthouse mailbox, where enquiries arrive
• The website hosting provider, that is Cloudflare, which processes technical server data
• The accounting office and entities providing bookkeeping services, in the scope of settlement documents
• The Hotres booking system, which handles stay reservations and voucher sales

The Hotres booking system

Stay reservations and voucher purchases are handled by the Hotres system, run by Hotres.pl. Clicking the booking button opens a window of that system embedded in our page.

The data entered in that window, that is name, contact details, dates of stay and the details needed for payment, goes directly to Hotres and Hotres is its recipient. We receive the booking confirmation together with the data needed to deliver it.

The system saves its own cookies, needed for the basket and to keep the booking session. They do not serve advertising profiling.

Online payments are handled by the payment operator working with the booking system. We do not store payment card data.

Cookies and external services

This site does not use its own cookies and does not run traffic analytics. There is no Google Analytics here, no advertising pixels and no profiling tools.

We do however use external services, and we say so plainly. The Hotres booking engine saves its own cookies the moment the booking window opens, as described above. The map on the contact page is embedded from Google Maps, and opening that page means a connection to Google servers and may involve cookies set by Google. Typefaces come from Google Fonts, which means your IP address is passed to Google.

If we ever launch analytics or advertising tools, a consent banner will appear and you will decide whether you agree. Until then nothing tracks you.

Your rights

In connection with the processing of your data you have a number of rights. To use them, write to willatatrzanska@gmail.com.

• The right to access your data and receive a copy of it
• The right to rectify data that is incorrect or incomplete
• The right to erasure, unless an obligation under the law stands in the way
• The right to restrict processing and the right to data portability
• The right to object to processing based on our legitimate interest
• The right to lodge a complaint with the President of the Personal Data Protection Office in Poland

Is providing data mandatory

Providing data is voluntary, but without an e-mail address or a phone number we cannot answer your enquiry, and without the data required to conclude a contract we cannot deliver the booking.

Changes to this policy

We update the policy when the way the site works or the scope of processed data changes. The date of the last update is at the top of this page.