Privacy policy

The Polish version is binding. This English translation is provided for information.

1. What this policy covers

1. This policy explains what personal data we collect through the Domki Albertówka website, when you book and during your stay, why, who we share it with, how long we keep it and what rights you have.
2. It fulfils the information duty under Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR).

2. The booking form on our website

1. When you send a booking request you give us: your name, phone number, e-mail address, dates, chosen cottage, number of people, whether you bring a pet and, optionally, a note. We also save the page language and the date of the request.
2. We use this data to check availability, contact you, confirm the booking and prepare your stay. The legal basis is taking steps before entering into a contract and performing it (Article 6(1)(b) GDPR).
3. Giving us your data is voluntary, but without it we cannot accept or confirm a booking.
4. To protect the form from abuse, we keep a count of requests sent from an IP address for no longer than one hour; after that the entry is deleted automatically. The basis is our legitimate interest in keeping the website secure (Article 6(1)(f) GDPR).

3. Phone, e-mail and messaging apps

1. If you call us, e-mail us, or message us on WhatsApp, Facebook or Instagram, we process the data you give us (e.g. your name, number, message) to reply and handle your booking (Article 6(1)(b) GDPR) or to answer your question (Article 6(1)(f) GDPR).
2. WhatsApp, Facebook and Instagram are owned by Meta Platforms Ireland Ltd., which processes your data under its own policies. For the statistics of our Facebook and Instagram profile we are joint controllers with Meta.

4. Your stay

1. At check-in we ask you to show an identity document to confirm the details of the person who booked and, for children, to establish who is caring for them in line with our Child Protection Standards. The basis is performing the contract and a legal obligation (Article 6(1)(b) and (c) GDPR).
2. We process the data needed for billing (e.g. receipts, local tourist tax) because tax and accounting law requires it (Article 6(1)(c) GDPR).

5. Video surveillance

1. The outdoor areas of the site (entrance, parking, pool, relaxation area and garden) are covered by video surveillance to protect property and guests' safety – our legitimate interest (Article 6(1)(f) GDPR).
2. Cameras record images only, no sound. They do not cover the inside of the cottages or private areas. The monitored area is marked with signs.
3. Recordings are kept for no longer than 7 days and then automatically overwritten. If a recording is evidence in proceedings, we keep it until those proceedings end.
4. Recordings are disclosed only to authorised bodies (e.g. the police).

6. Who we share data with

1. We use companies that process data on our behalf and on our instructions:
   1. Cloudflare, Inc. – website hosting, the booking request database and website files,
   2. Resend (resend.com) – sending e-mail notifications about requests and messages to guests,
   3. the providers of our mailboxes – receiving and storing correspondence,
   4. people and companies helping us run the website and handle bookings – only as far as needed for that help.
2. If you book through Booking.com, Booking.com B.V. also processes your data as a separate controller under its own privacy policy. We exchange only the cottages' booked dates (calendar) with Booking.com, with no guest data.
3. We may also share data with authorised bodies when the law requires it.

7. Transfers outside the European Economic Area

1. Cloudflare and Resend are based in the United States, so data may be processed outside the European Economic Area. This happens under GDPR mechanisms – the European Commission's decision on the EU–US Data Privacy Framework (Article 45 GDPR) or standard contractual clauses adopted by the Commission (Article 46 GDPR).
2. You can get a copy of the safeguards by writing to the address at the top of this policy.

8. How long we keep data

1. Booking requests that did not go ahead – up to 12 months from the request.
2. Booking and stay data – for the stay and then until the limitation period for contract claims expires.
3. Accounting documents – for the period required by tax and accounting law (as a rule 5 years from the end of the year in which the tax obligation arose).
4. Correspondence – as long as needed to handle it, and no longer than until any claims become time-barred.
5. Video recordings – up to 7 days (see point 5).
6. IP address entry in the form protection – up to 1 hour.

9. Your rights

1. You have the right to:
   1. access your data and get a copy,
   2. have your data corrected,
   3. have your data deleted when there is no longer a basis for processing it,
   4. restrict processing,
   5. data portability for data you gave us in connection with the contract,
   6. object to processing based on our legitimate interest (e.g. video surveillance),
   7. complain to the Polish supervisory authority – Prezes Urzędu Ochrony Danych Osobowych (ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl) – or to the supervisory authority in your own country.
2. To use your rights, write or call us – the contacts are at the top of this policy. We will reply without undue delay and within one month at the latest.
3. We do not make automated decisions about you and do not profile you.

10. Cookies and statistics

1. The website does not use advertising or analytics cookies or tracking tools (e.g. Google Analytics, Facebook pixel).
2. The only cookie is the login cookie for the admin panel – it concerns only the people who run the website, not guests.
3. Fonts and other website files load from our own server, not from other companies' servers. Links to Google Maps, Booking.com, Facebook, Instagram and WhatsApp lead to services that work under their own privacy policies.

11. Changes to this policy

1. We may update this policy when the law or the way we process data changes. The current version is always on this page, with its effective date at the top.

Print or save as PDF