Privacy and cookie policy

[to be added: draft: to be completed and reviewed by a lawyer before publication]

1. Controller

The data controller is [to be added: full company name, address, tax ID]. Contact: kontakt@mazuryprzygoda.pl, phone +48 509 979 863.

2. What data and why

Booking and payment: name, phone, email, notes, date and amounts. Purpose: entering into and performing the contract (GDPR art. 6(1)(b)) and accounting obligations (art. 6(1)(c)).

Event enquiries, voucher orders and the contact form: the data you provide. Purpose: replying and preparing an offer (art. 6(1)(b) and (f)).

Analytics and marketing: only with your consent in the cookie banner (art. 6(1)(a)).

3. Who receives the data

Cloudflare (website and booking system hosting), Google (booking calendar and sheet, Google Analytics with consent; the Google map only after you click), Resend (email delivery), PayPro S.A. Przelewy24 (payments), Meta (pixel, only with consent).

Some of these companies process data outside the European Economic Area: [to be added: transfer basis, e.g. European Commission decision or standard contractual clauses].

4. How long

[to be added: retention periods: bookings and accounting records, enquiries, messages, system log]

5. Your rights

You have the right to access, rectify, erase, restrict and port your data, to object, and to withdraw consent at any time.

You can lodge a complaint with the Polish data protection authority (Prezes UODO).

6. Cookies

Essential: remembering your choice in the cookie banner (browser storage).

Analytics (Google Analytics) and marketing (Google, Meta): only with consent. Change your choice at any time with "Cookie settings" in the footer.