1. Who controls your data
The controller of your personal data is Justyna Pawlikiewicz, Willa Mała Czarna, ul. Wyzwolenia 72, 43-460 Wisła, Poland. For data matters, write to kalusjus@wp.pl or call +48 660 482 304. No data protection officer has been appointed.
2. What data reaches us
This website has no form that sends data to our server and stores nothing itself. Data reaches us only when you call or send a message by WhatsApp, SMS or e-mail. This usually means your name, phone number or e-mail address, the dates of your stay, the number of guests and your message. For a booking we may also need payment details.
The enquiry “form” on the website works in your browser: it turns what you type into a message and opens it in your own app (WhatsApp, SMS or e-mail). You send the message yourself.
3. Purposes and legal bases
- replying to your enquiry and preparing an offer – Art. 6(1)(b) GDPR (steps before a contract), and for general questions Art. 6(1)(f) GDPR (our legitimate interest in replying to someone who wrote to us);
- concluding and performing the accommodation contract – Art. 6(1)(b) GDPR;
- legal obligations, e.g. accounting, tax and the local tourist tax – Art. 6(1)(c) GDPR;
- establishing, pursuing or defending claims – Art. 6(1)(f) GDPR;
- running, securing and measuring the website (sections 6 and 7) – Art. 6(1)(f) GDPR.
4. Contact channels you choose
The “Call”, “WhatsApp”, “SMS” and “E-mail” buttons open an app on your own device. WhatsApp is provided by WhatsApp Ireland Limited under its own terms (WhatsApp privacy policy). If you prefer not to use WhatsApp, you can call, text or e-mail us.
5. Who receives data
- Cloudflare, Inc. – the hosting provider and network that delivers this website, and the provider of visitor statistics (processor);
- the e-mail and telecom providers we use for contact;
- banks, for payments;
- public authorities where the law requires it (e.g. for the tourist tax or taxes).
Cloudflare also processes data in the USA, under the EU-U.S. Data Privacy Framework and standard contractual clauses.
6. Technical data when you view the website
When you open the website, Cloudflare processes your IP address, the date and time, the page address, your browser type and the referring page, in order to deliver the website and protect it from attacks. We do not export these logs and do not use them to identify anyone.
7. Visitor statistics and cookies
This website uses no cookies and no browser storage (localStorage). Fonts are served from our own server and the area map is a drawing embedded in the page. Google Maps, Apple Maps, OpenStreetMap and Facebook open only when you follow a link, under those services’ own terms.
We count visits with Cloudflare Web Analytics. A short script reads from your browser how quickly the page loaded and which page you are viewing, and sends this to Cloudflare. It stores nothing on your device, uses no cookies and, according to Cloudflare, does not build visitor profiles. We only see totals, such as how many people visited in a given week. You can block the script in your browser settings or with a script blocker; the website works the same.
8. How long we keep data
- enquiries that did not lead to a booking – up to 12 months after the last contact;
- booking data – until claims become time-barred;
- accounting and tax records – for as long as tax law requires (usually 5 years from the end of the year in which the tax became due);
- statistics – in aggregated form only.
9. Your rights
You have the right to access, rectify and erase your data, to restrict processing, to data portability, and to object to processing based on our legitimate interest. You can also lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (ul. Moniuszki 1A, 00-014 Warszawa, uodo.gov.pl).
Providing data is voluntary, but without it we cannot reply to your enquiry or accept a booking. We do not make automated decisions or profile anyone.
10. Changes
This version applies from 27 October 2026. We will announce significant changes on this page.