Miodowy Zakątek Kamianna · Beskid Sądecki 9.8Booking.com

Privacy policy

This privacy policy describes how personal data is processed on the miodowy-zakatek.pl website, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation, GDPR).

1. Data controller

The controller of personal data is Miodowy Zakątek, Kamianna 18H, 33-336 Łabowa, Poland, VAT ID PL 8710000634, REGON 850016365 (the “Controller”).

You can contact the Controller regarding personal data by phone at +48 505 125 334 or via the contact form.

The Controller processes the data provided in the contact form: name, e-mail address and, if provided, phone number, planned dates of stay, number of guests and the content of the message. The data is processed in order to:

  • answer your enquiry and correspond with you – on the basis of your consent (Art. 6(1)(a) GDPR) and the Controller’s legitimate interest (Art. 6(1)(f) GDPR);
  • take steps at your request prior to entering into a contract, including preparing a booking (Art. 6(1)(b) GDPR);
  • establish, exercise or defend legal claims (Art. 6(1)(f) GDPR);
  • ensure the security of the website, including protecting the form against spam (Art. 6(1)(f) GDPR).

3. Voluntary provision of data

Providing the data is voluntary but necessary to answer your enquiry.

4. Recipients of data

Data may be transferred to entities processing it on behalf of the Controller, in particular:

  • OVH SAS – website hosting provider (servers in the European Union);
  • Google Ireland Ltd. / Google LLC – e-mail service provider (Gmail) to which messages from the form are sent;
  • Cloudflare, Inc. – provider of the Turnstile service protecting the form against spam.

Data is not sold or shared with other parties for marketing purposes.

5. Transfers outside the European Economic Area

Due to the use of Google and Cloudflare services, data may be transferred to the United States. Such transfers are based on the European Commission’s adequacy decision (EU-U.S. Data Privacy Framework) or on standard contractual clauses approved by the European Commission.

6. Data retention

Data is stored for as long as necessary to handle the enquiry and, if a contract is concluded, for the duration of its performance. Afterwards, data may be stored until any claims become time-barred or consent is withdrawn, unless the law requires longer storage. The website server does not store the content of messages sent via the form.

7. Your rights

You have the right to:

  • access your data and receive a copy of it;
  • rectify your data;
  • erase your data;
  • restrict the processing of your data;
  • data portability;
  • object to processing based on legitimate interest;
  • withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal;
  • lodge a complaint with the supervisory authority – the President of the Personal Data Protection Office (UODO, ul. Stawki 2, 00-193 Warsaw, Poland).

8. Automated decision-making

Data is not used for automated decision-making or profiling.

9. Cookies

The website does not use cookies or analytics tools. The Cloudflare Turnstile service runs only with the contact form to protect it against spam. YouTube videos are loaded only after you click, in privacy-enhanced mode (youtube-nocookie.com).

10. Changes to the privacy policy

The Controller may update this privacy policy. The current version is always available on this page.

Last updated: October 2026