Privacy Policy

§1. Data Controller

The controller of your personal data is:

• Name: Karolina Zbróg
• Address: Piłsudskiego 61A, 84-230 Rumia
• Email: kontakt@cichyzaulek.pl
• Phone: +48 453 310 493

(hereinafter referred to as the "Controller").

§2. What data do we collect and for what purpose?

§3. CCTV Monitoring

• CCTV monitoring is installed on the property in common areas (i.e., building entrance, stairwell, corridors, gazebo, driveway – where applicable).
• The interiors of the apartments are not monitored.
• The monitoring operates 24 hours a day and serves exclusively to protect property and ensure guest safety.
• Recordings may be stored for a period of 14 days, after which they are automatically deleted, unless they serve as evidence in proceedings (in which case they are kept until the final conclusion of the case).
• Access to the monitoring preview is available only to authorized persons (the Controller and, where applicable, the entity providing monitoring services).
• In the event of an incident (e.g., theft, property damage), recordings may be made available to the relevant authorities (police, prosecutor's office) in accordance with legal provisions.

§4. Who do we share data with?

Your personal data may be shared exclusively with:

• entities providing services on behalf of the Controller (e.g., cleaning service, accounting, monitoring service provider) – based on data processing agreements,
• authorized state authorities (e.g., police, tax office) – to the extent and in accordance with the law,
• hosting company storing data (if we use an online reservation system).

All entities to whom we entrust data are obliged to maintain confidentiality and provide adequate data security.

§5. How long do we keep data?

• Reservation and stay data: 5 years from the end of the stay (tax reasons and claim pursuit).
• Monitoring recordings: 14 days (unless they constitute evidence – then longer).
• Registration data (ID, passport, etc.): in accordance with the Hotel Services Act – up to 6 months after the end of the stay.
• Contact data (email, phone) for marketing purposes: until consent is withdrawn (if given).

§6. What rights do you have?

In connection with the processing of your personal data, you have the following rights:

• Right of access to data – you may ask for information on what data we hold.
• Right to rectification – you may correct inaccurate data.
• Right to erasure (the "right to be forgotten") – you may request the deletion of data if it is no longer needed for the purposes for which it was collected (except for data required by law, e.g., guest registration).
• Right to restriction of processing – you may request the restriction of data processing in certain situations.
• Right to data portability – you may receive your data in a machine-readable format.
• Right to object – to processing based on the legitimate interest of the Controller (e.g., monitoring).
• Right to withdraw consent – if processing is based on consent (e.g., marketing), you may withdraw it at any time, which does not affect the lawfulness of processing before withdrawal.

To exercise the above rights, contact the Controller:

§7. Right to lodge a complaint

If you believe that your personal data is being processed in violation of the law, you have the right to lodge a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw).

§8. Legal basis (for completeness of information)

GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data.

The processing of data for guest registration purposes arises from the Act of 29 August 1997 on Hotel Services (Articles 20 and 20a).

§9. Final provisions

• This Privacy Policy enters into force on the date it is made available to guests.
• The Controller reserves the right to amend the Privacy Policy. Guests will be informed of changes by posting a new version in a visible location at the property or by electronic notification.