Details supplied by the operator: UNIQSERWIS SPÓŁKA ZOO Pl. Wszystkich Swientych 8 NIP / VAT: 6762522852 Pl. Wszystkich Swientych 8
1. Data controller [COMPLETE: registered operator name, registered address, NIP/registration details, privacy contact, and DPO contact if appointed].
2. Information and purposes When the enquiry form is enabled, we receive the name, email, optional phone number, requested dates, party size, selected room and message that you provide. We use these to answer requests and take steps towards a stay (GDPR Article 6(1)(b)). Security logs and staff activity records protect the website and prevent misuse (Article 6(1)(f)); our legitimate interest is operating a secure service. Applicable accounting and other legal obligations may require separate processing (Article 6(1)(c)). [COMPLETE: actual accommodation/invoicing processes, legal bases, CCTV or other property processing, and required versus optional fields].
3. Service providers and transfers The website is designed to use Vercel hosting/Blob, Neon database and, when configured, Resend email. Staff with authorised roles can access enquiries. Weather requests are made by our server for fixed Kraków coordinates; we do not request your device location. External links to Booking.com or TikTok open services with their own privacy notices. [COMPLETE: contracted provider entities, enabled services, hosting regions, subprocessors and any transfers outside the EEA, applicable safeguards and how to obtain a copy]. Do not assume that all data remains in Poland or the EEA.
4. Retention [COMPLETE: specific retention periods or understandable criteria for enquiries, correspondence, bookings, invoices, logs, failed email jobs and backups; configure deletion accordingly]. Deleting a screen entry does not necessarily erase backups or stored media.
5. Your rights Subject to the applicable conditions, you may request access, correction, erasure, restriction and portability, and object to processing based on legitimate interests. Where consent is used, you can withdraw it without affecting earlier lawful processing. Contact the controller above. You can complain to the President of UODO: https://uodo.gov.pl.
6. For direct bookings, guest contact details, dates, room, price, accepted policies and payment references are stored in our database and available to authorised staff. Stripe processes payment details on its hosted checkout. The contact page embeds Google Maps, which receives connection data, including the IP address, when the map loads. Never send card details in messages. [COMPLETE: effective date and approved version].