Privacy policy

Data controller

The data controller is RSYSTEM Rafał Siennicki, ul. Kraszewskiego 11, 05-270 Marki, Poland, NIP: PL 759-144-33-29.

Contact: carpediem.mazury@gmail.com, +48 605 433 613.

What data we collect

We may process data provided during contact, booking or check-in: name, phone number, e-mail, invoice details (if required).

The website may also collect technical data such as IP address, browser data and cookies.

Purpose and legal basis

We process data to handle enquiries and bookings, contact guests, fulfil payment and accounting obligations, and improve the website.

Legal bases: contract performance (Art. 6(1)(b) GDPR), legal obligations (Art. 6(1)(c) GDPR), legitimate interests — analytics (Art. 6(1)(f) GDPR), consent — analytics cookies (Art. 6(1)(a) GDPR).

Recipients

Data may be shared with: hosting provider, e-mail service provider, contact form processor, web analytics provider (only after cookie consent) and booking system operator.

Data may be processed within the EEA or with appropriate GDPR safeguards.

Retention

We retain data for as long as necessary to fulfil the booking and contact, as required by tax and accounting regulations, or until consent is withdrawn — where consent is the legal basis.

Your rights

You have the right to access, rectify, erase and restrict processing, to object, to data portability, and to lodge a complaint with the Polish DPA (PUODO).

Supervisory authority: Prezes UODO, ul. Stawki 2, 00-193 Warsaw, Poland.

Cookies

The site uses essential cookies required for operation and Google Analytics 4 analytics cookies — only after user consent.

You may change your cookie settings in your browser at any time.