Privacy Policy

Effective from 21 October 2026. In case of any discrepancy, the Polish version prevails.

This policy explains what personal data we collect, why, who we share it with and what rights you have.

1. Data controller

The controller of your personal data is Uroczysko-BIS Sp. z o.o., ul. Traugutta 178, 42-110 Wąsosz Dolny, Poland, KRS 0000365664, NIP (tax ID) 7722370626, REGON 100765509. The company runs DL Uroczysko, ul. Uroczysko 8, 76-270 Ustka, Poland.

For any data protection matters, write to rezerwacje@uroczysko-ustka.pl or call +48 601 99 11 88.

2. What data we process and why

Enquiries (website form, e-mail, phone) – name, phone number, e-mail address, dates, number of guests and the content of your message. We use them to answer your enquiry and prepare an offer (Art. 6(1)(b) GDPR – steps prior to entering into a contract).
Booking and stay – data needed to conclude and perform the contract, including registration card data and the identity document shown at check-in, payment and invoice details. The legal basis is performance of the contract (Art. 6(1)(b) GDPR) and our legal obligations, including tax, accounting and spa town fee obligations (Art. 6(1)(c) GDPR).
Bookings via Booking.com – if you book through Booking.com, we receive from it the data needed to handle your booking. Booking.com also processes your data as a separate controller under its own privacy policy.
CCTV – the resort grounds are monitored by CCTV to keep guests safe and protect property (Art. 6(1)(f) GDPR – our legitimate interest). Rooms and studios are not monitored.
Claims – we may process data to establish, pursue or defend legal claims (Art. 6(1)(f) GDPR).
Website – the server hosting the website automatically records technical logs, including your IP address, date of visit and browser type. This keeps the website secure and working properly (Art. 6(1)(f) GDPR).

3. Who we share data with

Data may only be shared with parties that help us run the resort, and only as far as necessary:

website hosting and e-mail providers,
the provider of our booking management software (KWHotel),
Booking.com – for bookings made through it,
our accounting office and payment service providers,
public authorities where required by law, e.g. the municipality in connection with the spa town fee.

4. Google Maps

In the “Map and directions” section we show a Google map. The map loads only with your consent, given in the cookie banner or by clicking the “Show Google Map” button. Once it loads, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) receives data such as your IP address and browser information and may store cookies on your device or read cookies stored earlier. Google processes this data as a separate controller under its own privacy policy. Data may be transferred to the United States under the EU-US Data Privacy Framework.

The legal basis is your consent (Art. 6(1)(a) GDPR and Art. 399 of the Polish Electronic Communications Law). Consent is voluntary – without it the website works normally, just without the map. You can withdraw it at any time under “Cookie settings” in the page footer. Withdrawal does not affect the lawfulness of showing the map before. Cookies previously stored by Google can be deleted in your browser settings.

We run “Domki Leśne Uroczysko” profiles on Facebook and Instagram. Our website only contains plain links to these profiles – it does not load any Meta plug-ins or scripts, so simply visiting the website does not share your data with Meta.

If you visit our profiles, send us a message or comment on a post, we process the data visible to us on the platform (e.g. your profile name and the content of your message) to reply and run our profiles (Art. 6(1)(f) GDPR). We are joint controllers with Meta Platforms Ireland Limited for data used in page statistics (Art. 26 GDPR). Meta also processes your data on its own behalf – see the Meta Privacy Policy. We keep messages until the conversation ends, or, if they concern a booking, as described in section 6.

6. How long we keep data

enquiries that did not lead to a booking – up to 12 months from the last contact,
booking and stay data – for the duration of the contract and then until the limitation period for claims expires,
accounting and tax documents – 5 years from the end of the year in which the tax obligation arose,
CCTV recordings – up to 30 days, unless a recording is evidence in proceedings, in which case until they end,
server logs – for the period set by the hosting provider, no longer than needed for security purposes.

7. Your rights

You have the right to:

access your data and receive a copy,
rectify your data,
have your data erased,
restrict processing,
data portability,
object to processing based on our legitimate interest,
lodge a complaint with the Polish supervisory authority: President of the Personal Data Protection Office (Prezes UODO), ul. Stawki 2, 00-193 Warsaw, Poland.

To exercise your rights, write to rezerwacje@uroczysko-ustka.pl.

8. Do you have to provide data

Providing data is voluntary, but without it we cannot answer your enquiry or accept a booking. Providing data at check-in is required by law. We do not make automated decisions or profile you.

9. Cookies and browser storage

The website does not use analytics or advertising cookies. Fonts, images and scripts load from our own server.
We store your choice from the banner (consent or refusal) together with the date in your browser’s storage, so that we do not ask on every visit. This entry is necessary for the website to work, stays on your device and is not sent to us or anyone else. You can delete it by clearing the site data in your browser.
Google cookies can only appear after you consent to the map (see section 4).
The accommodation search does not store anything. The selected dates and number of guests appear only in the address of the results page.

10. Changes to this policy

We may update this policy, e.g. when the law or the way the website works changes. The current version is always available on this page.