Privacy policy.

Who controls your data

The controller of your personal data is Klaudia Nida, host of Cembra Apartments, Szkolna 16/2, 34-500 Zakopane, Poland (private rental). For all data matters contact: book@cembrazakopane.pl, phone +48 720 866 658.

What we collect and why

We only process the data you give us yourself when enquiring or booking: name, email address, phone number, and the dates and details of your stay.

• handling your enquiry and your booking — art. 6(1)(b) GDPR (contract),
• settlements and tax obligations — art. 6(1)(c) GDPR,
• establishing or defending possible claims — art. 6(1)(f) GDPR (legitimate interest).

Who we share data with

Your data only reaches the parties we cannot handle a booking and a stay without:

• our hosting and email provider (Microhost / seohost.pl) — this site and the book@cembrazakopane.pl mailbox run there,
• Hostex — the booking system provider that bookings made on this site go through (see the section below),
• our accountant and the tax authorities — to the extent required by law.

We do not sell your data, do not share it for marketing purposes and do not profile our guests. Once we enable online payments and bookings through travel portals (Booking.com, Airbnb), the list of recipients will grow to include the payment provider and those portals — we will update this policy then.

Online booking (Hostex)

The availability search and the booking form on this site run on software by Hostex (hostex.io). The booking element loads code from Hostex servers, so as soon as you open the page Hostex may receive your IP address and basic technical details about your browser, and may store in your browser the data the booking flow needs to work.

The data you enter in the booking form — name, email address, phone number, stay dates and number of guests — is passed to Hostex and processed in its system on our behalf. We use it in the booking panel to confirm and handle your stay.

Our server also queries Hostex for availability and rates, so we can show you the real total for your stay. Those queries contain only the selected date range — none of your personal data.

Hostex may process data outside the European Economic Area. How it handles data on its side is described in the Hostex privacy policy (hostex.io/privacy-policy).

Cookies, browser storage and the map

We use no analytics or marketing cookies and run no tracking tools on this site. Your browser’s localStorage only keeps your chosen display theme (light/dark) — this does not identify you in any way.

The Location and Contact pages embed a Google map so you can see where the house is. It loads together with the page, so Google receives your IP address and basic browser data and may set its own cookies — this happens on Google’s side and under its own privacy policy (policies.google.com/privacy). We receive no data about you from the map.

The Hostex booking element works the same way — it is required to make a booking and loads with the page (described in the section above).

How long we keep data

Booking data is kept for the duration of your stay’s handling, then for the period required by law (tax settlements) or until possible claims expire. Correspondence that does not lead to a booking is deleted within a year at the latest.

Bookings made through the form on this site also remain in the Hostex system for as long as we use that service.

Your rights

Providing data is voluntary, but without it we cannot complete a booking. To exercise your rights, write to book@cembrazakopane.pl.

• access to your data and a copy of it,
• rectification, erasure or restriction of processing,
• data portability and objection to processing,
• a complaint to the Polish supervisory authority, PUODO (uodo.gov.pl).