Privacy policy
Last updated: 05.06.2026
1. Data Controller
The controller of your personal data is [Company / Name], [Street and number], [Postal code and city], Poland, Tax ID (NIP): [NIP], Business Reg. No. (REGON): [REGON].
In all matters relating to the processing of your personal data you may contact us by e-mail: kontakt@krewniakapart.pl.
2. What data we process and why
We process the personal data you provide through the contact form (name, e-mail address and the content of your message), as well as data needed to handle a booking enquiry.
- Handling your enquiry / booking — legal basis: Art. 6(1)(b) GDPR (steps prior to entering into a contract) and Art. 6(1)(f) GDPR (our legitimate interest in replying to enquiries).
- Website analytics — only if you consent — legal basis: Art. 6(1)(a) GDPR (your consent).
- Security and spam protection — the contact form is protected by Google reCAPTCHA, which analyses traffic to tell humans from bots — legal basis: Art. 6(1)(f) GDPR (our legitimate interest in protecting the website against abuse and spam).
3. Retention period
Enquiry correspondence is kept for the time needed to handle the matter and afterwards for the period required to establish, exercise or defend legal claims. Analytics data is retained for the period set in Google Analytics. Consent-based data is processed until you withdraw consent.
4. Recipients of the data
Your data may be entrusted to entities supporting our operations: the hosting provider, the e-mail provider, and — for analytics, subject to your consent — Google Ireland Ltd. (Google Analytics 4). Using Google Analytics may involve the transfer of data outside the European Economic Area, based on the safeguards applied by Google.
The contact form uses Google reCAPTCHA (provided by Google) to protect against spam. As a result, data such as your IP address and information about how you interact with the site may be sent to Google, including outside the European Economic Area, based on the safeguards applied by Google. Use of reCAPTCHA is subject to Google's privacy policy and terms of service.
5. Your rights
You have the right to: access your data and obtain a copy, rectify it, erase it, restrict processing, object to processing, and data portability. Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.
You also have the right to lodge a complaint with the supervisory authority — the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw.
6. Cookies
Our website uses cookies and similar technologies:
- Necessary cookies — required for the site to function (e.g. remembering your cookie choice and security). They do not require consent.
- Analytics cookies — Google Analytics 4 (GA4), used to understand how the site is used. They are loaded only after you give consent. Until then, Google Consent Mode keeps analytics storage disabled.
- Security cookies (reCAPTCHA) — set by Google reCAPTCHA to protect the contact form against spam and abuse. For security reasons they operate regardless of your analytics choice.
List of cookies and similar technologies used:
| Name | Provider | Type | Purpose | Storage period |
|---|---|---|---|---|
| apartamenty_krewniak_session | Krewniak Apartments | Necessary | Maintains the user session (e.g. contact form) | 120 minutes |
| XSRF-TOKEN | Krewniak Apartments | Necessary | Protection against CSRF attacks | 120 minutes |
| cookie_consent_v1 | Krewniak Apartments | Necessary | Stores your cookie choice (browser local storage) | Until cleared |
| _GRECAPTCHA | Necessary (security) | Protects the contact form against spam and bots (Google reCAPTCHA) | 6 months | |
| _ga | Analytics (after consent) | Distinguishes individual users | 2 years | |
| _ga_<ID> | Analytics (after consent) | Persists Google Analytics 4 session state | 2 years |
You can change or withdraw your choice at any time using the “Settings” link in the footer, or by clearing cookies and local storage in your browser settings.
7. Is providing data voluntary?
Providing your data is voluntary, but the data marked in the contact form is necessary for us to reply to your enquiry. Consent to analytics is fully voluntary and does not affect the use of the website.