Privacy Policy
How we process personal data (GDPR) and use cookies.
We respect your privacy. This policy explains which personal data we process when you use www.apartament-joanna.pl, send a reservation inquiry or stay at the apartment. The Polish version is legally binding.
1. Data controller
The data controller is Joanna Koszyk, Apartament Joanna, ul. Malinowa 4, 46-042 Szczedrzyk, Poland, e-mail: joanna@apartament-joanna.pl, phone: +48 518 121 428.
2. What data we process
- Reservation inquiry form: dates of stay, number of guests, notes, e-mail address, phone number, website language, and the IP address and time of submission.
- E-mail and phone contact: the information you share with us in your message or call.
- Booking and stay: the details given in the guest registration form that are needed to conclude and perform the rental agreement and for invoicing.
- Server logs: IP address, date and time, page visited and browser type – stored automatically by the server for security purposes.
3. Purposes and legal bases
- answering your inquiry, preparing an offer and handling the booking and rental agreement (Art. 6(1)(b) GDPR),
- complying with tax and accounting obligations (Art. 6(1)(c) GDPR),
- operational communication, website security and the defence of possible claims – our legitimate interest (Art. 6(1)(f) GDPR),
- displaying Google Maps on the contact page – based on your consent (Art. 6(1)(a) GDPR).
4. Recipients
Data may be shared with providers of accounting, IT, hosting and e-mail services, and with public authorities where required by law. We do not sell data and do not use it for marketing without your explicit consent.
5. Retention
- Inquiries that do not lead to a booking – up to 12 months after the last contact.
- Booking data – for the duration of the agreement and as long as necessary to establish or defend claims.
- Accounting records – 5 years in accordance with tax law.
- Server logs – up to 30 days, unless needed to investigate a security incident.
6. Your rights
You have the right to access, rectify and erase your data, to restrict processing, to data portability and to object to processing. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before the withdrawal. You also have the right to lodge a complaint with a supervisory authority, in particular the President of the Polish Personal Data Protection Office (UODO, ul. Stawki 2, 00-193 Warsaw).
Providing your data in the form is voluntary but necessary for us to answer your inquiry. We do not use automated decision-making or profiling.
7. Cookies
This website only uses cookies that are strictly necessary for it to work. We do not use analytics or advertising tools.
| Name | Purpose | Duration |
|---|---|---|
aj_consent | remembers your choice in the cookie banner | 12 months |
PHPSESSID | reservation form session (abuse protection) | until the browser is closed |
If you choose “Accept all” or click “Show map” on the contact page, Google Maps (Google Ireland Ltd.) is loaded. Google may then set its own cookies and process your IP address, including outside the EEA – see Google’s Privacy Policy.
You can change your choice at any time via “Cookie settings” in the footer.
8. Changes
This Privacy Policy may be updated. The current version is always available on this page.
Last updated: September 2026