1. Data controller
The controller of personal data submitted through this website is Krystian Stępień, who runs Forest Inn Berest, Berest 32, 33-380 Krynica-Zdrój, Poland. Contact for data protection matters: forestinnberest@gmail.com, phone +48 725 702 802.
2. What data we collect and why
- Contact form – your name, e-mail address and message. We use them to reply to your message (Art. 6(1)(f) GDPR – our legitimate interest in handling correspondence).
- Booking form – your full name, e-mail address, optionally your phone number, the dates of your stay, the number of guests and any notes. We use them to prepare an offer and, at your request, to enter into a rental agreement (Art. 6(1)(b) GDPR).
- Providing your data is voluntary, but without it we will not be able to reply or accept a booking.
3. How long we keep your data
Messages and enquiries that do not result in a booking are kept for up to 12 months after the last contact. Data related to a confirmed booking is kept for as long as required by tax and accounting law and until any possible claims become time-barred.
4. Who we share your data with
We do not sell your data or share it for marketing purposes. It may only be accessed by the companies that technically run the website and e-mail: our server provider (OVH, data centre in Poland) and the e-mail provider we use to reply.
5. Your rights
You have the right to access, rectify and erase your data, to restrict its processing, to data portability and to object to processing based on legitimate interest. You may also lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (UODO, ul. Stawki 2, 00-193 Warsaw).
6. Cookies and third-party services
This website does not use its own cookies or analytics tools. The Google map is only loaded after you click “Show the map” – from then on Google may set its own cookies in line with the Google Privacy Policy. The website fonts are loaded from Google Fonts. Links to Facebook and Instagram lead to external services with their own privacy policies.