Privacy and cookie policy

1. Who is responsible for your data

We have not appointed a data protection officer. Write or call using the address and number above with anything that concerns your data.

We process data in line with the GDPR (in Polish: RODO), Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016.

2. What data we collect

It depends on what you do with us. Five situations, five sets of data:

Booking and stay

your name, email address, phone number, the dates of your stay and who is coming, any notes on the booking, invoice details (address, tax ID). Online payments are handled by Przelewy24 – we neither see nor store your card number or your bank login.

Enquiries

whatever you write or say when you ask about a stay, a wedding, a conference or a gift voucher: your contact details and the content of the enquiry.

Newsletter

your email address, the date you signed up and a record that consent was given.

Post-stay survey

your rating and your answers, linked to the booking they relate to.

Technical and analytics data

your IP address, browser type, the pages you open and what you click – collected by Google Analytics and the Meta pixel once you consent in the cookie banner. Before you decide, Google tags send a cookieless signal only: your IP address, the address of the page you are looking at and an identifier valid for that one visit – nothing is saved on your device at that point, and on your next visit we do not know it is you again. On top of that, the consent cookie: the list of categories you chose and the date of your decision.

Giving us your data is voluntary. Without a name and contact details, though, we cannot take a booking, and without an email address we cannot send the newsletter.

3. What for, and on what legal basis

4. Who we pass data to

We do not sell data and we do not hand it to anyone for their own purposes. It reaches two groups of recipients: companies connected with the hotel, which deliver services alongside us, and companies that process data on our behalf under data processing agreements (Art. 28 GDPR). Two of the latter have servers in the USA – the transfer then rests on a European Commission adequacy decision (the EU-US Data Privacy Framework).

Connected companies

We deliver the hotel services together with two companies from the same family. We pass them data as far as is needed to carry out your booking and the services you have ordered (Art. 6(1)(b) GDPR) and to settle accounts between us (Art. 6(1)(f) GDPR). Both are based in Poland; the data does not leave the EEA.

Companies that process data on our behalf

Data may also reach the tax office, a court or the police where the law requires it – only at their request and only as far as they request.

5. How long we keep it

While a dispute or proceedings are under way, we keep the data until they are closed by a final decision.

6. Your rights

Access (Art. 15)

you will find out whether we process your data, and you will get a copy of it.

Rectification (Art. 16)

we will correct data that is wrong and complete data that is missing.

Erasure (Art. 17)

we will delete data once it is no longer needed, or when you withdraw your consent. This does not cover what we have to keep by law, invoices for instance.

Restriction (Art. 18)

at your request we will suspend processing, for example while we check that the data is correct.

Portability (Art. 20)

data we process on the basis of a contract or your consent will come to you in a machine-readable file.

Objection (Art. 21)

where we process data on the grounds of legitimate interest, the post-stay survey for instance, you can object and we will stop, unless our grounds outweigh yours.

Withdrawing consent (Art. 7)

at any time, without affecting what we did before. Newsletter – the link in the message; cookies – the Cookie settings link in the footer.

How to use them

Write to recepcja@hotel-jawor.pl or call +48 33 877 51 98. We reply within a month at the latest. If the matter is complex, we can extend that by a further two months – and we will tell you so within the first month.

If you believe we process data unlawfully, you can lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warszawa, kancelaria@uodo.gov.pl.

7. Security and automated decisions

• The site and the booking system run over an encrypted connection (HTTPS).
• Booking data is accessible only to authorised reception and administration staff, each with their own login.
• We do not store payment card numbers – the payment itself happens at Przelewy24.
• The providers in section 4 process data under data processing agreements and only as far as we have instructed them.

We take no decisions about you based solely on automated processing, and we do not profile within the meaning of Art. 22 GDPR. Ads matched to your interests appear only once you agree to marketing cookies.

8. Cookies and third-party services

Cookies are small files saved in your browser and read again the next time you come to the site. They give us no access to your device, nor to any data beyond what they hold themselves.

Categories

Everything the site loads

How to manage cookies

You switch analytics and marketing consent on and off in the cookie banner – the Cookie settings link sits in the footer of every page. Withdrawing consent works straight away: the tools stop collecting data, and you can delete any cookies already saved in your browser.

You can also block and delete every cookie in your browser settings. Block the booking provider’s cookies and an online booking cannot be completed; if that happens, call reception on +48 33 877 51 98.