Privacy and cookie policy

Translation for information only; the Polish version is binding.

Data controller

The controller of your personal data is Magdalena Kubicka – Morze-Kwatery.pl (sole proprietorship), ul. Turystyczna 2c/1, 72-500 Międzyzdroje, Poland, NIP (tax ID) 9860108227, REGON 320654120.

For data protection matters, email •••@••• or call ••• ••• •••.

What data we process and why

We only process the data needed for a given purpose:

• Enquiries and contact (phone, email): name, contact details and the content of your message – to reply and prepare an offer (Art. 6(1)(b) and (f) GDPR).
• Booking and stay: guest, booking and payment details – to conclude and perform the rental agreement (Art. 6(1)(b) GDPR) and to meet legal obligations such as tax and accounting (Art. 6(1)(c) GDPR).
• Apartment ratings: when you vote we store an encrypted hash of your IP address combined with the date, only to prevent rating the same apartment more than once on the same day; the IP address cannot be read from the hash (Art. 6(1)(f) GDPR).
• Visitor statistics (Google Analytics) – only with your consent (Art. 6(1)(a) GDPR).
• Maps (Mapbox) – only with your consent (Art. 6(1)(a) GDPR).
• Security and operation of the website: technical data (IP address, browser type) in server logs and the Cloudflare service – to protect the website against attacks and failures (Art. 6(1)(f) GDPR).

Online booking

Availability search and online booking run on the Mobile Calendar system. When you click “Search”, that system’s form opens and the data you enter when booking goes to Mobile Calendar, which processes it on our behalf.

Live webcams

The webcam images are provided by Lantech. The player loads from the Lantech server only after you click “Start live view” – your browser then connects to the servers of Lantech and of the services the player uses.

Who receives your data

Data may only be received by companies that help us run the website and the rentals:

• our hosting provider (website server),
• Cloudflare, Inc. (fast delivery of the website and protection against attacks),
• Mobile Calendar (booking system),
• Google Ireland Ltd. and Google LLC (Google Analytics, only with consent),
• Mapbox, Inc. (maps, only with consent),
• our accounting office and public authorities where required by law.

Some of these companies (Google, Mapbox, Cloudflare) are based in the USA. Data is transferred on the basis of the European Commission’s adequacy decision (EU-US Data Privacy Framework) or standard contractual clauses.

How long we keep data

• enquiries that did not lead to a booking – up to 12 months after the last contact,
• booking and billing data – for the period required by tax law (usually 5 years from the end of the tax year),
• the IP hash stored with a rating – together with the rating; it does not allow the IP address to be identified,
• Google Analytics statistics – no longer than 14 months,
• your cookie choice – 12 months, after which we will ask again.

Your rights

You have the right to access your data, to rectify, erase or restrict its processing, to data portability, to object to processing based on our legitimate interest and to withdraw consent at any time (without affecting the lawfulness of earlier processing). You may also lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw).

Providing data is voluntary, but without it we cannot answer an enquiry or accept a booking. We do not make automated decisions or carry out profiling.

Cookies and browser storage

The website stores small files (cookies) and data in your browser’s storage. Essential ones always work; the others only with your consent, which you can change at any time via the “Cookie settings” link in the footer.

• Essential: csrf_cookie_name – form security (2 hours); zgoda – remembers your cookie choice (12 months).
• Functional, stored only after you act: pora – the season you chose for the website’s look (30 days); ocena:… in browser storage – your apartment rating for that day.
• Maps, with consent: mapbox.eventData… in browser storage – an identifier and usage statistics of Mapbox maps.
• Statistics, with consent: _ga and _ga_… – Google Analytics visitor statistics (up to 2 years).

Cloudflare may set technical cookies that protect the website against bots. You can also delete or block cookies in your browser settings.

Changes to this policy

We update this policy when the services on the website or the law change. The current version is always on this page.