Privacy policy

How we handle your data.

Plain language: who, what for, how long, on what basis. Full version below.

Last updated:

Who is the data controller

The controller of your personal data is Tracify — Michał Tracz, Latarniowa 12, 76-032 Mielno. GDPR contact: [email protected].

What we collect

Name, email, phone, dates of stay, invoice details (if you ask for an invoice), stay preferences (e.g. floor, baby cot, pet). From the online booking system: card number (passed straight to the payment processor — we only see the status).

What we use it for

Fulfilling the booking and the stay, issuing invoices, contacting you about your stay, fulfilling tax and registry obligations, pursuing claims if any. With separate consent — newsletter, if you sign up.

Legal basis

Art. 6(1)(b) GDPR (contract — booking), (c) (legal obligation — accounting, lodging registry), (f) (legitimate interest — contact, claims), (a) (consent — newsletter, marketing).

Retention

Booking data: 5 years (tax law). Lodging registry data: 5 years (registry law). Newsletter: until you withdraw consent. Claims: until the limitation period ends.

Sharing

Booking engine provider (Profitroom), payment processor Stripe (Visa, Mastercard, American Express), accountant, hosting providers (Cloudflare Pages, Fastmail). We do not sell data. We do not transfer it outside the EEA without legal basis.

Your rights

Access, rectification, erasure (where no other basis to keep applies), restriction of processing, objection to processing based on legitimate interest, data portability, withdrawal of consent at any time (without affecting prior processing). Complaint to the Polish DPA ([uodo.gov.pl](https://uodo.gov.pl)).

Contact

On data matters: [email protected] or by phone +48 519 166 531. Postal: Latarniowa 12, 76-032 Mielno.