Privacy policy

The controller of your personal data is Krzywe Lake Houses, Krzywe 19 G/H, 11-700 Mrągowo, Poland, tax ID (NIP) 000-000-00-00, REGON 000000000. In this policy we call ourselves "we", and "you" is the person the data is about: a guest, someone asking about dates or visiting the website.

You can contact us about anything to do with your data:

• by e-mail: krzywelakehouses@gmail.com,
• by phone: +48 505 586 950,
• by post: Krzywe Lake Houses, Krzywe 19 G/H, 11-700 Mrągowo, Poland.

We have not appointed a data protection officer, as the law does not require one at our scale. We handle every matter ourselves and answer personally.

We receive data from you, through the channel you choose. Each of them is listed below, with the details in the following chapters.

The exception is a booking made by someone else, for example the organiser of a group or family trip. That person then gives us their details and, where needed, those of the participants. We ask them to show this policy to the participants.

You check free dates and prices on our website. The calendar and the price calculator ask the booking system only about dates and the number of guests, without any personal data.

When you go on after choosing your dates, the booking panel opens. It appears on our website but is part of the BedBooking system, at krzywe-lake-houses.bed-booking.com. The details you enter in the booking form reach BedBooking and us. The form usually asks for:

• your full name,
• your e-mail address and phone number,
• the dates of your stay, the chosen house and the number of guests,
• comments on the booking, if you add any,
• invoice details, if you ask for an invoice.

We use this data to accept and confirm your booking, send payment and arrival details, contact you before your stay and settle it. The booking becomes binding once a confirmation is sent to the e-mail address you gave. The rules of the booking itself are set out in our terms and conditions.

To Google Analytics we send only the fact that the booking panel was opened, with the dates, number of nights, number of guests and offer name. Never your name, e-mail address or phone number.

When you call or text +48 505 586 950, we see your number, and on the call you tell us what you consider necessary, for example your name, dates and the number of guests. We do not record calls. We keep the number and notes only when they are needed for a booking or further contact.

Messages to krzywelakehouses@gmail.com go to a mailbox in Google's Gmail service. We see your address, signature, message and attachments. We keep correspondence as long as the matter needs it and, if it does not end in a booking, usually for no longer than 12 months.

The form on the Contact page sends nothing to our server and stores nothing. When you click the button, it prepares a ready message in your e-mail app, and your details reach us only when you send it, like an ordinary e-mail. The form has these fields:

• your full name and e-mail address,
• your phone number, if you want to give it,
• the subject, the dates of your stay, the number of guests and the chosen house,
• your message and confirmation that you have read this policy.

When you click the phone number or the e-mail address on the website, or use the form, Google Analytics receives only the fact of that action and where on the page it happened, for example the footer or the menu. For the form, the subject, the number of guests, the number of nights and the chosen house are added. Never data that could identify you.

You pay for your stay by bank transfer to our account. The bank sees the details of the transfer: your name or company name, account number, amount and reference. We keep payment confirmations in our settlement records.

If you ask for an invoice, we need your invoice details: your company name or full name, address and tax ID. We keep invoices for the period required by tax law.

The local tourist tax is added to the price of the stay, and we collect it and settle it with the municipality. That is why we record the data required by the rules on the local tourist tax, for example the number of guests, the length of the stay and whether children are over 4. We receive children's data from their parents or guardians.

We hand the house over to the adult responsible for the booking. During the stay we contact them by phone or e-mail about arrival, departure and the stay itself.

We run Krzywe Lake Houses profiles on Facebook and Instagram. When you follow them, comment or send us a message, we see your profile name, profile picture and the content you share. We reply to messages and run the profiles on the basis of our legitimate interest.

Profile statistics, such as the number of visits, are prepared by Meta Platforms Ireland Limited. In this respect we are joint controllers with Meta, and Meta takes primary responsibility for these statistics under the Page Insights Controller Addendum.

The links to Facebook and Instagram on our website are ordinary links. The website does not load Meta plug-ins or tracking pixels.

Every use of data has its purpose and a legal basis in the GDPR. We keep data only as long as the purpose or the law requires.

Our legitimate interest is answering questions, keeping the website and bookings secure and being able to defend ourselves in a dispute. You can always object to it, as described in the chapter Your rights.

We entrust data only to companies without which the website, bookings and settlements could not work, and only as far as necessary. We do not sell data or pass it to other companies for marketing.

Some of our providers, namely Google, Vercel and Meta, are companies based in or with servers in the United States. Data may be transferred there on the basis of the European Commission's decision of 10 July 2023 on the EU-US Data Privacy Framework (Art. 45 GDPR), for companies taking part in it, or on the basis of standard contractual clauses approved by the Commission (Art. 46 GDPR).

The list of participating companies is available at dataprivacyframework.gov. If you would like to know more about the safeguards, write to us.

Cookies are small files saved in your browser. Browser storage works in a similar way, letting the website remember simple settings. On our website we use only those listed below.

Google Analytics shows us how many people visit the website, which pages they read and how often the booking panel is opened, the form is sent or the phone number or e-mail address is used. On your first visit a cookie notice appears in the bottom left corner. We store Google Analytics cookies only after you click Accept.

Without consent we do not store these files, and Google only receives anonymous signals without a browser identifier, for example about a page view. You can change your consent at any time here or with the Cookie settings button in the footer. If you choose Essential only, we delete the Google Analytics cookies.

When you open the booking panel, a page of the BedBooking system loads, which may use its own cookies needed for the booking to work. They are described in the BedBooking cookie policy.

You can delete or block cookies and browser storage at any time in your browser settings. The website will still work, but it may not remember your choices.

The GDPR gives you rights over the data we process. You can use each of them free of charge.

Write to krzywelakehouses@gmail.com, call +48 505 586 950 or send a letter to Krzywe 19 G/H, 11-700 Mrągowo, Poland. We will reply without undue delay and within one month at the latest. In particularly complex cases this may be extended by a further two months, and we will let you know.

If we are not sure who is asking, we may ask you to confirm your identity, for example with a message from the e-mail address given when booking. This protects your data from third parties.

Giving us your data is voluntary. Without the data needed for a booking, namely your name, e-mail address and phone number, we cannot accept your booking or contact you. You give invoice details only if you want an invoice, and consent to statistics cookies does not affect your use of the website.

We do not make decisions solely by automated means and do not profile you for marketing. We look at Google Analytics statistics in aggregate to improve the website.

The website works only over an encrypted HTTPS connection. Only the people who handle bookings have access to the mailbox, the booking system and documents. If a personal data breach occurred, we would report it to the President of UODO and inform you if the law required it.

The website also links to other services: Google Maps, attraction websites, Facebook, Instagram and BedBooking. Once you go to them, their own privacy rules apply.

We update this policy when the website's features, our providers or the law change. The current version is always on this page. The policy is also available in Polish.