Privacy Policy

Template — to be completed. Bracketed […] fields are placeholders. Fill them in from klauzula_informacyjna_formularz.docx before going live. Generated 2026-05-08.

1. Data Controller

The controller of your personal data is [Owner full name / Company name], located at [mailing address, Poland], Tax ID (NIP) [NIP — if registered business].

For data-protection matters, contact us via the contact form on this site, or in writing at the address above.

2. Purposes and Legal Bases of Processing

We process your personal data for the following purposes:

• Responding to inquiries from the contact form — legal basis: Art. 6(1)(a) GDPR (consent) and Art. 6(1)(f) GDPR (legitimate interest in communicating with prospective guests).
• Notifying you when Zagroda bOBRA opens and about construction progress — legal basis: Art. 6(1)(a) GDPR (your explicit consent given at sign-up).
• Fulfilling our GDPR accountability obligations — legal basis: Art. 6(1)(c) GDPR.

3. Scope of Data Processed

We process the data you voluntarily provide in the contact form: name (or nickname), email address, message content, site language, and submission timestamp. For anti-spam and security purposes we additionally log a truncated (anonymised) IP address and browser type.

4. Retention Period

• Data submitted to receive a reply: kept until the reply is sent or for at most [12 months] since the last correspondence.
• Data submitted for opening notification: kept until consent is withdrawn or the opening notification is sent, no longer than [24 months] from the date of sign-up.
• After these periods data is permanently deleted or anonymised.

5. Recipients of Data

Your data may be shared with the following processors, acting solely on our documented instructions:

• Cloudflare, Inc. (USA) — site hosting and bot protection (Cloudflare Pages, Turnstile). Transfer based on EU Standard Contractual Clauses (SCC).
• Resend, Inc. (USA) — transactional email delivery. Transfer based on EU Standard Contractual Clauses (SCC).

Your data is not sold or shared with any third parties for marketing.

6. Your Rights

In connection with the processing of your personal data, you have the following rights:

• Access to your data (Art. 15 GDPR).
• Rectification of your data (Art. 16 GDPR).
• Erasure (“right to be forgotten”, Art. 17 GDPR).
• Restriction of processing (Art. 18 GDPR).
• Data portability (Art. 20 GDPR).
• Object to processing (Art. 21 GDPR).
• Withdraw consent at any time, without affecting lawfulness of processing carried out before withdrawal (Art. 7(3) GDPR).
• Lodge a complaint with the Polish Data Protection Authority (UODO, ul. Stawki 2, 00-193 Warsaw, Poland, https://uodo.gov.pl) if you believe processing violates GDPR.

To exercise any right, contact us via the contact form or in writing.

7. Voluntariness

Providing personal data is voluntary but necessary to receive a reply from the contact form and to receive opening-notification updates. Without it, we cannot fulfil those purposes.

8. Automated Decision-Making

Your data is not subject to automated decision-making, including profiling, within the meaning of Art. 22 GDPR.

9. Cookies and Similar Technologies

The Zagroda bOBRA website does not use marketing or analytics cookies. We use only technical cookies essential for the site to function, plus Cloudflare Turnstile (form bot protection) — in Managed mode Turnstile operates without tracking cookies.

10. Changes to This Policy

This privacy policy may be updated to reflect changes in how we process data. The current version is published on this page along with the last-modified date. Material changes will be announced with reasonable notice.

Last updated: [date — update on every revision]