Data controller
The controller of personal data is the owner of the apartments operating under the Apartament Łomża brand (Łomża, Podlaskie Voivodeship). Contact for data protection matters: +48 728 295 890, kontakt@apartamentlomza.pl.
What data we process
The site is informational — we do not run a guest account, a contact form or a newsletter. We process only the data you give us yourself when contacting us by phone or email about a booking: your name, phone number, email address, the content of your enquiry, and, for a booking, also the dates of your stay and the number of guests. For issuing an invoice — the invoice details.
Purpose and legal basis
- handling the enquiry and carrying out the booking — Art. 6(1)(b) GDPR (steps towards concluding and performing a contract);
- settlements and tax obligations (invoices, records) — Art. 6(1)(c) GDPR;
- establishing, pursuing or defending claims — Art. 6(1)(f) GDPR (legitimate interest).
Recipients of the data
The data may be entrusted to entities that support us operationally: the website hosting provider, the accounting office, email providers. If you book an apartment through Booking.com, your data is also processed by Booking.com on the terms set out in that site's privacy policy. We do not sell data. Statistical data collected by Google Analytics may also be processed by Google LLC in the USA — on the basis of standard contractual clauses and the Data Privacy Framework (see the section on cookies).
Retention period
Correspondence that does not lead to a booking is deleted once the matter is closed. Data connected with a stay is kept for the limitation period for claims, and accounting data for the period required by tax law (as a rule, 5 years counting from the end of the tax year).
Your rights
You have the right to access your data, to rectify, erase or restrict its processing, the right to data portability and the right to object. You are also entitled to lodge a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw). Providing the data is voluntary but necessary to make a booking.
Server logs
The server on which the site runs may record standard logs (IP address, date and time of the request, browser type) for technical and security purposes. This data is not linked to your identity.
Cookies and third-party tools
Google Analytics 4 — we use this tool for traffic statistics (number of visits, entry sources, popular pages). Until you give consent in the banner it runs in cookieless mode (Consent Mode). After you click “Accept” it stores cookies in your browser and transfers data (including a shortened IP address, device and browser information) to Google Ireland Ltd., which acts as a processor. The basis is your consent (Art. 6(1)(a) GDPR) — you can withdraw it at any time using the “Cookie settings” link in the footer, and you can also block Analytics with the Google Analytics Opt-out add-on or by clearing cookies in your browser.
On pages with a map we embed a Google map — once it loads, Google may store its own cookies and process data in accordance with Google's privacy policy. Links to Booking.com lead to an external site with its own policy.
Changes to the policy
We may update the policy when the law or the way the site works changes. The current version is always available at this address.