- Home
- Privacy policy
Privacy policy
This page explains which personal data we collect through the website, by phone and by email, why we do it, how long we keep it and what rights you have. Last change: 2 October 2026.
Who controls your data
The controller of your personal data is the owner of Noclegi Rozalka, Męcka Wola 111, 98-200 Sieradz. For anything about personal data, contact us: phone 573 682 472, email kontakt@noclegirozalka.pl. We have not appointed a data protection officer.
What data we collect and why
Phone and email
When you call or write, we see your phone number or email address and what you tell us, for example the dates and the number of people. We use this data to reply and to arrange your stay. The legal basis is Article 6(1)(b) GDPR (steps taken at your request before entering into a contract, and performing it), and when you contact us on behalf of a company, Article 6(1)(f) GDPR, our legitimate interest in answering the enquiry and arranging the stay. We keep the data while we discuss the stay and during it, and afterwards for as long as claims connected with it may arise.
Contact form
The form on the Contact page collects your phone number and, if you give them, the number of people, the dates and your notes. We use them to call you back. The legal basis is the same as for phone and email. Enquiries sent through the form are deleted automatically after 12 months. We do not store your IP address. To limit the number of enquiries sent from one address, we keep a hash of it (a pseudonym) for at most one day; without our key the address cannot be read from it.
Protecting the form against spam
When you start filling in the form, the site loads the Cloudflare Turnstile service, which checks that a person is filling it in. Cloudflare receives your IP address and technical data about your browser. We do this in our legitimate interest in protecting the site against spam (Article 6(1)(f) GDPR). The service is provided by Cloudflare, Inc., based in the USA.
Google Map, only with your consent
On the Contact page we load the Google map only after you agree to it in the banner or in "Cookie settings". Until then you see a picture of the map from OpenStreetMap, served from our own server. Once the map loads, Google receives your IP address and may store its own cookies in your browser. The legal basis is your consent (Article 6(1)(a) GDPR). The map is provided by Google Ireland Limited, based in Ireland.
The "Directions to Rozalka" button opens Google Maps or Apple Maps in a new window or in the app. From that moment the privacy rules of that service apply.
Server log
The server the site runs on records technical information about every visit: the IP address, the date and time, the address of the page visited and browser data. It serves the security of the site and fixing errors (Article 6(1)(f) GDPR) and is deleted when it is no longer needed for that.
Cookies and browser storage
The site does not use cookies for statistics or advertising. In your browser's storage we save only the choice you made in the banner: which consents were chosen, the version number of the banner text and the date. This record is necessary so that the banner does not ask again on every page, so it does not require consent. We keep the choice for 12 months; after that the banner asks again.
You can change your choice at any time with the "Cookie settings" button in the footer. You can also view, delete and block cookies and data stored by websites in your browser's settings.
Who we share data with
- the hosting provider whose server runs the site and stores the form enquiries,
- Cloudflare, Inc., when you use the form,
- Google Ireland Limited, when you agree to load the map.
We do not sell data and do not share it for advertising.
Transfers outside the European Economic Area
Cloudflare, Inc. and Google LLC, a company related to Google Ireland Limited, are based in the USA. Data is transferred to these companies on the basis of the European Commission's adequacy decision for the EU-US Data Privacy Framework, which both companies have joined.
Your rights
- the right of access to your data and to a copy of it (Article 15 GDPR),
- the right to rectification (Article 16 GDPR),
- the right to erasure (Article 17 GDPR),
- the right to restriction of processing (Article 18 GDPR),
- the right to data portability (Article 20 GDPR),
- the right to object to processing based on our legitimate interest (Article 21 GDPR),
- the right to withdraw consent at any time, without affecting the lawfulness of processing before the withdrawal (Article 7(3) GDPR); you withdraw consent to the map with the "Cookie settings" button.
To use these rights, contact us: phone 573 682 472, email kontakt@noclegirozalka.pl. You also have the right to lodge a complaint with the President of the Personal Data Protection Office, ul. Stanisława Moniuszki 1A, 00-014 Warsaw, Poland (Article 77 GDPR).
Do you have to give us your data
Giving us your data is voluntary. Without a phone number we cannot call you back about a form enquiry. We do not make automated decisions and do not profile.
Changes to this page
When we change the way we process data, for example by adding visit statistics, we will update this page and the date of the last change.