Privacy policy.
Effective 1 January 2026. This policy explains what data polishretreats.com collects, why it is collected, and the rights you hold in respect of it.
1. Data controller
The controller of personal data collected through polishretreats.com is Polish Retreats sp. z o.o., a limited-liability company registered in Poland with its seat at ul. Marszałkowska 100, 00-026 Warszawa. Correspondence relating to personal data may be addressed to [email protected] or to the postal address above.
2. What we collect
We deliberately keep the site's data footprint small. The categories of data we collect are:
- Technical request data — IP address, user-agent string, referring URL, and the timestamp of each request. This information is written to standard server logs and is used for site administration, security monitoring, and editorial analytics (which articles are being read, roughly).
- Local browser flags — two entries stored in your own browser's localStorage:
pr_age_ok, recording your confirmation that you are over 18, andpr_cookies, recording your acknowledgement of this policy. Both are set only by explicit user action. Neither is transmitted to our servers. - Correspondence data — if you write to us through the contact form or by email, we retain the name, email address and message content you provide, for the purpose of responding to your enquiry.
3. What we do not collect
The site carries no third-party analytics scripts, no advertising pixels, no social-media trackers, and no fingerprinting. We do not build behavioural profiles of visitors and we do not share any of the data listed above with any third party for marketing purposes.
4. Lawful basis
Server-log processing is carried out on the basis of our legitimate interest (Article 6(1)(f) GDPR) in operating a secure and functional website. Correspondence data is processed on the basis of your consent (Article 6(1)(a)) and in order to respond to your request (Article 6(1)(b)). Local browser flags are not, strictly speaking, personal data, but we describe them here for transparency.
5. Retention
Server logs are retained for a maximum of twelve (12) months and are then deleted. Correspondence from the contact form is retained for as long as necessary to conclude the exchange and for a reasonable period thereafter (typically not more than 24 months). Local browser flags persist until you clear your browser storage.
6. Your rights
Under the GDPR you have the right of access, rectification, erasure, restriction of processing, data portability, and the right to object to processing based on legitimate interest. You may exercise any of these rights by writing to [email protected]. You also have the right to lodge a complaint with the Polish supervisory authority — the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warszawa.
7. International transfers
Site hosting is provided from data centres located within the European Economic Area. We do not transfer personal data outside the EEA in the ordinary course of operating the site.
8. Changes to this policy
This policy may be updated to reflect changes in law or in our technical arrangements. The effective date at the head of the page will always be the current one. Material changes will be signposted on the site's front page for a reasonable period.