Skip to content

Privacy policy

Effective from: [launch date of the new website]. How we process the data of guests, people making bookings and website visitors.

1. Who is the data controller

The controller of your personal data is DKSKA Sp. z o.o., registered office in Białystok, ul. Kombatantów 4/320, 15-110 Białystok, Poland, tax ID (NIP) 9662090509, KRS 0000884900, which runs Matygowa Osada, ul. Matygówka 30, 34-425 Gliczarów Górny, Poland.

For data protection matters write to info@matygowaosada.pl, call +48 788 267 809 or send a letter to Matygowa Osada. We have not appointed a data protection officer because we are not required to (Article 37 GDPR).

This policy covers www.matygowaosada.pl, the booking system (booking.matygowaosada.pl) and contact with us by phone, e-mail and messaging apps.

2. Purposes and legal bases

Booking and stay: concluding and performing the rental agreement, payments, door code, contact about the stay

  • Data: first and last name, address, e-mail, phone, country, number and age of guests, dates, booking notes, invoice details
  • Legal basis: Article 6(1)(b)
  • Retention: for the duration of the agreement, then until claims become time-barred

Legal obligations: accounting, taxes, invoices, local tourist tax, statistical reporting (GUS)

  • Data: booking and payment data
  • Legal basis: Article 6(1)(c)
  • Retention: 5 years from the end of the year in which the tax payment deadline expired

Answering questions (e-mail, phone, messaging apps, forms)

  • Data: the data you give us
  • Legal basis: Article 6(1)(f) (legitimate interest: replying to you) or (b) if the question concerns a booking
  • Retention: until the matter is closed, then up to 12 months

Complaints, establishing, pursuing and defending claims

  • Data: booking data and correspondence
  • Legal basis: Article 6(1)(f)
  • Retention: until claims become time-barred

Security of the website and booking system, preventing abuse

  • Data: IP address, technical device data, server logs
  • Legal basis: Article 6(1)(f)
  • Retention: up to 30 days, longer in case of an incident

Video surveillance of the outdoor area of the Property (no sound)

  • Data: image
  • Legal basis: Article 6(1)(f) (safety of guests and property)
  • Retention: up to 30 days, in case of an incident until it is clarified

Post-stay survey and review request

  • Data: first name, e-mail
  • Legal basis: Article 6(1)(f) (service quality)
  • Retention: up to 12 months after the stay or until you object

Website visit statistics (Google Analytics 4)

  • Data: cookie identifiers, approximate location, device data and pages visited
  • Legal basis: Article 6(1)(a) (consent in the cookie banner)
  • Retention: up to 14 months

Marketing: campaign measurement and ads on Google and Meta (Facebook, Instagram)

  • Data: cookie and advertising identifiers, visit and booking data
  • Legal basis: Article 6(1)(a) (consent in the cookie banner)
  • Retention: until consent is withdrawn; cookies as described in the Cookie Policy

Newsletter and offers, if you sign up

  • Data: e-mail, first name, language
  • Legal basis: Article 6(1)(a)
  • Retention: until consent is withdrawn

Providing data for a booking is voluntary, but without it we cannot conclude the agreement. We do not send offers to addresses received from booking portals (Booking.com, Airbnb).

3. Who receives the data

We entrust data only to companies that help us run the Property and the website, under data processing agreements and only to the extent needed:

  • hosting of the website and booking system, databases and file storage: Cloudflare (data stored in the European Union) and the database provider of the booking system,
  • booking system and channel manager: IceColdRes (our system) and Beds24, and Hotres until IceColdRes launches,
  • payment operators: Stripe, Przelewy24 (we do not process card data; you enter it directly with the operator),
  • e-mail and SMS providers,
  • our accounting office and accounting and invoicing software,
  • with your consent: Google (Google Analytics, Google Tag Manager, Google Ads) and Meta Platforms (Meta pixel).

If you book through Booking.com, Airbnb or another portal, that portal is a separate controller of your data and passes on to us the data needed for your stay. Public authorities may also receive data where required by law.

4. Transfers outside the European Economic Area

Google, Meta, Stripe and Cloudflare may process data in the United States. The basis is the European Commission's decision on the EU-US Data Privacy Framework (certified companies) or standard contractual clauses approved by the Commission. You can request a copy of the safeguards.

5. Your rights

You have the right to access your data and receive a copy, to rectification, erasure, restriction of processing, data portability and to object to processing based on legitimate interest (always including marketing). You may withdraw consent at any time without affecting the lawfulness of processing before withdrawal: change cookie consent with the Cookie settings link in the page footer, and other consents by e-mail to info@matygowaosada.pl.

You also have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warszawa, Poland, uodo.gov.pl.

We do not make decisions about you based solely on automated processing that have legal effects. Prices in the booking system depend on dates and the number of guests, not on your profile.

6. Cookies

The use of cookies and similar technologies is described in the Cookie Policy.

7. Changes to this policy

We update this policy when our services, providers or the law change. The current version is always on this page, and we will announce significant changes in a banner on the website.