Who is responsible for your data?
The controller is PH OMEGA Dagmara Szamborska, Polish tax ID 5842032374, the operator of Osada LoveLaski in Laski, 89-530, Poland.
For personal data enquiries, write to rezerwacja@lovelaski.pl or call: 507 768 707.
Why do we need your data?
Contact
Our form asks for your first name, surname, email, phone number and message. We use these to reply and handle your enquiry. For enquiries about entering a contract or booking, the legal basis is Article 6(1)(b) GDPR. For other correspondence, it is our legitimate interest in handling enquiries under Article 6(1)(f) GDPR.
Bookings, stays and vouchers
We process contact details, stay details and information needed to settle your order. This is necessary to enter and perform a contract under Article 6(1)(b) GDPR, meet tax and accounting obligations under Article 6(1)(c), and handle complaints and legal claims under Article 6(1)(f).
Providing data is voluntary, but without information marked as required, we cannot handle the form or booking. Payment data is processed by the provider identified at checkout.
PDF personalisation
The voucher generator creates the PDF in your browser. The recipient's name, message and code entered there are not sent by the generator to our server or Google Analytics. Voucher purchase takes place separately in the sales system.
Security
The server may keep technical logs, including IP addresses, request times and errors, to maintain and protect the website under Article 6(1)(f) GDPR. CCTV arrangements on the grounds are described in the terms of stay.
Mandatory online check-in
At Osada LoveLaski, check-in takes place entirely remotely through RoomAdmin. Online check-in replaces traditional on-site check-in and is a mandatory part of your stay. It allows us to prepare your arrival and provide independent access to your cabin.
The data controller is the entity identified at the beginning of this privacy policy.
Purposes and legal bases
We process the data necessary for check-in to link the Guest to the reservation, prepare and manage the stay, provide cabin access details and communicate about the stay. The legal basis is performance of the accommodation contract under Article 6(1)(b) GDPR.
Where necessary to establish, pursue or satisfy claims, or defend against them, processing is based on our legitimate interest in protecting rights connected with the stay under Article 6(1)(f) GDPR. Where retaining specific data is required by law, the legal basis is Article 6(1)(c) GDPR.
Providing your data
Providing the data necessary for check-in is a contractual requirement associated with remote check-in. Failure to complete check-in may prevent us from providing access to the cabin and fulfilling the stay. Required fields are marked in the form. Leaving optional fields blank does not affect your ability to check in.
If you have difficulty completing the form, please contact us before arrival: rezerwacja@lovelaski.pl or +48 507 768 707.
Access to data
Data is processed in RoomAdmin. Access is limited to authorised staff handling stays and the system and technical service providers, to the extent necessary to deliver their services. Online check-in data is not transferred outside the European Economic Area.
Retention period
We retain check-in form data during the stay and for no longer than 14 days after the stay ends. After this period, we delete or anonymise it, unless retaining specific data remains necessary to meet a legal obligation or to establish, pursue or satisfy claims, or defend against them.
In such cases, we retain only the data needed for the relevant purpose, for the period required by law or necessary to handle and conclude the matter, taking applicable limitation periods into account.
Your rights
Under the conditions set out in the GDPR, Guests have rights of access, rectification, erasure, restriction of processing and data portability. You may also object to processing based on legitimate interests and lodge a complaint with the President of the Polish Personal Data Protection Office.
For data protection enquiries, contact rezerwacja@lovelaski.pl.
Which services do we use?
Data may be shared with authorised hosting and email providers, RoomAdmin for accommodation bookings, RentAdmin for sauna bookings, payment providers, accountants and legal service providers. The information shared depends on the service's purpose.
Booking calendars and forms are embedded from roomadmin.pl and rentadmin.pl. Loading them connects your browser to the provider's server. The external system handles the data and technologies required to make a booking.
Guest reviews are displayed through Elfsight. Loading them connects to the provider's servers. Links to Google Maps and Instagram lead to separate services with their own privacy policies.
Website measurement uses Google Analytics 4, provided to EEA users by Google Ireland Limited. Information may be processed outside the EEA, including in the United States. Google describes its transfer mechanisms, including the EU-US Data Privacy Framework and standard contractual clauses, in its data transfer framework information. Information about other services: RoomAdmin, RentAdmin, Elfsight.
Cloudflare Turnstile
We use Cloudflare Turnstile to protect the contact form and voucher emails from automated spam. Verification involves technical information about your browser, device and network connection. We do not include your message, email address, voucher code or PDF in the verification request. Temporary sending limits use keyed hashes of the IP address, email address and message fingerprint, retained for up to 15 minutes and removed on the next request. Cloudflare privacy policy.
How long do we keep data?
We keep correspondence while handling the enquiry, then for as long as necessary to establish or defend legal claims. Booking and accounting records are kept for the periods required by tax, accounting and limitation rules. Consent-based data is kept until consent is withdrawn or its purpose ends earlier.
Cookie and privacy-choice lifetimes are described above. Retention within Google Analytics also depends on the property's settings. Contact us for details about your data.
You have the right to know and decide.
Where the GDPR provides, you may request access, rectification, erasure, restriction and portability of your data. You may withdraw consent and object to processing based on legitimate interests.
Write to rezerwacja@lovelaski.pl. You may also complain to the President of the Polish Personal Data Protection Office.
We do not make solely automated decisions on this website that produce legal effects or similarly significantly affect you.