Privacy Policy

1. Scope and nature of the website

This Privacy Policy applies exclusively to https://na-szczycie.polturizm.eu/, an independent English-language informational presentation within the POLTURIZM network.

The official website of Dom Wczasowy Na Szczycie is https://na-szczycie.pl/. The official booking service is provided through IdoBooking.

2. Data controller

The controller of personal data processed in connection with the technical operation of this presentation, the consent mechanism and optional analytics is:

AKTRU is not the controller of personal data processed by Dom Wczasowy Na Szczycie, its official website, IdoBooking, map services or any other external service opened after leaving this domain. Those services operate under their own privacy rules.

3. Categories of data processed

This presentation does not provide user accounts, online payments or a contact form. The hosting infrastructure may record basic technical logs, including:

• IP address;
• date and time of the connection;
• requested resource;
• HTTP response code;
• browser and device information;
• diagnostic and security information.

After consent, Google Analytics 4 may process standard analytics information concerning visits, page views, session activity, approximate location, traffic source, device type and browser.

4. Purposes and legal bases

Technical logs are processed for security, service availability, fraud prevention, incident response and technical diagnostics. The legal basis is the controller’s legitimate interest under Article 6(1)(f) of the General Data Protection Regulation (GDPR).

Optional analytics are used to create aggregated statistics concerning website traffic, user acquisition and the use of individual language versions. The legal basis is the visitor’s consent under Article 6(1)(a) GDPR.

5. Cookies and consent

Declining analytics does not affect the essential operation of the website. The decision is stored locally in the visitor’s browser and can be changed or withdrawn at any time through the “Cookie settings” button available in the footer.

When consent is withdrawn, the website disables analytics for future activity and attempts to remove analytics cookies available to this domain, including cookies whose names begin with _ga. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

6. Optional Google Analytics 4

After consent, the website dynamically loads Google Analytics 4 using measurement ID G-8KSDH7E0LY. The service is managed by AKTRU solely to generate aggregated traffic statistics for the Na Szczycie presentation.

Before consent:

• the Google Analytics script is not downloaded;
• analytics requests are not sent;
• analytics cookies are not set by this presentation.

Google Analytics is configured with advertising personalisation disabled. Google Signals, User ID, Google Ads integrations, remarketing and cross-domain tracking are not used. The presentation does not intentionally send contact-form data, booking details or directly identifying information to Google Analytics.

7. Recipients and international transfers

Technical data may be accessible to service providers responsible for hosting, infrastructure, maintenance and security, to the extent necessary to provide those services.

After consent, Google may receive analytics data as the provider of Google Analytics 4. Data may be processed outside the European Economic Area, including in the United States. Where applicable, transfers are based on lawful safeguards such as an adequacy decision under the EU–US Data Privacy Framework or the European Commission’s Standard Contractual Clauses.

Data may also be disclosed to authorised public authorities where required by applicable law.

8. External links and services

Links to na-szczycie.pl, IdoBooking, Google Maps, social media pages and other external websites lead to separate services. Once a visitor follows such a link, the privacy rules of the external operator apply.

The map and booking system are not automatically embedded in this presentation. They are opened only after the visitor actively follows the relevant link.

9. Data retention

Technical logs are retained only for as long as necessary for security, service stability, diagnostics, incident handling and the establishment, exercise or defence of legal claims.

Event-level analytics data collected in Google Analytics 4 are retained for 2 months, in accordance with the retention setting applied to the relevant GA4 property. This setting does not necessarily affect aggregated statistical reports.

Data relating to incidents, disputes or legal claims may be retained until the matter is resolved or until the relevant limitation periods expire.

10. Your rights

Subject to the conditions laid down by the GDPR, individuals may have the right to:

• obtain access to their personal data;
• request rectification of inaccurate data;
• request erasure of data;
• request restriction of processing;
• object to processing based on legitimate interests;
• receive data in a portable format where applicable;
• withdraw consent at any time;
• lodge a complaint with a competent supervisory authority.

In Poland, the competent supervisory authority is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych — UODO).

11. Automated decision-making and AI-related resources

This presentation does not use automated decision-making or profiling to make decisions about visitors.

Machine-readable files and structured metadata, including resources intended for search engines and AI assistants, are provided solely to improve semantic indexing, interoperability and factual interpretation of the public presentation. They are not used to identify, score, profile or evaluate individual visitors.

12. Security

The controller applies organisational and technical measures appropriate to the nature and scope of the processing, including encrypted HTTPS transmission in the production environment, limited access to systems and regular technical maintenance.

No method of data transmission or storage can guarantee absolute security. Measures are therefore reviewed and adjusted according to the risks and available technical standards.

13. Changes to this policy

This Privacy Policy may be updated following legal, technical or functional changes. The current version is permanently available at: https://na-szczycie.polturizm.eu/polityka-prywatnosci.html.