Privacy policy

1. Data controller

The controller of personal data is:

Email for personal data enquiries: golonkarnia@golonkarnia.pl
Phone: +48 721 212 219

The controller has not appointed a Data Protection Officer. For personal data matters, please contact the controller directly at the email address above.

2. Scope of this policy and data processed

This policy applies to the public golonkarnia.pl website. The website has no form and does not directly collect information entered by users.

When the website is displayed, the server infrastructure may record the IP address, request date and time, requested URL, browser and device information, referring page address and server response code in technical logs.

If you contact the controller by email or phone, the information you voluntarily provide, such as your name, contact details and message content, will be processed.

3. Purposes and legal bases

Website operation and security

Technical log data is processed to deliver the website, diagnose errors, ensure security and prevent abuse. The legal basis is the controller’s legitimate interest in providing the website securely and correctly — Article 6(1)(f) GDPR.

Contact with the controller

Information provided in a message or conversation is processed to respond and continue correspondence. The legal basis is the controller’s legitimate interest in handling enquiries — Article 6(1)(f) GDPR. If the contact concerns entering into or performing a contract, Article 6(1)(b) GDPR may apply.

Website analytics

If a user consents to analytics cookies, website usage data is processed to produce statistics, assess the popularity of content and improve the website. The legal basis is consent — Article 6(1)(a) GDPR. Consent may be withdrawn at any time in the cookie settings.

Establishing, exercising or defending legal claims

Where necessary, data may be processed to establish, exercise or defend legal claims on the basis of the controller’s legitimate interest — Article 6(1)(f) GDPR.

4. Retention periods and recipients

Technical logs are retained for the period needed to maintain website operation and security, diagnose errors and investigate incidents, in accordance with the infrastructure and hosting provider settings.

Correspondence data is retained for as long as needed to handle the matter and then, where applicable, until the end of the period in which related claims may arise or be pursued, or for the period required by law.

Analytics data is retained for the period set in Google Analytics, and identifiers stored in the browser until they expire, are deleted by the user or consent is withdrawn. Withdrawing consent stops further measurement on this website.

Data recipients may include hosting and server infrastructure providers, parties providing technical support to the controller and, after analytics consent, Google Ireland Limited as the Google Analytics provider. Data may also be disclosed to authorised authorities where required by law.

5. Google Analytics and transfers outside the EEA

After analytics consent is given, the website uses Google Analytics 4, a service provided by Google Ireland Limited. The service helps identify, among other things, which pages are visited, the types of devices and browsers used and basic interactions with the website.

The Google tag is not loaded before analytics consent is obtained. Advertising categories remain disabled by default. The website does not send form entries to Google, as the public website has no form.

When Google services are used, data may be processed outside the European Economic Area. Details about privacy practices and safeguards are available in the Google privacy policy.

6. Your rights

Within the limits provided by the GDPR, you have the right to:

• access your data and receive a copy;
• have your data rectified;
• have your data erased;
• restrict processing;
• object to processing based on legitimate interests;
• data portability, where applicable;
• withdraw consent at any time where processing is based on consent, without affecting the lawfulness of earlier processing;
• lodge a complaint with the President of Poland’s Personal Data Protection Office.

To exercise your rights, write to golonkarnia@golonkarnia.pl.

7. Voluntary provision of data and automated decisions

Providing data when contacting us by email or phone is voluntary, but without the information needed to respond we may be unable to handle your enquiry. Technical data is generated automatically when your device communicates with the server and is needed to display the website.

The controller does not make automated decisions about website users or carry out profiling.

8. Cookies and consent settings

The website stores your analytics consent choice in the browser’s local storage. This is needed so that the website does not ask you to make the same choice on every page view.

After consent is given, Google Analytics may store analytics identifiers, particularly cookies beginning with _ga, which distinguish users and sessions. Without analytics consent, the Google tag is not loaded and the implemented mechanism does not create analytics cookies.

Consent can be changed or withdrawn at any time using the “Cookie settings” button in the footer. Withdrawing consent does not affect the lawfulness of processing before withdrawal.

9. External reservation system

The reservation button leads to the separate website https://rezerwacje.golonkarnia.pl. After moving to that domain, you are using a separate service and should read its privacy information before providing data. This policy does not describe the detailed processing in the reservation system.