Privacy Policy

Last updated: 23 September 2026

  1. Controller

The controller responsible for processing personal data through this website is:

PALAC LUBINICKO SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ
Lubinicko 26
66-200 Lubinicko
Poland

KRS: 0001101770
NIP: 9271973593
REGON: 528432914

Email: inquiries@palaclubinicko.com

We have not appointed a Data Protection Officer. Questions concerning your personal data may be sent to the email address above.

  1. Personal Data We Process

Depending on how you use the website, we may process:

  • Your first and last name
  • Your email address
  • Your telephone number
  • Proposed event dates
  • Information included in your inquiry or message
  • Technical information such as your IP address, browser type, device information, access time and server logs
  • Cookie preferences and consent records

Please do not include sensitive personal information in an inquiry unless it is necessary.

  1. Contact and Event Inquiries

When you submit the contact or event-inquiry form, we process the information you provide to:

  • Respond to your inquiry
  • Discuss availability, services and pricing
  • Prepare a proposal or take steps toward entering into an agreement
  • Maintain records of our correspondence
  • Establish, exercise or defend legal claims where necessary

The legal bases for this processing are:

  • Article 6(1)(b) GDPR, where processing is necessary to respond to your request or take steps before entering into a contract
  • Article 6(1)(f) GDPR, based on our legitimate interests in communicating with prospective clients, administering inquiries and protecting our legal interests
  • Article 6(1)(c) GDPR, where processing is required to comply with a legal obligation

Providing the information marked as required in the form is necessary for us to process and answer your inquiry. Optional information does not have to be provided.

  1. Email Processing

Website inquiries are sent through our Hostinger email account at inquiries@palaclubinicko.com and may be forwarded to and handled through a Google Gmail account.

Email messages may therefore be processed by Hostinger and Google as service providers. These providers may process technical and account information according to their respective contractual and privacy terms.

When replying to an inquiry, we use the email address supplied by the person submitting the form.

  1. Hosting and Server Logs

The website and related email services are hosted by Hostinger. When you visit the website, the hosting provider may process technical information, including IP addresses, browser information, requested pages, timestamps and security logs.

This processing is necessary to deliver the website, maintain its security, diagnose technical problems and prevent misuse. The legal basis is Article 6(1)(f) GDPR and our legitimate interest in operating a secure and reliable website.

Technical logs are normally retained only for the period reasonably necessary for security and diagnostic purposes, unless longer retention is required to investigate an incident or comply with a legal obligation.

  1. Cookies and Similar Technologies

The website uses necessary cookies and may use optional cookies or similar technologies. Necessary cookies support functions such as security and remembering consent preferences.

Optional cookies are used only after consent where consent is legally required. The legal basis for optional cookies and related processing is Article 6(1)(a) GDPR.

You can accept, reject or change your cookie preferences through the cookie banner. Additional information is available in our Cookie Policy.

  1. Google Fonts

The website may use Google Fonts. Where fonts are loaded from Google servers, technical information such as an IP address may be transmitted to Google. Where required, this service is activated only after the relevant cookie or service consent has been provided.

  1. Recipients of Personal Data

Personal data may be disclosed only where necessary to:

  • Website, hosting and email service providers
  • Google, where Gmail or Google services are used
  • IT and website-support providers
  • Accountants, lawyers and other professional advisers
  • Public authorities where disclosure is required by law

Service providers may process personal data only for the purposes of providing their services and subject to applicable contractual and legal safeguards.

We do not sell personal data.

  1. International Data Transfers

Some service providers, including Google, may process data outside the European Economic Area.

Where personal data is transferred outside the European Economic Area, we rely on an adequacy decision, Standard Contractual Clauses or another transfer mechanism permitted under the GDPR, as applicable.

  1. Retention

We retain personal data only for as long as necessary for the purpose for which it was collected.

Inquiries that do not result in a booking are normally retained for up to 24 months after the last substantive communication, unless earlier deletion is appropriate or longer retention is necessary in connection with a dispute or legal claim.

Where an inquiry results in a contract, booking or payment, relevant information may be retained for the duration of the contractual relationship and for any additional period required under tax, accounting and other applicable laws.

Cookie-consent records and technical logs are retained according to the relevant technical settings and legal requirements.

  1. Your Rights

Subject to the conditions established by the GDPR, you may have the right to:

  • Request access to your personal data
  • Request correction of inaccurate or incomplete data
  • Request deletion of your personal data
  • Request restriction of processing
  • Object to processing based on legitimate interests
  • Receive certain personal data in a portable format
  • Withdraw consent at any time where processing is based on consent

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

Requests concerning these rights may be sent to inquiries@palaclubinicko.com. We may need to verify your identity before completing a request.

  1. Complaints

You have the right to lodge a complaint with the Polish supervisory authority:

President of the Personal Data Protection Office
Personal Data Protection Office
ul. Stanisława Moniuszki 1A
00-014 Warsaw
Poland

Website: https://uodo.gov.pl

  1. Automated Decision-Making

We do not use information submitted through the website to make decisions based solely on automated processing that produce legal or similarly significant effects.

  1. Security

We use reasonable technical and organizational measures intended to protect personal data against unauthorized access, loss, alteration or disclosure. No internet transmission or storage system can be guaranteed to be completely secure.

  1. Changes to This Policy

We may update this Privacy Policy when the website, our services or applicable legal requirements change. The current version and its last-updated date will be published on this page.