Privacy Policy

We care about your privacy. This policy explains what personal data we collect, how we use it, and what rights you have regarding its processing.

1. Data Controller

The Controller of your personal data is:

Hotel St. Bruno
ul. Św. Brunona 1, 11-500 Giżycko
NIP: 739-358-18-93 · REGON: 280145402 · KRS: 0000256622
Contact: recepcja@hotelstbruno.pl · Tel. +48 87 732 65 00

2. What data do we collect?

• Booking data: first name, last name, email address, phone number, residential address, payment card details (processed by an external payment operator).
• Contact form data: first name, last name, email, message content.
• Technical data: IP address, browser type, operating system, visit duration (for statistical purposes).
• Cookies: we use them to ensure the proper functioning of the website, traffic analysis, and content personalization.

3. Purpose of data processing

• Processing reservations and hotel agreements.
• Contact regarding reservations and stays.
• Sending marketing information (with your consent).
• Improving service quality and analyzing website traffic.
• Fulfilling legal obligations (e.g., tax records).

4. Legal basis for processing

• Art. 6(1)(b) GDPR – necessity for contract performance (booking).
• Art. 6(1)(c) GDPR – compliance with a legal obligation.
• Art. 6(1)(a) GDPR – your voluntary consent (e.g., for marketing).
• Art. 6(1)(f) GDPR – legitimate interest (e.g., statistical analysis).

5. Who do we share data with?

Your data may be shared with entities processing data on our behalf, such as:

• booking system providers,
• payment operators,
• hosting and IT companies,
• analytics tool providers (e.g., Google Analytics).

All our partners apply appropriate technical and organizational security measures.

6. Data retention period

We retain your data for the period necessary to fulfill the purpose for which it was collected, and then for the time required by law (e.g., accounting records – 5 years). Marketing data is stored until you withdraw your consent.

7. Your rights

You have the right to:

• access your data,
• rectify inaccurate data,
• erase your data (the "right to be forgotten"),
• restrict processing,
• data portability,
• object to processing,
• withdraw your consent at any time.

To exercise these rights, please contact us: recepcja@hotelstbruno.pl.

8. Cookies

Our website uses cookies. You can manage your cookie settings in your browser. Detailed information can be found in our Cookie Policy.

9. Security

We apply appropriate technical and organizational measures to protect your data from loss, unauthorized access, or destruction.

10. Changes to this policy

We reserve the right to update this policy. Any changes will be announced on our website.