Last updated: 21 September 2026
1. Who processes your data
The controller of personal data within the meaning of art. 4 (7) GDPR is Mirosław Postrożny, conducting business under the name Mirosław Postrożny cracow travel, Szczawa 325, 34-607 Szczawa, Poland, tax number (NIP) 7371438786, statistical number (REGON) 121813011, entered in the Central Register and Information on Economic Activity.
In matters concerning personal data write to booking@cracow.travel.pl. You can also call +48 698 600 000 or write to ul. Dietla 5, 31-070 Kraków, Poland.
We have not appointed a data protection officer, because the law does not require us to.
2. What data we collect and why
Booking a stay
When you book we ask for your name, e-mail address, telephone number, the number of guests and the details needed to take payment and issue an accounting document. Without them we cannot conclude a rental agreement with you. The legal basis is performance of a contract, art. 6 (1) (b) GDPR, and for settlements a legal obligation under art. 6 (1) (c) GDPR.
Contact form and correspondence
When you write to us through the form, by e-mail or by phone, we process the data contained in your message in order to answer it. This is our legitimate interest, art. 6 (1) (f) GDPR.
Website statistics
We use analytics tools to learn which pages are visited and how the site performs. The details are described in our Cookies policy. The basis is your consent, art. 6 (1) (a) GDPR, and for the cookies necessary for the site to work, our legitimate interest.
Claims
We may keep records of a stay and our correspondence in order to establish, pursue or defend against claims. This is art. 6 (1) (f) GDPR.
3. Who we share data with
Data goes only to the parties we need in order to run our business:
- the provider of the booking system in which bookings are made,
- the payment operator handling payment for the stay,
- the hosting company whose servers run this website and our e-mail,
- our accountants and legal advisers, where necessary,
- Google Ireland Limited and Google LLC, to the extent described in the Cookies policy.
We may also disclose data to public authorities where the law requires it.
4. Transfers outside the European Economic Area
This website uses Google services, including the tag manager, maps, web fonts and the anti spam protection on our form. This means your IP address and information about your browser may reach Google LLC in the United States. Google declares participation in the Data Privacy Framework and applies standard contractual clauses approved by the European Commission. Apart from those cases we do not transfer data outside the European Economic Area.
5. How long we keep data
- Booking data for the duration of the stay and then for the limitation period for claims under the Polish Civil Code.
- Accounting documents for 5 years, counted from the end of the year in which the tax obligation arose.
- Correspondence for 3 years from the last contact.
- Data processed on the basis of consent until that consent is withdrawn.
6. Your rights
You have the right to:
- access your data and receive a copy of it, art. 15 GDPR,
- rectify data that is incorrect or complete data that is incomplete, art. 16 GDPR,
- erasure of your data where we no longer have grounds to process it, art. 17 GDPR,
- restriction of processing, art. 18 GDPR,
- portability of the data you gave us, art. 20 GDPR,
- object to processing based on our legitimate interest, art. 21 GDPR,
- withdraw consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.
To use any of these rights, write to booking@cracow.travel.pl and tell us what you need. We answer within one month.
You also have the right to lodge a complaint with the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warszawa, Poland.
7. Is giving data obligatory
Giving us your data is voluntary, but without the data needed for a booking we cannot conclude a rental agreement, and without an e-mail address we cannot answer your message.
8. Automated decisions
We do not take decisions about you in a solely automated way and we do not profile you.
9. Changes to this policy
If we change the way we process data, we will update this document and change the date at the top of the page.