Privacy policy

This policy explains what personal data we process when you visit this website or send us an enquiry, why we do it and what rights you have. We keep it short, because we collect very little.

1. Who is the controller of your data

The controller of your personal data is the owners of the holiday house Villa Żubrowka Supraśl, ul. Rymarka 6, 16-030 Supraśl, Poland. You can contact us at m.skrypko@wp.pl, phone +48 880 495 994.

2. The enquiry form

When you send an enquiry through the form, we receive: your name, email address, phone number (if you provide it), your arrival and departure dates, the number of guests and the content of your message.

We use this data only to reply to your enquiry and, if you decide to book, to agree the details of your stay. The legal basis is your consent (Article 6(1)(a) GDPR) and taking steps at your request before entering into a contract (Article 6(1)(b) GDPR). Providing the data is voluntary, but without an email address we will not be able to reply.

The enquiry is delivered to our mailbox as an email. The website does not store enquiries in its database. To protect the form against spam, the server keeps an anonymised code (hash) of your IP address for one hour, which allows us to limit the number of enquiries sent from one address (our legitimate interest, Article 6(1)(f) GDPR).

We keep the correspondence for as long as it is needed to answer your enquiry and handle your stay, and then for the period required by law or needed to pursue or defend claims.

3. Who processes the data on our behalf

The website and the sending of form messages are run on a server provided by WK Digital / AllesKlar Service, Lönsweg 30, 21680 Stade, Germany, which processes data only on our behalf and on our instructions (data processor). Emails are also handled by the provider of our mailbox. We do not sell your data or pass it on for marketing purposes.

4. Server logs

Like every web server, ours automatically records technical information about each visit (IP address, date and time, the page requested, browser type). These logs are used only to keep the website secure and running, and are deleted after a short time.

5. Cookies and statistics

This website does not use tracking or advertising cookies and has no Google Analytics, Facebook pixel or other visitor statistics. Fonts are served from our own server. Technical cookies are set only when the site administrator logs in to the WordPress dashboard.

The “Get directions in Google Maps” button and the Slowhop link take you to external websites, whose own privacy policies apply.

6. Your rights

You have the right to access your data, to have it corrected or erased, to restrict its processing, to data portability and to object to processing. You can withdraw your consent at any time — this does not affect the lawfulness of processing carried out before the withdrawal. Just write to us at m.skrypko@wp.pl.

You also have the right to lodge a complaint with the supervisory authority — in Poland, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa).

Your data is not transferred outside the European Economic Area and is not used for automated decision-making or profiling.

Last updated: 3 November 2026