Privacy policy

Controller and contact

Form submissions are received by the operator of Natura Park family holiday resort, ul. Spokojna 1a, 78-111 Ustronie Morskie, Poland. Privacy enquiries: naturapark@wp.pl.

Data and purposes

We process your name, email, phone number, stay dates, cottage type, number of adults and children, pet information and message to respond, prepare an offer and arrange your stay. Fields marked with an asterisk are required to submit the form; providing information is voluntary. Do not include sensitive information or unnecessary personal information about other people.

Legal bases

Enquiries about a planned stay are handled to take steps at your request before entering into a contract (GDPR Article 6(1)(b)). Protecting the form against abuse and handling other correspondence rely on the controller’s legitimate interests (Article 6(1)(f)). This form does not subscribe you to a newsletter.

Recipients and external services

Cloudflare (hosting and Turnstile), Resend (delivery) and WP email services assist with the website and correspondence. They receive data needed for their service. Processing may take place outside the EEA; information about safeguards is available from the providers and the controller’s contact address. Embedded Google Maps connect to Google and may send your IP address and browser details under Google’s policies.

Retention

We keep enquiry data for as long as needed to handle correspondence and arrangements for your stay. If a booking follows, retention also depends on legal duties and the time limits for establishing or defending claims. Contact us for details relating to your message.

Your rights

You may request access, rectification, erasure or restriction and, where applicable, data portability. You may object to processing based on legitimate interests and complain to the Polish supervisory authority, the President of UODO. Rights are subject to the conditions in the GDPR. An enquiry does not result in an automated booking decision.

Form operation

Your message is sent after you submit the form and complete anti-spam verification. Submission does not confirm a booking.

Draft for the test website: before publication, add the controller’s full legal name and confirm retention periods and provider data-transfer safeguards.