Privacy Policy

The facility “TATANKA” House in the Forest, located at Kamienne Bagno 39, 17-230 Białowieża, respects your right to privacy and makes every effort to ensure that your personal data is processed in accordance with the highest security standards.
Therefore, pursuant to Article 13(1) and (2) or Article 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as “GDPR”), we inform you that:

1.

The controller of your personal data is “WHITE SPOT Jacek Stasiewicz”, ul. Gliniana 12 F, 15-068 Białystok,
NIP: 5425421562123, REGON: 384884659.

2.

Contact details of the Data Protection Officer:
e-mail: domtatanka@gmail.com
or by post to the correspondence address:
“WHITE SPOT Jacek Stasiewicz”, ul. Gliniana 12 F, 15-068 Białystok.

3.

Your personal data is obtained directly from you during contact with the facility’s staff by phone, e-mail, or in person, as well as via the contact form, online reservation through our website, or through an external booking portal.

4.

Your personal data is processed for the following purposes and on the following legal bases:

a) Legal basis: Article 6(1)(a) GDPR – consent, including:

• sending commercial and marketing offers;

• providing newsletter services;

• responding to inquiries sent via the contact form, e-mail, or traditional correspondence;

• tailoring services to your indicated preferences;

• personalizing website content and adjusting advertisements after acceptance of cookies;

• processing data in the reception system to speed up future check-in procedures.

b) Legal basis: Article 6(1)(b) GDPR – performance of a contract, including:

• taking actions at your request prior to concluding a contract (e.g. making a reservation);

• conclusion and performance of a short-term rental agreement.

c) Legal basis: Article 6(1)(c) GDPR – legal obligation, including:

• fulfilling legal obligations imposed on the controller related to issuing and archiving documents for tax and accounting purposes.

d) Legal basis: Article 6(1)(f) GDPR – legitimate interest, including:

• ensuring the safety of guests and other persons staying on or around the facility premises through a video surveillance system;

• conducting guest satisfaction surveys (e.g. questionnaires) in order to assess service quality and guest satisfaction, including analysis of purchasing choices to better tailor the facility’s own products and services;

• pursuing claims related to damage caused by a guest or defending against claims made by guests, including debt collection.

5.

Your personal data will be processed:

• a) for the duration of the short-term rental agreement, and after its termination for up to 6 years for the purpose of:

  • pursuing or defending claims, including tax and civil claims;

  • documenting compliance with tax and accounting regulations;

• b) through video surveillance systems for approximately 7–14 days, unless special circumstances (e.g. an accident) require longer storage, including for the duration of legal proceedings;

• c) until consent is withdrawn – in the case of processing based on consent – and thereafter for 5 years for archival purposes in order to protect against potential claims.

Withdrawal of consent does not affect the lawfulness of processing carried out prior to its withdrawal.

6.

Recipients of your personal data may include:

• entities processing data on behalf of the controller under data processing agreements, such as IT service providers, legal, accounting, or HR support entities;

• public authorities acting under separate legal provisions, such as the police, courts, or tax authorities.

7.

Your personal data will not be transferred outside the European Economic Area or to international organizations, nor processed for purposes other than those for which it was collected.

8.

Any decisions regarding your personal data for the purposes of satisfaction surveys or personalized services will be preceded by obtaining your explicit consent.

9.

You have the right to:

• obtain information about the processing of your personal data;

• access your data and obtain a copy thereof;

• rectify, erase, or restrict the processing of your data;

• data portability;

• withdraw consent at any time, where processing is based on consent.

To exercise your rights, please contact us at the correspondence address indicated in point 1 or by e-mail at domtatanka@gmail.com.
Some rights may be subject to limitations due to other legal obligations imposed on the controller.

You also have the right to lodge a complaint with the President of the Personal Data Protection Office
(ul. Stawki 2, 00-193 Warsaw, Poland) if you believe that your personal data is being processed unlawfully.

Information on the obligation to provide data and consequences of failure to do so

Providing personal data is voluntary but constitutes a contractual requirement. Failure to provide personal and contact data will prevent the facility from making a reservation prior to your arrival, concluding a contract, and issuing a VAT invoice. Consequently, you will not be able to use the facility’s services. Therefore, providing personal data is necessary to perform the tasks described above.