1. Data controller
The data controller is PH Omega Dagmara Szamborska, Polish tax identification number NIP 5842032374, Grunwaldzka 499/1, 80-320 Gdańsk, Poland. For matters concerning your personal data, email rezerwacja@wiataborodziej.pl.
2. Contact form
When you contact us through the form, we process your first and last name, email address, phone number and message. If you provide them, we also process your preferred event date, whether the enquiry concerns a company event and the company's Polish tax identification number (NIP). We use this information to answer your enquiry or arrange a booking. The legal basis is taking steps at your request and the controller's legitimate interest.
3. Online booking
The booking system is displayed in an embedded window supplied by an external provider. Information entered directly in this window is processed under the privacy rules of the booking and payment service providers.
3a. Online agreement and email code
The controller identified in section 1 is responsible for agreement data. For agreement and related data enquiries, contact umowy@wiataborodziej.pl.
After you open the agreement link, we retrieve the booking number, booker's name, available phone number, dates, booking scope, price, required deposit and payment status from RentAdmin. The payment deadline may be passed in the email link. The form collects the name of the person entering into or confirming the agreement, address, email and phone number. Companies must provide their full name, Polish tax number (NIP), registered address and representative's details. For individuals, the current form also requires the identity document series and number to identify the contracting party and check details at handover. We do not collect identity document photos or copies and do not require a Polish PESEL number.
We record the accepted agreement and terms, required declarations, document identifier, booking number, email verified by code, confirmation date and time in the Europe/Warsaw time zone, file checksum and copy delivery status. Codes are valid for 10 minutes. The PDF is stored in a private hosting archive and emailed to the tenant and Borodziej staff. The booking number and the tenant's name or company name also appear in the email subject and filename. The identity document number is included in the agreement, not in the email subject or filename.
We process data to take steps before a contract and perform it (GDPR Article 6(1)(b)), fulfil applicable tax and accounting obligations (point (c)), and communicate with company representatives, document declarations, prevent impersonation and establish, exercise or defend legal claims (point (f)). The latter purposes are the controller's legitimate interests. Acceptance of the agreement or terms is not marketing consent or consent to unrestricted processing.
Fields marked as required are necessary to complete the current online form; this does not mean that each field is required by statute. If you have concerns about the requested data or cannot use the form, contact us before the event to agree how to identify you and complete the formalities. Data must be adequate and limited to what is necessary for the stated purposes.
The agreement page uses an essential session cookie to connect the booking, form and code confirmation. Hashed identifiers, including IP address hashes, limit attempts and help prevent abuse. The hosting provider may record technical connection logs. Agreement data is not used for profiling or solely automated decisions with legal effects; code and field validation support the user's declaration.
4. Cookies, booking measurement and advertising
Essential storage keeps the contact form working and remembers your privacy choices. Google Analytics 4 operates in advanced consent mode: before consent, limited measurements are sent without analytics cookies. Optional analytics and advertising storage remain disabled until you choose to allow them.
We measure booking availability, package selection, booking steps, submitted reservations and contact enquiries accepted by our mail server. Measurement may include a booking reference, the value and currency reported by RentAdmin, the page and language. A submitted reservation is not proof that a deposit has been paid. Our measurement code does not send your name, email, phone number, message, tax number or booking access hash to Google.
Analytics consent enables Google Analytics cookies. Separate advertising consent permits Google Ads measurement and personalised ads, including reminders for visitors who have not completed a booking and excluding people who have already booked. An earlier analytics-only choice is not advertising consent. You can refuse optional storage or change and withdraw your choices at any time through “Cookie settings” in the footer.
We remember your choices for up to 180 days. With optional measurement consent, this website can keep limited technical identifiers for up to 90 days to prevent duplicate conversion counts. Google also processes measurement data under its own settings and information about data from partner sites. Consent is the basis for optional cookies and advertising personalisation. Refusing them does not prevent you from booking or contacting us.
5. Recipients and retention
Personal data may be entrusted to providers of hosting, email, booking and payment services. We keep it only for as long as necessary to handle your enquiry, booking and accounts, or as required by law.
Agreement processing uses Hostinger hosting, Google Workspace email and RentAdmin booking data. Authorised venue staff, accountants and legal advisers may receive data as necessary, as may legally entitled authorities. Agreements and confirmation records are retained during performance and then as needed for accounting and establishing, exercising or defending claims, taking applicable limitation periods and any suspension or interruption into account. Tax documents are retained for the statutory tax retention period. Relevant data may be retained until a dispute is finally resolved and settled. This also applies to email copies; changes to the terms do not replace previously confirmed PDFs.
5a. Transfers outside the EEA
Using Google Workspace may involve processing outside the European Economic Area, including in the USA. Google describes applicable transfer grounds, including adequacy decisions and standard contractual clauses, in its data transfer frameworks. Contact the controller for information about safeguards applicable to your data and how to obtain a copy.
6. Your rights
Subject to GDPR conditions, you may request access and a copy, rectification, erasure or restriction. You have a right to portability for automated processing based on a contract or consent, and may object on grounds relating to your particular situation to processing based on legitimate interests. Where processing relies on consent, you may withdraw it at any time without affecting the lawfulness of earlier processing. These rights are subject to statutory conditions; erasure may not cover data needed for statutory accounting or legal claims. You may also lodge a complaint with the President of the Personal Data Protection Office in Poland.
