Privacy Policy

Grand Vistula Club · grandvistulaclub.com · Effective 2026

1. Data controller

The controller of personal data is the publisher of grandvistulaclub.com, reachable at ul. Zabłocie 25/L02, 30-701 Kraków, Poland, email [email protected]. Identifiers: REGON 365859768, NIP PL6762516478, KRS 0000646895.

2. Scope

This policy explains how we process personal data when you visit the website or contact us. The site publishes editorial hotel and city content. It does not process payments for rooms or gambling services.

3. Data we may process

  • Contact data you send (name, email, message content).
  • Technical data in server logs (IP address, date/time, URL, user agent) for security and stability.
  • Cookie / local storage data as described in our Cookies policy.

4. Purposes and legal bases (RODO / GDPR)

  • Responding to inquiries — Art. 6(1)(b) or (f) GDPR.
  • Operating and securing the website — Art. 6(1)(f) GDPR.
  • Meeting legal duties under Polish law — Art. 6(1)(c) GDPR.

5. Recipients

We do not sell personal data. Hosting or email providers may process data as processors under contract where needed to run grandvistulaclub.com.

6. Transfers outside the EEA

If tools outside the EEA are used, we rely on appropriate safeguards (e.g. standard contractual clauses) where required.

7. Retention

Contact messages are kept only as long as needed to handle your request, then deleted or restricted unless longer storage is required by Polish law. Logs rotate on a short cycle.

8. Your rights

Under the GDPR / RODO you may request access, rectification, erasure, restriction, portability, and object to processing based on legitimate interests. You may lodge a complaint with the President of the Personal Data Protection Office (UODO) in Poland.

9. Children

Adult orientation notes are aimed at readers 18+. We do not knowingly collect children’s data.

10. Contact

Privacy questions: [email protected]