Contact form submissions: When you use the contact form, we collect your name, email address, and the content of your message. This data is used solely to respond to your inquiry and is not stored beyond that purpose.

Newsletter sign-up: If you subscribe to our newsletter, we collect your email address and the date of consent. The newsletter is sent every one to two weeks and covers events, seasonal conditions, new guides and one local tip. You can unsubscribe at any time using the link in any newsletter email; unsubscribing withdraws your consent for future mailings.

Analytics: This site uses Google Analytics 4 (GA4) together with Google Search Console to understand how visitors find and use the site. GA4 is implemented with Google Consent Mode: analytics cookies are only set after you give consent through the cookie banner. IP addresses are anonymised before storage. Data is used in aggregate to improve content and to report audience figures to commercial partners; we do not share individual user data with partners.

Cookies: See the cookie policy section below for full detail.

Server logs: Our hosting provider (Vercel) maintains standard server logs containing IP addresses, browser type, referring pages, and access timestamps. These logs are retained for the period set by our hosting provider's standard policy and used for security and technical diagnostics only.

Affiliate tracking: When you click an affiliate link to Booking.com, GetYourGuide, or other affiliate partners, those platforms may place cookies on your device to track whether you complete a booking. This is governed by those platforms' own privacy policies, not ours. We receive aggregate commission data but do not receive your personal booking information.

Cloudflare: This site uses Cloudflare for CDN and security. Cloudflare processes request data as part of its service. See Cloudflare's privacy policy for details.

• Responding to contact form inquiries — Legal basis: Legitimate interest / Contract; Data used: name, email, message content
• Sending newsletters (if subscribed) — Legal basis: Consent; Data used: email address
• Site analytics and improvement — Legal basis: Legitimate interest; Data used: anonymized usage data
• Security and fraud prevention — Legal basis: Legitimate interest; Data used: server logs, IP addresses
• Displaying relevant affiliate offers — Legal basis: Legitimate interest; Data used: none directly — affiliate cookies handled by third parties

What are cookies? Cookies are small text files stored on your device when you visit a website. They serve various purposes, from keeping you logged in to tracking conversions.

Strictly necessary cookies: These are required for the site to function. They cannot be disabled. Examples: security tokens, session management.

Analytics cookies: We use Google Analytics 4 with IP anonymisation and Google Consent Mode. Analytics cookies are placed only after you give consent through our cookie banner. You can withdraw consent at any time through the cookie settings link in the site footer.

Affiliate tracking cookies: When you click a link to Booking.com, GetYourGuide, or other affiliate partners, those platforms place their own tracking cookies to attribute any resulting booking to our referral. These cookies are third-party cookies subject to those platforms' own policies.

Marketing and advertising cookies: We do not run advertising on this site and do not use advertising cookies.

Managing cookies: You can manage cookies through your browser settings. Disabling certain cookies may affect site functionality. For affiliate cookies, you can opt out by not clicking affiliate links or by using browser privacy extensions.

As a data subject under GDPR, you have the following rights:

• Right of access: Request a copy of personal data we hold about you
• Right to rectification: Request correction of inaccurate data
• Right to erasure: Request deletion of your data ("right to be forgotten")
• Right to restriction: Request that we limit processing of your data
• Right to data portability: Receive your data in a machine-readable format
• Right to object: Object to processing based on legitimate interests
• Right to withdraw consent: Where processing is based on consent, withdraw it at any time

To exercise any of these rights, contact: hello@visit.zakopane.pl

We will respond within 30 days. We may request verification of your identity before processing a rights request.

Right to lodge a complaint: If you believe your data rights have been violated, you have the right to lodge a complaint with the Polish supervisory authority: Urząd Ochrony Danych Osobowych (UODO) — ul. Stawki 2, 00-193 Warszawa — Website: uodo.gov.pl — Email: kancelaria@uodo.gov.pl

• Contact form submissions — Retention: 12 months after last correspondence
• Newsletter subscriber data — Retention: until unsubscription + 30 days
• Server logs (Vercel) — Retention: per hosting provider's standard retention policy
• Analytics data (aggregated) — Retention: indefinite (anonymized, no personal data)

This site is hosted on Vercel's infrastructure, which may involve data processing in the United States. Vercel participates in mechanisms providing appropriate safeguards for international transfers under GDPR (EU-US Data Privacy Framework or Standard Contractual Clauses). See Vercel's privacy documentation for current details.

Cloudflare R2 (media storage) is configured to store data in the EU region.

This site is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

We may update this policy from time to time. The "last updated" date at the top reflects the most recent revision. Significant changes will be noted on the site.

For privacy-related questions or to exercise your rights: Email: hello@visit.zakopane.pl — Subject line: "Privacy Request — [nature of request]"