Privacy Policy

Last updated: April 13, 2026

1. Data Controller

The controller of your personal data is:

Agnieszka Pindel
Email: [email protected]

2. What data we collect and why

Purpose Data Legal basis Retention
Contact form Name, email, message Art. 6(1)(f) GDPR (legitimate interest) Until inquiry resolved, max. 12 months

Where processing is based on legitimate interest (Art. 6(1)(f) GDPR), you have the right to object to the processing of your personal data at any time (Art. 21 GDPR).

3. Data recipients

Your data may be shared with:

  • Google LLC (USA) — booking calendar (Google Calendar API), traffic analytics (Google Analytics 4)
  • OVH SAS (France) — website and email hosting

These providers process data under their respective Data Processing Agreements, accepted as part of their terms of service.

4. Data transfers outside the EEA

Google LLC processes data in the USA under the European Commission's adequacy decision (EU-US Data Privacy Framework).

5. Your rights

Under the GDPR, you have the right to:

  • Access your personal data
  • Rectify inaccurate data
  • Request erasure of your data
  • Restrict processing
  • Data portability
  • Object to processing
  • Withdraw consent at any time

To exercise these rights, contact: [email protected]

You also have the right to lodge a complaint with the Polish Data Protection Authority (UODO).

6. Voluntary provision of data

Providing personal data is voluntary. However, not providing the required data in the contact form will prevent us from handling your inquiry.

7. Cookies and analytics

This website uses cookies and localStorage. Analytics cookies (Google Analytics 4) are only loaded after the user grants consent via the cookie banner.

Name Category Purpose Duration Provider
cookie_consent Essential Stores the user's cookie consent decision (localStorage) Permanent (until browser data is cleared) syrenabyc.pl
_ga Analytics Distinguishes users in Google Analytics 4 2 years Google LLC
_ga_4K7ZS5G9EE Analytics Maintains session state in Google Analytics 4 2 years Google LLC

Legal basis for analytics cookies: Art. 5(3) ePrivacy Directive (consent) and Art. 6(1)(a) GDPR. Essential cookies: Art. 6(1)(f) GDPR (legitimate interest).

You can change or withdraw your consent at any time by clicking the "Cookie settings" link in the footer.

8. Automated decision-making

We do not make decisions based solely on automated processing, including profiling, that would produce legal effects or similarly significantly affect you.

9. Changes to this policy

We reserve the right to update this privacy policy. The current version is always available at syrenabyc.pl/privacy-policy.html.