Privacy Policy

The party responsible for data processing on this website is Dom Turysty Sanok. For any questions regarding data protection you can reach us by email at biuro@domturystysanok.pl.

When you make a booking through this website, we process the following personal data:

• First and last name, email address, phone number
• Home address (for invoicing)
• Stay details (arrival and departure, number of guests)
• Payment data — processed exclusively via Stripe
• Messages you send us via the contact form or by email
• Data for the statutory guest registration pursuant to § 30 Bundesmeldegesetz (German Federal Registration Act), where required

• Art. 6(1)(b) DSGVO (GDPR) — performance of a contract (accommodation contract).
• Art. 6(1)(c) DSGVO (GDPR) — legal obligation (registration duty, accounting, tax law).
• Art. 6(1)(f) DSGVO (GDPR) — legitimate interests (IT security, service improvement, fraud prevention).
• Art. 6(1)(a) DSGVO (GDPR) — consent (marketing, optional cookies).

We only pass on your data to the following processors, and only to the extent necessary:

• Stripe Payments Europe, Ltd. — payment processing
• Supabase Inc. — hosted database (servers in the EU)
• Vercel Inc. — website hosting
• Resend Inc. — sending of booking confirmations and service emails
• Competent registration authority at the apartment location — guest registration pursuant to the Bundesmeldegesetz

Booking and invoicing data are retained for 10 years pursuant to § 147 of the German Fiscal Code (AO). General communication with guests is deleted 2 years after the stay. Marketing consents remain valid until they are revoked.

We use exclusively technically necessary cookies (session, language preference). We only set analytics and marketing cookies after your explicit consent via the cookie banner. You can revoke your consent at any time.

The reviews displayed on our pages come from two sources: overall ratings taken from booking platforms (e.g. Airbnb) — these are marked as such — as well as reviews from guests who have demonstrably booked through this website and completed their stay. A review can only be submitted via a personal link that guests receive after check-out; reviews without a prior stay are not possible.

You have the right at any time to:

• access to the data we store about you (Art. 15 DSGVO)
• rectification of inaccurate data (Art. 16 DSGVO)
• erasure of your data (Art. 17 DSGVO)
• restriction of processing (Art. 18 DSGVO)
• data portability (Art. 20 DSGVO)
• object to the processing (Art. 21 DSGVO)

Please address requests to biuro@domturystysanok.pl. You can lodge a complaint with the competent supervisory authority (the data protection commissioner of the respective federal state).

This website is transmitted via an encrypted HTTPS connection (TLS). All entries in booking and contact forms are transmitted end-to-end encrypted.