This Privacy Policy explains how Stoch Hotel Consulting Iwona Stoch processes the personal data of users of the website stochconsulting.com and of persons who contact us. We respect your privacy and process personal data in accordance with the GDPR (Regulation (EU) 2016/679) and applicable Polish law.

1. Data Controller

The controller of your personal data is:

• Stoch Hotel Consulting Iwona Stoch
• Majora Pilota Stefana Janusa 2/1, 31-571 Kraków, Poland
• NIP: 5521573847 · REGON: 122224162
• E-mail: i.stoch@stochconsulting.com · Phone: +48 511 679 551

2. What data we collect

We may process the following categories of personal data:

• Identification and contact data you provide when contacting us (e.g. first and last name, company, e-mail address, phone number);
• The content of your enquiry and our correspondence;
• Technical data collected automatically when you visit the website (e.g. IP address, browser and device type, date and time of access), stored in server logs and cookies.

3. Purposes and legal bases of processing

• Responding to enquiries and taking steps at your request before entering into a contract — Art. 6(1)(b) and 6(1)(f) GDPR;
• Performing a contract for our services — Art. 6(1)(b) GDPR;
• Complying with legal obligations, including accounting and tax obligations — Art. 6(1)(c) GDPR;
• Our legitimate interests, such as ensuring the security of the website, statistics, and establishing or defending claims — Art. 6(1)(f) GDPR.

4. Cookies

The website uses cookies. Essential cookies are necessary for the site to function correctly. We may also use analytics cookies to understand how the website is used. You can manage or disable cookies in your browser settings; disabling some cookies may affect how the website works.

5. Data retention

We keep personal data only for as long as necessary for the purposes described above — for the duration of our correspondence and cooperation, and afterwards for the period required to establish or defend claims. Accounting documents are retained for the period required by law (generally 5 years).

6. Recipients of data

Personal data may be shared with trusted service providers that process it on our behalf, such as hosting and IT providers, e-mail providers and accounting services. We do not sell personal data. Data may be disclosed to public authorities where required by law.

7. Transfers outside the EEA

As a rule, we process data within the European Economic Area. If data is transferred outside the EEA (e.g. by a service provider), we ensure the appropriate safeguards required by the GDPR.

8. Your rights

You have the right to: access your data; request its rectification, erasure or restriction of processing; data portability; object to processing carried out on the basis of our legitimate interests; and withdraw consent at any time (without affecting the lawfulness of processing before withdrawal). To exercise your rights, contact us at i.stoch@stochconsulting.com.

You also have the right to lodge a complaint with the supervisory authority — the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, Poland.

9. Provision of data

Providing personal data is voluntary but necessary to respond to your enquiry and to cooperate with us.

10. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The current version is always available on this page, together with the date of the last update.