Privacy and Cookie Policy

This Privacy and Cookie Policy (hereinafter referred to as the “Policy”) sets forth the rules for the processing and protection of users’ personal data in connection with their use of the website: www.izerskie.com.pl (hereinafter referred to as the “Website”).
The provisions of this Privacy and Cookie Policy also supplement the privacy and cookie policy applied and posted on the website https://client6202.idobooking.com/book-now/, where the booking process takes place.
The controller of the personal data of users of the Website is Epal S.A., with its registered office in Wrocław at ul. Redycka 71, 51-169 Wrocław, entered in the National Court Register – Register of Entrepreneurs by the District Court for Wrocław Fabryczna in Wrocław, 6th Commercial Division of the National Court Register, under KRS No.: 413679, NIP: 8951765172, REGON: 932719132 (hereinafter referred to as the “Administrator“).
The Administrator collects information about Website users and their behavior:
1. through the user’s voluntary entry of data into the Website,
2. by storing cookies on end-user devices.
Out of concern for the security of the personal data entrusted to it, the Administrator operates in accordance with internal procedures and recommendations, consistent with relevant legal acts regarding the protection of personal data, and in particular with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ EU L 2016 No. 119, p. 1, as amended).
The controller may process the following information:
1. users’ personal data in connection with their use of the Website: first name, last name, residential address, email address, phone number, PESEL/passport number/ID card number, and payment card or bank account number.
2. information regarding the User’s device to ensure the proper functioning of services: computer IP address, information contained in cookies or other similar technologies, session data, web browser data, device data, data regarding activity on the Website, including on individual subpages;
3. geolocation information, if the Guest/User has consented to the service provider’s access to geolocation. Geolocation information is used to provide more tailored product and service offers.
Providing this data, in particular personal data, is voluntary and free of charge; however, failure to provide it will prevent registration on the Website and the use of certain Website services.
The Administrator processes the data referred to in point 5 above for the purpose of:
1. responding to user inquiries submitted via the contact form on the Website,
2. accepting reservations via the online booking system through the Website,
3. providing services offered by the Administrator via the Website, i.e., when processing is necessary for the performance of a contract,
4. marketing purposes, including sending commercial information to an email address or via SMS/RCS messages, by phone, as well as via WEBPUSH notifications and traditional mail, provided the Customer has consented to this by checking the appropriate box during the booking process via the Website, when submitting an inquiry via the Website’s contact form, or when entering into a contract. Consent to the processing of data for marketing purposes and the sending of commercial information may be withdrawn at any time by sending such a request to the Administrator’s email address,
5. pursuing the Administrator’s legitimate interests, i.e., processing payments, debt collection, pursuing claims, handling complaints, preparing accounting documents, and resolving disputes).
Data related to the use of the Website is stored for the period necessary to achieve the purposes specified in the Policy, and thereafter for the time required by law or until claims become time-barred.
Recipients of the user’s personal data may include authorities, institutions, and entities authorized by law, as well as entities providing services to the Controller (e.g., legal, IT, marketing, and accounting services, and other entities involved in the provision of the requested service, such as the booking engine provider and channel manager).
The Administrator may use automated decision-making, including profiling, for marketing purposes and to tailor the offer to the user.
The Website user who provided the data has the right to access the data processed by the Administrator. The user also has the right to modify this data, request its deletion, and restrict or cease the processing of their personal data at any time. At any time, the user may also request the deletion of their personal data from the Website to the extent permitted by law, excluding situations requiring the retention of information for a period mandated by law.
The Website user has the right to withdraw consent at any time without affecting the lawfulness of the processing carried out on the basis of consent prior to its withdrawal.
To exercise the rights described above, the Website user should contact the Administrator using the same email address provided to the Website by sending a message to: rodo@izerskie.com.pl.
Any user of the Website may file a complaint with the Personal Data Protection Office.
Upon their first visit to the website: www.izerskie.com.pl, users are informed about the use of cookies. By remaining on the site, users accept the use of cookies on the website. Failure to change browser settings on the user’s end is tantamount to consenting to the use of cookies.
The installation of required cookies is necessary for the proper provision of services on the Website. Cookies contain information necessary for the proper functioning of the website, particularly those requiring authorization. The user may change their browser settings regarding the handling and storage of cookies at any time.
The following types of cookies are used on the Website:
1. session cookies – remain in the browser until it is closed or the user logs out of the website on which they were placed,
2. persistent cookies – remain in the device’s web browser until they are deleted by the user or until a predetermined time specified in the cookie’s parameters.
In terms of functionality, cookies can be divided into:
1. conversion cookies, which allow for the analysis of the performance of various sales channels,
2. tracking cookies, which, in combination with conversion cookies, help analyze the performance of various sales channels,
3. marketing cookies, used to personalize ad content and ensure proper targeting,
4. analytical tools, which help improve the user experience by understanding how users interact with the site,
5. essential cookies, which are fundamental to the website’s basic functionality.
Some cookies may be placed by the website and online booking system provider solely for the purpose of:
1. improve and support the booking process,
2. analyze and collect statistical data regarding the use of the website and the online booking system in order to improve them,
3. determine the user’s profile to display product recommendations and tailored content on advertising networks, particularly the Google network,
4. identifying the User and logging them in,
5. customizing the information and appearance of the Website to individual preferences.
The Administrator collects the IP addresses of visitors to the Website, which are useful for diagnosing technical issues with the server, creating statistical analyses, or verifying the location of both real users and web bots.
The Website may contain links to other websites that operate independently of the Website and are not supervised by the Website in any way. These websites may have their own privacy policies and terms of service, which we recommend you read carefully.
The Administrator uses third-party services for statistics, improvement, and analysis of the Website. Third parties use cookies, and such services are provided by entities such as Google, Facebook, YouTube, X, Instagram, and GetResponse. This Policy does not govern the rules for the use of cookies by third parties.
The Administrator reserves the right to make changes to this Policy, which may be caused by the development of internet technology, potential changes in data protection laws, and the development of the Website. We will inform users of any changes in a visible and understandable manner by updating this Policy on the Website with the effective date indicated.
The Privacy Policy may be made available in various language versions. In the event of discrepancies between individual language versions or interpretative doubts, the Polish version of the Privacy Policy shall prevail.

The latest and current version (v. 3.0) of the Privacy Policy and Cookie Policy is effective as of: April 1, 2026.