Privacy notice for direct bookings

1. Controller and contact

The controller is AgroCamping Olsztyn, Młodzieżowa 1, 11-041 Olsztyn, Poland. Contact: agrocampingolsztyn@gmail.com, telephone +48 662 266 730.

2. Categories of data processed

For a booking, we process first and last name, country, e-mail address, telephone number, stay dates, guest counts, vehicle or tent details, dog count, payment method, an optional message, and booking and payment statuses.

For an online payment, the payer data and payment or transaction identifiers needed to process it are passed to Stripe.

The visit counter briefly processes the IP address to derive the country and apply rate limiting, as well as browser language, page path and referrer host. Conversion events contain only the event type, language, stay-length and party-size buckets, accommodation type, failure reason or selected contact channel.

3. Purposes and legal bases

Booking, contact and stay data are processed to take steps before entering into and to perform the accommodation contract (Article 6(1)(b) GDPR).

Booking, payment and refund data are also processed to comply with legal obligations, in particular accounting duties (Article 6(1)(c) GDPR).

If you consent to a review request, we store that consent with its timestamp and the accepted version of the booking terms solely for that request; you may withdraw it at any time by e-mailing agrocampingolsztyn@gmail.com.

Security, abuse and fraud prevention, handling claims, and privacy-minimised visit and conversion analytics rely on our legitimate interest in operating a secure and effective direct-booking service (Article 6(1)(f) GDPR).

4. Recipients

Recipients are Viperhost as the hosting provider, the outgoing-email provider including operational recipient mailboxes, the reception panel through an authenticated pull, the ntfy push-notification service, Stripe as the online-payment provider, and authorities entitled by law.

ntfy receives no names or contact details, only the reservation number, arrival and departure dates, guest count, and booking and payment statuses. Stripe receives the data needed to process the selected payment, a refund and fraud prevention. Our bookkeeping provider receives only the data on sales documents when a guest asks for an invoice or receipt.

5. Processing outside the EEA

Stripe may process data outside the European Economic Area under the safeguards it uses. Information about those safeguards is provided in the provider's privacy notice.

6. Retention

Booking, payment and refund records are kept for the legally required accounting and limitation periods. The criteria used to determine that period are the applicable statutory duties and the expiry of possible claims. Technical duplicates of booking requests are deleted after 30 days; notification bodies and technical booking metadata are deleted after 90 days.

Visit and conversion data are retained only as daily aggregates without identifiers. The IP address is used in memory to derive the country and apply rate limiting, but it is not stored.

7. First-party analytics, device storage and quoted reviews

The visit counter and conversion events are AgroCamping's first-party functions. We do not use third-party trackers for them.

We count website visits without cookies, storing only the day, country, language, page and referring site, never the IP address.

A session flag is stored in browser sessionStorage so the same conversion event is not counted more than once during a browser session. This is information stored on the user's device.

On this site we quote public reviews of the campsite from Google, Campcation, park4night and Stellplatz.info with the author name as published (or shortened), the date and a link to the source. The basis is our legitimate interest in presenting guest opinions truthfully (Article 6(1)(f) GDPR). An author may object at any time by e-mail to agrocampingolsztyn@gmail.com; the quote is then removed.

8. Cookies and browser storage

This site sets no cookies. Neither the server nor the page scripts set a cookie; we use no third-party analytics or advertising services and no social plug-ins. Fonts and image files are served from our own server.

We use only the browser's session storage (sessionStorage), which the browser clears when the tab is closed. It holds three kinds of entry: the stay details typed into the calculator, so they survive a switch of language version (they are read and removed at once, and an entry older than 30 minutes is ignored); the reservation number and the payment validity time, so the correct message is shown after the return from the payment page; and session flags of conversion events, so the same event is not counted twice. We do not store contact details or message text there.

The visit counter and conversion events are our own functions. The data goes only to our server api.agrocamping.eu and is stored as daily totals without identifiers. If the browser sends the Do Not Track or Global Privacy Control signal, no measurement request is sent at all.

Third-party services are contacted only after an action you take. After the play button is pressed the video is loaded from YouTube (domain youtube-nocookie.com, Google Ireland Limited); Google then receives the IP address and device details and may store information in the browser. Choosing online payment takes you to Stripe (checkout.stripe.com), and the route link opens Google Maps or OpenStreetMap in a new tab. Until such a click there is no connection to those services; their own privacy notices then apply.

We set no cookies, and the session-storage entries serve only the functions you ask for and our own aggregated audience measurement; that is why there is no consent banner. Storage in the browser can be restricted or cleared at any time in your browser settings; the site keeps working, the booking form simply will not remember what you typed when you change the language.

9. Rights, complaint and required data

Depending on the legal basis, rights include access, rectification, erasure, restriction, objection and data portability. A complaint may be made to the President of the Personal Data Protection Office in Poland (Prezes Urzędu Ochrony Danych Osobowych, UODO).

Required fields in the booking form are needed to handle and perform the booking; without them the booking cannot be accepted.

10. Automated expiry and version

An unpaid online booking expires automatically after 120 minutes and the pitch is released. This is an automated step in the payment process, not profiling.

Effective from: 2026-09-09.

Version: 2.3.