Responsible party
The party responsible for data processing on this website is the operator named in the legal notice. We do not rent out the apartments ourselves or enter into rental agreements. Bookings are made via the booking system of the operator of Dune Beach Resort; the operator is independently responsible for the data collected there and will inform you separately in accordance with Article 13 GDPR.
Enquiry form and data sharing
The form does not store any data on our servers. It generates a message in your email programme or opens WhatsApp; your details (such as name, contact information, travel dates, number of guests, and requests) only reach us when you send the message. We use this information to respond to your enquiry and forward it to the operator of Dune Beach Resort, who can provide you with an offer. The legal basis is Article 6(1)(b) GDPR (measures at your request prior to entering into a contract) and (f) (processing of enquiries). If you use WhatsApp, WhatsApp’s privacy policy also applies. We retain enquiries only as long as necessary for this purpose.
Forwarding and reach measurement
When you click a booking link, we forward you to the operator’s booking system and record this event, as well as video plays and clicks on telephone, email, and WhatsApp links. Only the time, type of event, apartment, page, language, device type, referring page, and a daily changing identifier—calculated from your IP address and browser details, which cannot be reversed—are stored. The IP address itself is not stored, no cookies are set, and nothing is saved on your device. The purpose is to understand which content leads to enquiries and to document cooperation with the operator. The legal basis is Article 6(1)(f) GDPR. Event data is deleted after 14 months.
Server log files and hosting
When you access the pages, our hosting provider and an upstream content delivery network (Cloudflare) process technically necessary data such as your IP address, time, and the page accessed. This is for secure and stable operation (Article 6(1)(f) GDPR). Data may be transferred to countries outside the EEA, such as the USA; this is based on adequacy decisions or standard contractual clauses.
Maps and external links
Some pages include an embedded Google Maps map. It loads as soon as the map area comes into your view; technical data such as your IP address is transmitted to Google, and Google may set its own cookies (privacy policy: policies.google.com/privacy). Clicking on the map opens Google Maps in a new tab with route planning to us. For external links (booking system, social networks), the privacy policies of the respective providers apply.
Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability, and to object to processing based on legitimate interests. An email to info@dunebaltic.com is sufficient. You may also lodge a complaint with a supervisory authority, in Poland with the President of the Personal Data Protection Office (UODO, uodo.gov.pl), or with the authority at your place of residence. Providing your data is voluntary; however, without it we cannot respond to your enquiry. No automated decisions or profiling take place.
Status of this statement
Status: November 2026. In the event of significant changes, we will publish the current version on this page.