Privacy Policy

This policy describes what happens to information when you read this website, and what happens if you write to us through it. It was written for this hotel and this address.

Who publishes this site

Wislavin, ul. Rabiańska 14, 87-100 Toruń, Poland, is the controller of personal data collected through this site. Write to [email protected] or call +48 56 412 87 30; mark an envelope or a subject line "data protection" and it reaches the person responsible.

What this site does not do

The site has no booking engine, so no room is reserved, no table is held and no place on the second floor is registered through these pages, and no payment of any kind is taken. Guests have no account, login or password. Nothing you do on this website creates a record under your name unless you choose to write to us using the form.

What is collected

If you only read

Nothing is collected about you by name. The pages are static files, and while consent is in its default state (refused) no tag fires and no profile is built.

Two values kept in your browser

The site writes at most two small values into your browser's local storage, on your own device, readable only by this site:

• tr_age_ok: records that you confirmed you are 18 or over, so the age notice does not reappear on every visit.
• tr_consent: records whether you accepted or declined measurement and advertising tags.

Neither value reaches our servers or identifies you. Clearing site data in your browser removes both, and the site then asks again. If your browser refuses storage, in a private window for example, the site asks on every visit.

Server logs

The hosting provider records ordinary technical lines when a page is served: the requesting IP address, the time, the file requested, the HTTP status, the referring page if the browser sent one, and the user-agent string. These are used only to keep the site up and to look into abuse or faults. They are kept for 30 days and then overwritten.

What you type into the contact form

If you use the enquiry form you decide what is in it: your name, an email address, dates, and whatever you write in the message. Please do not put document numbers, card numbers or health information in it. The form is read by reception staff only.

Analytics and advertising

No analytics or advertising tag is installed on this site at present. The pages do carry Google Consent Mode defaults, set to denied for storage, advertising, advertising personalisation and analytics before anything else runs, so that if a measurement tag is added later it starts switched off. It will only ever switch on for a visitor who has pressed Accept in the cookie bar. Details are in the Cookie Policy.

Why we are allowed to hold it

• Your consent (Article 6(1)(a) GDPR) for the two stored values beyond what is strictly necessary, and for any measurement or advertising tag.
• Steps before a contract (Article 6(1)(b)) when you write asking about a room or a table and we answer.
• Our legitimate interest (Article 6(1)(f)) in keeping the website available, secure and free of abuse, which is what the server logs serve.
• A legal obligation (Article 6(1)(c)) where Polish gaming, hotel registration or accounting law requires a record. Those records arise from your visit to the building, not from this website.

How long it is kept

• Server logs: 30 days.
• Enquiry messages: up to 12 months after the last reply, then deleted, unless they turn into a stay and accounting rules say otherwise.
• The two browser values: on your device until you clear them. tr_age_ok is written without an expiry; tr_consent should be reviewed by you whenever you like, through the Cookie settings link in the footer.

Who else sees it

Two kinds of provider handle it: the hosting company that serves these files, under a written processing agreement and inside the European Economic Area, and the email provider that carries messages from the form to the reception inbox. We do not sell data, share it with advertising networks or pass it to other businesses in the old town.

If a measurement tag is ever added and you accept it, Google becomes a recipient for that data and may process it outside the EEA under the European Commission's standard contractual clauses. The cookie bar will say so before anything is set.

Your rights

Under the GDPR you may ask us for a copy of what we hold about you, ask for a correction, ask for deletion, ask us to restrict or stop a particular use, object to processing based on legitimate interest, and withdraw a consent you gave without that affecting what happened before. Write to [email protected]. We answer within one month and we do not charge for it. If you are not satisfied, you may complain to the Polish supervisory authority, the President of the Personal Data Protection Office, whose address is published on its own website.

Children

This site is not meant for children, and nothing on it is aimed at them. The gaming pages are for adults only; Polish law sets the age at 18 and the door team checks photo ID on every visit. We do not knowingly collect anything from anyone under 18 through this website. If you believe a child has sent us something through the form, write and we will delete it.

Security

The site is served over HTTPS. The reception mailbox sits behind two-factor authentication and is read by named staff. No database of visitors sits behind these pages, since there is nothing to put in one.

Changes

If this policy changes, the new text replaces this one at the same address and the review date at the top moves. Where a change matters, for instance if a measurement tag is introduced, the cookie bar reappears and asks for a fresh answer.