Kamianna 50, 33-336 Łabowa info@miodnyszlak.pl
+48 537 236 572

Privacy policy

Read about how your personal data is protected, our cookie policy, and your privacy rights under GDPR.

1. Data controller

The controller of your personal data is MIODNY SZLAK, ul. Kamianna 50, 33-336 Łabowa, Poland.

Contact for data protection matters:

2. What data we process and where it comes from

  1. Contact form – name, e-mail address, subject and message content. You provide them voluntarily; without them we cannot answer your enquiry.
  2. Local Brand applications – data included in e-mail or phone correspondence (company name, contact person, address, phone, e-mail).
  3. Technical data – IP address, browser and device type, date and time of connection and cookie identifiers. They are generated automatically on every visit and are used to keep the site safe.
  4. Correspondence – messages sent to our e-mail address and our replies.

3. Purposes and legal bases

Purpose Legal basis (GDPR)
Replying to a contact form enquiry Art. 6(1)(f) – our legitimate interest (handling correspondence)
Contact regarding joining the Local Brand and carrying out cooperation Art. 6(1)(b) – steps prior to entering into, and performance of, a contract
Site security and bot protection (Cloudflare Turnstile) Art. 6(1)(f) – legitimate interest (site security)
Establishing, pursuing and defending claims Art. 6(1)(f) – legitimate interest
Statistics and remembering cookie settings Art. 6(1)(a) – your consent given in the cookie banner

4. How long we keep data

  • contact form correspondence – for the time needed to handle the case, then up to 3 years from the last contact (statute of limitations),
  • Local Brand applications – for the duration of cooperation and up to 5 years afterwards,
  • technical data and server logs – usually up to 12 months,
  • cookies – as described in section 7.

5. Who may access the data

Data may be received only by entities that help us run the site and handle correspondence:

  • hosting and e-mail provider – storing the website and mailboxes,
  • Cloudflare, Inc. (Turnstile) – protecting forms and login against bots; for this purpose Cloudflare processes the IP address and the verification result,
  • Google Ireland Limited (Google Maps) – only if you choose to display the map on the Contact page; the map loads only after your consent,
  • accounting and legal services – where necessary to settle cooperation.

We do not sell or share personal data for marketing purposes.

6. Transfers outside the EEA

Some providers (Cloudflare, Google) are based in the United States. Transfers rely on the European Commission adequacy decision (EU-U.S. Data Privacy Framework) or standard contractual clauses with additional technical safeguards.

7. Cookies

Cookies are small files stored on your device. We use them for three purposes:

  1. Essential – keeping the session, remembering your cookie decision, safe operation of forms and login. The site does not work correctly without them; they do not require consent.
  2. Security (Cloudflare Turnstile) – cf_clearance and related cookies, confirming that a request comes from a human rather than a bot. They appear with the contact form and login.
  3. External embeds (Google Maps) – Google cookies load only after you click “Show map” on the Contact page and accept them in the cookie banner.

You can change your settings at any time by clearing site data in your browser or by clicking “Cookie settings” in the footer. You can also control cookies in your browser settings.

8. Your rights

You have the right to:

  • access your data and receive a copy,
  • rectify (correct) your data,
  • erase your data (“right to be forgotten”),
  • restrict processing,
  • data portability,
  • object to processing based on legitimate interest,
  • withdraw consent at any time (without affecting the lawfulness of prior processing),
  • lodge a complaint with the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland.

To exercise your rights, write to info@miodnyszlak.pl. We will reply without undue delay, at the latest within one month.

9. Data security

We apply technical and organisational measures adequate to the risk: encrypted connection (HTTPS), restricted access to the administration panel, Turnstile bot protection and backups. Only authorised persons have access to the data.

10. Final provisions

This policy may be updated when laws change or when the tools used on the site change. The current version is always available at /polityka-prywatnosci. Last updated: 18 October 2026.