Privacy policy

§1. Who is responsible for your data

The controller of personal data collected through cot.pl is TOURISMO Sp. z o.o., registered at ul. Nowotarska 27B, 34-500 Zakopane, VAT ID 7361730143, company register no. 0000775821 (“we”, “us”).

For anything concerning your personal data write to info@cot.pl or call +48 785 200 003.

§2. What data we collect and why

a) Technical data from your visit. Our server logs your IP address, date and time of the visit, the page you opened, browser and system type. We do this to keep the site working and secure - the legal basis is our legitimate interest (Art. 6(1)(f) GDPR). Logs are deleted after 30 dni.

The company hosting the server (dhosting.pl) automatically builds aggregate traffic statistics from these logs: visits, page views, popular pages and referring sites. We only see the summaries and do not use them to identify individuals.

b) Data you give us yourself. If you e-mail us or call, we process the data in that message to answer your enquiry and - if it comes to that - to conclude and perform a contract (Art. 6(1)(b) and (f) GDPR). We keep correspondence for as long as the matter is open, then for the limitation period of possible claims.

c) Data from analytics and marketing cookies. With your consent we collect information about how you use the site: which pages you open, where you came from, how long you stay. The legal basis is your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time - see §4.

e) Cookie-free visit statistics - only with your consent. We run the visit counter only if you consent to the "Analytics" category in the banner. Without that consent it sends nothing. Once you consent, when you open a page your browser sends our server a short message: which page you opened, which domain referred you (the domain name only, e.g. google.com - never the full address), campaign tags in the page address (UTM) and whether you arrived by clicking an ad (without that click's identifier), whether you clicked a phone number, an e-mail address or a booking button. We store nothing in your browser (no cookies or similar technologies), assign you no identifier and do not record your IP address or browser type. The server immediately adds the message to aggregate daily counters (e.g. "this page was opened 12 times today") - no record of an individual visit is created and nothing that identifies you is stored. Like any connection to the server, the message itself appears in the technical logs described in point a) and is deleted with them. We do this to learn which content and offers are useful and to improve the website. The legal basis is your consent (Art. 6(1)(a) GDPR); you can withdraw it at any time ("Cookie settings" link in the footer) - the counter stops immediately.

§3. Do you have to provide your data

Providing data is voluntary. Without contact details, however, we will not be able to answer your enquiry.

§4. Cookies

We use cookies - small files stored in your browser. They fall into these groups:

• Necessary - needed for the site to work, including remembering your cookie choice. No consent required.
• Analytics - visit counter - our own counter stores no files in your browser, but we still run it only with your consent to this category (see §2 e).

On your first visit we show a banner where you decide what you agree to. You can change or withdraw consent at any time - the “Cookie settings” link sits in the footer of every page. Withdrawal does not affect the lawfulness of what we collected earlier. The full cookie list is at the end of this policy.

§5. Who we share data with

Parties processing data on our behalf - under a contract obliging them to protect your data and to act only on our instructions:

• the company hosting this site (dhosting.pl) and our e-mail provider,
• the IT provider maintaining and servicing this site on our behalf,

We may also disclose data to authorities entitled to it by law, if they request it.

§6. How long we keep data

• server logs - 30 dni,
• correspondence - while the matter is open, then for the limitation period of claims,
• aggregate daily statistics (visits and sales) - no fixed period; they contain none of your identifying data,

§7. Your rights

In connection with this processing you have the right to:

• access your data and obtain a copy,
• have inaccurate data corrected,
• have your data erased,
• restrict processing,
• transfer your data to another controller,
• object to processing based on our legitimate interest,
• withdraw consent at any time - without affecting what we collected earlier,
• lodge a complaint with the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warszawa, Poland.

To exercise these rights write to info@cot.pl. We answer within one month. If the matter turns out to be complex we may extend that by a further two months - we will tell you within the first month.

§8. Automated decisions and profiling

We take no automated decisions and do not profile visitors.

§9. Changes to this policy

If we change how we process data, we will update this policy and note the new date below. Version in force since: 2026-11-05.

§10. Cookie list

Change cookie settings