Information document
Privacy Policy
Applies to the separate information presentation available at lotos.polturizm.eu. Last updated: July 23, 2026.
1. Scope of the service
The service presents Hotel Lotos and related facilities of the complex within the POLTURIZM network. It is not the official website of the hotel nor its technical successor. Reservations, contact with the hotel, and external services operate on terms established by their respective operators.
2. Technical Administrator
The administrator of data related to the technical operation of the presentation, the consent mechanism, and any potential analytics is AKTRU Sp. z o.o., ul. Gdowska 22A, 32-020 Wieliczka, Poland, NIP PL6831941323, KRS 0000234892, REGON 120054951; email: aktru@aktru.pl; tel. +48 698 068 148 and +48 12 288 97 97.
3. Hotel and external sites
The owner of Hotel Lotos is Wostim S Filipek Sp. z o.o. Data provided directly to the hotel, the Kalina Inn, the map operator, or any other external service is processed by the respective entity according to its own policies. AKTRU is not the owner or operator of the hotel.
4. Technical data and logs
While using the service, the hosting infrastructure may process the IP address, date and time of the request, the address of the requested resource, browser information, system information, and error data. This data is used to ensure operation, security, diagnostics, and to prevent abuse. The legal basis is the legitimate interest of the administrator.
5. Browser storage and consent
The service stores the analytics decision and the consent version in the browser's memory. This is necessary to remember the user's choice. The decision can be changed using the "Cookie settings" button in the footer.
6. Optional analytics
The optional analytics mechanism has been technically prepared but remains inactive until a separate analytics service is configured for this presentation. Before analytics is activated, no requests to Google Analytics are sent. Should the script be launched in the future, it will only load after the user gives consent.
7. Recipients and transfer outside the EEA
Technical data may be entrusted to hosting and IT service providers to the extent necessary for the operation of the service. Currently, the presentation does not transfer analytics data outside the EEA. If analytics were to be activated, information about the provider, the basis for transfer, and retention periods will be updated before implementation.
8. Retention period
Technical logs are stored for a period justified by security, diagnostics, and the requirements of the infrastructure provider, after which they are deleted or anonymized. The consent decision remains on the device until it is changed, browser data is cleared, or the mechanism version is updated.
9. User rights
To the extent provided for by the GDPR, you have the right to access, rectify, delete, restrict processing, object, request data portability, and withdraw consent without affecting the lawfulness of processing carried out before the withdrawal. You also have the right to lodge a complaint with the President of the Personal Data Protection Office.
10. Security and changes
Adequate technical and organizational measures are in place. This policy may be updated in line with changes to features, providers, or the law; the current version and date are published on this page.