Privacy Policy

1. Scope and nature of the website

This policy applies exclusively to https://montenero.polturizm.eu/, an independent information presentation in the POLTURIZM network. The official Montenero Resort&SPA website is https://montenero.pl/.

2. Data controller

The controller of data processed in connection with the technical operation of this presentation, its consent mechanism and optional analytics is:

AKTRU is not the controller of data processed by Montenero Resort&SPA, the official booking system or services opened after leaving this domain.

3. Scope of processed data

The website has no user accounts, payment functionality or contact form. Its infrastructure may record basic technical logs, including the IP address, connection time, requested resource, response code and browser type. After consent, Google Analytics 4 may process standard analytics data concerning use of the website.

4. Purposes and legal bases for processing

Technical logs are used for security, availability and diagnostics on the basis of the controller’s legitimate interests under Article 6(1)(f) GDPR. Optional analytics are used to prepare aggregate traffic and user-acquisition statistics on the basis of consent under Article 6(1)(a) GDPR.

5. Cookies and consent

Rejecting analytics does not affect the website’s essential operation. The decision is stored locally and can be changed using the “Cookie settings” button. After consent is withdrawn, the _ga and _ga_* cookies accessible to the website are removed; withdrawal applies prospectively.

6. Optional analytics

After consent, the website dynamically enables Google Analytics 4 with measurement ID G-KYLC091NVG, managed by AKTRU solely for aggregate statistics. Before consent, the GA4 script is not downloaded, analytics requests are not sent and analytics cookies are not set.

We do not use Google Tag Manager, Google Ads, remarketing, Google Signals, User ID or cross-domain tracking. We do not send form data, booking data or personal data to analytics.

7. Recipients and data transfers

Technical data may be accessible to providers responsible for hosting, infrastructure and security. After consent, Google receives analytics data as the provider of Google Analytics 4.

Analytics data may be transferred outside the European Economic Area, including to the United States. Google indicates that it uses appropriate mechanisms, including the EU–US Data Privacy Framework and Standard Contractual Clauses approved by the European Commission.

Data may also be disclosed to authorised public authorities where required by law.

8. External links

Links to montenero.pl, the booking system and maps lead to separate services. Their operators’ policies apply after those links are opened. The map and booking system are not embedded automatically.

9. Retention period

Technical logs are retained for as long as necessary for security, stability and diagnostics.

Analytics data collected in Google Analytics 4 are retained for two months from collection, in accordance with the retention settings applied to the GA4 property, and are then deleted by the service. The retention period is not reset when a user becomes active again. This setting does not affect aggregate statistical reports.

Data relating to incidents or claims may be retained until the matter is resolved or the applicable limitation periods expire.

10. User rights

To the extent provided by the GDPR, users may have rights of access, rectification, erasure, restriction, objection and data portability, and may withdraw consent at any time.

Users may also lodge a complaint with the President of the Polish Personal Data Protection Office (UODO).

11. Security

The controller applies organisational and technical measures appropriate to the nature of this presentation, including HTTPS in the production environment.

12. Changes to this policy

This policy may be updated following legal, technical or functional changes. The current version is published at https://montenero.polturizm.eu/polityka-prywatnosci.html.