Privacy policy

How Cherry Grand Stay handles personal data: who is responsible, what is processed, why, for how long and what your rights are under the GDPR.

Controller

The controller of personal data processed in connection with cherrygrandstay.com is CHERRY ONLINE POLSKA SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ, ul. Gedymina 30, 04-120 Warszawa, Poland ("we"). You can reach us at [email protected] for any question about this policy or your data.

In short

Cherry Grand Stay sets no cookies, uses no analytics or advertising tools, embeds no maps, videos or social media buttons, loads nothing from third-party servers and has no forms or user accounts. The only personal data we can receive are the technical data every browser sends to a web server, and the content of e-mails you choose to send us.

Server log data

When you open a page, the server of our hosting provider automatically records technical data: your IP address, the date and time of the request, the page requested, the amount of data transferred, the referring page and your browser's user agent string.

Purpose: to deliver the website, keep it secure and detect misuse. Legal basis: our legitimate interest in operating a secure website (Article 6(1)(f) GDPR). We do not combine these data with other sources and do not use them to identify visitors. Log files are kept only for as long as needed for these purposes and are then deleted in the hosting provider's regular rotation.

E-mails

If you write to us, we process your e-mail address, your name if you give it, and the content of your message.

Purpose: to answer you and to handle corrections or notices. Legal basis: our legitimate interest in answering enquiries (Article 6(1)(f) GDPR), or steps taken at your request (Article 6(1)(b) GDPR). We keep the correspondence until the matter is closed and delete it no later than 12 months afterwards, unless the law requires us to keep it longer or it is needed to establish or defend legal claims.

Recipients

Personal data are processed by our hosting and e-mail providers, who act as processors on our behalf under a data processing agreement (Article 28 GDPR). We do not sell, rent or share personal data with anyone else, except where a law or a public authority requires it.

If a provider processes data outside the European Economic Area, this happens only on the basis of an adequacy decision of the European Commission or the standard contractual clauses (Article 46 GDPR).

No profiling

We do not carry out profiling or automated decision-making within the meaning of Article 22 GDPR, and we do not use personal data for marketing.

Your rights

Under the GDPR you have the right to access your personal data (Article 15), to have them corrected (Article 16) or erased (Article 17), to restrict their processing (Article 18), to receive them in a portable format (Article 20) and to object to processing based on our legitimate interest (Article 21).

To exercise any of these rights, write to [email protected]. We answer within one month. Exercising your rights is free of charge.

Right to complain

If you believe that we process your personal data unlawfully, you may lodge a complaint with a supervisory authority, in particular in the country where you live or work. The authority competent for us is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO), ul. Stawki 2, 00-193 Warszawa, Poland.

Obligation to provide data

You are not obliged to provide any personal data. Without the technical data the website cannot be delivered to your browser; without an e-mail address we cannot reply to you.

Minors

Cherry Grand Stay is a travel guide intended for adults. We do not knowingly process personal data of children.

Changes

We will update this policy if the website or the law changes, and we will update it before introducing any cookie, tracker or embedded third-party content.

Last updated: 28 October 2026.